This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.mft File: P591E-0Eyp_o96RU6CeY0E8agKg.mft (raw, json) Hash identifier: dWBFJfQACskWJ4VEX481MYJoUAvllIm7kNME6fHxKB0= Subject key identifier: 77:A4:59:6E:41:16:0D:0A:50:36:C8:6B:D4:66:4B:C3:95:24:7D:0A Authority key identifier: 3F:9F:75:13:ED:04:CA:9F:E8:F7:A4:54:E8:27:98:D0:4F:1A:80:A8 Certificate issuer: /CN=3f9f7513ed04ca9fe8f7a454e82798d04f1a80a8 Certificate serial: 019C4321F31B0BC175C32EB51F3F7C072C75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P591E-0Eyp_o96RU6CeY0E8agKg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.mft Manifest number: 0731 Signing time: Mon 09 Feb 2026 16:00:24 +0000 Manifest this update: Mon 09 Feb 2026 16:00:24 +0000 Manifest next update: Tue 10 Feb 2026 16:00:24 +0000 Files and hashes: 1: P591E-0Eyp_o96RU6CeY0E8agKg.crl (hash: yNB6jwxhupTjwS1xvJ+9M2IhHYjJ9Oq/uokp5/25aeU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.crl rsync://rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.mft rsync://rpki.ripe.net/repository/DEFAULT/P591E-0Eyp_o96RU6CeY0E8agKg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:f3:1b:0b:c1:75:c3:2e:b5:1f:3f:7c:07:2c:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f9f7513ed04ca9fe8f7a454e82798d04f1a80a8 Validity Not Before: Feb 9 16:00:24 2026 GMT Not After : Feb 10 16:00:24 2026 GMT Subject: CN=77a4596e41160d0a5036c86bd4664bc395247d0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ab:cf:2d:3e:0e:93:d2:20:91:5e:fd:1b:99: dd:b8:76:26:af:90:7b:1c:8d:e0:1d:a6:eb:23:79: 56:9c:95:2a:b0:d0:8f:95:4e:00:7b:71:14:93:2c: 81:7c:d7:d3:27:0d:93:bf:6e:b7:5b:67:fa:94:9c: 89:ae:18:8e:1d:6e:a5:61:fd:98:34:ac:8a:41:35: 93:ad:a3:c9:65:29:1e:0b:b4:2a:ca:40:19:b9:1a: 2c:fe:d5:27:f5:fe:58:b6:17:df:26:4c:78:9b:42: 27:a5:7f:37:bd:27:01:79:a7:6a:9a:94:cb:b4:3c: 96:04:83:d1:15:da:88:7d:02:8f:f6:3c:a1:ac:7d: 6b:d5:42:52:5c:9b:d7:23:b0:9e:d5:e6:58:6e:76: f8:ff:79:48:8a:2f:93:7c:34:be:a9:3d:86:d2:e4: a1:0a:c3:a8:3c:e6:66:3a:78:f9:91:22:3f:8a:bc: 3c:78:a1:27:3e:84:16:26:94:13:fc:70:64:cd:ea: 94:e2:44:e5:fc:a5:dd:4f:e8:a2:28:e5:3b:1b:62: 11:5d:15:f5:1c:41:64:e9:73:ab:36:34:50:9a:b6: e7:47:b7:d5:dd:e5:0b:97:5a:ef:59:0b:56:51:2c: c6:e4:82:16:eb:a6:77:34:b5:e1:d4:8b:01:e8:df: f9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:A4:59:6E:41:16:0D:0A:50:36:C8:6B:D4:66:4B:C3:95:24:7D:0A X509v3 Authority Key Identifier: keyid:3F:9F:75:13:ED:04:CA:9F:E8:F7:A4:54:E8:27:98:D0:4F:1A:80:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P591E-0Eyp_o96RU6CeY0E8agKg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:57:f4:a6:64:ea:da:da:16:43:2d:f6:bf:17:b8:9d:21:69: bc:67:16:8b:29:4f:30:12:ab:ce:a2:e9:5b:76:03:df:f8:ac: b0:30:77:a0:13:74:d3:eb:8c:d0:58:f9:38:e5:11:94:ff:f3: be:b1:a3:9c:76:62:3a:b9:0e:ca:97:1a:a2:35:87:d8:de:f2: fd:94:34:01:e0:7b:63:8e:00:f5:b3:b6:8d:21:79:bf:7b:18: 16:f3:c1:c7:96:28:78:be:74:14:6a:72:6c:ef:4b:d5:77:11: c0:51:6e:ae:d8:8a:21:38:51:12:46:8a:8e:dc:d1:f7:2c:8a: 53:70:90:cc:e1:87:b2:48:30:9c:89:5e:ea:b5:79:c2:31:19: 33:82:39:bd:5b:c2:4b:58:d2:7a:0e:4f:07:6d:db:1c:41:64: 08:e5:73:ae:04:ee:d8:b7:14:f8:3a:7c:ec:44:4a:16:af:28: fa:01:33:98:37:ef:34:03:18:5e:75:3c:70:28:cf:13:51:41: b6:2a:0f:40:2d:d7:16:bf:ba:71:fe:e9:18:e9:3f:4c:0e:b1: cf:1c:bb:19:5a:95:cb:09:68:2f:35:25:e6:cf:fd:c3:53:b6: 26:3f:ad:27:ab:1a:7e:89:26:ec:09:12:1e:1d:9b:bc:8a:f5: 5f:63:9b:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIfMbC8F1wy61Hz98Byx1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmOWY3NTEzZWQwNGNhOWZlOGY3YTQ1NGU4Mjc5OGQwNGYx YTgwYTgwHhcNMjYwMjA5MTYwMDI0WhcNMjYwMjEwMTYwMDI0WjAzMTEwLwYDVQQD Eyg3N2E0NTk2ZTQxMTYwZDBhNTAzNmM4NmJkNDY2NGJjMzk1MjQ3ZDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsavPLT4Ok9IgkV79G5nduHYmr5B7 HI3gHabrI3lWnJUqsNCPlU4Ae3EUkyyBfNfTJw2Tv263W2f6lJyJrhiOHW6lYf2Y NKyKQTWTraPJZSkeC7QqykAZuRos/tUn9f5YthffJkx4m0InpX83vScBeadqmpTL tDyWBIPRFdqIfQKP9jyhrH1r1UJSXJvXI7Ce1eZYbnb4/3lIii+TfDS+qT2G0uSh CsOoPOZmOnj5kSI/irw8eKEnPoQWJpQT/HBkzeqU4kTl/KXdT+iiKOU7G2IRXRX1 HEFk6XOrNjRQmrbnR7fV3eULl1rvWQtWUSzG5IIW66Z3NLXh1IsB6N/58wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHekWW5BFg0KUDbIa9RmS8OVJH0KMB8GA1UdIwQY MBaAFD+fdRPtBMqf6PekVOgnmNBPGoCoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDU5MUUtMEV5cF9vOTZSVTZDZVkwRThhZ0tnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8wZGYzMGUtYjBiZi00ZDEwLWEwNjYt NjkxN2NiNGM5OWJjLzEvUDU5MUUtMEV5cF9vOTZSVTZDZVkwRThhZ0tnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8wZGYzMGUtYjBiZi00ZDEwLWEwNjYtNjkxN2NiNGM5OWJj LzEvUDU5MUUtMEV5cF9vOTZSVTZDZVkwRThhZ0tnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwlf0pmTq 2toWQy32vxe4nSFpvGcWiylPMBKrzqLpW3YD3/issDB3oBN00+uM0Fj5OOURlP/z vrGjnHZiOrkOypcaojWH2N7y/ZQ0AeB7Y44A9bO2jSF5v3sYFvPBx5YoeL50FGpy bO9L1XcRwFFurtiKIThREkaKjtzR9yyKU3CQzOGHskgwnIle6rV5wjEZM4I5vVvC S1jSeg5PB23bHEFkCOVzrgTu2LcU+Dp87ERKFq8o+gEzmDfvNAMYXnU8cCjPE1FB tioPQC3XFr+6cf7pGOk/TA6xzxy7GVqVywloLzUl5s/9w1O2Jj+tJ6safokm7AkS Hh2bvIr1X2ObZg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:13 2026 by rpki-client