This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.mft File: POsgUJhzLLkIgjBF79XXQCUMayc.mft (raw, json) Hash identifier: 0J9J7GyJpuBfmFLgOz7E4cRKjihyY/OxPZTnuxFkgCc= Subject key identifier: DC:FA:80:59:FF:21:89:92:E0:E6:59:0C:08:E2:06:BC:CB:CA:13:F6 Authority key identifier: 3C:EB:20:50:98:73:2C:B9:08:82:30:45:EF:D5:D7:40:25:0C:6B:27 Certificate issuer: /CN=3ceb205098732cb908823045efd5d740250c6b27 Certificate serial: 019C424651547A23BBBE978B0BBF2ABD6284 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POsgUJhzLLkIgjBF79XXQCUMayc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 12:00:30 +0000 Manifest this update: Mon 09 Feb 2026 12:00:30 +0000 Manifest next update: Tue 10 Feb 2026 12:00:30 +0000 Files and hashes: 1: POsgUJhzLLkIgjBF79XXQCUMayc.crl (hash: eqL8odaYjDIYU6136QOzWuIpJ4MniDnGk6PFpEJIWvM=) 2: pp4dxt_v1A7idhETx472Fe15Gfk.roa (hash: we1iOucBiqHe+rmZf6gCAUUM5mZ0MLpY0KQ1hHxgDkw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.mft rsync://rpki.ripe.net/repository/DEFAULT/POsgUJhzLLkIgjBF79XXQCUMayc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:51:54:7a:23:bb:be:97:8b:0b:bf:2a:bd:62:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ceb205098732cb908823045efd5d740250c6b27 Validity Not Before: Feb 9 12:00:30 2026 GMT Not After : Feb 10 12:00:30 2026 GMT Subject: CN=dcfa8059ff218992e0e6590c08e206bccbca13f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:96:7f:66:2d:56:c6:7b:9c:00:80:5f:b7:d5: b0:78:0d:fc:06:df:95:f6:88:ec:72:bc:58:d1:7f: f0:6d:73:8d:dd:81:69:70:31:74:cb:73:08:3f:da: f6:e0:d7:58:42:f7:42:cb:79:47:93:ca:a1:82:73: 85:3f:6d:e9:be:55:b9:be:92:80:69:55:6f:73:91: 2a:70:93:29:e0:f9:10:82:a2:ac:34:a9:f2:26:31: 23:d3:a8:0b:b5:a6:97:2f:90:12:2b:6d:d2:e0:bc: a6:42:37:ff:8a:2e:d1:7e:79:a4:f4:49:63:9f:75: a9:80:9b:9f:c0:1a:30:2b:85:0c:92:6f:c1:2c:f2: 9c:cf:9a:6c:7d:4d:4d:a8:cb:73:09:00:16:1d:0f: c4:42:84:83:85:29:b4:14:b6:e9:9d:2a:2a:a4:6c: a4:48:09:65:8e:ed:d6:c8:ff:fb:f4:d7:53:bb:e3: b5:c5:f9:af:c0:11:c3:a3:4c:cd:43:33:a5:c5:aa: 09:48:14:dd:9e:46:6a:30:99:49:08:82:f2:55:50: be:29:ff:63:ef:a3:f0:6c:8f:63:05:25:0d:65:e2: 22:98:60:01:a4:94:c6:9c:62:4d:fa:ee:dd:bf:b9: d4:cb:cc:ed:a5:67:ac:7c:a5:46:bb:1b:bf:ae:06: 46:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:FA:80:59:FF:21:89:92:E0:E6:59:0C:08:E2:06:BC:CB:CA:13:F6 X509v3 Authority Key Identifier: keyid:3C:EB:20:50:98:73:2C:B9:08:82:30:45:EF:D5:D7:40:25:0C:6B:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POsgUJhzLLkIgjBF79XXQCUMayc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:82:76:95:5a:20:ed:37:05:27:41:37:df:66:da:a4:8e:59: ce:44:e5:1c:aa:e6:ca:a0:30:82:51:9d:00:b6:cb:a6:a1:88: d9:97:ce:f5:3a:f2:91:77:50:f9:6a:df:1e:d1:cd:0f:d2:bc: ce:4d:ba:bc:93:58:d6:bd:83:06:86:87:38:7e:67:f4:6f:6e: 71:0a:79:63:67:a5:67:28:63:01:70:53:10:24:14:c6:7d:e2: 43:35:f9:31:11:99:90:54:ac:8d:ee:03:f8:a4:81:02:1e:5c: 52:82:4e:48:b7:cd:47:91:ff:f0:32:28:3b:70:c7:ad:e9:94: 1d:f7:c3:a2:cb:95:1b:ac:c5:ba:c0:10:f0:bf:da:1e:63:96: 05:b5:0e:50:03:1b:e5:b4:80:ea:60:45:27:bf:86:6f:0b:e1: ec:7a:68:bb:b5:1c:90:78:f4:8b:f4:af:8e:bc:0b:e8:78:5b: 30:99:da:88:85:2c:a1:40:e4:ac:1f:4b:04:df:c1:99:6c:7a: fd:80:b2:ad:11:d7:0a:01:35:72:38:3e:fc:f8:6f:3e:21:44: 1f:bf:20:de:2a:69:62:2a:48:fd:33:47:96:44:a4:74:1e:f3: 05:3b:85:e4:07:74:e3:5d:64:94:6c:65:54:21:d6:a6:09:31: 13:0a:a1:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRlFUeiO7vpeLC78qvWKEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjZWIyMDUwOTg3MzJjYjkwODgyMzA0NWVmZDVkNzQwMjUw YzZiMjcwHhcNMjYwMjA5MTIwMDMwWhcNMjYwMjEwMTIwMDMwWjAzMTEwLwYDVQQD EyhkY2ZhODA1OWZmMjE4OTkyZTBlNjU5MGMwOGUyMDZiY2NiY2ExM2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA85Z/Zi1WxnucAIBft9WweA38Bt+V 9ojscrxY0X/wbXON3YFpcDF0y3MIP9r24NdYQvdCy3lHk8qhgnOFP23pvlW5vpKA aVVvc5EqcJMp4PkQgqKsNKnyJjEj06gLtaaXL5ASK23S4LymQjf/ii7Rfnmk9Elj n3WpgJufwBowK4UMkm/BLPKcz5psfU1NqMtzCQAWHQ/EQoSDhSm0FLbpnSoqpGyk SAllju3WyP/79NdTu+O1xfmvwBHDo0zNQzOlxaoJSBTdnkZqMJlJCILyVVC+Kf9j 76PwbI9jBSUNZeIimGABpJTGnGJN+u7dv7nUy8ztpWesfKVGuxu/rgZGQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNz6gFn/IYmS4OZZDAjiBrzLyhP2MB8GA1UdIwQY MBaAFDzrIFCYcyy5CIIwRe/V10AlDGsnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUE9zZ1VKaHpMTGtJZ2pCRjc5WFhRQ1VNYXljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC85YTQyMzgtN2Q3NC00ZWRmLWE0YjEt MjVlZDc1MDQ2YjAxLzEvUE9zZ1VKaHpMTGtJZ2pCRjc5WFhRQ1VNYXljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC85YTQyMzgtN2Q3NC00ZWRmLWE0YjEtMjVlZDc1MDQ2YjAx LzEvUE9zZ1VKaHpMTGtJZ2pCRjc5WFhRQ1VNYXljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqoJ2lVog 7TcFJ0E332bapI5ZzkTlHKrmyqAwglGdALbLpqGI2ZfO9TrykXdQ+WrfHtHND9K8 zk26vJNY1r2DBoaHOH5n9G9ucQp5Y2elZyhjAXBTECQUxn3iQzX5MRGZkFSsje4D +KSBAh5cUoJOSLfNR5H/8DIoO3DHremUHffDosuVG6zFusAQ8L/aHmOWBbUOUAMb 5bSA6mBFJ7+Gbwvh7Hpou7UckHj0i/SvjrwL6HhbMJnaiIUsoUDkrB9LBN/BmWx6 /YCyrRHXCgE1cjg+/PhvPiFEH78g3ippYipI/TNHlkSkdB7zBTuF5Ad0411klGxl VCHWpgkxEwqhBw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:08:23 2026 by rpki-client