This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft File: Y14XDZsHxQ0bKa6GliBssUWk8fc.mft (raw, json) Hash identifier: AJSQHl69gj50G+qeuL6vGdYuCe8ggt0pRhr3TdgiM3w= Subject key identifier: 84:62:B6:A2:CB:BA:7B:6A:8B:53:8B:90:C2:8E:5F:01:C8:45:89:5E Authority key identifier: 63:5E:17:0D:9B:07:C5:0D:1B:29:AE:86:96:20:6C:B1:45:A4:F1:F7 Certificate issuer: /CN=635e170d9b07c50d1b29ae8696206cb145a4f1f7 Certificate serial: 019C424648B60AF2D85EDE3CDB2625A0B65A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y14XDZsHxQ0bKa6GliBssUWk8fc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft Manifest number: 0165 Signing time: Mon 09 Feb 2026 12:00:28 +0000 Manifest this update: Mon 09 Feb 2026 12:00:28 +0000 Manifest next update: Tue 10 Feb 2026 12:00:28 +0000 Files and hashes: 1: Y14XDZsHxQ0bKa6GliBssUWk8fc.crl (hash: VxxwAFILkNgSRyZ44iLqxpgghlbcpEAub5o18xuaTWo=) 2: w5p1hXEjQ2Xz1V3bTFCKNXnxTbs.roa (hash: BkrEG8IgRqXV47SrXBW3QPf+J5iuuBWyqjvE+aHIr/Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft rsync://rpki.ripe.net/repository/DEFAULT/Y14XDZsHxQ0bKa6GliBssUWk8fc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:48:b6:0a:f2:d8:5e:de:3c:db:26:25:a0:b6:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=635e170d9b07c50d1b29ae8696206cb145a4f1f7 Validity Not Before: Feb 9 12:00:28 2026 GMT Not After : Feb 10 12:00:28 2026 GMT Subject: CN=8462b6a2cbba7b6a8b538b90c28e5f01c845895e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7c:4f:eb:ee:7e:50:ff:ca:cd:cc:98:8a:94: b2:d8:bb:5a:21:d3:47:5d:39:db:21:3f:8d:60:87: 72:2a:15:e7:eb:40:25:d7:27:9e:aa:83:e2:ca:16: b5:27:de:17:ff:87:21:41:fe:b0:62:fa:1e:38:3d: 08:d7:32:79:66:9b:77:f0:86:3d:9f:68:a1:cb:0a: 96:56:ef:fc:ea:43:f7:a8:79:a6:25:24:cc:9e:18: 06:e0:37:c1:93:f9:5a:83:29:de:32:d0:da:32:e2: 30:85:85:6e:91:61:70:9c:a2:18:09:27:36:1f:43: 4d:5e:1a:75:a1:18:32:a3:8b:5b:64:94:86:e2:93: 08:d5:29:f5:f9:a7:d6:e5:84:3e:dd:e9:d5:63:8d: 85:4b:61:0a:f3:45:8b:fe:31:f7:98:89:ea:6a:fd: b3:c6:95:1b:01:c7:5f:72:00:8a:60:60:eb:19:db: 82:9a:40:18:0d:e2:59:58:94:16:60:9b:27:fb:cf: 07:a4:a3:79:57:5e:70:a5:ec:74:06:0d:84:1e:9a: 4d:c6:3b:85:e0:35:d4:33:5d:a7:06:03:99:4e:b4: 6e:bf:03:d7:24:f6:6b:c1:3b:bc:6c:f2:24:9d:ec: b6:fd:d7:92:84:33:87:fc:00:38:b0:27:c7:a5:e8: 1e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:62:B6:A2:CB:BA:7B:6A:8B:53:8B:90:C2:8E:5F:01:C8:45:89:5E X509v3 Authority Key Identifier: keyid:63:5E:17:0D:9B:07:C5:0D:1B:29:AE:86:96:20:6C:B1:45:A4:F1:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y14XDZsHxQ0bKa6GliBssUWk8fc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:0f:17:38:36:29:7c:20:02:ab:14:8b:64:d9:7c:f5:87:ee: 99:d4:9a:e9:e0:90:20:f6:a7:c6:5f:0e:01:a2:f5:98:a6:54: 7b:d6:13:2f:dc:26:6c:a4:d9:3e:14:40:46:10:72:9e:45:40: 0d:64:36:91:58:60:35:4a:c1:f8:2a:d5:d8:e9:03:9e:0d:55: 67:af:11:28:08:7f:41:20:40:09:04:3f:a8:c8:77:6d:84:0f: 9e:37:bb:7e:3c:96:41:e2:c0:93:4b:67:5e:7e:5f:9b:15:1c: dd:87:2c:68:45:bf:98:69:77:b6:77:b4:13:50:df:a6:02:40: 5b:41:d8:ea:97:e1:5b:c2:69:c0:86:b3:4f:65:a1:b6:00:11: 1d:23:ce:f0:70:75:ae:d7:68:02:6a:19:96:fe:87:79:32:61: c9:0d:09:ac:70:d6:73:80:e1:36:88:ef:b3:9e:06:02:46:79: f3:ea:cf:a1:29:c4:eb:c9:de:3f:26:24:cf:b8:74:ee:09:54: 30:bc:4e:ad:a3:64:b9:d7:3c:59:f0:2c:28:47:f3:18:44:40: 31:14:44:cf:9d:eb:8d:51:c8:d8:7a:39:82:16:63:65:c6:0e: 34:0e:fc:d8:ed:e2:0f:c4:10:a2:cc:cd:82:75:fb:1f:0f:65: d9:33:e6:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRki2CvLYXt482yYloLZaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNWUxNzBkOWIwN2M1MGQxYjI5YWU4Njk2MjA2Y2IxNDVh NGYxZjcwHhcNMjYwMjA5MTIwMDI4WhcNMjYwMjEwMTIwMDI4WjAzMTEwLwYDVQQD Eyg4NDYyYjZhMmNiYmE3YjZhOGI1MzhiOTBjMjhlNWYwMWM4NDU4OTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3xP6+5+UP/KzcyYipSy2LtaIdNH XTnbIT+NYIdyKhXn60Al1yeeqoPiyha1J94X/4chQf6wYvoeOD0I1zJ5Zpt38IY9 n2ihywqWVu/86kP3qHmmJSTMnhgG4DfBk/lagyneMtDaMuIwhYVukWFwnKIYCSc2 H0NNXhp1oRgyo4tbZJSG4pMI1Sn1+afW5YQ+3enVY42FS2EK80WL/jH3mInqav2z xpUbAcdfcgCKYGDrGduCmkAYDeJZWJQWYJsn+88HpKN5V15wpex0Bg2EHppNxjuF 4DXUM12nBgOZTrRuvwPXJPZrwTu8bPIkney2/deShDOH/AA4sCfHpege4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIRitqLLuntqi1OLkMKOXwHIRYleMB8GA1UdIwQY MBaAFGNeFw2bB8UNGymuhpYgbLFFpPH3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTE0WERac0h4UTBiS2E2R2xpQnNzVVdrOGZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS83YjJmY2MtZWJjOS00YjAyLWI3MTYt ZjgwZDVmMzE2NjRlLzEvWTE0WERac0h4UTBiS2E2R2xpQnNzVVdrOGZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS83YjJmY2MtZWJjOS00YjAyLWI3MTYtZjgwZDVmMzE2NjRl LzEvWTE0WERac0h4UTBiS2E2R2xpQnNzVVdrOGZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACg8XODYp fCACqxSLZNl89YfumdSa6eCQIPanxl8OAaL1mKZUe9YTL9wmbKTZPhRARhBynkVA DWQ2kVhgNUrB+CrV2OkDng1VZ68RKAh/QSBACQQ/qMh3bYQPnje7fjyWQeLAk0tn Xn5fmxUc3YcsaEW/mGl3tne0E1DfpgJAW0HY6pfhW8JpwIazT2WhtgARHSPO8HB1 rtdoAmoZlv6HeTJhyQ0JrHDWc4DhNojvs54GAkZ58+rPoSnE68nePyYkz7h07glU MLxOraNkudc8WfAsKEfzGERAMRREz53rjVHI2Ho5ghZjZcYONA782O3iD8QQoszN gnX7Hw9l2TPmig== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:12 2026 by rpki-client