This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft File: PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft (raw, json) Hash identifier: NroR5w6K73eS4/O8zXxLCvDIC8eOjJS51UcgVu3JPYc= Subject key identifier: E4:C6:DA:DE:D9:D0:7C:30:D7:93:31:A0:09:44:91:CA:6B:4C:EB:11 Authority key identifier: 3D:85:00:BC:DE:49:68:99:C5:D1:FA:92:4D:E4:E7:82:7D:99:16:CE Certificate issuer: /CN=3d8500bcde496899c5d1fa924de4e7827d9916ce Certificate serial: 019C42EBAEB19BE5FA535C01CD54D984D374 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYUAvN5JaJnF0fqSTeTngn2ZFs4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft Manifest number: 0FAA Signing time: Mon 09 Feb 2026 15:01:07 +0000 Manifest this update: Mon 09 Feb 2026 15:01:07 +0000 Manifest next update: Tue 10 Feb 2026 15:01:07 +0000 Files and hashes: 1: PYUAvN5JaJnF0fqSTeTngn2ZFs4.crl (hash: wU7NkhHTmUYJt1J1KRa2RFF3QxDNhbiaxvOtJIa74FY=) 2: RkAA10vCg6MkKKDZVdqR-tBX7bM.roa (hash: 3GXYAmGoE5ebf+ZEUr6uNtnsEAbhBs1D4PtYm72f7Lc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.crl rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft rsync://rpki.ripe.net/repository/DEFAULT/PYUAvN5JaJnF0fqSTeTngn2ZFs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:ae:b1:9b:e5:fa:53:5c:01:cd:54:d9:84:d3:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d8500bcde496899c5d1fa924de4e7827d9916ce Validity Not Before: Feb 9 15:01:07 2026 GMT Not After : Feb 10 15:01:07 2026 GMT Subject: CN=e4c6daded9d07c30d79331a0094491ca6b4ceb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:99:6a:3c:e3:ab:00:da:0b:ca:50:25:ed:25: 21:9b:23:99:2d:83:9b:db:3c:1e:84:e8:b6:c2:33: 3c:12:49:15:c1:45:1a:e8:d8:51:a8:a8:c7:ba:61: 01:b8:f1:e3:cf:5f:60:59:01:de:3c:0b:f8:1a:de: bb:0b:5f:c9:c7:1e:6d:03:5a:3b:fc:0c:af:f6:7e: a5:90:4b:b3:42:93:ba:e6:1b:19:3c:a9:03:5d:05: d9:18:00:2d:f4:92:ee:fe:d8:a9:37:86:f6:3b:69: 04:e2:d4:51:60:54:5e:2c:a7:d2:70:80:ab:a0:25: 1d:af:c8:75:95:df:8f:d6:8e:d2:6a:fb:10:4e:aa: 70:3f:45:22:0f:40:36:5e:c6:e3:cd:88:7f:fb:78: db:24:10:2e:50:14:0c:f5:17:ea:4e:c8:8c:8b:72: 64:08:d4:5d:15:71:5d:aa:dc:c6:9c:5c:32:e5:4d: 81:66:68:2c:f5:c3:16:8d:dd:22:9e:c7:11:82:29: 72:dc:27:f8:5a:66:4c:cc:6e:79:d8:a2:f8:f6:d5: 1a:9c:12:51:25:07:f6:45:7b:c5:eb:13:b7:68:15: b3:6f:9a:da:c8:97:7a:c4:87:51:e6:54:1d:3c:fc: 8a:6c:73:5a:e1:64:23:4b:42:8d:31:52:95:62:29: 06:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:C6:DA:DE:D9:D0:7C:30:D7:93:31:A0:09:44:91:CA:6B:4C:EB:11 X509v3 Authority Key Identifier: keyid:3D:85:00:BC:DE:49:68:99:C5:D1:FA:92:4D:E4:E7:82:7D:99:16:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYUAvN5JaJnF0fqSTeTngn2ZFs4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:6b:92:10:1e:7a:8c:59:92:47:da:73:44:4f:81:d5:a4:e9: 04:be:60:b3:03:7f:14:93:45:60:d6:7e:68:bb:0a:c2:46:b2: bc:8b:f1:6c:bb:a6:7b:ac:9a:c1:ae:af:48:47:af:8c:2a:8a: 06:c4:0f:f9:a1:7b:28:79:26:e1:66:d6:01:12:3b:37:b8:ec: 11:57:f0:08:ef:5b:b5:a0:89:b6:b5:48:e6:92:9f:1f:df:64: 7e:02:71:09:69:e4:5c:eb:ca:46:37:94:67:a9:30:12:a9:cb: 6a:88:a9:29:f7:01:23:57:a8:3d:4a:dc:88:49:81:e7:1c:93: 5c:08:17:8d:a8:b1:96:2b:05:87:21:c0:f0:b6:ae:c5:63:de: a4:1b:4e:96:b1:f6:1f:cf:39:a6:7d:93:f1:27:90:75:2a:41: 88:e4:90:90:e8:09:97:71:fa:cd:ad:81:fe:c4:ba:dd:58:b7: 3e:bd:c0:87:71:3c:2d:40:f0:fe:95:f4:c1:0e:ea:1e:11:7f: 68:9a:04:d6:01:c7:dc:0f:f6:3b:0d:a3:61:15:7f:91:97:54: 4b:3a:2c:93:6d:f3:00:a1:38:54:dc:f0:ee:c1:7f:2a:97:49: 77:cd:df:05:4e:f8:26:3e:b8:ba:ce:18:ea:48:d1:dd:b2:b4: c9:57:99:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC666xm+X6U1wBzVTZhNN0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkODUwMGJjZGU0OTY4OTljNWQxZmE5MjRkZTRlNzgyN2Q5 OTE2Y2UwHhcNMjYwMjA5MTUwMTA3WhcNMjYwMjEwMTUwMTA3WjAzMTEwLwYDVQQD EyhlNGM2ZGFkZWQ5ZDA3YzMwZDc5MzMxYTAwOTQ0OTFjYTZiNGNlYjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoplqPOOrANoLylAl7SUhmyOZLYOb 2zwehOi2wjM8EkkVwUUa6NhRqKjHumEBuPHjz19gWQHePAv4Gt67C1/Jxx5tA1o7 /Ayv9n6lkEuzQpO65hsZPKkDXQXZGAAt9JLu/tipN4b2O2kE4tRRYFReLKfScICr oCUdr8h1ld+P1o7SavsQTqpwP0UiD0A2XsbjzYh/+3jbJBAuUBQM9RfqTsiMi3Jk CNRdFXFdqtzGnFwy5U2BZmgs9cMWjd0inscRgily3Cf4WmZMzG552KL49tUanBJR JQf2RXvF6xO3aBWzb5rayJd6xIdR5lQdPPyKbHNa4WQjS0KNMVKVYikGDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOTG2t7Z0Hww15MxoAlEkcprTOsRMB8GA1UdIwQY MBaAFD2FALzeSWiZxdH6kk3k54J9mRbOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFlVQXZONUphSm5GMGZxU1RlVG5nbjJaRnM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80MTliNWQtMTRhYS00ZTM2LTlkZjct NzUyNmM5ZjA1Y2Q4LzEvUFlVQXZONUphSm5GMGZxU1RlVG5nbjJaRnM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi80MTliNWQtMTRhYS00ZTM2LTlkZjctNzUyNmM5ZjA1Y2Q4 LzEvUFlVQXZONUphSm5GMGZxU1RlVG5nbjJaRnM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZGuSEB56 jFmSR9pzRE+B1aTpBL5gswN/FJNFYNZ+aLsKwkayvIvxbLume6yawa6vSEevjCqK BsQP+aF7KHkm4WbWARI7N7jsEVfwCO9btaCJtrVI5pKfH99kfgJxCWnkXOvKRjeU Z6kwEqnLaoipKfcBI1eoPUrciEmB5xyTXAgXjaixlisFhyHA8LauxWPepBtOlrH2 H885pn2T8SeQdSpBiOSQkOgJl3H6za2B/sS63Vi3Pr3Ah3E8LUDw/pX0wQ7qHhF/ aJoE1gHH3A/2Ow2jYRV/kZdUSzosk23zAKE4VNzw7sF/KpdJd83fBU74Jj64us4Y 6kjR3bK0yVeZAg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:48:32 2026 by rpki-client