This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.mft File: pyDgfSiyYVg7b_sWSYzefUfjQlw.mft (raw, json) Hash identifier: 5TsgsrMU7aX69TEXbx9qKtBzRhIETaZC7OoMWNc/DBM= Subject key identifier: 87:CB:13:D1:AB:5D:09:96:9E:E5:6B:29:28:1B:A9:E6:A1:5D:C7:8A Authority key identifier: A7:20:E0:7D:28:B2:61:58:3B:6F:FB:16:49:8C:DE:7D:47:E3:42:5C Certificate issuer: /CN=a720e07d28b261583b6ffb16498cde7d47e3425c Certificate serial: 019C43225F956F97737B69FDA9133EC8A68A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyDgfSiyYVg7b_sWSYzefUfjQlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.mft Manifest number: 0FDA Signing time: Mon 09 Feb 2026 16:00:51 +0000 Manifest this update: Mon 09 Feb 2026 16:00:51 +0000 Manifest next update: Tue 10 Feb 2026 16:00:51 +0000 Files and hashes: 1: pyDgfSiyYVg7b_sWSYzefUfjQlw.crl (hash: 6nfVAp9o3Zw5fClXBx4JoozU/y8uQ4mc4FJt8P6gATo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.mft rsync://rpki.ripe.net/repository/DEFAULT/pyDgfSiyYVg7b_sWSYzefUfjQlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:5f:95:6f:97:73:7b:69:fd:a9:13:3e:c8:a6:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a720e07d28b261583b6ffb16498cde7d47e3425c Validity Not Before: Feb 9 16:00:51 2026 GMT Not After : Feb 10 16:00:51 2026 GMT Subject: CN=87cb13d1ab5d09969ee56b29281ba9e6a15dc78a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:05:65:a5:0d:59:bf:bd:0f:88:e2:23:b5:c5: dd:ae:1c:80:19:74:60:86:89:e9:9a:a0:ba:2f:29: 01:fa:0f:64:3c:c1:25:23:ad:91:2d:a3:6a:27:b5: 26:07:11:f3:9d:a8:dd:91:0f:34:8f:10:fc:68:76: bd:c1:1f:cd:5a:0c:fb:9d:04:72:3c:f5:a5:1b:51: ac:94:4f:aa:f6:96:0c:6e:a1:3a:7f:c8:7f:60:86: 77:2f:84:66:88:ca:64:5e:bf:06:3c:98:f6:d7:15: ee:24:14:bf:c7:86:97:78:4b:c8:10:d3:38:82:74: c6:51:06:8f:c0:ee:56:0b:50:5d:be:f0:5f:86:e3: dd:13:18:3c:fb:fe:0a:71:b6:ca:88:36:7f:c6:cc: 73:b6:2e:fb:9c:e5:16:39:aa:65:fb:fa:1f:db:3c: fa:5e:25:9f:2b:48:12:6f:39:9f:67:3d:cc:2d:eb: d9:f2:8e:b2:e3:45:17:3d:c8:28:4e:49:7f:08:13: 7e:e3:0b:60:f5:b0:6f:0d:74:f0:cb:61:f4:d6:df: 5c:a3:61:5e:97:79:6e:6b:04:d7:46:33:e0:06:0d: fb:48:f6:ef:30:76:2e:eb:6f:ad:54:71:52:e0:e7: 85:f6:7e:e9:ea:4c:5b:54:35:52:51:a0:dc:88:ba: 62:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:CB:13:D1:AB:5D:09:96:9E:E5:6B:29:28:1B:A9:E6:A1:5D:C7:8A X509v3 Authority Key Identifier: keyid:A7:20:E0:7D:28:B2:61:58:3B:6F:FB:16:49:8C:DE:7D:47:E3:42:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyDgfSiyYVg7b_sWSYzefUfjQlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:30:8c:34:60:ea:57:3e:44:31:ac:84:50:4e:8e:69:a5:d3: 11:0b:05:cc:9a:fb:13:17:47:c8:77:d3:a9:62:18:3c:03:45: fa:88:f7:90:af:4a:2f:09:ac:41:d2:69:12:04:f8:b4:5c:aa: b8:86:75:a8:37:b8:61:c2:52:26:66:33:ce:fa:ea:11:76:cb: e0:fb:63:de:9b:d2:5d:59:c9:77:c9:5c:b2:f7:e9:93:93:e0: 94:ed:45:49:87:db:ae:82:ac:4e:cf:72:50:e9:da:4f:a2:c0: a4:98:b3:81:d1:64:7c:f9:ed:b6:f7:78:12:72:13:4b:31:f8: b0:6c:28:df:2a:3a:fa:5b:65:9a:7b:04:e4:4c:30:b5:a4:0f: 5f:b8:1f:d9:11:2e:a5:b8:a5:20:ac:a4:26:fa:07:ec:12:03: ae:c6:bd:b4:c6:41:5c:a4:2c:34:9f:c2:41:e8:86:5d:27:0e: 52:b0:fb:46:82:99:68:30:a0:87:51:a3:81:e7:61:31:0b:c0: 17:29:f3:88:7a:89:65:a9:c2:f9:d7:98:7d:07:35:16:1e:ac: 03:65:43:ed:2c:db:ab:01:97:9f:36:a4:b3:58:39:55:9d:55: f5:21:62:c2:3a:99:09:eb:08:2c:05:55:f4:51:87:33:bf:6b: 59:17:50:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIl+Vb5dze2n9qRM+yKaKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3MjBlMDdkMjhiMjYxNTgzYjZmZmIxNjQ5OGNkZTdkNDdl MzQyNWMwHhcNMjYwMjA5MTYwMDUxWhcNMjYwMjEwMTYwMDUxWjAzMTEwLwYDVQQD Eyg4N2NiMTNkMWFiNWQwOTk2OWVlNTZiMjkyODFiYTllNmExNWRjNzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgVlpQ1Zv70PiOIjtcXdrhyAGXRg honpmqC6LykB+g9kPMElI62RLaNqJ7UmBxHznajdkQ80jxD8aHa9wR/NWgz7nQRy PPWlG1GslE+q9pYMbqE6f8h/YIZ3L4RmiMpkXr8GPJj21xXuJBS/x4aXeEvIENM4 gnTGUQaPwO5WC1BdvvBfhuPdExg8+/4KcbbKiDZ/xsxzti77nOUWOapl+/of2zz6 XiWfK0gSbzmfZz3MLevZ8o6y40UXPcgoTkl/CBN+4wtg9bBvDXTwy2H01t9co2Fe l3luawTXRjPgBg37SPbvMHYu62+tVHFS4OeF9n7p6kxbVDVSUaDciLpiNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIfLE9GrXQmWnuVrKSgbqeahXceKMB8GA1UdIwQY MBaAFKcg4H0osmFYO2/7FkmM3n1H40JcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHlEZ2ZTaXlZVmc3Yl9zV1NZemVmVWZqUWx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8zNmFmNjktOWZiNC00NjIwLWFhYWIt ZGVjOTRkZTg1OGNmLzEvcHlEZ2ZTaXlZVmc3Yl9zV1NZemVmVWZqUWx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi8zNmFmNjktOWZiNC00NjIwLWFhYWItZGVjOTRkZTg1OGNm LzEvcHlEZ2ZTaXlZVmc3Yl9zV1NZemVmVWZqUWx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANzCMNGDq Vz5EMayEUE6OaaXTEQsFzJr7ExdHyHfTqWIYPANF+oj3kK9KLwmsQdJpEgT4tFyq uIZ1qDe4YcJSJmYzzvrqEXbL4Ptj3pvSXVnJd8lcsvfpk5PglO1FSYfbroKsTs9y UOnaT6LApJizgdFkfPnttvd4EnITSzH4sGwo3yo6+ltlmnsE5EwwtaQPX7gf2REu pbilIKykJvoH7BIDrsa9tMZBXKQsNJ/CQeiGXScOUrD7RoKZaDCgh1GjgedhMQvA FynziHqJZanC+deYfQc1Fh6sA2VD7SzbqwGXnzaks1g5VZ1V9SFiwjqZCesILAVV 9FGHM79rWRdQtg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:44 2026 by rpki-client