This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft File: pQl6FWrvL4L_E7PBav9vfhbbAsg.mft (raw, json) Hash identifier: zYzzl8HiQps8v3+pd7888QnIEPAcR14CySHA/dhVOPQ= Subject key identifier: CB:EE:A8:46:0F:36:37:1C:EA:A8:09:8D:DB:E7:75:89:C9:0D:86:9A Authority key identifier: A5:09:7A:15:6A:EF:2F:82:FF:13:B3:C1:6A:FF:6F:7E:16:DB:02:C8 Certificate issuer: /CN=a5097a156aef2f82ff13b3c16aff6f7e16db02c8 Certificate serial: 019C43C6DA57B604663C9F79925EA6994A4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft Manifest number: 06D7 Signing time: Mon 09 Feb 2026 19:00:31 +0000 Manifest this update: Mon 09 Feb 2026 19:00:31 +0000 Manifest next update: Tue 10 Feb 2026 19:00:31 +0000 Files and hashes: 1: gJz6RmgOr74ogolKTIbJJ0khIbY.roa (hash: nc3zZ0AuWIJRv8B+9l+JRXdB9csW2X29DxKckbvvC9Q=) 2: pQl6FWrvL4L_E7PBav9vfhbbAsg.crl (hash: C43zFp/toKmgvSBqrX/IBv5gSMAZfmUptc3ux8FzjEY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c6:da:57:b6:04:66:3c:9f:79:92:5e:a6:99:4a:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5097a156aef2f82ff13b3c16aff6f7e16db02c8 Validity Not Before: Feb 9 19:00:31 2026 GMT Not After : Feb 10 19:00:31 2026 GMT Subject: CN=cbeea8460f36371ceaa8098ddbe77589c90d869a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:af:54:38:8f:7f:7b:1c:be:99:93:3c:a2:0b: 87:01:3a:67:44:78:48:37:60:7b:40:a1:a7:0b:9e: b2:71:a0:10:f7:16:1f:62:4b:32:bb:93:2b:a3:bc: 0c:62:18:b4:b2:28:90:74:9c:c9:31:0d:cf:57:9b: 96:71:bf:e3:fb:f5:4f:3f:3b:c3:b1:08:e6:96:10: f1:d2:05:43:80:0a:83:e8:ed:00:f3:8f:4d:ff:9e: 84:a2:a8:95:03:43:5d:d5:bb:66:b4:d4:24:8e:0b: 51:8b:e5:1f:69:99:25:c5:dd:ba:2a:d4:40:99:9e: a0:75:23:84:dd:b3:99:78:04:b1:31:78:bf:97:e1: c6:f2:46:87:42:0b:68:fb:b1:16:28:49:2c:90:88: 59:2a:34:95:2a:6e:49:bb:34:0f:db:15:c6:f9:7c: 8e:65:68:e6:0c:56:55:83:5d:bb:08:77:18:3e:38: 27:7e:e1:6a:47:12:c3:cb:05:58:9a:1d:10:d2:92: 57:2d:f8:5e:e3:34:dd:3a:f3:24:df:e6:cf:c6:6c: 50:1e:92:e6:c0:02:31:30:c2:f2:ba:14:56:2b:c7: 09:99:05:72:6a:0c:9a:eb:48:e4:89:de:61:22:fb: fb:75:b1:68:72:83:cb:5a:fd:38:5f:5e:75:61:d5: a2:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:EE:A8:46:0F:36:37:1C:EA:A8:09:8D:DB:E7:75:89:C9:0D:86:9A X509v3 Authority Key Identifier: keyid:A5:09:7A:15:6A:EF:2F:82:FF:13:B3:C1:6A:FF:6F:7E:16:DB:02:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:a8:fd:e4:2d:1d:31:4b:d3:cb:41:b4:10:61:71:5f:e3:9f: 07:d3:ab:53:ce:9d:ce:34:e8:0c:a1:74:56:ae:8d:51:25:c2: 1f:0d:2b:49:0e:e2:91:39:94:7b:17:da:76:b5:99:03:82:63: 6c:e0:cb:23:78:ab:cd:4a:5d:71:fb:f1:03:fc:c6:ea:22:9e: 4b:1a:a3:5f:4a:98:94:2e:3c:3d:9b:15:af:34:6e:dd:bc:7f: 4c:ff:21:c6:24:5d:2e:97:67:d0:72:76:06:bc:cd:63:e3:10: fe:ec:6d:a4:3d:18:91:e5:34:be:b3:50:e5:0f:21:75:b0:3a: 14:2a:1a:fc:c4:cc:5e:9d:8a:5f:e4:ac:d0:58:5d:ac:10:42: ac:70:94:48:ad:93:ca:25:9a:15:76:f4:35:11:fe:82:10:54: 1f:52:54:6b:4c:99:3c:fb:a1:52:a6:41:24:3a:fd:75:09:8c: 48:60:34:61:d5:0f:8f:be:b0:72:c5:c5:d9:63:14:6b:3a:ee: 38:c5:01:42:df:03:75:4a:77:3e:eb:94:a7:60:5f:95:3c:7a: 3d:ed:cd:56:1d:6c:c5:02:ee:6b:ff:a7:42:10:e0:54:48:1f: 5f:f8:75:8e:1e:2d:5e:8c:89:1d:0c:d9:e5:1a:e8:55:4a:85: 2e:08:64:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxtpXtgRmPJ95kl6mmUpOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1MDk3YTE1NmFlZjJmODJmZjEzYjNjMTZhZmY2ZjdlMTZk YjAyYzgwHhcNMjYwMjA5MTkwMDMxWhcNMjYwMjEwMTkwMDMxWjAzMTEwLwYDVQQD EyhjYmVlYTg0NjBmMzYzNzFjZWFhODA5OGRkYmU3NzU4OWM5MGQ4NjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAta9UOI9/exy+mZM8oguHATpnRHhI N2B7QKGnC56ycaAQ9xYfYksyu5Mro7wMYhi0siiQdJzJMQ3PV5uWcb/j+/VPPzvD sQjmlhDx0gVDgAqD6O0A849N/56EoqiVA0Nd1btmtNQkjgtRi+UfaZklxd26KtRA mZ6gdSOE3bOZeASxMXi/l+HG8kaHQgto+7EWKEkskIhZKjSVKm5JuzQP2xXG+XyO ZWjmDFZVg127CHcYPjgnfuFqRxLDywVYmh0Q0pJXLfhe4zTdOvMk3+bPxmxQHpLm wAIxMMLyuhRWK8cJmQVyagya60jkid5hIvv7dbFocoPLWv04X151YdWi0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMvuqEYPNjcc6qgJjdvndYnJDYaaMB8GA1UdIwQY MBaAFKUJehVq7y+C/xOzwWr/b34W2wLIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFFsNkZXcnZMNExfRTdQQmF2OXZmaGJiQXNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi80MmY3ZjgtNzQwNy00MzJkLWJiYjUt MGQzMzk3MDdjYjg4LzEvcFFsNkZXcnZMNExfRTdQQmF2OXZmaGJiQXNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi80MmY3ZjgtNzQwNy00MzJkLWJiYjUtMGQzMzk3MDdjYjg4 LzEvcFFsNkZXcnZMNExfRTdQQmF2OXZmaGJiQXNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnqj95C0d MUvTy0G0EGFxX+OfB9OrU86dzjToDKF0Vq6NUSXCHw0rSQ7ikTmUexfadrWZA4Jj bODLI3irzUpdcfvxA/zG6iKeSxqjX0qYlC48PZsVrzRu3bx/TP8hxiRdLpdn0HJ2 BrzNY+MQ/uxtpD0YkeU0vrNQ5Q8hdbA6FCoa/MTMXp2KX+Ss0FhdrBBCrHCUSK2T yiWaFXb0NRH+ghBUH1JUa0yZPPuhUqZBJDr9dQmMSGA0YdUPj76wcsXF2WMUazru OMUBQt8DdUp3PuuUp2BflTx6Pe3NVh1sxQLua/+nQhDgVEgfX/h1jh4tXoyJHQzZ 5RroVUqFLghkUw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:38 2026 by rpki-client