This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.mft File: pHwKyKnV9ixJHUsXyyErUsDnVgc.mft (raw, json) Hash identifier: fpj648Peea9u7ruydvZXxtnrP/rlDdtZWenpEYKP3Qo= Subject key identifier: E3:70:DA:EF:94:FA:68:04:2F:31:F3:A6:02:94:B6:05:A3:EB:62:57 Authority key identifier: A4:7C:0A:C8:A9:D5:F6:2C:49:1D:4B:17:CB:21:2B:52:C0:E7:56:07 Certificate issuer: /CN=a47c0ac8a9d5f62c491d4b17cb212b52c0e75607 Certificate serial: 019C420F7D1A428DB6D1A6B0A3E40ADEF788 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pHwKyKnV9ixJHUsXyyErUsDnVgc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.mft Manifest number: 1453 Signing time: Mon 09 Feb 2026 11:00:37 +0000 Manifest this update: Mon 09 Feb 2026 11:00:37 +0000 Manifest next update: Tue 10 Feb 2026 11:00:37 +0000 Files and hashes: 1: mSRNwBt4HyvxOKDrOMFnswIgda4.roa (hash: 7d61GNgLmLVgIgZ3h9dpanvVUYVfZYRsvyeUkivWWd4=) 2: pHwKyKnV9ixJHUsXyyErUsDnVgc.crl (hash: a4pA3zwdpNhN2YEPHPTCq3xNwmMDKeNmHQkbTzdRqig=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.crl rsync://rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.mft rsync://rpki.ripe.net/repository/DEFAULT/pHwKyKnV9ixJHUsXyyErUsDnVgc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:7d:1a:42:8d:b6:d1:a6:b0:a3:e4:0a:de:f7:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a47c0ac8a9d5f62c491d4b17cb212b52c0e75607 Validity Not Before: Feb 9 11:00:37 2026 GMT Not After : Feb 10 11:00:37 2026 GMT Subject: CN=e370daef94fa68042f31f3a60294b605a3eb6257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c4:b0:b3:52:13:e1:37:84:05:54:d3:77:56: 4e:58:cc:ca:bb:56:25:a6:39:f6:4a:d4:0a:95:12: 58:50:c3:84:f0:25:04:f4:a5:a9:3a:bd:51:ab:cf: cd:6e:9d:89:6d:b8:f9:3b:53:8b:2e:0b:41:49:e2: 81:e7:ef:9f:b6:99:27:17:78:ec:3a:dd:bd:15:b8: ad:60:ad:6d:da:60:c7:60:88:8b:08:80:f1:d6:00: f1:66:a9:ca:84:b3:20:25:8e:23:20:d3:68:8c:ec: 5f:fe:c3:4a:3b:1b:00:ad:ca:aa:5b:e8:4c:41:ec: a4:cc:14:60:46:6d:0a:25:34:9a:1c:9f:76:c8:af: 5f:a5:05:54:9e:fc:ec:e1:5c:6e:d5:e7:da:68:f8: d8:71:61:af:c8:ad:eb:8d:db:b2:78:59:18:0e:f2: 04:5c:f1:9a:80:b1:d4:94:fc:f5:ca:da:bb:05:56: 23:02:53:1d:b1:df:95:40:65:62:78:fe:3f:6a:c1: 28:13:43:13:34:5f:b7:82:fa:6f:64:6a:86:7e:3c: 8a:81:f1:fc:67:9d:5a:b9:3d:3c:da:0b:db:80:9e: 28:f9:5f:bb:ae:ac:5a:bb:c6:94:38:df:f8:c8:0c: b3:44:45:b6:9a:e4:56:90:2e:f0:96:6d:d6:d1:be: 1f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:70:DA:EF:94:FA:68:04:2F:31:F3:A6:02:94:B6:05:A3:EB:62:57 X509v3 Authority Key Identifier: keyid:A4:7C:0A:C8:A9:D5:F6:2C:49:1D:4B:17:CB:21:2B:52:C0:E7:56:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pHwKyKnV9ixJHUsXyyErUsDnVgc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:bb:88:e0:55:98:51:ac:e3:48:f0:d9:22:bd:25:ee:2b:83: c2:47:c0:9b:4d:64:16:a2:96:5e:de:69:8a:3b:c9:6b:c9:22: 0a:df:04:a4:02:14:28:73:3f:88:a7:0e:13:29:7f:80:04:01: 4a:1a:a9:34:cb:87:ee:d7:dc:b5:6f:1b:d5:2b:89:56:ab:4d: f2:b9:0d:84:7d:ef:a4:18:ca:77:07:dd:4f:40:67:37:24:6e: c2:b4:5e:39:0b:41:7c:7b:64:2b:3b:f9:df:48:f8:de:3e:5d: 49:2a:17:36:63:17:77:89:b7:b0:3d:b9:58:d1:90:cd:9e:0f: 13:7c:9b:c2:24:85:94:67:1e:ec:18:7c:ec:a2:8d:67:cf:51: bd:25:c5:f9:87:a5:cb:cf:bf:11:66:12:86:1b:c8:1f:be:27: 0f:b7:5c:56:a3:b5:c8:d3:4d:4c:42:89:21:ee:a2:d3:41:ec: 2d:00:e3:b6:86:4e:2c:41:d3:36:44:94:c8:9b:a2:2f:a8:65: 6a:ca:76:b7:20:c0:d7:c9:61:c8:4f:31:5a:72:c4:19:35:f1: 32:8c:c9:3b:71:d6:62:2a:92:b7:1d:89:60:2c:b0:d5:80:d8: f0:a4:f7:ad:67:a4:f0:be:b8:26:d6:7c:ed:77:0c:5a:2e:11: 22:10:11:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD30aQo220aawo+QK3veIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0N2MwYWM4YTlkNWY2MmM0OTFkNGIxN2NiMjEyYjUyYzBl NzU2MDcwHhcNMjYwMjA5MTEwMDM3WhcNMjYwMjEwMTEwMDM3WjAzMTEwLwYDVQQD EyhlMzcwZGFlZjk0ZmE2ODA0MmYzMWYzYTYwMjk0YjYwNWEzZWI2MjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsSws1IT4TeEBVTTd1ZOWMzKu1Yl pjn2StQKlRJYUMOE8CUE9KWpOr1Rq8/Nbp2Jbbj5O1OLLgtBSeKB5++ftpknF3js Ot29FbitYK1t2mDHYIiLCIDx1gDxZqnKhLMgJY4jINNojOxf/sNKOxsArcqqW+hM QeykzBRgRm0KJTSaHJ92yK9fpQVUnvzs4Vxu1efaaPjYcWGvyK3rjduyeFkYDvIE XPGagLHUlPz1ytq7BVYjAlMdsd+VQGVieP4/asEoE0MTNF+3gvpvZGqGfjyKgfH8 Z51auT082gvbgJ4o+V+7rqxau8aUON/4yAyzREW2muRWkC7wlm3W0b4fiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFONw2u+U+mgELzHzpgKUtgWj62JXMB8GA1UdIwQY MBaAFKR8Csip1fYsSR1LF8shK1LA51YHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEh3S3lLblY5aXhKSFVzWHl5RXJVc0RuVmdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8yNWM5MWQtNWEwNS00NmEyLTlhNzkt NDIwY2MyNTFlNWViLzEvcEh3S3lLblY5aXhKSFVzWHl5RXJVc0RuVmdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8yNWM5MWQtNWEwNS00NmEyLTlhNzktNDIwY2MyNTFlNWVi LzEvcEh3S3lLblY5aXhKSFVzWHl5RXJVc0RuVmdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh7uI4FWY UazjSPDZIr0l7iuDwkfAm01kFqKWXt5pijvJa8kiCt8EpAIUKHM/iKcOEyl/gAQB ShqpNMuH7tfctW8b1SuJVqtN8rkNhH3vpBjKdwfdT0BnNyRuwrReOQtBfHtkKzv5 30j43j5dSSoXNmMXd4m3sD25WNGQzZ4PE3ybwiSFlGce7Bh87KKNZ89RvSXF+Yel y8+/EWYShhvIH74nD7dcVqO1yNNNTEKJIe6i00HsLQDjtoZOLEHTNkSUyJuiL6hl asp2tyDA18lhyE8xWnLEGTXxMozJO3HWYiqStx2JYCyw1YDY8KT3rWek8L64JtZ8 7XcMWi4RIhARCg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:53 2026 by rpki-client