This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft File: Psb9kdKkNl09wWch_t9pIXK7MHM.mft (raw, json) Hash identifier: kZHwKxxQHQBmw/yehZYQq3WGXg7+iok9b/a4AHfgy6o= Subject key identifier: 43:3A:28:5E:B8:B7:E9:C2:3F:23:2A:8C:8F:E1:7D:E1:74:41:92:F3 Authority key identifier: 3E:C6:FD:91:D2:A4:36:5D:3D:C1:67:21:FE:DF:69:21:72:BB:30:73 Certificate issuer: /CN=3ec6fd91d2a4365d3dc16721fedf692172bb3073 Certificate serial: 019C446BF16616400499F081D24BE2F4B3DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft Manifest number: 1555 Signing time: Mon 09 Feb 2026 22:00:50 +0000 Manifest this update: Mon 09 Feb 2026 22:00:50 +0000 Manifest next update: Tue 10 Feb 2026 22:00:50 +0000 Files and hashes: 1: Psb9kdKkNl09wWch_t9pIXK7MHM.crl (hash: /ksm8d/fORaR531DsBs1u5j9hsEqTz4V3gnsHrltTsc=) 2: jA_MaskNZFY8z3uRE6NiAvucTrk.roa (hash: Vxa7/BRh9g/VVz94ZqeAg8BjOYIzREIfs64pIZKkHnc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.crl rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6b:f1:66:16:40:04:99:f0:81:d2:4b:e2:f4:b3:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ec6fd91d2a4365d3dc16721fedf692172bb3073 Validity Not Before: Feb 9 22:00:50 2026 GMT Not After : Feb 10 22:00:50 2026 GMT Subject: CN=433a285eb8b7e9c23f232a8c8fe17de1744192f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3c:cd:99:a8:6f:f7:f3:f2:98:a0:db:93:2e: 7a:5e:eb:b4:88:13:9f:84:53:d9:6b:f5:54:3f:af: 79:8d:fa:27:1d:a7:15:ca:26:55:a1:40:69:83:b8: 27:3f:5e:5c:82:20:2a:ec:5a:6c:b9:65:ac:34:db: 5d:3d:f4:bf:b2:82:68:c4:e5:3e:d6:cb:d3:cc:c8: 76:3e:6f:a7:9b:1e:cc:7e:45:9b:a7:b4:f5:79:ed: c7:cb:2e:35:9f:d5:46:f6:7c:7d:3e:b9:51:3e:e5: 6c:5c:ff:7e:c6:55:bd:b3:48:a5:a8:d6:5e:48:cb: 02:ed:e3:40:a3:10:78:f0:be:50:26:5f:63:07:79: d2:3c:b7:04:71:bb:ff:64:f0:5b:c5:13:73:be:cc: d7:bc:67:4f:3e:f2:46:1d:9b:6a:a0:08:ae:4e:57: fb:5c:45:7c:62:4d:7d:e7:2e:b9:3f:b2:65:a3:9a: 91:bb:34:eb:f5:77:b2:52:09:74:d3:91:d1:4f:80: da:f9:d1:39:a1:8f:4a:8d:f0:c2:93:09:f7:0b:f1: c9:23:bf:8b:43:06:e9:b3:8b:3f:95:71:e2:c6:68: 15:a4:a3:53:cc:2f:42:ca:de:27:e0:09:cd:4a:71: e3:2f:b0:da:90:3c:ff:d3:87:2c:c3:83:eb:b4:f7: 82:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:3A:28:5E:B8:B7:E9:C2:3F:23:2A:8C:8F:E1:7D:E1:74:41:92:F3 X509v3 Authority Key Identifier: keyid:3E:C6:FD:91:D2:A4:36:5D:3D:C1:67:21:FE:DF:69:21:72:BB:30:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:bc:6e:9a:55:ec:77:30:f5:47:c0:61:9c:cb:62:e7:a2:a3: 99:72:a9:85:ca:f4:5a:57:3b:f1:56:72:3f:ae:f6:0b:b3:90: ce:55:01:9f:af:47:4b:9a:18:59:ec:df:3c:83:d9:15:32:51: 1d:8a:80:e2:e2:fd:84:a5:47:c4:3d:ca:3a:bb:8b:65:38:d4: ec:4f:09:ef:c4:05:52:10:c9:60:eb:69:f1:8a:f6:b7:01:72: 38:2a:cd:1c:a2:d0:53:3c:8e:60:8c:86:74:af:3b:7e:85:b6: 40:b3:78:3d:86:34:50:14:52:56:d2:b7:08:41:77:57:34:e8: 9d:3a:46:fd:5a:32:3b:06:7a:15:57:95:00:31:5a:85:c2:2e: 1e:c8:07:47:ab:2a:94:0b:6c:27:e9:c8:9c:2e:01:35:75:5c: d5:95:c3:85:f1:9d:3a:83:df:c6:7d:bd:28:fe:8f:7a:01:d0: b6:57:7d:0f:ed:f2:17:2c:fd:80:e8:eb:14:42:2a:34:14:9c: c7:ee:8c:11:6e:a7:5a:f5:46:ec:dc:19:a9:ae:3e:89:89:2a: ad:02:3e:e6:f0:de:dc:eb:16:4f:bb:81:79:e9:09:ad:cb:dd: ae:a6:4f:cd:62:2a:3a:cd:04:3a:94:b9:80:2f:4d:d2:e0:97: 0c:f5:eb:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEa/FmFkAEmfCB0kvi9LPdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYzZmZDkxZDJhNDM2NWQzZGMxNjcyMWZlZGY2OTIxNzJi YjMwNzMwHhcNMjYwMjA5MjIwMDUwWhcNMjYwMjEwMjIwMDUwWjAzMTEwLwYDVQQD Eyg0MzNhMjg1ZWI4YjdlOWMyM2YyMzJhOGM4ZmUxN2RlMTc0NDE5MmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTzNmahv9/PymKDbky56Xuu0iBOf hFPZa/VUP695jfonHacVyiZVoUBpg7gnP15cgiAq7FpsuWWsNNtdPfS/soJoxOU+ 1svTzMh2Pm+nmx7MfkWbp7T1ee3Hyy41n9VG9nx9PrlRPuVsXP9+xlW9s0ilqNZe SMsC7eNAoxB48L5QJl9jB3nSPLcEcbv/ZPBbxRNzvszXvGdPPvJGHZtqoAiuTlf7 XEV8Yk195y65P7Jlo5qRuzTr9XeyUgl005HRT4Da+dE5oY9KjfDCkwn3C/HJI7+L Qwbps4s/lXHixmgVpKNTzC9Cyt4n4AnNSnHjL7DakDz/04csw4PrtPeCLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEM6KF64t+nCPyMqjI/hfeF0QZLzMB8GA1UdIwQY MBaAFD7G/ZHSpDZdPcFnIf7faSFyuzBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHNiOWtkS2tObDA5d1djaF90OXBJWEs3TUhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC80Y2RhNDctMzg0YS00MzU0LWJjYjQt YmVmMzU2MDViY2Q0LzEvUHNiOWtkS2tObDA5d1djaF90OXBJWEs3TUhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC80Y2RhNDctMzg0YS00MzU0LWJjYjQtYmVmMzU2MDViY2Q0 LzEvUHNiOWtkS2tObDA5d1djaF90OXBJWEs3TUhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANbxumlXs dzD1R8BhnMti56KjmXKphcr0Wlc78VZyP672C7OQzlUBn69HS5oYWezfPIPZFTJR HYqA4uL9hKVHxD3KOruLZTjU7E8J78QFUhDJYOtp8Yr2twFyOCrNHKLQUzyOYIyG dK87foW2QLN4PYY0UBRSVtK3CEF3VzTonTpG/VoyOwZ6FVeVADFahcIuHsgHR6sq lAtsJ+nInC4BNXVc1ZXDhfGdOoPfxn29KP6PegHQtld9D+3yFyz9gOjrFEIqNBSc x+6MEW6nWvVG7NwZqa4+iYkqrQI+5vDe3OsWT7uBeekJrcvdrqZPzWIqOs0EOpS5 gC9N0uCXDPXrCQ== -----END CERTIFICATE-----Generated at Tue Feb 10 02:50:09 2026 by rpki-client