This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft File: PrRw_U1nQhL_yCqZNvP-JUvszmY.mft (raw, json) Hash identifier: xn5kUPSvo5CnVzXf7BW0zxef6vdoDNOg5drDMETmHI8= Subject key identifier: 23:7D:C7:1F:89:A2:8E:EE:45:02:FB:2E:10:23:F7:CF:A8:CA:8B:56 Authority key identifier: 3E:B4:70:FD:4D:67:42:12:FF:C8:2A:99:36:F3:FE:25:4B:EC:CE:66 Certificate issuer: /CN=3eb470fd4d674212ffc82a9936f3fe254becce66 Certificate serial: 019C427D548CDE51E236E0B9D2ADA00BD066 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrRw_U1nQhL_yCqZNvP-JUvszmY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 13:00:35 +0000 Manifest this update: Mon 09 Feb 2026 13:00:35 +0000 Manifest next update: Tue 10 Feb 2026 13:00:35 +0000 Files and hashes: 1: LBDdRDDjw294mcZ0nbMxr8CzfS4.roa (hash: PPYwxRl5Le8Vm1g+lp2aZkNuPa03sEDkYEJw4YbvaRI=) 2: PrRw_U1nQhL_yCqZNvP-JUvszmY.crl (hash: i2GLJjTIsMNwmq6IWWHqbyVD68pfZoKZykTtH1LenJ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.crl rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft rsync://rpki.ripe.net/repository/DEFAULT/PrRw_U1nQhL_yCqZNvP-JUvszmY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:54:8c:de:51:e2:36:e0:b9:d2:ad:a0:0b:d0:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eb470fd4d674212ffc82a9936f3fe254becce66 Validity Not Before: Feb 9 13:00:35 2026 GMT Not After : Feb 10 13:00:35 2026 GMT Subject: CN=237dc71f89a28eee4502fb2e1023f7cfa8ca8b56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:30:50:b6:99:08:01:87:39:77:9b:d7:a3:41: d2:40:01:04:e5:ff:30:4d:a7:5d:4f:ad:06:fd:da: fa:c2:33:31:f0:64:85:5b:2d:87:74:ca:15:c3:fe: 4e:98:f7:9b:b5:82:1d:b0:2f:be:c2:ff:c8:60:09: 5e:98:4d:17:41:01:dd:5c:ab:99:28:00:99:18:b9: b6:b0:77:34:29:48:c0:53:1e:07:b0:ee:b7:ea:c7: 79:ca:51:4f:33:9b:93:b3:67:dc:71:5f:a6:f8:37: ca:21:22:e3:a1:fa:f6:77:ae:e9:a8:96:21:66:f8: f9:b9:20:2a:80:7b:43:9b:0a:7e:a6:f1:06:be:50: 36:8c:59:78:28:a2:b3:df:89:55:6d:dc:7c:8b:3b: d4:78:99:a5:15:11:6f:3d:07:cb:d8:c9:4c:96:d1: 7c:71:6a:db:5b:6d:d9:23:85:45:71:26:94:20:f5: 59:47:9d:3a:bb:08:7d:f1:d3:09:a9:d9:45:79:6a: f8:86:65:67:d9:42:bb:36:8a:98:75:f3:50:ee:56: a7:ed:ad:e7:62:81:98:5f:75:06:1e:ff:b3:16:af: 81:a0:14:20:db:06:ce:12:3c:30:98:49:c4:50:64: c0:a3:99:a5:9d:64:95:76:e8:b2:fb:45:e6:74:65: 63:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:7D:C7:1F:89:A2:8E:EE:45:02:FB:2E:10:23:F7:CF:A8:CA:8B:56 X509v3 Authority Key Identifier: keyid:3E:B4:70:FD:4D:67:42:12:FF:C8:2A:99:36:F3:FE:25:4B:EC:CE:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrRw_U1nQhL_yCqZNvP-JUvszmY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:d0:e2:d3:97:1d:34:1f:d6:81:d7:de:5a:6e:d8:dd:28:f6: a5:01:cd:c2:37:7a:47:b2:15:29:b0:8e:ea:66:5a:3d:2f:d3: c0:fa:2e:04:af:f6:ef:9f:53:20:c2:2f:cc:45:d2:39:0e:2e: 72:51:64:14:46:e7:a9:1e:17:1a:fa:60:d6:06:86:5f:3f:37: 67:22:29:ee:53:68:10:41:d7:ea:dc:c3:ef:24:43:d6:87:94: 8f:d2:9e:7d:d4:8c:f4:55:a5:9d:41:2e:56:52:cc:6c:af:12: 55:37:c0:79:08:78:35:ee:ad:58:e2:df:84:a1:c4:18:ba:e7: cb:7a:14:19:e1:e8:8a:69:63:52:0e:ed:f0:e8:60:56:d1:44: 9e:c6:cf:88:75:83:47:4b:b8:84:b3:49:cf:b1:0a:dc:2d:29: 05:62:07:2c:7a:6e:6b:33:42:9b:e8:52:d9:d7:d8:98:82:0c: 46:28:3c:be:0b:42:e8:3a:7b:26:f1:09:d6:f3:6a:2b:3b:67: 19:74:b0:f7:eb:8f:20:f6:8a:3a:40:21:fb:35:a2:b7:8e:38: a2:6d:d3:ef:28:49:c2:ec:a2:86:47:d0:29:ed:c4:5b:30:6a: de:9a:ac:c8:24:9a:0c:4f:d8:02:44:db:a3:69:74:cb:da:3e: 48:51:6a:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfVSM3lHiNuC50q2gC9BmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYjQ3MGZkNGQ2NzQyMTJmZmM4MmE5OTM2ZjNmZTI1NGJl Y2NlNjYwHhcNMjYwMjA5MTMwMDM1WhcNMjYwMjEwMTMwMDM1WjAzMTEwLwYDVQQD EygyMzdkYzcxZjg5YTI4ZWVlNDUwMmZiMmUxMDIzZjdjZmE4Y2E4YjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTBQtpkIAYc5d5vXo0HSQAEE5f8w TaddT60G/dr6wjMx8GSFWy2HdMoVw/5OmPebtYIdsC++wv/IYAlemE0XQQHdXKuZ KACZGLm2sHc0KUjAUx4HsO636sd5ylFPM5uTs2fccV+m+DfKISLjofr2d67pqJYh Zvj5uSAqgHtDmwp+pvEGvlA2jFl4KKKz34lVbdx8izvUeJmlFRFvPQfL2MlMltF8 cWrbW23ZI4VFcSaUIPVZR506uwh98dMJqdlFeWr4hmVn2UK7NoqYdfNQ7lan7a3n YoGYX3UGHv+zFq+BoBQg2wbOEjwwmEnEUGTAo5mlnWSVduiy+0XmdGVjhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCN9xx+Joo7uRQL7LhAj98+oyotWMB8GA1UdIwQY MBaAFD60cP1NZ0IS/8gqmTbz/iVL7M5mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHJSd19VMW5RaExfeUNxWk52UC1KVXZzem1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi83NDRlNTMtOGRlNi00NjcxLTlmODAt NWYwMTU3MzBkODExLzEvUHJSd19VMW5RaExfeUNxWk52UC1KVXZzem1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi83NDRlNTMtOGRlNi00NjcxLTlmODAtNWYwMTU3MzBkODEx LzEvUHJSd19VMW5RaExfeUNxWk52UC1KVXZzem1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY9Di05cd NB/WgdfeWm7Y3Sj2pQHNwjd6R7IVKbCO6mZaPS/TwPouBK/2759TIMIvzEXSOQ4u clFkFEbnqR4XGvpg1gaGXz83ZyIp7lNoEEHX6tzD7yRD1oeUj9KefdSM9FWlnUEu VlLMbK8SVTfAeQh4Ne6tWOLfhKHEGLrny3oUGeHoimljUg7t8OhgVtFEnsbPiHWD R0u4hLNJz7EK3C0pBWIHLHpuazNCm+hS2dfYmIIMRig8vgtC6Dp7JvEJ1vNqKztn GXSw9+uPIPaKOkAh+zWit444om3T7yhJwuyihkfQKe3EWzBq3pqsyCSaDE/YAkTb o2l0y9o+SFFqSA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:47:52 2026 by rpki-client