This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft File: pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft (raw, json) Hash identifier: JWvoj0tmwXoR+G7B8ShOx0BzN3qXPNnIfUv4BBexH50= Subject key identifier: D0:B7:EF:78:89:8D:32:C2:77:D6:D6:5F:62:53:82:FE:45:8D:E9:22 Authority key identifier: A6:A3:A9:C7:13:91:D8:FA:06:B7:34:2A:A9:2C:6E:EA:2A:53:E5:C0 Certificate issuer: /CN=a6a3a9c71391d8fa06b7342aa92c6eea2a53e5c0 Certificate serial: 019C424622C2D009E2D8170B8884487C54D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqOpxxOR2PoGtzQqqSxu6ipT5cA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft Manifest number: 023A Signing time: Mon 09 Feb 2026 12:00:18 +0000 Manifest this update: Mon 09 Feb 2026 12:00:18 +0000 Manifest next update: Tue 10 Feb 2026 12:00:18 +0000 Files and hashes: 1: 6phx-w5UIxjdX_HJEdkzEKdfgmU.roa (hash: SGPInug9Hk9CwPLCuVMV05j3spVvBaapQvXlXlYZ4gY=) 2: pqOpxxOR2PoGtzQqqSxu6ipT5cA.crl (hash: OMyIddwUpsMpJmnJhPFg+DzenoPlU9johm3/0szK0Qw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft rsync://rpki.ripe.net/repository/DEFAULT/pqOpxxOR2PoGtzQqqSxu6ipT5cA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:22:c2:d0:09:e2:d8:17:0b:88:84:48:7c:54:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6a3a9c71391d8fa06b7342aa92c6eea2a53e5c0 Validity Not Before: Feb 9 12:00:18 2026 GMT Not After : Feb 10 12:00:18 2026 GMT Subject: CN=d0b7ef78898d32c277d6d65f625382fe458de922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d5:0a:31:85:52:1b:ca:26:3d:b0:f3:25:98: 7e:34:b8:5d:c0:93:ca:9c:ce:7f:a8:4a:3d:75:8a: c9:4f:47:a6:af:71:25:0d:f8:23:56:77:b7:72:69: 83:d1:dd:0a:a6:09:dd:e1:5e:1c:e0:0b:c3:d2:16: 06:d6:62:d5:25:be:9c:4c:75:76:94:96:cc:90:79: 7c:32:b0:4a:0a:97:d6:33:86:3b:c7:02:46:3b:65: 8b:75:18:7c:24:dd:e2:41:bd:b2:99:cc:fe:d0:89: 00:7f:c9:f7:97:73:b6:f5:5a:c5:96:64:5b:fc:7e: 4a:3b:37:e2:82:23:bd:a1:5d:92:8f:13:1f:c3:19: 71:b6:1e:fd:5d:a3:ac:cf:79:14:1a:71:0c:c7:1d: 8b:26:bd:a2:12:40:22:0b:9d:ef:31:db:e7:cf:7a: 16:44:4e:c3:a9:e5:d8:31:03:c6:49:d4:17:e0:31: e7:5a:61:c5:1c:80:19:cd:19:ba:ab:d3:d5:96:11: 4b:8c:8a:aa:fc:6f:f7:ec:96:91:f9:91:34:91:12: 82:38:f6:24:b3:d2:f1:71:f0:dd:49:c6:45:55:06: b0:8b:48:3c:5b:90:44:53:8d:21:21:87:5d:ff:61: f3:76:a2:47:81:19:8f:47:e4:04:9f:78:9e:66:60: 5c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:B7:EF:78:89:8D:32:C2:77:D6:D6:5F:62:53:82:FE:45:8D:E9:22 X509v3 Authority Key Identifier: keyid:A6:A3:A9:C7:13:91:D8:FA:06:B7:34:2A:A9:2C:6E:EA:2A:53:E5:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqOpxxOR2PoGtzQqqSxu6ipT5cA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:f5:a0:02:0d:a9:16:d0:19:ba:84:a3:a7:c9:93:9d:b2:9e: bb:2c:e2:c9:63:7d:fa:40:0a:da:c2:75:de:c4:fa:20:88:8f: 7d:53:92:a9:83:a7:12:27:ce:3c:3f:27:85:aa:42:20:01:c4: 58:ef:b1:f9:8d:b5:4c:d9:b7:7e:1d:f0:93:64:bf:a4:50:77: 6f:df:42:f1:93:20:54:3e:81:11:a9:59:99:63:69:c6:ed:21: b7:00:c0:33:34:5b:84:6a:8e:2f:e7:81:4b:19:43:1f:e4:84: 1a:30:19:3e:32:e2:fb:61:a6:23:56:81:ee:8a:f8:75:45:c0: 55:da:9f:17:f6:98:f0:fd:80:de:ab:06:45:f2:4b:dc:70:ee: ee:38:0f:76:4c:d6:48:d7:40:be:59:33:01:e0:c4:0a:e9:53: 1f:49:bf:d6:7d:45:54:68:3a:78:e1:eb:cd:c0:80:f2:87:74: 27:8d:8c:f7:b0:11:e8:c5:c2:9d:06:cd:7b:6a:a4:d8:2d:e6: c3:14:18:ef:f6:c9:e8:ec:b2:0e:66:a5:c9:7f:00:30:4a:f9: eb:b6:69:38:db:ff:17:69:92:bb:0b:cb:7a:8f:cd:20:32:b1: 72:a7:ae:1d:93:bc:aa:2a:7e:e8:9e:7a:83:f2:a3:ae:d5:35: 92:ec:cb:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRiLC0Ani2BcLiIRIfFTQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2YTNhOWM3MTM5MWQ4ZmEwNmI3MzQyYWE5MmM2ZWVhMmE1 M2U1YzAwHhcNMjYwMjA5MTIwMDE4WhcNMjYwMjEwMTIwMDE4WjAzMTEwLwYDVQQD EyhkMGI3ZWY3ODg5OGQzMmMyNzdkNmQ2NWY2MjUzODJmZTQ1OGRlOTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztUKMYVSG8omPbDzJZh+NLhdwJPK nM5/qEo9dYrJT0emr3ElDfgjVne3cmmD0d0Kpgnd4V4c4AvD0hYG1mLVJb6cTHV2 lJbMkHl8MrBKCpfWM4Y7xwJGO2WLdRh8JN3iQb2ymcz+0IkAf8n3l3O29VrFlmRb /H5KOzfigiO9oV2SjxMfwxlxth79XaOsz3kUGnEMxx2LJr2iEkAiC53vMdvnz3oW RE7DqeXYMQPGSdQX4DHnWmHFHIAZzRm6q9PVlhFLjIqq/G/37JaR+ZE0kRKCOPYk s9LxcfDdScZFVQawi0g8W5BEU40hIYdd/2HzdqJHgRmPR+QEn3ieZmBcjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNC373iJjTLCd9bWX2JTgv5FjekiMB8GA1UdIwQY MBaAFKajqccTkdj6Brc0KqksbuoqU+XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHFPcHh4T1IyUG9HdHpRcXFTeHU2aXBUNWNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8yNWU0NjYtNmRlZS00ODVkLWFlMmMt YzY3MGYwZWIyM2E0LzEvcHFPcHh4T1IyUG9HdHpRcXFTeHU2aXBUNWNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8yNWU0NjYtNmRlZS00ODVkLWFlMmMtYzY3MGYwZWIyM2E0 LzEvcHFPcHh4T1IyUG9HdHpRcXFTeHU2aXBUNWNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGPWgAg2p FtAZuoSjp8mTnbKeuyziyWN9+kAK2sJ13sT6IIiPfVOSqYOnEifOPD8nhapCIAHE WO+x+Y21TNm3fh3wk2S/pFB3b99C8ZMgVD6BEalZmWNpxu0htwDAMzRbhGqOL+eB SxlDH+SEGjAZPjLi+2GmI1aB7or4dUXAVdqfF/aY8P2A3qsGRfJL3HDu7jgPdkzW SNdAvlkzAeDECulTH0m/1n1FVGg6eOHrzcCA8od0J42M97AR6MXCnQbNe2qk2C3m wxQY7/bJ6OyyDmalyX8AMEr567ZpONv/F2mSuwvLeo/NIDKxcqeuHZO8qip+6J56 g/KjrtU1kuzL7g== -----END CERTIFICATE-----Generated at Mon Feb 9 18:41:28 2026 by rpki-client