This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft File: PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft (raw, json) Hash identifier: LOoPvfw8mDIGlxLnhVVNGN6wqjJc4C6vitUWcm9RCAM= Subject key identifier: EA:22:B4:D4:33:58:12:B1:3C:EC:62:7D:53:ED:17:A3:D7:BE:16:E9 Authority key identifier: 3D:16:07:2C:A0:25:2F:AB:50:65:8D:73:6F:F2:C6:0C:16:29:DC:76 Certificate issuer: /CN=3d16072ca0252fab50658d736ff2c60c1629dc76 Certificate serial: 019C438FE95BBFB67618837C76FE095E7EC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft Manifest number: 10D7 Signing time: Mon 09 Feb 2026 18:00:30 +0000 Manifest this update: Mon 09 Feb 2026 18:00:30 +0000 Manifest next update: Tue 10 Feb 2026 18:00:30 +0000 Files and hashes: 1: PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl (hash: ZAQJwJhG+wWqmtvelqgg8AcSIe+T8P6lGjGMo93Y0qA=) 2: wumUMMWvHiUrTabZLhTSravhO6c.roa (hash: p2VcOKl2dOd/4+FLAlcMShjCSyG2pmnKtd0Km8VqtxA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:e9:5b:bf:b6:76:18:83:7c:76:fe:09:5e:7e:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d16072ca0252fab50658d736ff2c60c1629dc76 Validity Not Before: Feb 9 18:00:30 2026 GMT Not After : Feb 10 18:00:30 2026 GMT Subject: CN=ea22b4d4335812b13cec627d53ed17a3d7be16e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:13:0c:5b:84:39:40:9d:c2:8c:7b:f8:5f:7d: de:b0:c3:05:43:fd:cf:1e:56:98:45:d2:6c:66:5a: ed:58:4c:0d:dc:e4:e0:f9:47:b5:5e:f0:05:41:16: 0b:f3:f8:98:9b:a6:1b:16:32:29:2e:70:3c:39:9a: 81:12:9d:ea:e5:c8:cd:22:c3:9b:60:a0:6d:36:d0: 3b:3d:b7:e6:d5:1a:3a:6c:42:66:97:c5:96:72:d4: bd:1d:10:71:f6:0b:d2:8b:7c:89:f2:e7:f9:3b:40: e7:9a:79:1b:f4:da:8a:75:2d:bb:be:9e:3f:54:9a: db:87:3b:e1:21:5a:5b:5f:cd:00:40:f9:6f:79:96: 8c:fa:5a:90:3a:5d:72:3f:55:93:7d:5c:a6:6c:cf: 00:d0:f9:1b:b7:04:99:4e:ce:c0:c6:d4:6b:6e:13: 60:61:b4:cd:83:c7:d3:4a:ec:41:49:50:6f:8e:75: 0b:83:5f:e9:23:7c:8d:88:51:52:ec:b0:bf:d1:e9: 1e:8a:36:f4:0f:4a:98:d0:24:18:f3:cd:47:9d:df: 17:ec:a2:38:7b:54:d0:c4:48:2d:d3:3a:9b:f8:2a: f2:b0:81:c5:3a:47:cf:40:b5:05:cc:c9:1d:8c:af: d8:f4:47:d9:45:16:b0:80:cb:72:07:8f:9a:ee:63: d4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:22:B4:D4:33:58:12:B1:3C:EC:62:7D:53:ED:17:A3:D7:BE:16:E9 X509v3 Authority Key Identifier: keyid:3D:16:07:2C:A0:25:2F:AB:50:65:8D:73:6F:F2:C6:0C:16:29:DC:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:59:7a:5a:2b:21:29:c5:bf:d2:7a:4b:ce:b0:24:65:d2:69: 42:f2:9a:d7:26:86:99:6a:1f:f3:b8:38:2b:92:25:75:15:b1: bd:e6:1f:61:c7:d7:89:78:df:1c:70:ad:ae:58:b9:cf:5d:6f: 95:e3:35:2c:55:cc:44:d2:2c:a4:2f:1d:1c:dd:dc:fa:40:b9: d8:3f:02:59:6b:b3:b5:89:21:60:17:22:46:16:85:5e:b0:9f: 29:ca:59:26:e4:d9:1c:e0:e8:09:08:93:8f:7f:74:48:7c:48: 68:e9:7b:4e:20:4d:c6:83:d2:89:8f:9e:d2:33:00:ac:10:53: 7c:b5:81:bc:8e:14:b1:cc:5e:82:33:89:7d:08:fa:53:71:e2: 6d:4f:f6:3e:4a:71:eb:54:28:ae:15:2f:54:2b:71:31:28:bd: 07:4a:bb:1d:b6:3e:01:5e:1e:96:ad:da:62:0c:84:e5:c1:fc: f1:c6:be:1f:6a:b1:c4:96:5a:71:10:65:f0:87:48:33:21:f5: 4e:22:13:f5:de:ad:9b:2e:0a:be:3d:a0:be:f8:1a:b5:d7:fd: b1:ba:f6:55:c2:3e:69:05:62:4e:60:26:89:0b:29:b8:3d:5a: 1b:fb:2c:ac:b4:73:79:44:d4:4a:e6:9d:b9:93:c2:55:a5:03: 9a:42:c9:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj+lbv7Z2GIN8dv4JXn7EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkMTYwNzJjYTAyNTJmYWI1MDY1OGQ3MzZmZjJjNjBjMTYy OWRjNzYwHhcNMjYwMjA5MTgwMDMwWhcNMjYwMjEwMTgwMDMwWjAzMTEwLwYDVQQD EyhlYTIyYjRkNDMzNTgxMmIxM2NlYzYyN2Q1M2VkMTdhM2Q3YmUxNmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBMMW4Q5QJ3CjHv4X33esMMFQ/3P HlaYRdJsZlrtWEwN3OTg+Ue1XvAFQRYL8/iYm6YbFjIpLnA8OZqBEp3q5cjNIsOb YKBtNtA7Pbfm1Ro6bEJml8WWctS9HRBx9gvSi3yJ8uf5O0Dnmnkb9NqKdS27vp4/ VJrbhzvhIVpbX80AQPlveZaM+lqQOl1yP1WTfVymbM8A0PkbtwSZTs7AxtRrbhNg YbTNg8fTSuxBSVBvjnULg1/pI3yNiFFS7LC/0ekeijb0D0qY0CQY881Hnd8X7KI4 e1TQxEgt0zqb+CrysIHFOkfPQLUFzMkdjK/Y9EfZRRawgMtyB4+a7mPUZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOoitNQzWBKxPOxifVPtF6PXvhbpMB8GA1UdIwQY MBaAFD0WByygJS+rUGWNc2/yxgwWKdx2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFJZSExLQWxMNnRRWlkxemJfTEdEQllwM0hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8yZmJmMmMtNTQyZi00Yzk4LTk5ZGIt YTRlNWRlOGVlNzE2LzEvUFJZSExLQWxMNnRRWlkxemJfTEdEQllwM0hZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8yZmJmMmMtNTQyZi00Yzk4LTk5ZGItYTRlNWRlOGVlNzE2 LzEvUFJZSExLQWxMNnRRWlkxemJfTEdEQllwM0hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPFl6Wish KcW/0npLzrAkZdJpQvKa1yaGmWof87g4K5IldRWxveYfYcfXiXjfHHCtrli5z11v leM1LFXMRNIspC8dHN3c+kC52D8CWWuztYkhYBciRhaFXrCfKcpZJuTZHODoCQiT j390SHxIaOl7TiBNxoPSiY+e0jMArBBTfLWBvI4UscxegjOJfQj6U3HibU/2Pkpx 61QorhUvVCtxMSi9B0q7HbY+AV4elq3aYgyE5cH88ca+H2qxxJZacRBl8IdIMyH1 TiIT9d6tmy4Kvj2gvvgatdf9sbr2VcI+aQViTmAmiQspuD1aG/ssrLRzeUTUSuad uZPCVaUDmkLJyg== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:18 2026 by rpki-client