This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft File: PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft (raw, json) Hash identifier: jYmrXZBr4GOLVuBQswwmuODCRJbfcM5/kjlxz0B7EJY= Subject key identifier: 03:1D:DE:EC:84:ED:1C:E9:EF:9A:18:D7:B6:E2:6F:21:A0:C1:4C:53 Authority key identifier: 3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F Certificate issuer: /CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f Certificate serial: 019C424673ABAA73F9152B713DDB09AF6774 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft Manifest number: 0E15 Signing time: Mon 09 Feb 2026 12:00:38 +0000 Manifest this update: Mon 09 Feb 2026 12:00:38 +0000 Manifest next update: Tue 10 Feb 2026 12:00:38 +0000 Files and hashes: 1: PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl (hash: +y0vNGrYzLUv/wZ5jhdLuxi6ha5hXO6Y0OT9jgVmsPs=) 2: bJ6xJt6ZdP1j5xV1ifbFjOZCpCg.roa (hash: CuOWPy4R5sb9VUo/TuOTu1jjmvwMnXC2ruvyuim2IiY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:73:ab:aa:73:f9:15:2b:71:3d:db:09:af:67:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f Validity Not Before: Feb 9 12:00:38 2026 GMT Not After : Feb 10 12:00:38 2026 GMT Subject: CN=031ddeec84ed1ce9ef9a18d7b6e26f21a0c14c53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:50:cb:29:b7:3a:ae:3e:37:f9:08:87:d8:fd: 96:d8:a1:10:b2:86:6b:ef:ea:03:1a:83:2d:d0:0c: c3:dd:09:b8:1d:9c:58:1b:ae:0d:78:3e:6e:1e:6f: 2a:ec:8d:d3:d3:ac:98:08:c7:f9:ba:c0:5b:a8:74: e3:d6:f7:00:ce:27:d1:3e:a4:92:fd:d4:cf:f0:27: 2d:39:97:6f:b4:47:76:fd:fa:e2:5d:b5:64:b6:1b: 33:16:a0:fa:50:7f:cf:0d:80:7f:84:d5:8e:21:00: d0:47:ad:cb:8b:af:40:4f:a5:53:f4:a9:5f:54:c8: b6:bc:c6:6a:82:19:5d:1d:8f:91:1d:e5:6a:20:5f: c2:b6:aa:19:33:58:e7:58:7c:68:4c:ef:84:da:24: f7:8b:28:44:81:ab:61:02:35:cd:80:24:10:b8:8d: 64:72:a5:92:88:d6:71:7a:de:8f:f6:cd:f8:65:94: 85:08:d6:74:b3:92:1f:40:19:df:f9:5b:09:f0:7c: 71:b3:28:de:6b:80:d0:5e:0d:54:12:84:05:b9:f9: cc:4a:2c:0e:8e:c3:07:cb:c7:57:7d:6a:da:05:80: 70:a5:67:c7:cb:23:76:cb:95:27:24:60:5c:66:10: 71:fe:ea:0b:9c:b3:49:dd:7c:39:c8:9e:06:c9:34: 4e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:1D:DE:EC:84:ED:1C:E9:EF:9A:18:D7:B6:E2:6F:21:A0:C1:4C:53 X509v3 Authority Key Identifier: keyid:3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:6c:21:07:e2:f0:53:5d:81:de:bc:b7:7b:2f:bc:a6:b7:51: 48:dd:6a:5b:80:e1:ef:1c:ff:60:c0:2e:d2:98:7b:ac:7f:ef: 2e:f8:07:83:c3:84:9d:e3:7a:b8:f6:6a:16:87:a7:6f:08:7c: 3a:65:f7:ab:1a:46:9c:0f:90:41:ff:e9:41:dc:e1:16:6c:53: 4c:97:31:6a:ac:da:b2:8f:bd:3a:63:2f:f1:ce:29:1b:1b:79: 0f:2d:ac:97:72:8e:99:22:33:36:05:ff:f8:d3:f4:e8:50:3c: 5e:82:6f:1c:04:c8:25:f8:c3:b8:f8:c7:a2:5b:55:6e:8f:9d: e1:da:4d:fa:ff:0c:62:11:15:2f:82:3f:12:b0:d8:68:ed:d2: 00:60:79:e4:f0:1d:2a:37:8d:1d:72:c4:1d:d8:9a:bf:82:ee: ca:e8:94:79:26:09:b7:0c:59:c8:97:ca:47:51:56:72:46:5f: f2:ad:86:00:11:4c:04:3b:11:5a:4f:8d:8f:47:7b:eb:4c:eb: 26:a8:78:f2:14:00:c6:4a:0e:37:fb:54:fb:2e:57:56:fb:6b: 45:a6:8c:16:31:0f:fc:8d:69:da:b9:17:95:90:f7:e0:2d:ee: d1:5f:0a:52:4e:4f:20:d6:02:58:35:23:9d:15:4f:4e:2d:8a: 11:7f:08:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRnOrqnP5FStxPdsJr2d0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlOGM2Y2M0NDhmOTYzNWM1NmZmMjJiMTFjZDgwYzFhYTlj NTJkNGYwHhcNMjYwMjA5MTIwMDM4WhcNMjYwMjEwMTIwMDM4WjAzMTEwLwYDVQQD EygwMzFkZGVlYzg0ZWQxY2U5ZWY5YTE4ZDdiNmUyNmYyMWEwYzE0YzUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVDLKbc6rj43+QiH2P2W2KEQsoZr 7+oDGoMt0AzD3Qm4HZxYG64NeD5uHm8q7I3T06yYCMf5usBbqHTj1vcAzifRPqSS /dTP8CctOZdvtEd2/friXbVkthszFqD6UH/PDYB/hNWOIQDQR63Li69AT6VT9Klf VMi2vMZqghldHY+RHeVqIF/CtqoZM1jnWHxoTO+E2iT3iyhEgathAjXNgCQQuI1k cqWSiNZxet6P9s34ZZSFCNZ0s5IfQBnf+VsJ8Hxxsyjea4DQXg1UEoQFufnMSiwO jsMHy8dXfWraBYBwpWfHyyN2y5UnJGBcZhBx/uoLnLNJ3Xw5yJ4GyTROXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAMd3uyE7Rzp75oY17bibyGgwUxTMB8GA1UdIwQY MBaAFD6MbMRI+WNcVv8isRzYDBqpxS1PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG94c3hFajVZMXhXX3lLeEhOZ01HcW5GTFU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9hZjY3NDItZTM1OC00YTZlLWExYTct ZDI4MTA1ZTNmMzgwLzEvUG94c3hFajVZMXhXX3lLeEhOZ01HcW5GTFU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9hZjY3NDItZTM1OC00YTZlLWExYTctZDI4MTA1ZTNmMzgw LzEvUG94c3hFajVZMXhXX3lLeEhOZ01HcW5GTFU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAamwhB+Lw U12B3ry3ey+8prdRSN1qW4Dh7xz/YMAu0ph7rH/vLvgHg8OEneN6uPZqFoenbwh8 OmX3qxpGnA+QQf/pQdzhFmxTTJcxaqzaso+9OmMv8c4pGxt5Dy2sl3KOmSIzNgX/ +NP06FA8XoJvHATIJfjDuPjHoltVbo+d4dpN+v8MYhEVL4I/ErDYaO3SAGB55PAd KjeNHXLEHdiav4LuyuiUeSYJtwxZyJfKR1FWckZf8q2GABFMBDsRWk+Nj0d760zr Jqh48hQAxkoON/tU+y5XVvtrRaaMFjEP/I1p2rkXlZD34C3u0V8KUk5PINYCWDUj nRVPTi2KEX8I9Q== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:43 2026 by rpki-client