This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft File: pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft (raw, json) Hash identifier: E2LIEfZtzXM5vcn/rfQhX/PFtKEW+0Fy8LKgFBzEzg0= Subject key identifier: 7B:D9:43:87:F8:93:41:03:10:E8:2D:C4:CB:54:57:6C:A7:88:17:6D Authority key identifier: A5:03:B1:DD:41:00:70:AD:62:E4:A2:FC:66:A1:3B:4E:B6:13:68:F4 Certificate issuer: /CN=a503b1dd410070ad62e4a2fc66a13b4eb61368f4 Certificate serial: 019C4322B03B0FF99CB76274FC1FAEA42CE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft Manifest number: 0CC3 Signing time: Mon 09 Feb 2026 16:01:12 +0000 Manifest this update: Mon 09 Feb 2026 16:01:12 +0000 Manifest next update: Tue 10 Feb 2026 16:01:12 +0000 Files and hashes: 1: ZRxGcXvKI-87TaBioLr7loAqnqU.roa (hash: fDFlR6aMmLPDNdY7x4FSn6o3uvA+KJ98lgCNqqUl5I8=) 2: pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.crl (hash: tJub3erBsPG3lU/fMPOFUH4Wj9kkYxlQvZKWBu1YqHg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:b0:3b:0f:f9:9c:b7:62:74:fc:1f:ae:a4:2c:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a503b1dd410070ad62e4a2fc66a13b4eb61368f4 Validity Not Before: Feb 9 16:01:12 2026 GMT Not After : Feb 10 16:01:12 2026 GMT Subject: CN=7bd94387f893410310e82dc4cb54576ca788176d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c5:ad:1c:5a:68:95:f8:3f:55:ad:9c:a1:1f: a1:32:20:7a:26:e6:ad:44:71:9e:7a:04:34:73:f1: 7a:b3:71:e8:07:c0:33:f9:7f:c4:64:0a:38:84:35: be:fd:6a:4f:5d:c6:e3:bb:af:da:bb:dd:32:22:41: b9:a7:12:66:03:31:d4:55:9f:54:2c:6b:70:35:3d: a5:07:05:b4:2f:91:72:7a:de:07:41:d8:76:d9:07: 6b:18:60:f2:13:c5:cb:05:f3:f3:d5:5a:d8:b3:e0: 22:d6:8c:f7:3b:40:ff:8c:07:15:fd:28:8a:da:9f: fe:9f:c9:40:66:56:0b:5e:19:e3:b3:ea:10:5f:52: f4:05:71:69:b8:30:49:21:01:bb:39:6a:b8:db:bf: 37:c5:06:95:28:09:ed:fd:24:7b:cf:c9:6a:90:fd: 82:86:cd:3c:d5:83:a4:a4:45:b3:77:36:74:d5:a0: f6:16:c2:f5:56:52:19:3c:82:c2:0a:d6:a6:be:e5: 0c:28:7c:43:e7:fc:d4:49:b3:5d:0e:8d:36:d9:d2: 5e:1f:1b:11:c3:e2:0b:a4:c7:3e:6d:71:9f:fe:61: be:51:3a:d9:2b:a3:f9:f6:00:ab:73:7b:60:fe:d5: b1:d1:fe:59:20:9f:cb:8c:18:8b:67:d0:15:5e:f4: b5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D9:43:87:F8:93:41:03:10:E8:2D:C4:CB:54:57:6C:A7:88:17:6D X509v3 Authority Key Identifier: keyid:A5:03:B1:DD:41:00:70:AD:62:E4:A2:FC:66:A1:3B:4E:B6:13:68:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:7e:47:f1:ce:01:e6:75:67:88:65:f3:b5:9f:5d:49:44:96: bf:58:71:5c:cf:28:84:2e:bb:a1:13:fb:7b:f4:f0:79:cb:aa: ce:5a:cc:51:b4:dc:e6:08:44:78:a9:9f:f7:ec:35:19:57:88: 25:1d:ca:c5:f8:d3:dd:b7:6f:6d:de:cb:5f:7f:70:66:56:72: e1:f3:0f:6a:b7:90:80:98:e5:75:f3:ab:7f:b2:48:13:c4:a8: d7:9b:47:a0:14:fa:d3:f0:12:81:4c:c0:5b:45:b9:33:03:27: 58:6b:39:4a:ca:46:93:d1:01:06:4e:06:34:19:3f:ed:b1:f8: 89:2f:a1:aa:e6:77:83:f8:90:0f:16:10:36:2b:24:2a:6b:a2: 70:a8:d2:9c:94:a2:51:41:5a:ea:ad:9b:c8:47:c5:29:9f:73: ee:26:58:27:af:ae:81:70:40:61:75:62:5f:94:96:7c:f0:07: 71:e4:6f:2f:28:89:86:6e:d7:85:70:fd:40:20:72:38:72:ef: d4:84:c6:b6:c9:1e:5e:27:de:2c:62:d3:4b:83:3c:bb:96:66: 41:78:0a:28:47:ad:d4:f8:2e:87:4a:98:5f:0e:d7:e5:e8:90: ba:1f:5f:c3:c7:3a:8c:88:ae:47:40:31:38:6f:8b:73:60:af: d1:ca:2e:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIrA7D/mct2J0/B+upCzpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1MDNiMWRkNDEwMDcwYWQ2MmU0YTJmYzY2YTEzYjRlYjYx MzY4ZjQwHhcNMjYwMjA5MTYwMTEyWhcNMjYwMjEwMTYwMTEyWjAzMTEwLwYDVQQD Eyg3YmQ5NDM4N2Y4OTM0MTAzMTBlODJkYzRjYjU0NTc2Y2E3ODgxNzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcWtHFpolfg/Va2coR+hMiB6Juat RHGeegQ0c/F6s3HoB8Az+X/EZAo4hDW+/WpPXcbju6/au90yIkG5pxJmAzHUVZ9U LGtwNT2lBwW0L5Fyet4HQdh22QdrGGDyE8XLBfPz1VrYs+Ai1oz3O0D/jAcV/SiK 2p/+n8lAZlYLXhnjs+oQX1L0BXFpuDBJIQG7OWq42783xQaVKAnt/SR7z8lqkP2C hs081YOkpEWzdzZ01aD2FsL1VlIZPILCCtamvuUMKHxD5/zUSbNdDo022dJeHxsR w+ILpMc+bXGf/mG+UTrZK6P59gCrc3tg/tWx0f5ZIJ/LjBiLZ9AVXvS1+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHvZQ4f4k0EDEOgtxMtUV2yniBdtMB8GA1UdIwQY MBaAFKUDsd1BAHCtYuSi/GahO062E2j0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFFPeDNVRUFjSzFpNUtMOFpxRTdUcllUYVBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mZmVmOTYtYmFjNS00MTI2LWIyYjct MDEzNWQ5MTI4ZTg2LzEvcFFPeDNVRUFjSzFpNUtMOFpxRTdUcllUYVBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mZmVmOTYtYmFjNS00MTI2LWIyYjctMDEzNWQ5MTI4ZTg2 LzEvcFFPeDNVRUFjSzFpNUtMOFpxRTdUcllUYVBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkn5H8c4B 5nVniGXztZ9dSUSWv1hxXM8ohC67oRP7e/TwecuqzlrMUbTc5ghEeKmf9+w1GVeI JR3KxfjT3bdvbd7LX39wZlZy4fMPareQgJjldfOrf7JIE8So15tHoBT60/ASgUzA W0W5MwMnWGs5SspGk9EBBk4GNBk/7bH4iS+hquZ3g/iQDxYQNiskKmuicKjSnJSi UUFa6q2byEfFKZ9z7iZYJ6+ugXBAYXViX5SWfPAHceRvLyiJhm7XhXD9QCByOHLv 1ITGtskeXifeLGLTS4M8u5ZmQXgKKEet1Pguh0qYXw7X5eiQuh9fw8c6jIiuR0Ax OG+Lc2Cv0cougw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:54 2026 by rpki-client