This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f2700b-9853-4172-9a61-a691448b2ec4/1/pal1I5_dRDt9PYLjkqnkrjkhjvY.mft File: pal1I5_dRDt9PYLjkqnkrjkhjvY.mft (raw, json) Hash identifier: iUThsp4zzdJl7OdVi8mR4b1hIF7pvcxcLyiBd26wIQM= Subject key identifier: 08:6E:59:6F:E2:79:D1:46:B8:07:17:E7:9B:9F:58:D6:E6:49:19:30 Authority key identifier: A5:A9:75:23:9F:DD:44:3B:7D:3D:82:E3:92:A9:E4:AE:39:21:8E:F6 Certificate issuer: /CN=a5a975239fdd443b7d3d82e392a9e4ae39218ef6 Certificate serial: 019C420FF6A04EA4EA66B76522DE48A86C5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pal1I5_dRDt9PYLjkqnkrjkhjvY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f2700b-9853-4172-9a61-a691448b2ec4/1/pal1I5_dRDt9PYLjkqnkrjkhjvY.mft Manifest number: 0B6D Signing time: Mon 09 Feb 2026 11:01:08 +0000 Manifest this update: Mon 09 Feb 2026 11:01:08 +0000 Manifest next update: Tue 10 Feb 2026 11:01:08 +0000 Files and hashes: 1: A_5M0CfXYUUC_BjsX_wFA_AapkY.roa (hash: UxtCMoKmpdBbD3cNYjI3Iakd8mHfIDVh+Sc1KrYzV8A=) 2: QTj2rWtF102-zkq4FB91dVQDunM.roa (hash: 1lI8W4TaqEFSyMRF8rItgY5NGvTzSeJ9vEchB5jfowo=) 3: pal1I5_dRDt9PYLjkqnkrjkhjvY.crl (hash: BS6Z/oDKjyGb4KJUHiEUqIZEKBdGBm01KUV7M+r3IO8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f2700b-9853-4172-9a61-a691448b2ec4/1/pal1I5_dRDt9PYLjkqnkrjkhjvY.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f2700b-9853-4172-9a61-a691448b2ec4/1/pal1I5_dRDt9PYLjkqnkrjkhjvY.mft rsync://rpki.ripe.net/repository/DEFAULT/pal1I5_dRDt9PYLjkqnkrjkhjvY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:f6:a0:4e:a4:ea:66:b7:65:22:de:48:a8:6c:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5a975239fdd443b7d3d82e392a9e4ae39218ef6 Validity Not Before: Feb 9 11:01:08 2026 GMT Not After : Feb 10 11:01:08 2026 GMT Subject: CN=086e596fe279d146b80717e79b9f58d6e6491930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a2:42:82:ae:3d:f5:59:85:0d:d4:59:e0:40: 31:83:5f:eb:92:67:cb:68:ca:c5:e2:d8:af:a3:0f: f4:ab:3e:00:15:05:f3:1e:3a:66:c2:53:e1:c9:74: de:1f:90:07:da:ee:17:b1:6d:7d:dc:60:25:87:b4: 42:ec:cb:42:2a:18:23:0a:26:53:e6:80:8c:f0:ad: ff:bc:a8:6c:61:d0:d3:54:ba:9a:ff:9c:c2:cf:a5: b0:94:fc:97:9b:ff:de:a8:4a:6a:ea:5d:80:51:81: ef:c7:54:b2:c9:92:77:4c:f7:bc:9c:bd:8f:e4:37: ca:d0:b1:68:a5:40:58:d6:47:06:aa:ec:9f:3f:f0: b6:4f:77:2f:09:40:1a:df:e5:ca:19:3c:7c:6b:ac: ab:fa:ef:33:60:2f:f8:d9:ae:6f:e9:2f:82:86:d6: 3a:4e:cb:1a:26:0e:8f:0a:4b:7d:8e:7f:c4:54:90: 90:bb:bb:9a:08:13:29:d6:85:c0:8f:3e:0e:c5:83: d7:52:de:9c:6c:f7:33:31:90:d6:26:57:83:7e:a3: af:9f:85:0b:e3:c2:de:5a:21:46:92:e2:ee:75:b1: b4:48:42:7d:3b:cf:ad:85:d3:a8:68:37:32:1d:68: 4f:19:b5:3b:1a:5c:bc:9d:33:33:6f:a8:1b:0b:db: 1a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:6E:59:6F:E2:79:D1:46:B8:07:17:E7:9B:9F:58:D6:E6:49:19:30 X509v3 Authority Key Identifier: keyid:A5:A9:75:23:9F:DD:44:3B:7D:3D:82:E3:92:A9:E4:AE:39:21:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pal1I5_dRDt9PYLjkqnkrjkhjvY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f2700b-9853-4172-9a61-a691448b2ec4/1/pal1I5_dRDt9PYLjkqnkrjkhjvY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f2700b-9853-4172-9a61-a691448b2ec4/1/pal1I5_dRDt9PYLjkqnkrjkhjvY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:8f:bc:4b:10:31:53:a6:84:7e:95:12:b7:b3:5e:10:7d:20: cb:12:27:65:c9:ad:2b:c4:46:ae:d8:3b:c1:76:0e:c4:89:5c: 29:07:93:f2:04:17:c9:ad:29:bd:51:e9:35:08:1c:0a:d1:b5: 0a:d5:f5:71:48:de:09:64:2b:a6:e7:ee:9a:77:3d:2b:85:20: e7:fc:93:38:0f:c1:8a:70:b5:1c:03:2d:99:e4:96:5c:ed:a1: 7a:ca:3b:85:85:3f:ce:de:1f:ec:ec:b7:18:8b:ec:b8:10:5c: 03:e5:be:83:bb:0e:f9:c2:ba:11:cd:4c:c5:b6:8e:b8:50:56: cc:d5:97:4e:69:ff:58:a7:aa:4c:5c:77:6d:cc:e7:d5:e9:69: 00:17:bf:97:d0:71:6e:37:78:28:8c:0c:a0:f3:00:4b:3d:76: de:21:d0:33:bf:6b:a8:d1:d6:13:63:ed:82:2b:fc:29:0a:79: a1:15:63:c0:bf:a7:82:1a:d3:3f:90:d0:85:a6:ce:a7:9a:89: 4f:48:14:93:5e:38:71:43:1d:57:40:9c:aa:e9:91:78:75:36: ca:5f:8d:dc:01:33:cb:e0:9c:e6:06:7b:ad:c7:56:7d:ef:1b: f2:fa:af:d3:4c:c2:c9:ef:3b:6f:6f:84:b6:d4:48:ca:bc:c8: 35:b6:7f:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD/agTqTqZrdlIt5IqGxcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YTk3NTIzOWZkZDQ0M2I3ZDNkODJlMzkyYTllNGFlMzky MThlZjYwHhcNMjYwMjA5MTEwMTA4WhcNMjYwMjEwMTEwMTA4WjAzMTEwLwYDVQQD EygwODZlNTk2ZmUyNzlkMTQ2YjgwNzE3ZTc5YjlmNThkNmU2NDkxOTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6JCgq499VmFDdRZ4EAxg1/rkmfL aMrF4tivow/0qz4AFQXzHjpmwlPhyXTeH5AH2u4XsW193GAlh7RC7MtCKhgjCiZT 5oCM8K3/vKhsYdDTVLqa/5zCz6WwlPyXm//eqEpq6l2AUYHvx1SyyZJ3TPe8nL2P 5DfK0LFopUBY1kcGquyfP/C2T3cvCUAa3+XKGTx8a6yr+u8zYC/42a5v6S+ChtY6 TssaJg6PCkt9jn/EVJCQu7uaCBMp1oXAjz4OxYPXUt6cbPczMZDWJleDfqOvn4UL 48LeWiFGkuLudbG0SEJ9O8+thdOoaDcyHWhPGbU7Gly8nTMzb6gbC9saewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAhuWW/iedFGuAcX55ufWNbmSRkwMB8GA1UdIwQY MBaAFKWpdSOf3UQ7fT2C45Kp5K45IY72MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGFsMUk1X2RSRHQ5UFlMamtxbmtyamtoanZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mMjcwMGItOTg1My00MTcyLTlhNjEt YTY5MTQ0OGIyZWM0LzEvcGFsMUk1X2RSRHQ5UFlMamtxbmtyamtoanZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mMjcwMGItOTg1My00MTcyLTlhNjEtYTY5MTQ0OGIyZWM0 LzEvcGFsMUk1X2RSRHQ5UFlMamtxbmtyamtoanZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlo+8SxAx U6aEfpUSt7NeEH0gyxInZcmtK8RGrtg7wXYOxIlcKQeT8gQXya0pvVHpNQgcCtG1 CtX1cUjeCWQrpufumnc9K4Ug5/yTOA/BinC1HAMtmeSWXO2heso7hYU/zt4f7Oy3 GIvsuBBcA+W+g7sO+cK6Ec1MxbaOuFBWzNWXTmn/WKeqTFx3bczn1elpABe/l9Bx bjd4KIwMoPMASz123iHQM79rqNHWE2Ptgiv8KQp5oRVjwL+nghrTP5DQhabOp5qJ T0gUk144cUMdV0CcqumReHU2yl+N3AEzy+Cc5gZ7rcdWfe8b8vqv00zCye87b2+E ttRIyrzINbZ/oA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:10:23 2026 by rpki-client