This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.mft File: PYs6RAq37XlB4sQUhHVG_WP_E-o.mft (raw, json) Hash identifier: 95S1OIuI4YLEgY19nwCTGkTz++WkE3/9OwEksLUDev0= Subject key identifier: 92:B4:BE:85:94:7E:68:14:B0:0C:7A:C1:0E:6B:22:CE:BD:E8:76:F8 Authority key identifier: 3D:8B:3A:44:0A:B7:ED:79:41:E2:C4:14:84:75:46:FD:63:FF:13:EA Certificate issuer: /CN=3d8b3a440ab7ed7941e2c414847546fd63ff13ea Certificate serial: 019C4322E5572639D7D1B494C762DA774612 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYs6RAq37XlB4sQUhHVG_WP_E-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.mft Manifest number: 0B38 Signing time: Mon 09 Feb 2026 16:01:26 +0000 Manifest this update: Mon 09 Feb 2026 16:01:26 +0000 Manifest next update: Tue 10 Feb 2026 16:01:26 +0000 Files and hashes: 1: PYs6RAq37XlB4sQUhHVG_WP_E-o.crl (hash: Mu5WFrFTt1FkXKKewfWvz+qXFxWarZ8WI8l48m6ub0Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.crl rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.mft rsync://rpki.ripe.net/repository/DEFAULT/PYs6RAq37XlB4sQUhHVG_WP_E-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:e5:57:26:39:d7:d1:b4:94:c7:62:da:77:46:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d8b3a440ab7ed7941e2c414847546fd63ff13ea Validity Not Before: Feb 9 16:01:26 2026 GMT Not After : Feb 10 16:01:26 2026 GMT Subject: CN=92b4be85947e6814b00c7ac10e6b22cebde876f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:df:48:51:80:60:3a:01:da:04:f6:f4:e3:e1: 7e:0b:8e:dd:89:8f:0c:8a:6a:07:35:3d:57:a4:9b: 77:6c:62:d9:f1:48:0a:73:74:2c:73:75:f4:47:71: b9:1c:22:f8:2b:ff:ab:4a:dc:09:44:83:df:b1:bf: 3b:18:18:4c:02:1e:9f:58:f1:b5:74:c6:30:aa:6f: 7a:1d:7d:a4:c4:30:84:cb:4a:c6:25:85:36:0e:2b: 40:04:c3:92:0f:ed:94:fc:f9:ee:ce:b7:f1:06:34: e7:48:f6:21:24:12:3a:38:36:5d:5d:19:b1:7c:8a: 24:a8:d3:e9:79:50:1d:95:10:a4:8b:6e:71:3f:ca: 02:ae:f2:43:e5:37:25:d2:e7:6f:ed:6b:1d:ac:94: e0:35:6c:1c:63:4a:f6:be:d7:c7:dc:28:6c:c0:e0: 14:2e:61:ac:be:ca:a8:2d:d5:83:92:d1:80:60:27: 40:a8:4a:67:73:e3:cb:14:3a:8d:09:82:86:3b:97: da:a9:09:5f:ea:f6:33:e7:b1:0e:09:9e:26:e0:c6: b2:9e:51:b1:97:45:37:25:32:3b:66:46:22:dc:3c: ee:40:fa:ef:d1:c1:65:ee:d7:b1:1b:e4:98:93:9a: a2:46:62:f6:61:ac:4d:f9:6e:25:ec:23:78:9f:ac: 6d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:B4:BE:85:94:7E:68:14:B0:0C:7A:C1:0E:6B:22:CE:BD:E8:76:F8 X509v3 Authority Key Identifier: keyid:3D:8B:3A:44:0A:B7:ED:79:41:E2:C4:14:84:75:46:FD:63:FF:13:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYs6RAq37XlB4sQUhHVG_WP_E-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:83:33:b3:3c:d1:70:32:b9:64:57:4e:22:09:58:42:0d:11: 84:d6:0c:3a:6f:7a:a2:0d:d9:7f:a7:57:0a:35:b2:cd:fd:bd: fe:c1:5d:90:08:49:42:46:d6:94:dd:05:52:17:6f:4a:89:b6: b6:00:8e:4a:f4:2c:0c:8e:dd:be:fc:cd:6d:aa:47:99:da:aa: d5:1b:ea:95:2f:e4:f5:dc:5a:a3:fa:77:ae:2b:45:5a:87:6e: 2b:aa:e7:c8:9b:54:74:e6:1b:f1:0d:b5:dc:a2:db:12:35:01: 32:b5:fa:d2:33:e4:0f:55:a9:64:b1:18:42:95:79:9e:c1:b1: f8:5e:d1:20:82:c6:a5:de:34:6c:ba:6c:95:18:62:ac:c6:b3: 80:31:7c:43:80:86:13:25:81:9c:a1:ba:28:90:ec:62:4f:2e: 7d:30:cc:13:c8:ff:1b:97:1d:22:ac:0f:4e:8c:75:64:56:0d: 82:83:56:87:c7:ca:30:5b:50:ef:9c:f3:14:7a:c2:38:05:18: d7:b0:0a:ee:a5:92:96:62:9f:14:da:67:ab:5c:cd:89:75:68: 8b:23:09:16:7a:76:72:14:af:7d:41:04:9f:94:aa:03:72:68: 76:0f:6c:ee:05:71:b4:8c:46:f4:35:96:a4:86:69:fc:ff:3f: 79:bb:66:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIuVXJjnX0bSUx2Lad0YSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOGIzYTQ0MGFiN2VkNzk0MWUyYzQxNDg0NzU0NmZkNjNm ZjEzZWEwHhcNMjYwMjA5MTYwMTI2WhcNMjYwMjEwMTYwMTI2WjAzMTEwLwYDVQQD Eyg5MmI0YmU4NTk0N2U2ODE0YjAwYzdhYzEwZTZiMjJjZWJkZTg3NmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA199IUYBgOgHaBPb04+F+C47diY8M imoHNT1XpJt3bGLZ8UgKc3Qsc3X0R3G5HCL4K/+rStwJRIPfsb87GBhMAh6fWPG1 dMYwqm96HX2kxDCEy0rGJYU2DitABMOSD+2U/PnuzrfxBjTnSPYhJBI6ODZdXRmx fIokqNPpeVAdlRCki25xP8oCrvJD5Tcl0udv7WsdrJTgNWwcY0r2vtfH3ChswOAU LmGsvsqoLdWDktGAYCdAqEpnc+PLFDqNCYKGO5faqQlf6vYz57EOCZ4m4MaynlGx l0U3JTI7ZkYi3DzuQPrv0cFl7texG+SYk5qiRmL2YaxN+W4l7CN4n6xt5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJK0voWUfmgUsAx6wQ5rIs696Hb4MB8GA1UdIwQY MBaAFD2LOkQKt+15QeLEFIR1Rv1j/xPqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFlzNlJBcTM3WGxCNHNRVWhIVkdfV1BfRS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9hY2JkOWMtYjEyMy00MzNjLTlmODMt NzhhYzkwZTQ4ODkyLzEvUFlzNlJBcTM3WGxCNHNRVWhIVkdfV1BfRS1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9hY2JkOWMtYjEyMy00MzNjLTlmODMtNzhhYzkwZTQ4ODky LzEvUFlzNlJBcTM3WGxCNHNRVWhIVkdfV1BfRS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT4MzszzR cDK5ZFdOIglYQg0RhNYMOm96og3Zf6dXCjWyzf29/sFdkAhJQkbWlN0FUhdvSom2 tgCOSvQsDI7dvvzNbapHmdqq1RvqlS/k9dxao/p3ritFWoduK6rnyJtUdOYb8Q21 3KLbEjUBMrX60jPkD1WpZLEYQpV5nsGx+F7RIILGpd40bLpslRhirMazgDF8Q4CG EyWBnKG6KJDsYk8ufTDME8j/G5cdIqwPTox1ZFYNgoNWh8fKMFtQ75zzFHrCOAUY 17AK7qWSlmKfFNpnq1zNiXVoiyMJFnp2chSvfUEEn5SqA3Jodg9s7gVxtIxG9DWW pIZp/P8/ebtmiA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:57 2026 by rpki-client