This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft File: yhzFx7EhfMuxVd3a6CbOb5_brLo.mft (raw, json) Hash identifier: 0wdqXOV00tEcGjn7Z3LJjpc0fNxVa/S4NRaQ6osTzZ4= Subject key identifier: C1:F3:8E:5F:04:61:2C:04:87:B2:98:9E:DE:F6:9C:D0:A3:B9:2D:60 Authority key identifier: CA:1C:C5:C7:B1:21:7C:CB:B1:55:DD:DA:E8:26:CE:6F:9F:DB:AC:BA Certificate issuer: /CN=ca1cc5c7b1217ccbb155dddae826ce6f9fdbacba Certificate serial: 019C4322629960F27A375DC2FB005535A441 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 16:00:52 +0000 Manifest this update: Mon 09 Feb 2026 16:00:52 +0000 Manifest next update: Tue 10 Feb 2026 16:00:52 +0000 Files and hashes: 1: duVPwRuDqX3QDkaKIyT4P6ztbz4.roa (hash: kMA3LqVtrh17srYO2maurS2CA2PcrI4sa4rbcd9ehyQ=) 2: yhzFx7EhfMuxVd3a6CbOb5_brLo.crl (hash: fDjDHWrWSgh0EQH2yNIgF1cj5xABRqxRn+7OXDJZesc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:62:99:60:f2:7a:37:5d:c2:fb:00:55:35:a4:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca1cc5c7b1217ccbb155dddae826ce6f9fdbacba Validity Not Before: Feb 9 16:00:52 2026 GMT Not After : Feb 10 16:00:52 2026 GMT Subject: CN=c1f38e5f04612c0487b2989edef69cd0a3b92d60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5f:aa:7a:2d:03:5e:6f:e1:4c:70:58:48:f5: 65:22:cb:79:c1:13:5d:4d:45:20:22:d0:e6:8f:06: 05:ae:dc:92:d4:78:46:48:63:85:95:23:01:38:a1: ff:e1:35:45:9d:e8:88:c6:e2:71:bf:cf:4d:6f:19: 2c:8c:65:97:0c:0c:16:d1:a5:1f:63:97:28:1b:d7: 5b:36:27:2a:34:59:67:18:6a:5c:35:4e:b3:a8:72: 2f:c9:d0:24:45:a0:84:28:d9:af:91:e1:1b:7a:a2: d4:de:69:83:53:3f:76:41:cd:26:39:f3:6a:1a:00: 9b:3b:2a:f9:14:6b:21:0a:74:4a:73:f2:84:8f:90: 0e:77:a8:c3:e5:ee:eb:03:03:cf:4b:01:76:7b:70: e0:d4:a8:b2:e5:ce:d9:8f:30:65:7e:0c:e1:c4:65: 23:1f:75:39:3d:e0:da:16:4f:23:21:59:50:0d:39: 0b:4a:31:a2:87:c3:3c:f9:af:fe:55:8e:33:b7:d4: 0f:64:54:a4:9b:3c:42:3d:a5:52:64:92:84:ca:30: 7e:1a:ae:fe:0e:82:0f:b7:5b:af:f5:7b:fc:01:5e: 06:66:c5:63:1c:39:b3:5d:0e:c0:0a:d6:81:55:fd: 7d:ef:4d:e8:09:7c:3e:53:26:b8:d5:8d:cb:42:8c: 1d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F3:8E:5F:04:61:2C:04:87:B2:98:9E:DE:F6:9C:D0:A3:B9:2D:60 X509v3 Authority Key Identifier: keyid:CA:1C:C5:C7:B1:21:7C:CB:B1:55:DD:DA:E8:26:CE:6F:9F:DB:AC:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:a0:94:89:a3:9b:ae:5b:a9:f2:c4:50:64:42:2e:7c:f1:6f: 07:f2:7a:e7:2a:11:67:2d:68:6c:4d:0c:b8:84:e9:a9:af:29: 3b:fe:a8:f1:67:68:d0:8a:b1:70:48:8c:f6:7e:20:c7:25:90: cd:97:75:d3:fd:37:6c:35:98:98:5b:40:02:6e:42:af:a9:4d: 73:f7:53:3f:5e:28:f0:8e:06:0c:81:8f:a5:68:8b:9c:ca:be: 07:ce:1a:98:ae:74:df:08:88:bd:5f:cf:b4:16:11:d9:60:05: 69:0d:15:11:d9:c1:53:15:70:bd:dd:f7:b6:df:45:a4:12:c1: b7:88:e5:7c:9f:37:4f:54:7b:23:20:5e:a7:64:ff:d3:c2:ee: 2d:21:d3:43:d3:0c:83:ac:2b:24:15:bf:0e:cc:44:f7:c8:f6: 8a:f9:de:81:c7:11:4f:b9:19:7c:c1:f4:50:f2:65:6b:0d:80: 21:49:d0:45:0b:03:8c:72:15:e5:2a:b6:d1:25:59:a2:6c:73: d6:e0:4c:90:ae:af:f8:c1:66:a1:43:88:b7:40:61:b3:21:ae: d1:86:0e:ed:cf:65:ef:6b:13:e7:36:2c:20:31:a1:8f:0e:95: 02:01:7b:1f:d2:78:0b:68:87:62:22:e3:10:fb:a0:c8:f5:a0: b7:cb:46:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDImKZYPJ6N13C+wBVNaRBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMWNjNWM3YjEyMTdjY2JiMTU1ZGRkYWU4MjZjZTZmOWZk YmFjYmEwHhcNMjYwMjA5MTYwMDUyWhcNMjYwMjEwMTYwMDUyWjAzMTEwLwYDVQQD EyhjMWYzOGU1ZjA0NjEyYzA0ODdiMjk4OWVkZWY2OWNkMGEzYjkyZDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuF+qei0DXm/hTHBYSPVlIst5wRNd TUUgItDmjwYFrtyS1HhGSGOFlSMBOKH/4TVFneiIxuJxv89NbxksjGWXDAwW0aUf Y5coG9dbNicqNFlnGGpcNU6zqHIvydAkRaCEKNmvkeEbeqLU3mmDUz92Qc0mOfNq GgCbOyr5FGshCnRKc/KEj5AOd6jD5e7rAwPPSwF2e3Dg1Kiy5c7ZjzBlfgzhxGUj H3U5PeDaFk8jIVlQDTkLSjGih8M8+a/+VY4zt9QPZFSkmzxCPaVSZJKEyjB+Gq7+ DoIPt1uv9Xv8AV4GZsVjHDmzXQ7ACtaBVf19703oCXw+Uya41Y3LQowdQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMHzjl8EYSwEh7KYnt72nNCjuS1gMB8GA1UdIwQY MBaAFMocxcexIXzLsVXd2ugmzm+f26y6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWh6Rng3RWhmTXV4VmQzYTZDYk9iNV9ickxvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hYTA2ZjUtMDY1MC00YzFlLWI4YTct MmI2MjMyMzJmZjIyLzEveWh6Rng3RWhmTXV4VmQzYTZDYk9iNV9ickxvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9hYTA2ZjUtMDY1MC00YzFlLWI4YTctMmI2MjMyMzJmZjIy LzEveWh6Rng3RWhmTXV4VmQzYTZDYk9iNV9ickxvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQKCUiaOb rlup8sRQZEIufPFvB/J65yoRZy1obE0MuITpqa8pO/6o8Wdo0IqxcEiM9n4gxyWQ zZd10/03bDWYmFtAAm5Cr6lNc/dTP14o8I4GDIGPpWiLnMq+B84amK503wiIvV/P tBYR2WAFaQ0VEdnBUxVwvd33tt9FpBLBt4jlfJ83T1R7IyBep2T/08LuLSHTQ9MM g6wrJBW/DsxE98j2ivnegccRT7kZfMH0UPJlaw2AIUnQRQsDjHIV5Sq20SVZomxz 1uBMkK6v+MFmoUOIt0BhsyGu0YYO7c9l72sT5zYsIDGhjw6VAgF7H9J4C2iHYiLj EPugyPWgt8tGkg== -----END CERTIFICATE-----Generated at Mon Feb 9 20:53:42 2026 by rpki-client