This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft File: PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft (raw, json) Hash identifier: N2vKoy5o4TuPMhdIEjFNVsn1SdHJNC8QDXy3z4FlVa8= Subject key identifier: CA:BB:1E:82:E9:98:26:B7:78:49:EF:13:75:6E:AB:82:4C:9E:5E:2A Authority key identifier: 3F:24:A4:32:2E:88:31:2C:81:F4:69:AC:9F:FA:73:0D:F1:4B:33:84 Certificate issuer: /CN=3f24a4322e88312c81f469ac9ffa730df14b3384 Certificate serial: 019C4390753DB9500597C86BF86E3467926E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 18:01:06 +0000 Manifest this update: Mon 09 Feb 2026 18:01:06 +0000 Manifest next update: Tue 10 Feb 2026 18:01:06 +0000 Files and hashes: 1: PySkMi6IMSyB9Gmsn_pzDfFLM4Q.crl (hash: QPjU62wdva8yqX2kg7Zy+fkHqe0DaR+09+q5H5fHqDw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:75:3d:b9:50:05:97:c8:6b:f8:6e:34:67:92:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f24a4322e88312c81f469ac9ffa730df14b3384 Validity Not Before: Feb 9 18:01:06 2026 GMT Not After : Feb 10 18:01:06 2026 GMT Subject: CN=cabb1e82e99826b77849ef13756eab824c9e5e2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:61:e8:05:34:db:37:12:9a:44:04:4e:36:34: db:21:01:42:2e:b1:b1:e3:0c:85:35:d6:b7:4a:47: a8:91:ad:2c:8d:f3:02:fc:06:ca:b0:52:65:2e:03: 75:79:80:aa:d2:cd:25:78:48:e8:58:8c:87:53:c9: 7a:59:5b:d9:47:98:29:4d:f3:9b:fc:fe:e5:c1:d2: 8b:c5:1d:f5:c9:75:45:ee:83:de:44:4d:40:eb:d5: a5:b5:20:79:00:2f:75:5f:b4:86:61:58:c0:09:4a: eb:10:3a:b7:6f:f3:d7:56:02:f1:bd:e8:81:c2:0d: fe:db:ac:da:4c:de:c9:d6:9a:9e:65:f9:19:87:5a: e7:c4:ea:d9:d8:96:5f:ac:17:60:08:60:d6:33:e1: d8:47:5d:25:46:51:c2:83:ee:45:4a:56:eb:bb:45: 9c:40:c5:11:ae:f1:fb:52:f9:66:78:ba:21:12:11: 31:38:77:33:23:53:61:6d:1b:53:72:ae:7c:97:ba: ae:45:11:2c:b5:19:7d:ca:a5:a5:e9:65:46:a8:40: a9:7d:b7:77:34:8e:7c:3d:62:e3:9f:50:52:68:64: 09:a4:c2:2d:31:49:1b:33:ce:08:57:6a:37:2c:52: 6c:3f:c7:8a:d6:0c:b4:ae:dd:90:0d:4b:4b:db:98: 3d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:BB:1E:82:E9:98:26:B7:78:49:EF:13:75:6E:AB:82:4C:9E:5E:2A X509v3 Authority Key Identifier: keyid:3F:24:A4:32:2E:88:31:2C:81:F4:69:AC:9F:FA:73:0D:F1:4B:33:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:6c:05:9b:a5:98:6f:db:f4:bd:60:33:c1:07:a8:b6:53:9e: df:12:45:5b:17:23:03:89:5f:38:45:70:fb:e1:80:de:77:9d: e5:9e:a5:9c:79:6f:b8:50:f6:1f:6c:cc:8c:44:1c:a8:b2:6f: ec:51:ec:56:12:6f:97:bf:a4:ce:32:7e:26:ac:8b:ac:9c:a8: ad:e8:a4:98:86:f5:1c:15:1a:29:9c:0e:93:44:76:f5:83:46: fe:9b:d7:14:2a:a7:96:fb:ae:6e:8f:0c:32:61:f6:71:36:fb: 26:f7:e5:71:1f:b4:47:7a:5c:42:2b:72:e0:76:73:d4:00:62: 94:13:e9:5a:07:b4:54:b5:f4:1a:d6:0d:5d:6b:7e:c5:84:ef: ed:38:3e:94:03:5c:61:82:16:a9:f6:8f:55:ed:fb:2d:05:bd: 82:16:de:db:4b:fc:58:a5:74:c0:9a:e8:2c:77:e6:1e:90:e4: 7f:4b:9e:f6:0b:12:87:06:12:c2:36:2c:fd:2d:36:99:82:59: 73:5c:85:80:a9:f0:94:f9:6b:6c:a5:d4:6c:18:8b:f9:de:eb: f3:b9:bf:d2:d0:38:c5:26:ce:2d:3d:99:c5:88:33:12:2a:45: 6c:5d:44:54:c6:57:c7:98:b9:c7:77:63:56:1d:f3:b7:da:d7: 3c:70:28:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkHU9uVAFl8hr+G40Z5JuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmMjRhNDMyMmU4ODMxMmM4MWY0NjlhYzlmZmE3MzBkZjE0 YjMzODQwHhcNMjYwMjA5MTgwMTA2WhcNMjYwMjEwMTgwMTA2WjAzMTEwLwYDVQQD EyhjYWJiMWU4MmU5OTgyNmI3Nzg0OWVmMTM3NTZlYWI4MjRjOWU1ZTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWHoBTTbNxKaRARONjTbIQFCLrGx 4wyFNda3Skeoka0sjfMC/AbKsFJlLgN1eYCq0s0leEjoWIyHU8l6WVvZR5gpTfOb /P7lwdKLxR31yXVF7oPeRE1A69WltSB5AC91X7SGYVjACUrrEDq3b/PXVgLxveiB wg3+26zaTN7J1pqeZfkZh1rnxOrZ2JZfrBdgCGDWM+HYR10lRlHCg+5FSlbru0Wc QMURrvH7UvlmeLohEhExOHczI1NhbRtTcq58l7quRREstRl9yqWl6WVGqECpfbd3 NI58PWLjn1BSaGQJpMItMUkbM84IV2o3LFJsP8eK1gy0rt2QDUtL25g9ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMq7HoLpmCa3eEnvE3Vuq4JMnl4qMB8GA1UdIwQY MBaAFD8kpDIuiDEsgfRprJ/6cw3xSzOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHlTa01pNklNU3lCOUdtc25fcHpEZkZMTTRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9kMGZhOTktYzExMC00NjA5LThiMDkt ODkyYjViODJkNjY0LzEvUHlTa01pNklNU3lCOUdtc25fcHpEZkZMTTRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9kMGZhOTktYzExMC00NjA5LThiMDktODkyYjViODJkNjY0 LzEvUHlTa01pNklNU3lCOUdtc25fcHpEZkZMTTRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmGwFm6WY b9v0vWAzwQeotlOe3xJFWxcjA4lfOEVw++GA3ned5Z6lnHlvuFD2H2zMjEQcqLJv 7FHsVhJvl7+kzjJ+JqyLrJyoreikmIb1HBUaKZwOk0R29YNG/pvXFCqnlvuubo8M MmH2cTb7JvflcR+0R3pcQity4HZz1ABilBPpWge0VLX0GtYNXWt+xYTv7Tg+lANc YYIWqfaPVe37LQW9ghbe20v8WKV0wJroLHfmHpDkf0ue9gsShwYSwjYs/S02mYJZ c1yFgKnwlPlrbKXUbBiL+d7r87m/0tA4xSbOLT2ZxYgzEipFbF1EVMZXx5i5x3dj Vh3zt9rXPHAowg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:40:35 2026 by rpki-client