This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft File: P98IRZEZlp1LnBf1qF6ScyxVF9E.mft (raw, json) Hash identifier: XpUvOPyc1ObdhP7rth//trpczRsUiYK6yeCyVT9714I= Subject key identifier: 3E:E7:40:FB:26:56:31:24:62:CE:56:A9:D6:33:8E:E0:A6:5C:60:3D Authority key identifier: 3F:DF:08:45:91:19:96:9D:4B:9C:17:F5:A8:5E:92:73:2C:55:17:D1 Certificate issuer: /CN=3fdf08459119969d4b9c17f5a85e92732c5517d1 Certificate serial: 019C420F4A75AD2E8D74755FE350524AA014 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft Manifest number: 17F7 Signing time: Mon 09 Feb 2026 11:00:24 +0000 Manifest this update: Mon 09 Feb 2026 11:00:24 +0000 Manifest next update: Tue 10 Feb 2026 11:00:24 +0000 Files and hashes: 1: P98IRZEZlp1LnBf1qF6ScyxVF9E.crl (hash: dmnbZJSqYa9tz2pHJTpmPAVbpnWJPY8UgoXYMpkWTOo=) 2: fH_gcKdAIP3uBlIddsjG_0qsj3E.roa (hash: L4lQAURP1ERgbM6Iiwl8JhlSrJdP31F20qdbJNDofes=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:4a:75:ad:2e:8d:74:75:5f:e3:50:52:4a:a0:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fdf08459119969d4b9c17f5a85e92732c5517d1 Validity Not Before: Feb 9 11:00:24 2026 GMT Not After : Feb 10 11:00:24 2026 GMT Subject: CN=3ee740fb2656312462ce56a9d6338ee0a65c603d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ee:53:39:c0:55:cf:25:8a:0d:8e:0f:59:c0: 41:48:f6:8c:66:31:55:ec:7d:da:70:a2:c7:4d:af: a2:ee:60:66:74:ed:0f:7b:5e:e4:20:4c:f4:c7:89: 3a:37:79:a1:31:78:33:73:29:e6:bb:d8:10:0c:2e: 5a:2b:79:e3:d6:b2:e9:8d:84:6f:f9:d9:fd:c0:4a: 8e:c5:a5:c4:30:ee:1a:48:af:a3:28:fa:1a:2c:32: 46:00:84:15:b4:6b:49:b1:1d:b6:25:47:c6:a1:1d: 24:68:66:db:ab:5d:09:2e:28:47:82:ab:93:28:8d: d9:58:ec:fb:5c:fb:35:82:7c:1b:06:af:da:58:ee: b8:11:9c:bd:a2:38:0d:c1:f6:0d:96:d7:09:c0:0c: c6:f5:df:5a:33:99:bf:f8:7e:cb:a9:65:f6:09:c1: 79:5c:bb:1c:3c:ba:60:14:40:df:92:a3:60:d9:8c: 9b:50:5f:d9:d2:aa:eb:ac:b1:16:fd:a1:cb:9c:59: 4f:6d:bb:27:72:96:11:8e:79:57:a3:ee:16:58:23: b2:48:2c:11:7f:57:7f:dd:af:84:df:7b:1c:31:a4: 83:98:74:43:76:a4:ce:0e:c4:f2:a4:3d:ad:be:af: 56:83:29:62:b5:f8:0f:20:be:1a:b3:66:c5:c7:35: bf:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:E7:40:FB:26:56:31:24:62:CE:56:A9:D6:33:8E:E0:A6:5C:60:3D X509v3 Authority Key Identifier: keyid:3F:DF:08:45:91:19:96:9D:4B:9C:17:F5:A8:5E:92:73:2C:55:17:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:3c:52:2b:e2:08:6c:43:bd:b2:56:c3:e6:9f:68:11:1f:4c: 6c:8e:b4:31:f8:63:3c:1e:0e:dc:9c:96:a1:0f:e0:98:c4:bf: 90:d2:6f:f5:58:81:a2:14:01:25:84:f5:c3:32:e8:bc:2a:c7: 03:2c:bc:7c:31:cb:82:e4:e3:e3:0b:ca:b4:65:08:38:e3:b4: 93:96:10:df:6d:9a:a1:13:a0:56:3e:95:68:d4:a1:b2:09:f8: 83:38:11:ac:4a:c8:a3:ca:02:eb:d2:d8:c5:47:3b:08:58:48: 22:20:45:5d:d3:26:04:82:94:a0:95:b2:6f:43:af:15:eb:52: 0e:e4:ae:54:c9:cb:58:28:78:25:b7:3d:c4:94:e8:e0:81:3b: ab:71:a4:bd:fe:19:84:18:9a:d4:3f:3f:1f:d1:5f:c4:68:08: 1c:9b:c2:b8:15:69:18:c0:04:5d:5c:5c:4c:60:96:22:1c:16: db:24:db:88:a5:d9:82:25:d4:b7:b1:fc:f9:ee:41:b2:f4:47: 66:36:a3:de:fa:9d:43:f7:90:fb:41:91:b9:50:e0:aa:a5:41: 7a:38:a8:4e:88:d3:81:7a:aa:c3:5d:7e:51:8f:36:05:d6:9f: 7f:4a:f4:49:f8:42:86:0f:6f:1a:05:fc:dd:2c:12:5f:26:35: 83:78:da:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD0p1rS6NdHVf41BSSqAUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZGYwODQ1OTExOTk2OWQ0YjljMTdmNWE4NWU5MjczMmM1 NTE3ZDEwHhcNMjYwMjA5MTEwMDI0WhcNMjYwMjEwMTEwMDI0WjAzMTEwLwYDVQQD EygzZWU3NDBmYjI2NTYzMTI0NjJjZTU2YTlkNjMzOGVlMGE2NWM2MDNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6e5TOcBVzyWKDY4PWcBBSPaMZjFV 7H3acKLHTa+i7mBmdO0Pe17kIEz0x4k6N3mhMXgzcynmu9gQDC5aK3nj1rLpjYRv +dn9wEqOxaXEMO4aSK+jKPoaLDJGAIQVtGtJsR22JUfGoR0kaGbbq10JLihHgquT KI3ZWOz7XPs1gnwbBq/aWO64EZy9ojgNwfYNltcJwAzG9d9aM5m/+H7LqWX2CcF5 XLscPLpgFEDfkqNg2YybUF/Z0qrrrLEW/aHLnFlPbbsncpYRjnlXo+4WWCOySCwR f1d/3a+E33scMaSDmHRDdqTODsTypD2tvq9WgylitfgPIL4as2bFxzW/EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD7nQPsmVjEkYs5WqdYzjuCmXGA9MB8GA1UdIwQY MBaAFD/fCEWRGZadS5wX9aheknMsVRfRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDk4SVJaRVpscDFMbkJmMXFGNlNjeXhWRjlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi81NjQ1Y2ItZjBiYS00NGZjLWJhOTMt NzM2OWYyY2E1YjNiLzEvUDk4SVJaRVpscDFMbkJmMXFGNlNjeXhWRjlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi81NjQ1Y2ItZjBiYS00NGZjLWJhOTMtNzM2OWYyY2E1YjNi LzEvUDk4SVJaRVpscDFMbkJmMXFGNlNjeXhWRjlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmDxSK+II bEO9slbD5p9oER9MbI60MfhjPB4O3JyWoQ/gmMS/kNJv9ViBohQBJYT1wzLovCrH Ayy8fDHLguTj4wvKtGUIOOO0k5YQ322aoROgVj6VaNShsgn4gzgRrErIo8oC69LY xUc7CFhIIiBFXdMmBIKUoJWyb0OvFetSDuSuVMnLWCh4Jbc9xJTo4IE7q3Gkvf4Z hBia1D8/H9FfxGgIHJvCuBVpGMAEXVxcTGCWIhwW2yTbiKXZgiXUt7H8+e5BsvRH Zjaj3vqdQ/eQ+0GRuVDgqqVBejioTojTgXqqw11+UY82Bdaff0r0SfhChg9vGgX8 3SwSXyY1g3jaiQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:14 2026 by rpki-client