This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft File: P1umH85V_19gjjr27FYLN67CNf8.mft (raw, json) Hash identifier: NXntxWAqKJcht0OKWsgAa/G4/i6oeszzezAOVeOlVik= Subject key identifier: D5:28:2C:23:A8:EC:04:2B:7A:5A:90:1F:02:93:F6:85:50:5C:C4:32 Authority key identifier: 3F:5B:A6:1F:CE:55:FF:5F:60:8E:3A:F6:EC:56:0B:37:AE:C2:35:FF Certificate issuer: /CN=3f5ba61fce55ff5f608e3af6ec560b37aec235ff Certificate serial: 019C420FF83CDDA0E950510ABC13CE9292DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1umH85V_19gjjr27FYLN67CNf8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft Manifest number: 0665 Signing time: Mon 09 Feb 2026 11:01:08 +0000 Manifest this update: Mon 09 Feb 2026 11:01:08 +0000 Manifest next update: Tue 10 Feb 2026 11:01:08 +0000 Files and hashes: 1: P1umH85V_19gjjr27FYLN67CNf8.crl (hash: QVJ4FEUb8B2GUSqMS/sqZ9FdG/EGvmJrf6DT4MrbPGc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft rsync://rpki.ripe.net/repository/DEFAULT/P1umH85V_19gjjr27FYLN67CNf8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:f8:3c:dd:a0:e9:50:51:0a:bc:13:ce:92:92:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f5ba61fce55ff5f608e3af6ec560b37aec235ff Validity Not Before: Feb 9 11:01:08 2026 GMT Not After : Feb 10 11:01:08 2026 GMT Subject: CN=d5282c23a8ec042b7a5a901f0293f685505cc432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:53:18:dd:03:e8:2d:d8:66:df:94:dc:81:80: 26:a8:4b:2a:d2:d1:c9:c5:2c:4e:23:92:95:5e:b3: 14:c6:f0:b3:d6:f0:78:32:dc:c8:58:1f:76:e0:79: 28:a7:e1:6a:50:8d:1c:d7:55:bf:b4:bc:5f:8a:18: d4:67:c1:e4:30:ae:72:a4:dc:20:02:79:c3:25:7c: 0a:15:55:df:69:16:11:76:31:a8:26:c4:73:98:7c: 7f:40:55:e5:ae:b5:86:95:89:7d:b6:dd:23:e5:9f: 78:ef:94:c7:40:ce:d7:ab:2d:bc:cb:b6:dc:ba:5f: 2d:20:da:30:ce:50:f3:5a:6b:f6:78:77:51:38:f6: c5:4f:21:e1:33:56:8a:eb:3a:33:3a:57:8f:60:73: 99:49:79:79:d8:1a:a4:bf:a0:20:0e:3d:f2:56:40: a9:3b:3b:35:cf:89:b5:64:ba:cf:bf:4a:28:89:a3: 19:d4:6b:14:69:48:e7:d6:af:a2:e7:b5:53:a2:69: 00:cd:b8:53:76:38:5d:5c:15:9c:5b:2a:09:60:54: f4:53:74:70:61:73:37:a6:f9:ae:95:bb:e4:31:6f: 1f:47:31:08:fe:48:df:6d:be:a9:76:e7:81:5e:58: d0:25:42:a3:60:2b:71:96:4f:83:46:aa:c5:aa:93: 91:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:28:2C:23:A8:EC:04:2B:7A:5A:90:1F:02:93:F6:85:50:5C:C4:32 X509v3 Authority Key Identifier: keyid:3F:5B:A6:1F:CE:55:FF:5F:60:8E:3A:F6:EC:56:0B:37:AE:C2:35:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1umH85V_19gjjr27FYLN67CNf8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:0c:9b:00:46:8d:69:e0:28:17:80:3a:14:44:7e:4a:74:aa: 3e:b3:d4:9a:4f:ad:51:3d:73:11:72:20:b5:8d:65:0c:ba:40: b7:7d:0e:f1:ee:15:e0:3a:50:d6:66:94:45:63:8c:c7:d9:6d: 98:5b:67:ef:a9:fd:74:82:16:4b:da:3d:38:f1:46:70:d1:5e: 68:a2:89:40:45:2e:78:ae:ea:83:a6:36:ee:5e:e9:17:16:1a: f5:0e:96:50:db:a5:af:55:84:64:bc:e5:db:d9:43:8b:5f:05: 65:84:f8:b2:85:05:0c:6e:ff:e9:7d:17:51:05:67:4a:20:ac: 07:a5:08:1c:53:83:8f:95:45:ee:43:ad:24:0f:01:07:87:b1: 6c:b2:a6:b9:3b:f4:81:9a:ec:ef:ec:1a:55:1a:97:f2:b6:0e: 17:d8:cb:f6:39:23:f0:06:06:be:f2:4d:44:72:c8:68:51:f3: f9:5d:78:0f:bc:a7:6f:49:23:e5:3b:34:00:96:25:a3:80:2a: d7:35:5c:fb:84:26:3e:03:dc:4a:5e:2b:b8:50:df:b3:fc:a2: 91:09:d2:4b:9b:03:95:70:0b:56:6b:e0:b9:24:eb:21:99:67: 1a:ec:02:81:6d:14:4d:cc:25:f1:30:f3:d5:fc:29:8c:e1:09: 88:33:e6:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD/g83aDpUFEKvBPOkpLdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmNWJhNjFmY2U1NWZmNWY2MDhlM2FmNmVjNTYwYjM3YWVj MjM1ZmYwHhcNMjYwMjA5MTEwMTA4WhcNMjYwMjEwMTEwMTA4WjAzMTEwLwYDVQQD EyhkNTI4MmMyM2E4ZWMwNDJiN2E1YTkwMWYwMjkzZjY4NTUwNWNjNDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFMY3QPoLdhm35TcgYAmqEsq0tHJ xSxOI5KVXrMUxvCz1vB4MtzIWB924Hkop+FqUI0c11W/tLxfihjUZ8HkMK5ypNwg AnnDJXwKFVXfaRYRdjGoJsRzmHx/QFXlrrWGlYl9tt0j5Z9475THQM7Xqy28y7bc ul8tINowzlDzWmv2eHdROPbFTyHhM1aK6zozOlePYHOZSXl52Bqkv6AgDj3yVkCp Ozs1z4m1ZLrPv0ooiaMZ1GsUaUjn1q+i57VTomkAzbhTdjhdXBWcWyoJYFT0U3Rw YXM3pvmulbvkMW8fRzEI/kjfbb6pdueBXljQJUKjYCtxlk+DRqrFqpOR8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNUoLCOo7AQrelqQHwKT9oVQXMQyMB8GA1UdIwQY MBaAFD9bph/OVf9fYI469uxWCzeuwjX/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDF1bUg4NVZfMTlnampyMjdGWUxONjdDTmY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9hZGM0ZWUtYmIxMC00YzE1LTk0NTct M2JkYjBlYzE0ODAwLzEvUDF1bUg4NVZfMTlnampyMjdGWUxONjdDTmY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9hZGM0ZWUtYmIxMC00YzE1LTk0NTctM2JkYjBlYzE0ODAw LzEvUDF1bUg4NVZfMTlnampyMjdGWUxONjdDTmY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdgybAEaN aeAoF4A6FER+SnSqPrPUmk+tUT1zEXIgtY1lDLpAt30O8e4V4DpQ1maURWOMx9lt mFtn76n9dIIWS9o9OPFGcNFeaKKJQEUueK7qg6Y27l7pFxYa9Q6WUNulr1WEZLzl 29lDi18FZYT4soUFDG7/6X0XUQVnSiCsB6UIHFODj5VF7kOtJA8BB4exbLKmuTv0 gZrs7+waVRqX8rYOF9jL9jkj8AYGvvJNRHLIaFHz+V14D7ynb0kj5Ts0AJYlo4Aq 1zVc+4QmPgPcSl4ruFDfs/yikQnSS5sDlXALVmvguSTrIZlnGuwCgW0UTcwl8TDz 1fwpjOEJiDPmdw== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:10 2026 by rpki-client