This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6a2919-e1cb-4e64-bf5d-68e1b173511e/1/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.mft File: PT7Ypi7oWbzmjUAWMZ4IKiBIRac.mft (raw, json) Hash identifier: epMW0qyzG0yP8lR5Dk6QuitNJmDgoW19839tMVj8IGU= Subject key identifier: D0:BB:93:FE:79:81:B1:89:6B:D5:DC:BC:6E:E2:FC:75:91:66:F9:4C Authority key identifier: 3D:3E:D8:A6:2E:E8:59:BC:E6:8D:40:16:31:9E:08:2A:20:48:45:A7 Certificate issuer: /CN=3d3ed8a62ee859bce68d4016319e082a204845a7 Certificate serial: 019C4322E1120CC7B7E410142DF9B50A9ADC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6a2919-e1cb-4e64-bf5d-68e1b173511e/1/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.mft Manifest number: 02D9 Signing time: Mon 09 Feb 2026 16:01:25 +0000 Manifest this update: Mon 09 Feb 2026 16:01:25 +0000 Manifest next update: Tue 10 Feb 2026 16:01:25 +0000 Files and hashes: 1: PT7Ypi7oWbzmjUAWMZ4IKiBIRac.crl (hash: KGILODOWbMmo3irK9AyeV/Y0ao8oRBsxkmPLJoZdq0Y=) 2: X_SK-cz3TKw7b7-is_Q-Ji4uRec.roa (hash: Xdw2xwjPivVwaHJjO+HBoTF0UNKMpoYwZBd/kG4I8fQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6a2919-e1cb-4e64-bf5d-68e1b173511e/1/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/6a2919-e1cb-4e64-bf5d-68e1b173511e/1/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.mft rsync://rpki.ripe.net/repository/DEFAULT/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:e1:12:0c:c7:b7:e4:10:14:2d:f9:b5:0a:9a:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d3ed8a62ee859bce68d4016319e082a204845a7 Validity Not Before: Feb 9 16:01:25 2026 GMT Not After : Feb 10 16:01:25 2026 GMT Subject: CN=d0bb93fe7981b1896bd5dcbc6ee2fc759166f94c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0d:c6:08:29:82:80:20:8d:6e:ea:9c:d0:71: 9a:85:3c:ea:e0:5a:d5:18:51:42:cb:78:53:ea:17: c7:46:f3:a9:36:1c:fb:9f:69:d9:6c:d7:08:44:a4: bd:e2:d1:4d:c9:3d:5c:b9:48:d9:ab:fb:c0:1b:86: 2b:4b:9f:9f:4a:17:9b:c9:a0:03:df:c8:dc:79:d1: 5c:3e:4a:10:1d:97:7a:b9:e6:6f:fa:dd:63:53:4a: 49:4b:5e:ac:b8:b0:cf:d0:5c:20:bb:72:af:81:ff: c9:0f:37:30:92:2b:da:7d:0b:93:5f:f0:60:7a:cd: b7:c8:8d:34:fe:3a:ac:e4:05:62:b5:2e:72:6d:ec: 35:4a:a8:ff:18:c1:6e:1a:91:89:89:4d:54:da:4f: 54:d7:c0:33:95:f4:92:ca:56:e9:cf:25:55:1f:5a: 7f:1d:96:e6:a7:75:21:54:48:ab:52:13:82:c6:d5: 83:67:70:98:7e:20:55:a7:72:15:df:a5:60:49:6b: bb:2e:12:f0:c1:e6:86:ce:72:a9:76:22:83:7c:70: 99:6a:03:c3:44:d7:27:12:19:c0:74:ad:95:8b:89: d7:a0:39:cd:07:39:91:9a:ce:e9:19:22:ad:c7:85: 8b:08:8a:ad:da:5a:1e:0f:fb:8e:2f:12:76:90:30: 35:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:BB:93:FE:79:81:B1:89:6B:D5:DC:BC:6E:E2:FC:75:91:66:F9:4C X509v3 Authority Key Identifier: keyid:3D:3E:D8:A6:2E:E8:59:BC:E6:8D:40:16:31:9E:08:2A:20:48:45:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6a2919-e1cb-4e64-bf5d-68e1b173511e/1/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6a2919-e1cb-4e64-bf5d-68e1b173511e/1/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:35:d5:9f:68:b0:c3:06:c5:2c:86:42:1a:7b:f8:7e:ef:30: a8:84:ce:8b:da:45:77:66:ef:8c:65:b4:64:2f:e5:70:d3:7f: e2:16:9d:f2:b8:43:9b:ca:d4:d1:5c:52:5d:18:19:8d:26:83: 87:71:94:69:29:95:6a:38:ce:11:f5:97:87:e4:e0:36:f5:c0: a0:dd:67:c7:f0:c4:56:e0:fc:15:17:19:98:30:d1:0b:e3:cb: 53:60:ea:03:43:e8:e9:43:63:e8:e3:7d:4d:0a:3c:ed:f2:59: 2a:d1:8b:0b:17:74:63:9d:44:23:b7:e4:61:2e:9b:7a:10:84: 8b:89:a8:56:e8:03:23:2c:04:c9:f1:fe:66:00:d4:5e:c2:fb: ae:a5:21:65:5e:cf:30:40:05:29:44:38:52:d0:2b:56:1f:24: c4:34:16:92:eb:9f:96:c6:d9:a2:ea:2e:b3:fb:3a:12:5e:92: a9:19:13:cf:a5:94:57:c0:2a:b7:90:96:67:1b:7f:a7:8a:ef: 2d:e5:c4:8f:69:e9:98:18:ac:4f:1c:37:a6:c8:ae:59:05:df: 18:b5:34:c5:7a:19:ef:6c:64:c1:50:65:1e:2e:8a:ed:43:0a: e7:5f:fe:53:ee:6b:0f:c0:c4:02:42:bd:85:7f:cb:9c:2c:17: 3e:6a:98:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIuESDMe35BAULfm1CprcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkM2VkOGE2MmVlODU5YmNlNjhkNDAxNjMxOWUwODJhMjA0 ODQ1YTcwHhcNMjYwMjA5MTYwMTI1WhcNMjYwMjEwMTYwMTI1WjAzMTEwLwYDVQQD EyhkMGJiOTNmZTc5ODFiMTg5NmJkNWRjYmM2ZWUyZmM3NTkxNjZmOTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzw3GCCmCgCCNbuqc0HGahTzq4FrV GFFCy3hT6hfHRvOpNhz7n2nZbNcIRKS94tFNyT1cuUjZq/vAG4YrS5+fShebyaAD 38jcedFcPkoQHZd6ueZv+t1jU0pJS16suLDP0Fwgu3Kvgf/JDzcwkivafQuTX/Bg es23yI00/jqs5AVitS5ybew1Sqj/GMFuGpGJiU1U2k9U18AzlfSSylbpzyVVH1p/ HZbmp3UhVEirUhOCxtWDZ3CYfiBVp3IV36VgSWu7LhLwweaGznKpdiKDfHCZagPD RNcnEhnAdK2Vi4nXoDnNBzmRms7pGSKtx4WLCIqt2loeD/uOLxJ2kDA15QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNC7k/55gbGJa9XcvG7i/HWRZvlMMB8GA1UdIwQY MBaAFD0+2KYu6Fm85o1AFjGeCCogSEWnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFQ3WXBpN29XYnptalVBV01aNElLaUJJUmFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi82YTI5MTktZTFjYi00ZTY0LWJmNWQt NjhlMWIxNzM1MTFlLzEvUFQ3WXBpN29XYnptalVBV01aNElLaUJJUmFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi82YTI5MTktZTFjYi00ZTY0LWJmNWQtNjhlMWIxNzM1MTFl LzEvUFQ3WXBpN29XYnptalVBV01aNElLaUJJUmFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcTXVn2iw wwbFLIZCGnv4fu8wqITOi9pFd2bvjGW0ZC/lcNN/4had8rhDm8rU0VxSXRgZjSaD h3GUaSmVajjOEfWXh+TgNvXAoN1nx/DEVuD8FRcZmDDRC+PLU2DqA0Po6UNj6ON9 TQo87fJZKtGLCxd0Y51EI7fkYS6behCEi4moVugDIywEyfH+ZgDUXsL7rqUhZV7P MEAFKUQ4UtArVh8kxDQWkuuflsbZouous/s6El6SqRkTz6WUV8Aqt5CWZxt/p4rv LeXEj2npmBisTxw3psiuWQXfGLU0xXoZ72xkwVBlHi6K7UMK51/+U+5rD8DEAkK9 hX/LnCwXPmqYpw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:18 2026 by rpki-client