This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft File: r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft (raw, json) Hash identifier: DbPZvq6/LbFkwGqqKoWKIntEcjgYhOHCEBfGjfwm/5w= Subject key identifier: 12:D7:CA:13:C2:81:01:DB:7E:56:49:2A:BC:83:8C:03:B0:91:B8:00 Authority key identifier: AF:E3:F1:ED:1B:49:C5:BA:7C:C1:F1:92:A4:02:47:65:A2:53:66:4E Certificate issuer: /CN=afe3f1ed1b49c5ba7cc1f192a4024765a253664e Certificate serial: 019C438FD415C5F53197ED21AD7534BCE10F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft Manifest number: 14FE Signing time: Mon 09 Feb 2026 18:00:25 +0000 Manifest this update: Mon 09 Feb 2026 18:00:25 +0000 Manifest next update: Tue 10 Feb 2026 18:00:25 +0000 Files and hashes: 1: r-Px7RtJxbp8wfGSpAJHZaJTZk4.crl (hash: a++zBC+SRxGW4G+Wg/9pj3YcscKVBO2BvszkPXdg2fI=) 2: sXuiRHlvEW8rrBF1Ev9CogiLSCQ.roa (hash: pLvRlLK05UpElewJM59U7OVcLxC0+h1J9DGDrZTZEFM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:d4:15:c5:f5:31:97:ed:21:ad:75:34:bc:e1:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afe3f1ed1b49c5ba7cc1f192a4024765a253664e Validity Not Before: Feb 9 18:00:25 2026 GMT Not After : Feb 10 18:00:25 2026 GMT Subject: CN=12d7ca13c28101db7e56492abc838c03b091b800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:98:1e:8e:e9:95:52:4e:ba:8e:ce:a9:52:b5: 90:da:7e:a9:1a:60:d4:c7:b6:9d:1d:f8:05:35:3d: 83:15:34:5c:35:ac:74:a5:0c:20:72:da:e4:92:b0: 04:b8:7b:87:9c:9b:a7:45:a1:fd:65:19:c2:d3:94: 8b:ea:2e:92:2c:65:41:d3:b5:5e:cd:bc:0b:be:56: 9f:e1:8c:ff:7d:b7:96:f3:a6:63:ef:ff:0b:6f:49: 6b:6a:b5:be:3e:be:74:73:19:77:2a:7b:97:b6:73: 3b:7e:89:42:6e:12:94:1c:ca:07:bd:76:98:ac:70: f1:0f:75:10:fc:8c:1b:7f:6d:dc:46:4c:d1:c7:8c: 99:81:90:d9:f1:7c:88:d6:57:ca:dc:da:d5:14:34: b0:63:a1:67:0f:aa:45:c5:82:c5:8b:d7:a4:09:5d: ee:35:49:1c:4e:fe:77:ed:69:1f:f1:5e:ef:b5:ba: 14:92:a6:17:3d:14:e1:58:5b:1f:9a:7d:ec:c3:c5: 57:3a:c5:43:0a:b2:02:57:d0:13:57:9c:2e:e0:73: a9:81:fa:25:9c:fa:e7:c8:48:4f:78:7b:d3:f3:38: 15:01:b4:25:3b:f3:30:76:2e:6d:23:99:3c:e5:b3: 93:0a:9f:57:f2:bf:0f:e8:c5:00:1f:71:c4:c4:e3: dd:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:D7:CA:13:C2:81:01:DB:7E:56:49:2A:BC:83:8C:03:B0:91:B8:00 X509v3 Authority Key Identifier: keyid:AF:E3:F1:ED:1B:49:C5:BA:7C:C1:F1:92:A4:02:47:65:A2:53:66:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:68:ca:c1:e5:88:d4:91:ab:70:89:51:51:a2:a3:f5:42:5e: 7c:fd:c5:04:0a:9d:ca:48:d9:62:28:4d:06:91:c0:34:e1:e4: de:0d:18:8e:b1:b1:4a:c8:79:bf:44:ef:31:35:a5:03:da:1d: 2c:2f:78:12:a6:fa:a6:51:11:93:b7:b6:46:74:44:c2:aa:61: 3e:6e:fa:c2:12:1f:37:88:d3:07:bf:da:e2:63:3b:99:1b:f3: b8:0c:e5:b2:82:2e:83:25:05:b6:f3:f5:d6:c7:68:ea:06:3e: 42:53:04:2e:e8:e8:0e:ef:fe:b7:d3:13:3c:ec:dc:b3:62:a1: b7:67:95:44:1c:32:2c:55:62:34:2d:d5:9a:00:77:94:d6:4d: 21:c8:bc:aa:d0:b6:c6:51:11:49:5f:a3:82:d0:5f:59:36:dc: 5a:64:42:12:c4:af:5d:60:70:ba:b1:d0:aa:d6:b6:41:26:28: 0a:2e:50:cc:25:44:80:ec:7d:d5:6d:bf:aa:b0:5d:b6:e1:6a: 1e:6b:d2:de:68:70:6f:e5:a5:a9:64:5b:94:2d:e7:c7:f6:1e: c5:58:09:b0:4b:f1:e0:91:dd:5e:7a:38:53:0f:2c:e9:b9:30: 23:09:99:53:5d:e5:ab:b6:7f:dd:db:91:e6:1b:ba:0a:b5:be: 7d:5f:f6:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj9QVxfUxl+0hrXU0vOEPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZTNmMWVkMWI0OWM1YmE3Y2MxZjE5MmE0MDI0NzY1YTI1 MzY2NGUwHhcNMjYwMjA5MTgwMDI1WhcNMjYwMjEwMTgwMDI1WjAzMTEwLwYDVQQD EygxMmQ3Y2ExM2MyODEwMWRiN2U1NjQ5MmFiYzgzOGMwM2IwOTFiODAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJgejumVUk66js6pUrWQ2n6pGmDU x7adHfgFNT2DFTRcNax0pQwgctrkkrAEuHuHnJunRaH9ZRnC05SL6i6SLGVB07Ve zbwLvlaf4Yz/fbeW86Zj7/8Lb0lrarW+Pr50cxl3KnuXtnM7folCbhKUHMoHvXaY rHDxD3UQ/Iwbf23cRkzRx4yZgZDZ8XyI1lfK3NrVFDSwY6FnD6pFxYLFi9ekCV3u NUkcTv537Wkf8V7vtboUkqYXPRThWFsfmn3sw8VXOsVDCrICV9ATV5wu4HOpgfol nPrnyEhPeHvT8zgVAbQlO/Mwdi5tI5k85bOTCp9X8r8P6MUAH3HExOPdLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBLXyhPCgQHbflZJKryDjAOwkbgAMB8GA1UdIwQY MBaAFK/j8e0bScW6fMHxkqQCR2WiU2ZOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvci1QeDdSdEp4YnA4d2ZHU3BBSkhaYUpUWms0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9iNDQ0ODgtMDUwMC00NTM4LTkzYjEt MjY4OGQzNDZmNmFiLzEvci1QeDdSdEp4YnA4d2ZHU3BBSkhaYUpUWms0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9iNDQ0ODgtMDUwMC00NTM4LTkzYjEtMjY4OGQzNDZmNmFi LzEvci1QeDdSdEp4YnA4d2ZHU3BBSkhaYUpUWms0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbmjKweWI 1JGrcIlRUaKj9UJefP3FBAqdykjZYihNBpHANOHk3g0YjrGxSsh5v0TvMTWlA9od LC94Eqb6plERk7e2RnREwqphPm76whIfN4jTB7/a4mM7mRvzuAzlsoIugyUFtvP1 1sdo6gY+QlMELujoDu/+t9MTPOzcs2Kht2eVRBwyLFViNC3VmgB3lNZNIci8qtC2 xlERSV+jgtBfWTbcWmRCEsSvXWBwurHQqta2QSYoCi5QzCVEgOx91W2/qrBdtuFq HmvS3mhwb+WlqWRblC3nx/YexVgJsEvx4JHdXno4Uw8s6bkwIwmZU13lq7Z/3duR 5hu6CrW+fV/2Mg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:46:48 2026 by rpki-client