This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft File: PsfSv8P6eOcQChuJNZBa_3pJa8k.mft (raw, json) Hash identifier: TuxkwdPSq8YSxVctST9Mwl8bTMkXYWqQ0EhlsquEZeY= Subject key identifier: 66:7E:82:F3:7E:6F:2E:4D:FD:35:4B:26:31:94:BE:3E:48:D6:64:B4 Authority key identifier: 3E:C7:D2:BF:C3:FA:78:E7:10:0A:1B:89:35:90:5A:FF:7A:49:6B:C9 Certificate issuer: /CN=3ec7d2bfc3fa78e7100a1b8935905aff7a496bc9 Certificate serial: 019C42100D5640089835F750C64AAF5EA47F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft Manifest number: 0EBD Signing time: Mon 09 Feb 2026 11:01:14 +0000 Manifest this update: Mon 09 Feb 2026 11:01:14 +0000 Manifest next update: Tue 10 Feb 2026 11:01:14 +0000 Files and hashes: 1: 4yIaOD2NMt2VBGmVwUq_OiRtg_A.roa (hash: kgy/jwMb361XAjDurvjXKgIsxESxjz3mkWg8JfDokdo=) 2: PsfSv8P6eOcQChuJNZBa_3pJa8k.crl (hash: rqu4/FocHtEwt78Ig3KBasL1baT34B6b6v1oWtCYDHs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:10:0d:56:40:08:98:35:f7:50:c6:4a:af:5e:a4:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ec7d2bfc3fa78e7100a1b8935905aff7a496bc9 Validity Not Before: Feb 9 11:01:14 2026 GMT Not After : Feb 10 11:01:14 2026 GMT Subject: CN=667e82f37e6f2e4dfd354b263194be3e48d664b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:e5:b6:8e:5f:3b:91:39:0f:4b:35:2f:e0:3e: e0:35:f4:71:52:65:7b:e1:91:c3:23:74:f7:ea:14: 14:a0:6d:7f:06:fe:66:04:6a:5d:08:e5:09:52:18: 74:e8:4f:85:26:b4:51:c4:8b:68:18:2b:cf:10:28: e4:95:6d:97:79:b5:c9:8c:b3:af:4b:52:c3:b5:52: d8:31:be:0a:cf:89:a8:81:30:e9:bb:91:77:38:7b: 06:1e:cd:b3:a1:3d:e7:91:0e:f5:08:35:d5:82:6f: fd:b5:b5:54:18:88:20:8e:b5:c2:78:0d:5b:be:51: 07:27:c7:84:19:fa:71:06:f4:1d:2d:47:1c:a5:8c: 46:62:9e:86:e2:26:c8:99:14:ae:82:c1:61:f0:a1: 7a:0d:c7:6f:27:17:d4:f8:b4:9c:b5:db:e9:95:90: c7:28:d3:3c:44:a9:6b:f0:93:ed:9c:2e:28:7c:aa: 9c:10:79:47:7e:ca:6e:dd:f3:d4:f3:64:fd:ea:28: d3:64:a8:a7:2c:08:16:bf:6d:50:e7:3c:a4:b5:08: 4a:e8:05:ab:a5:d5:2c:ce:59:9a:1a:4c:a7:50:a2: a7:c8:67:60:9c:da:d0:43:d9:5f:c0:f4:f2:06:1f: 41:7f:b6:cb:dd:6b:67:48:ca:29:2e:8e:4d:42:a1: 6c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:7E:82:F3:7E:6F:2E:4D:FD:35:4B:26:31:94:BE:3E:48:D6:64:B4 X509v3 Authority Key Identifier: keyid:3E:C7:D2:BF:C3:FA:78:E7:10:0A:1B:89:35:90:5A:FF:7A:49:6B:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:37:d8:79:10:78:a3:53:51:26:16:f2:a2:5b:43:5c:82:98: 4b:39:e2:0b:fb:c8:59:81:08:7b:7b:11:7d:f6:cb:0d:52:60: 8b:6d:6a:9b:6e:2c:df:cd:35:bb:98:fb:24:e9:02:62:0a:c6: 92:ab:f1:c0:99:18:b2:53:b3:85:76:ed:6a:2c:5a:04:3e:3b: 1a:25:6d:e9:35:3c:49:c6:4c:91:d7:a9:57:38:84:21:8e:e3: e0:4c:99:04:70:78:d3:37:41:6c:df:b4:3f:f3:7a:13:e8:2b: 30:9c:59:0a:6d:73:6e:b5:f6:b5:b0:3c:ed:d0:dd:3a:bb:27: 02:66:a9:ea:03:24:dc:ce:7f:d6:e9:7f:be:ac:2a:81:95:ea: 7a:5c:e8:4a:ee:14:24:0d:fa:38:b6:4a:a2:e4:5c:af:9b:c4: b9:8b:b9:2a:70:59:a3:c4:a0:2b:2f:52:8d:24:68:a0:16:fa: 5e:b3:83:cf:7b:51:91:c6:29:1b:a3:12:de:2c:70:91:b7:3d: 06:69:af:28:8c:56:e6:74:71:a3:b4:65:3c:9e:09:7d:28:06: 37:db:cb:5a:5b:0f:3f:54:69:ac:cc:2e:f2:7f:24:64:be:c7: 5b:24:ed:84:7d:93:7b:6b:b4:41:90:dc:cc:cf:95:4d:19:e2: f7:e6:d8:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCEA1WQAiYNfdQxkqvXqR/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYzdkMmJmYzNmYTc4ZTcxMDBhMWI4OTM1OTA1YWZmN2E0 OTZiYzkwHhcNMjYwMjA5MTEwMTE0WhcNMjYwMjEwMTEwMTE0WjAzMTEwLwYDVQQD Eyg2NjdlODJmMzdlNmYyZTRkZmQzNTRiMjYzMTk0YmUzZTQ4ZDY2NGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7OW2jl87kTkPSzUv4D7gNfRxUmV7 4ZHDI3T36hQUoG1/Bv5mBGpdCOUJUhh06E+FJrRRxItoGCvPECjklW2XebXJjLOv S1LDtVLYMb4Kz4mogTDpu5F3OHsGHs2zoT3nkQ71CDXVgm/9tbVUGIggjrXCeA1b vlEHJ8eEGfpxBvQdLUccpYxGYp6G4ibImRSugsFh8KF6DcdvJxfU+LSctdvplZDH KNM8RKlr8JPtnC4ofKqcEHlHfspu3fPU82T96ijTZKinLAgWv21Q5zyktQhK6AWr pdUszlmaGkynUKKnyGdgnNrQQ9lfwPTyBh9Bf7bL3WtnSMopLo5NQqFsrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGZ+gvN+by5N/TVLJjGUvj5I1mS0MB8GA1UdIwQY MBaAFD7H0r/D+njnEAobiTWQWv96SWvJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHNmU3Y4UDZlT2NRQ2h1Sk5aQmFfM3BKYThrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8zOWJiNzItZjZhZi00YTY3LTljNDQt YmE4ODExMjJjYTYzLzEvUHNmU3Y4UDZlT2NRQ2h1Sk5aQmFfM3BKYThrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8zOWJiNzItZjZhZi00YTY3LTljNDQtYmE4ODExMjJjYTYz LzEvUHNmU3Y4UDZlT2NRQ2h1Sk5aQmFfM3BKYThrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjDfYeRB4 o1NRJhbyoltDXIKYSzniC/vIWYEIe3sRffbLDVJgi21qm24s3801u5j7JOkCYgrG kqvxwJkYslOzhXbtaixaBD47GiVt6TU8ScZMkdepVziEIY7j4EyZBHB40zdBbN+0 P/N6E+grMJxZCm1zbrX2tbA87dDdOrsnAmap6gMk3M5/1ul/vqwqgZXqelzoSu4U JA36OLZKouRcr5vEuYu5KnBZo8SgKy9SjSRooBb6XrODz3tRkcYpG6MS3ixwkbc9 BmmvKIxW5nRxo7RlPJ4JfSgGN9vLWlsPP1RprMwu8n8kZL7HWyTthH2Te2u0QZDc zM+VTRni9+bYow== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:37 2026 by rpki-client