This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/pYQcxzKsc43B4_5nwS5RBL74Y7o.mft File: pYQcxzKsc43B4_5nwS5RBL74Y7o.mft (raw, json) Hash identifier: zO23KDbkFQyFn56uH+T2BLRuvCtqXOMPbsjoY5O/l2Q= Subject key identifier: 69:64:6E:17:CC:05:3D:15:BF:56:B7:B4:DD:39:65:C0:9B:BD:BC:68 Authority key identifier: A5:84:1C:C7:32:AC:73:8D:C1:E3:FE:67:C1:2E:51:04:BE:F8:63:BA Certificate issuer: /CN=a5841cc732ac738dc1e3fe67c12e5104bef863ba Certificate serial: 019C43FD9ECDE8078B07A0292F87DED86ABC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pYQcxzKsc43B4_5nwS5RBL74Y7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/pYQcxzKsc43B4_5nwS5RBL74Y7o.mft Manifest number: 0DFB Signing time: Mon 09 Feb 2026 20:00:20 +0000 Manifest this update: Mon 09 Feb 2026 20:00:20 +0000 Manifest next update: Tue 10 Feb 2026 20:00:20 +0000 Files and hashes: 1: pYQcxzKsc43B4_5nwS5RBL74Y7o.crl (hash: +OIge6eBrrhBVnC281x7yFjpXRxI3E99feuxOvcZWv4=) 2: uj43_HB0cbgfSBJ3pkw5WX0ctlA.roa (hash: Qg5heRt3GNKVhwS3i0/2Bg+iUo3g8NAjbX7YvfBxFzY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/pYQcxzKsc43B4_5nwS5RBL74Y7o.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/pYQcxzKsc43B4_5nwS5RBL74Y7o.mft rsync://rpki.ripe.net/repository/DEFAULT/pYQcxzKsc43B4_5nwS5RBL74Y7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:9e:cd:e8:07:8b:07:a0:29:2f:87:de:d8:6a:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5841cc732ac738dc1e3fe67c12e5104bef863ba Validity Not Before: Feb 9 20:00:20 2026 GMT Not After : Feb 10 20:00:20 2026 GMT Subject: CN=69646e17cc053d15bf56b7b4dd3965c09bbdbc68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e3:5b:f7:0d:87:3e:56:9e:7f:29:42:33:4b: f8:82:5e:35:58:20:32:87:76:4a:22:7b:a7:f0:36: 61:5f:71:f2:b3:ed:57:49:33:37:3e:77:9d:36:99: 9d:ad:4f:2b:14:13:87:ee:35:a5:93:b0:47:f7:2b: 77:56:ee:8b:d6:bb:6d:cb:cc:5e:f6:9a:32:0d:a7: 11:aa:a4:97:a9:a3:f2:54:e3:f6:39:a9:7c:a6:17: d9:42:e3:4a:ab:99:7c:21:12:6a:bd:06:5c:f2:50: 64:bd:66:5c:92:f4:c8:94:be:76:eb:13:ca:32:38: a9:01:1c:08:68:93:cf:99:d4:b7:83:02:22:78:f4: cd:dc:ac:6b:38:a9:ab:d1:5c:c3:49:5e:01:87:c3: 91:69:5d:10:62:b2:93:16:2e:f1:e3:f8:e7:ec:66: b6:00:bc:76:16:72:8e:b5:ea:4a:da:90:5d:fc:5a: b5:38:0f:f6:7c:ce:e4:fa:ba:44:7b:78:76:68:c6: f1:f9:41:3e:bc:65:90:45:c9:81:eb:40:f8:12:49: 9f:73:5e:b4:e5:79:e5:8b:6f:ab:6f:0f:da:8a:49: 01:ba:2a:04:7b:e0:9c:b0:e4:da:ca:1b:d5:8f:20: 46:a7:13:3b:38:19:ad:5e:56:29:d3:c8:3d:22:88: cf:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:64:6E:17:CC:05:3D:15:BF:56:B7:B4:DD:39:65:C0:9B:BD:BC:68 X509v3 Authority Key Identifier: keyid:A5:84:1C:C7:32:AC:73:8D:C1:E3:FE:67:C1:2E:51:04:BE:F8:63:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYQcxzKsc43B4_5nwS5RBL74Y7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/pYQcxzKsc43B4_5nwS5RBL74Y7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/pYQcxzKsc43B4_5nwS5RBL74Y7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:61:71:1b:57:5f:c7:b3:62:1b:a2:41:ee:0c:62:78:04:46: a5:1e:b6:e2:61:23:eb:bb:2f:4d:c1:26:9b:ef:76:fd:21:d9: a1:b5:f5:1f:5f:fd:e4:db:4d:9d:8d:db:af:78:7a:1f:ec:48: 8d:b5:46:95:a1:d0:21:23:85:01:40:a6:14:a6:7b:cb:16:1e: 05:98:99:a6:33:72:81:68:e9:3f:bf:68:59:10:e0:fd:ae:15: ff:91:19:b8:69:d1:d1:db:ce:34:6a:04:97:37:26:d5:06:7f: 4a:cc:00:0b:0f:eb:a5:7f:e9:08:ff:0d:e9:2e:2c:4c:d2:3b: 68:2a:a2:6c:e7:78:85:42:4e:e6:b9:fe:3b:5a:5d:3d:27:6f: b2:93:a3:82:13:16:16:23:52:54:e7:96:f9:5b:0e:4a:8c:ed: dc:46:52:1e:78:f9:f5:b3:c8:37:27:ef:29:b2:f3:9d:77:34: ca:f8:5e:78:c2:b0:e5:57:d3:c4:54:16:f5:53:28:49:ba:e8: 7e:b9:0c:89:10:81:dd:f2:c1:67:19:3b:b1:98:e5:54:57:d5: 9c:cc:89:02:ef:7f:19:f0:74:b6:44:07:e1:29:a6:14:65:0b: a1:0b:9a:e5:e3:15:fa:73:da:e3:20:63:db:8c:e7:bd:c9:37: c8:7b:27:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/Z7N6AeLB6ApL4fe2Gq8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1ODQxY2M3MzJhYzczOGRjMWUzZmU2N2MxMmU1MTA0YmVm ODYzYmEwHhcNMjYwMjA5MjAwMDIwWhcNMjYwMjEwMjAwMDIwWjAzMTEwLwYDVQQD Eyg2OTY0NmUxN2NjMDUzZDE1YmY1NmI3YjRkZDM5NjVjMDliYmRiYzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+Nb9w2HPlaefylCM0v4gl41WCAy h3ZKInun8DZhX3Hys+1XSTM3PnedNpmdrU8rFBOH7jWlk7BH9yt3Vu6L1rtty8xe 9poyDacRqqSXqaPyVOP2Oal8phfZQuNKq5l8IRJqvQZc8lBkvWZckvTIlL526xPK MjipARwIaJPPmdS3gwIiePTN3KxrOKmr0VzDSV4Bh8ORaV0QYrKTFi7x4/jn7Ga2 ALx2FnKOtepK2pBd/Fq1OA/2fM7k+rpEe3h2aMbx+UE+vGWQRcmB60D4Ekmfc160 5Xnli2+rbw/aikkBuioEe+CcsOTayhvVjyBGpxM7OBmtXlYp08g9IojPhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGlkbhfMBT0Vv1a3tN05ZcCbvbxoMB8GA1UdIwQY MBaAFKWEHMcyrHONweP+Z8EuUQS++GO6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFlRY3h6S3NjNDNCNF81bndTNVJCTDc0WTdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8xNDFhMmEtMTk0Yi00MDJiLTkyZGQt NjY2NjBiMjIyZmIwLzEvcFlRY3h6S3NjNDNCNF81bndTNVJCTDc0WTdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi8xNDFhMmEtMTk0Yi00MDJiLTkyZGQtNjY2NjBiMjIyZmIw LzEvcFlRY3h6S3NjNDNCNF81bndTNVJCTDc0WTdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACWFxG1df x7NiG6JB7gxieARGpR624mEj67svTcEmm+92/SHZobX1H1/95NtNnY3br3h6H+xI jbVGlaHQISOFAUCmFKZ7yxYeBZiZpjNygWjpP79oWRDg/a4V/5EZuGnR0dvONGoE lzcm1QZ/SswACw/rpX/pCP8N6S4sTNI7aCqibOd4hUJO5rn+O1pdPSdvspOjghMW FiNSVOeW+VsOSozt3EZSHnj59bPINyfvKbLznXc0yvheeMKw5VfTxFQW9VMoSbro frkMiRCB3fLBZxk7sZjlVFfVnMyJAu9/GfB0tkQH4SmmFGULoQua5eMV+nPa4yBj 24znvck3yHsnEQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:38:34 2026 by rpki-client