This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft File: PyixvqC1iXcj6nxfu918zSlSsFw.mft (raw, json) Hash identifier: MwIL0hXD2SGwClA7/PIe1K2OU0JObDDvhyJg87wd4r4= Subject key identifier: F9:47:EC:72:17:23:93:3B:7E:0A:3E:AE:1E:04:C1:77:46:4D:24:87 Authority key identifier: 3F:28:B1:BE:A0:B5:89:77:23:EA:7C:5F:BB:DD:7C:CD:29:52:B0:5C Certificate issuer: /CN=3f28b1bea0b5897723ea7c5fbbdd7ccd2952b05c Certificate serial: 019C41D8B5D15462A456D55A70506075A8A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PyixvqC1iXcj6nxfu918zSlSsFw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft Manifest number: 08D5 Signing time: Mon 09 Feb 2026 10:00:47 +0000 Manifest this update: Mon 09 Feb 2026 10:00:47 +0000 Manifest next update: Tue 10 Feb 2026 10:00:47 +0000 Files and hashes: 1: HFBIVRwGpzJll63ZQliW3YvEwfQ.roa (hash: PpccMH3E3902HeGqkwDft0ieaZ/z+dKhMdg631pjCEg=) 2: PyixvqC1iXcj6nxfu918zSlSsFw.crl (hash: sf9AZeSomTqANde5nw26oy3cQzQMUlpzY39m+TyHFH8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.crl rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft rsync://rpki.ripe.net/repository/DEFAULT/PyixvqC1iXcj6nxfu918zSlSsFw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:b5:d1:54:62:a4:56:d5:5a:70:50:60:75:a8:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f28b1bea0b5897723ea7c5fbbdd7ccd2952b05c Validity Not Before: Feb 9 10:00:47 2026 GMT Not After : Feb 10 10:00:47 2026 GMT Subject: CN=f947ec721723933b7e0a3eae1e04c177464d2487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1a:18:20:f9:3c:43:31:5c:e0:e1:b2:6d:6f: d5:91:35:1e:10:96:b6:bd:1c:6c:0d:3e:1d:4f:54: e6:4a:f2:09:3e:24:96:14:68:b9:3d:89:21:25:56: bd:6a:c5:3c:f8:2c:62:81:86:05:47:cc:25:11:a9: 88:88:2b:56:1c:e3:6e:6c:80:28:b7:53:8f:4c:74: de:78:d1:d5:8e:86:b3:e9:de:15:d3:2b:2a:b1:f3: 7e:20:2f:bf:91:a7:12:78:cd:0e:a8:6c:d7:d4:50: 33:18:c8:c6:0e:78:8a:81:af:46:f7:a3:47:60:33: f2:b4:a6:30:97:e1:0e:11:2c:09:b6:7e:80:c3:8e: 39:c3:29:c4:6f:48:99:9c:2a:38:2c:92:cb:4b:ca: 75:62:a9:26:68:fe:f8:86:fd:61:8b:47:41:96:c6: dc:8b:58:df:1b:76:35:4a:e0:7b:85:f9:32:e4:a1: 49:81:6b:a2:a4:77:80:2a:f0:31:49:93:32:d6:1a: 5f:22:4b:87:9c:46:7f:e1:32:2e:2c:35:53:90:a5: 13:3f:5a:e3:1a:04:62:e5:c6:72:40:83:d7:c5:eb: f3:55:6b:fc:06:96:52:f2:08:ff:e8:61:c4:eb:e5: d2:35:db:fb:08:e4:cd:aa:f4:8e:d1:79:c7:b3:49: 4f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:47:EC:72:17:23:93:3B:7E:0A:3E:AE:1E:04:C1:77:46:4D:24:87 X509v3 Authority Key Identifier: keyid:3F:28:B1:BE:A0:B5:89:77:23:EA:7C:5F:BB:DD:7C:CD:29:52:B0:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyixvqC1iXcj6nxfu918zSlSsFw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:bd:92:50:a5:2d:b0:74:07:62:28:13:35:ef:3a:ac:d8:86: 96:91:8c:44:d8:e4:fa:27:b3:f8:88:27:64:33:c0:ff:72:3b: cb:64:f9:dd:c0:7b:15:f2:b9:cf:c2:e9:b8:d9:20:ee:4d:18: 03:13:74:d2:c5:f3:35:1f:16:89:9b:4e:ba:4f:fb:74:8d:29: 6e:ee:3a:c0:22:13:57:95:84:d8:95:c6:e3:09:de:5e:0e:20: ab:3a:92:4e:56:9c:0f:74:08:c3:34:cf:64:6c:3f:bc:6c:38: 73:94:34:61:c6:af:c3:32:ec:88:27:ba:09:75:2d:48:78:e0: 1b:14:da:c2:02:b8:f1:52:84:a6:68:a5:f4:e1:88:11:ed:71: 4b:f4:5a:14:3c:65:88:4a:29:9b:ec:c8:22:28:15:21:e8:fd: e3:dd:05:b6:3d:9d:76:dd:c3:18:28:36:fe:9e:48:d8:3b:07: 2a:ef:50:6d:c1:72:6c:be:83:ca:f3:57:73:48:17:72:cf:62: 07:60:5a:28:6b:a7:8b:6e:6c:28:e3:40:4c:54:f0:d3:49:37: b2:1c:72:71:10:0b:70:9d:4d:ea:3b:a9:a5:67:64:13:9d:8f: cb:42:ff:2f:b0:a3:ae:9f:7c:17:d0:a5:52:52:ac:88:5c:5d: 74:87:5e:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2LXRVGKkVtVacFBgdaijMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmMjhiMWJlYTBiNTg5NzcyM2VhN2M1ZmJiZGQ3Y2NkMjk1 MmIwNWMwHhcNMjYwMjA5MTAwMDQ3WhcNMjYwMjEwMTAwMDQ3WjAzMTEwLwYDVQQD EyhmOTQ3ZWM3MjE3MjM5MzNiN2UwYTNlYWUxZTA0YzE3NzQ2NGQyNDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxoYIPk8QzFc4OGybW/VkTUeEJa2 vRxsDT4dT1TmSvIJPiSWFGi5PYkhJVa9asU8+CxigYYFR8wlEamIiCtWHONubIAo t1OPTHTeeNHVjoaz6d4V0ysqsfN+IC+/kacSeM0OqGzX1FAzGMjGDniKga9G96NH YDPytKYwl+EOESwJtn6Aw445wynEb0iZnCo4LJLLS8p1YqkmaP74hv1hi0dBlsbc i1jfG3Y1SuB7hfky5KFJgWuipHeAKvAxSZMy1hpfIkuHnEZ/4TIuLDVTkKUTP1rj GgRi5cZyQIPXxevzVWv8BpZS8gj/6GHE6+XSNdv7COTNqvSO0XnHs0lPvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPlH7HIXI5M7fgo+rh4EwXdGTSSHMB8GA1UdIwQY MBaAFD8osb6gtYl3I+p8X7vdfM0pUrBcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHlpeHZxQzFpWGNqNm54ZnU5MTh6U2xTc0Z3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9kODhiNDYtNmVmOS00NjI0LTg5ODQt YmZhNmQzNDA3ODdhLzEvUHlpeHZxQzFpWGNqNm54ZnU5MTh6U2xTc0Z3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9kODhiNDYtNmVmOS00NjI0LTg5ODQtYmZhNmQzNDA3ODdh LzEvUHlpeHZxQzFpWGNqNm54ZnU5MTh6U2xTc0Z3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnr2SUKUt sHQHYigTNe86rNiGlpGMRNjk+iez+IgnZDPA/3I7y2T53cB7FfK5z8LpuNkg7k0Y AxN00sXzNR8WiZtOuk/7dI0pbu46wCITV5WE2JXG4wneXg4gqzqSTlacD3QIwzTP ZGw/vGw4c5Q0YcavwzLsiCe6CXUtSHjgGxTawgK48VKEpmil9OGIEe1xS/RaFDxl iEopm+zIIigVIej9490Ftj2ddt3DGCg2/p5I2DsHKu9QbcFybL6DyvNXc0gXcs9i B2BaKGuni25sKONATFTw00k3shxycRALcJ1N6juppWdkE52Py0L/L7Cjrp98F9Cl UlKsiFxddIde6Q== -----END CERTIFICATE-----Generated at Mon Feb 9 19:49:19 2026 by rpki-client