This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft File: Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft (raw, json) Hash identifier: PfGnuuriGSrHN/QAOq56LZUrCZUddQI73rrIevEgsSQ= Subject key identifier: BB:D3:60:04:BD:F3:91:44:D4:5B:AC:73:CF:D7:83:24:89:C1:29:85 Authority key identifier: 3E:BF:AF:8A:1A:A3:BC:1F:F3:E3:E4:30:C6:7F:B7:A6:41:0A:3D:F7 Certificate issuer: /CN=3ebfaf8a1aa3bc1ff3e3e430c67fb7a6410a3df7 Certificate serial: 019C4359246184718F6F950486571E84C992 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft Manifest number: 070F Signing time: Mon 09 Feb 2026 17:00:41 +0000 Manifest this update: Mon 09 Feb 2026 17:00:41 +0000 Manifest next update: Tue 10 Feb 2026 17:00:41 +0000 Files and hashes: 1: 9MMTJC9bSYJjm0yH2SR40mWxLt4.roa (hash: 911epWb1C+HTij7xHBBtK6BFbTtOQmcCGUfZtk4CgN0=) 2: Pr-vihqjvB_z4-Qwxn-3pkEKPfc.crl (hash: kOT1/8TCwjz3TahoeMqSA7Rye9QaSao7Tv4vCLJuLqg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft rsync://rpki.ripe.net/repository/DEFAULT/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:24:61:84:71:8f:6f:95:04:86:57:1e:84:c9:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ebfaf8a1aa3bc1ff3e3e430c67fb7a6410a3df7 Validity Not Before: Feb 9 17:00:41 2026 GMT Not After : Feb 10 17:00:41 2026 GMT Subject: CN=bbd36004bdf39144d45bac73cfd7832489c12985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b4:dc:a1:ef:21:75:55:43:7a:20:d2:0b:1d: 19:bd:30:82:3d:29:a9:f3:d3:dc:f7:db:c8:ba:ee: e9:66:be:33:ac:d4:60:6e:d7:fa:76:0e:30:56:1f: e9:f2:ae:8a:4d:95:89:14:c1:71:6f:e4:3f:20:9e: 42:6d:fe:a8:3b:48:d8:af:c8:4b:65:a8:7a:a2:05: 3c:5f:82:a7:f5:c5:e9:70:4e:e3:dc:87:1b:f2:99: 5e:ec:c8:8f:68:ca:10:04:74:e1:d4:f9:99:4b:09: cf:6f:c3:97:e1:4a:15:86:9c:c9:0b:39:4b:10:35: 36:09:37:bc:a1:5e:ab:50:e1:7c:cc:31:26:05:c6: 21:89:93:02:0b:62:51:e8:4c:20:04:c8:ae:36:83: 08:b9:b4:d3:93:07:76:b0:9f:95:c8:9b:38:11:cb: 79:b1:ea:6f:3f:71:7d:17:78:67:59:ee:81:f3:c6: 36:79:2e:8c:17:97:8e:55:9d:38:6a:6c:e3:74:46: a7:64:26:f7:9f:03:9a:be:e7:f3:36:48:6c:8a:15: 6e:e5:99:4b:7e:d3:f5:65:d5:c1:4e:70:6a:12:8b: 8b:1d:d5:c2:93:a9:cb:e2:43:b7:91:1d:07:a1:3d: 2d:ef:06:af:0b:59:30:07:cc:85:ad:d0:77:06:74: e9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D3:60:04:BD:F3:91:44:D4:5B:AC:73:CF:D7:83:24:89:C1:29:85 X509v3 Authority Key Identifier: keyid:3E:BF:AF:8A:1A:A3:BC:1F:F3:E3:E4:30:C6:7F:B7:A6:41:0A:3D:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:a6:69:85:19:9e:6c:e3:09:13:71:d1:1b:d1:06:9b:3c:a3: fd:d7:c9:52:e1:4f:4d:b8:42:8f:d8:81:bc:d2:0a:7c:e5:37: a1:13:78:63:5c:fb:e8:7d:fc:a3:bb:1e:ad:3e:77:aa:ca:97: 41:6c:57:89:70:9b:11:01:ec:9b:0e:71:a5:e1:89:ff:70:94: f7:48:77:96:6e:c1:fe:08:ad:11:42:53:2d:e5:88:83:93:3f: b6:9d:f4:43:ee:cc:1e:4f:7a:ee:ce:1c:6e:e5:a9:80:69:d2: d2:ad:4c:fc:64:7d:58:7d:e4:ba:c1:c1:44:b6:77:2b:16:f0: ef:b0:7f:56:ef:0c:fa:84:7e:3d:ef:51:84:34:eb:b1:d4:8e: b5:93:8f:cb:ae:22:b3:60:93:68:14:48:94:1d:60:86:68:79: d1:41:3e:74:9f:91:77:e9:0c:47:da:1c:5d:79:56:72:02:ca: f1:eb:a5:80:6f:43:0f:67:8d:8f:1d:80:c5:ad:ba:65:17:f2: b5:b6:6a:d8:5e:6b:8a:02:bd:8a:1d:f6:fc:dc:b3:6b:6e:35: 74:cb:95:0f:c1:5b:d5:d8:8c:c3:c7:a3:e4:7b:68:97:24:f0: 1d:3a:b7:40:bc:cf:3a:5f:32:81:1a:7f:b1:fc:68:3b:82:41: a2:48:a7:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWSRhhHGPb5UEhlcehMmSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYmZhZjhhMWFhM2JjMWZmM2UzZTQzMGM2N2ZiN2E2NDEw YTNkZjcwHhcNMjYwMjA5MTcwMDQxWhcNMjYwMjEwMTcwMDQxWjAzMTEwLwYDVQQD EyhiYmQzNjAwNGJkZjM5MTQ0ZDQ1YmFjNzNjZmQ3ODMyNDg5YzEyOTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLTcoe8hdVVDeiDSCx0ZvTCCPSmp 89Pc99vIuu7pZr4zrNRgbtf6dg4wVh/p8q6KTZWJFMFxb+Q/IJ5Cbf6oO0jYr8hL Zah6ogU8X4Kn9cXpcE7j3Icb8ple7MiPaMoQBHTh1PmZSwnPb8OX4UoVhpzJCzlL EDU2CTe8oV6rUOF8zDEmBcYhiZMCC2JR6EwgBMiuNoMIubTTkwd2sJ+VyJs4Ect5 sepvP3F9F3hnWe6B88Y2eS6MF5eOVZ04amzjdEanZCb3nwOavufzNkhsihVu5ZlL ftP1ZdXBTnBqEouLHdXCk6nL4kO3kR0HoT0t7wavC1kwB8yFrdB3BnTp8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLvTYAS985FE1Fusc8/XgySJwSmFMB8GA1UdIwQY MBaAFD6/r4oao7wf8+PkMMZ/t6ZBCj33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHItdmlocWp2Ql96NC1Rd3huLTNwa0VLUGZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8yMThiMGUtNTRiNS00YWQwLTlhYTAt ZWZkMWEwOThiNDg1LzEvUHItdmlocWp2Ql96NC1Rd3huLTNwa0VLUGZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi8yMThiMGUtNTRiNS00YWQwLTlhYTAtZWZkMWEwOThiNDg1 LzEvUHItdmlocWp2Ql96NC1Rd3huLTNwa0VLUGZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi6ZphRme bOMJE3HRG9EGmzyj/dfJUuFPTbhCj9iBvNIKfOU3oRN4Y1z76H38o7serT53qsqX QWxXiXCbEQHsmw5xpeGJ/3CU90h3lm7B/gitEUJTLeWIg5M/tp30Q+7MHk967s4c buWpgGnS0q1M/GR9WH3kusHBRLZ3Kxbw77B/Vu8M+oR+Pe9RhDTrsdSOtZOPy64i s2CTaBRIlB1ghmh50UE+dJ+Rd+kMR9ocXXlWcgLK8eulgG9DD2eNjx2Axa26ZRfy tbZq2F5rigK9ih32/Nyza241dMuVD8Fb1diMw8ej5HtolyTwHTq3QLzPOl8ygRp/ sfxoO4JBokinOw== -----END CERTIFICATE-----Generated at Tue Feb 10 00:15:23 2026 by rpki-client