This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.mft File: PqlK-DEYyT_-izYnXtU0mU1not0.mft (raw, json) Hash identifier: 4F3AVewzVnsBO1swf9KB1rc6pb+sNyDAzIIm2/+o08Y= Subject key identifier: CD:26:EA:76:EC:B9:13:01:A2:96:3C:13:B9:83:62:51:BC:6F:EC:55 Authority key identifier: 3E:A9:4A:F8:31:18:C9:3F:FE:8B:36:27:5E:D5:34:99:4D:67:A2:DD Certificate issuer: /CN=3ea94af83118c93ffe8b36275ed534994d67a2dd Certificate serial: 019C42469571627AE45B4ADA5E0E651FE1B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqlK-DEYyT_-izYnXtU0mU1not0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.mft Manifest number: 1400 Signing time: Mon 09 Feb 2026 12:00:47 +0000 Manifest this update: Mon 09 Feb 2026 12:00:47 +0000 Manifest next update: Tue 10 Feb 2026 12:00:47 +0000 Files and hashes: 1: PqlK-DEYyT_-izYnXtU0mU1not0.crl (hash: 13IPP81eQPtbllneyT0MgMhLaC+mVroxojSRemiKnv0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.mft rsync://rpki.ripe.net/repository/DEFAULT/PqlK-DEYyT_-izYnXtU0mU1not0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:95:71:62:7a:e4:5b:4a:da:5e:0e:65:1f:e1:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ea94af83118c93ffe8b36275ed534994d67a2dd Validity Not Before: Feb 9 12:00:47 2026 GMT Not After : Feb 10 12:00:47 2026 GMT Subject: CN=cd26ea76ecb91301a2963c13b9836251bc6fec55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:8c:e4:be:49:a0:22:1f:f3:99:41:bd:a8:82: 0b:a1:2a:d7:9d:ee:17:0e:fe:13:20:01:91:48:52: 55:f4:1e:47:c6:74:f8:37:f5:8d:77:5b:b0:3d:9e: 93:6d:79:02:83:cc:ee:f5:94:82:24:31:a8:ea:ce: 73:9e:19:d2:fd:32:c7:c6:88:43:57:f3:19:5a:67: 2b:5a:4e:0a:02:3c:5b:45:45:58:04:b6:a8:b8:be: 82:3a:44:97:e5:15:55:1b:18:08:4b:00:5b:82:f5: cd:d4:c3:8b:3d:7f:04:a4:36:d2:21:c2:93:b1:b6: 85:0a:70:64:71:e1:3f:8f:af:74:51:59:9f:e9:b9: 4d:5a:05:5e:89:18:46:7b:41:de:76:58:e7:fb:eb: 08:78:04:ec:cd:b4:3c:a1:30:ae:39:24:0a:c1:97: 34:0d:3f:18:5e:c6:30:80:2f:c2:66:c8:87:e2:f5: 2f:cb:7d:88:4f:99:15:98:74:b3:46:c8:6b:e2:12: cc:9a:60:36:55:0c:af:3f:5b:25:68:87:23:57:d7: c9:11:7e:b3:06:60:ab:c2:f7:71:4e:6f:5d:23:d9: a9:2b:b7:57:a3:b7:2d:61:7c:a0:d8:1e:ea:0c:b9: c8:61:a4:6e:40:7e:b6:63:0b:e3:3f:25:3c:08:a0: 6c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:26:EA:76:EC:B9:13:01:A2:96:3C:13:B9:83:62:51:BC:6F:EC:55 X509v3 Authority Key Identifier: keyid:3E:A9:4A:F8:31:18:C9:3F:FE:8B:36:27:5E:D5:34:99:4D:67:A2:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqlK-DEYyT_-izYnXtU0mU1not0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:92:35:c0:f6:68:d9:37:c1:e8:e7:91:d6:95:9f:41:6d:27: 74:f0:00:2a:78:1c:75:02:06:c2:5a:0a:48:d8:16:2c:c1:d5: 9b:29:c6:bf:ca:36:ca:94:84:6d:21:a7:54:9b:59:61:4f:34: b3:89:79:c8:7c:b8:b0:59:e5:be:d1:bc:18:fa:7c:7b:5a:0d: dc:48:f6:93:46:08:57:5b:a7:a4:e3:6e:b1:4f:8c:de:8a:ac: c5:f9:46:f5:9f:15:2a:42:8b:1b:ae:9e:33:f2:a7:25:c4:06: 7a:dc:8b:b2:d7:2f:24:f9:d1:7c:be:17:f3:ab:69:c6:a5:57: 5e:1d:80:13:24:86:a3:dc:4a:3a:1d:4a:43:52:b2:a1:5a:b0: e5:78:6f:db:aa:ec:7e:c0:c7:3f:a0:4d:b4:82:8e:1b:5f:ab: 23:f8:a5:97:7c:9f:e2:98:77:b6:76:9c:b9:18:62:34:e1:5d: f0:42:60:23:69:99:48:43:18:e1:72:0e:1c:ac:dc:8f:f7:b0: c1:d0:52:f2:d5:77:ec:1d:87:9a:a9:af:9e:f0:b0:de:4e:cd: 43:2d:5f:d7:a8:17:88:ff:99:12:7b:cb:fb:b6:b1:6b:a6:f0: 2a:f4:87:58:e8:c3:2c:77:e6:3d:0e:54:99:29:ac:b5:75:b3: 6b:cc:54:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRpVxYnrkW0raXg5lH+GxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYTk0YWY4MzExOGM5M2ZmZThiMzYyNzVlZDUzNDk5NGQ2 N2EyZGQwHhcNMjYwMjA5MTIwMDQ3WhcNMjYwMjEwMTIwMDQ3WjAzMTEwLwYDVQQD EyhjZDI2ZWE3NmVjYjkxMzAxYTI5NjNjMTNiOTgzNjI1MWJjNmZlYzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7IzkvkmgIh/zmUG9qIILoSrXne4X Dv4TIAGRSFJV9B5HxnT4N/WNd1uwPZ6TbXkCg8zu9ZSCJDGo6s5znhnS/TLHxohD V/MZWmcrWk4KAjxbRUVYBLaouL6COkSX5RVVGxgISwBbgvXN1MOLPX8EpDbSIcKT sbaFCnBkceE/j690UVmf6blNWgVeiRhGe0Hedljn++sIeATszbQ8oTCuOSQKwZc0 DT8YXsYwgC/CZsiH4vUvy32IT5kVmHSzRshr4hLMmmA2VQyvP1slaIcjV9fJEX6z BmCrwvdxTm9dI9mpK7dXo7ctYXyg2B7qDLnIYaRuQH62YwvjPyU8CKBsTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM0m6nbsuRMBopY8E7mDYlG8b+xVMB8GA1UdIwQY MBaAFD6pSvgxGMk//os2J17VNJlNZ6LdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHFsSy1ERVl5VF8taXpZblh0VTBtVTFub3QwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9mZjQxOTEtYjlmMy00MzgyLWJlZTEt Mjk1N2FmYjE0Nzk0LzEvUHFsSy1ERVl5VF8taXpZblh0VTBtVTFub3QwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9mZjQxOTEtYjlmMy00MzgyLWJlZTEtMjk1N2FmYjE0Nzk0 LzEvUHFsSy1ERVl5VF8taXpZblh0VTBtVTFub3QwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT5I1wPZo 2TfB6OeR1pWfQW0ndPAAKngcdQIGwloKSNgWLMHVmynGv8o2ypSEbSGnVJtZYU80 s4l5yHy4sFnlvtG8GPp8e1oN3Ej2k0YIV1unpONusU+M3oqsxflG9Z8VKkKLG66e M/KnJcQGetyLstcvJPnRfL4X86tpxqVXXh2AEySGo9xKOh1KQ1KyoVqw5Xhv26rs fsDHP6BNtIKOG1+rI/ill3yf4ph3tnacuRhiNOFd8EJgI2mZSEMY4XIOHKzcj/ew wdBS8tV37B2HmqmvnvCw3k7NQy1f16gXiP+ZEnvL+7axa6bwKvSHWOjDLHfmPQ5U mSmstXWza8xU2Q== -----END CERTIFICATE-----Generated at Mon Feb 9 18:47:57 2026 by rpki-client