This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft File: P5YkCZj85BJMPLTfusuw7RYYQFo.mft (raw, json) Hash identifier: pBYNC50VFVzCTNR3BO98PiSR7OxeKygB8u4eFiE6FYo= Subject key identifier: 57:CF:EB:1E:14:1F:7A:8B:05:61:45:0E:0F:1A:EB:D7:EA:64:A4:20 Authority key identifier: 3F:96:24:09:98:FC:E4:12:4C:3C:B4:DF:BA:CB:B0:ED:16:18:40:5A Certificate issuer: /CN=3f96240998fce4124c3cb4dfbacbb0ed1618405a Certificate serial: 019C42EADFC2F44D85D9D58B422ADA8EDF26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft Manifest number: 1813 Signing time: Mon 09 Feb 2026 15:00:14 +0000 Manifest this update: Mon 09 Feb 2026 15:00:14 +0000 Manifest next update: Tue 10 Feb 2026 15:00:14 +0000 Files and hashes: 1: 8ncEIlz1-5zSR1QhL0rDdEkpqI4.roa (hash: nuQfSOfvY6zkx/iP7wr0MpQfCSukhDWy8/9CULyV7C4=) 2: P5YkCZj85BJMPLTfusuw7RYYQFo.crl (hash: rOEclrUoykM8Ihq8TPn6yvaCPWAJ11W0rwHwvqDML+0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:ea:df:c2:f4:4d:85:d9:d5:8b:42:2a:da:8e:df:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f96240998fce4124c3cb4dfbacbb0ed1618405a Validity Not Before: Feb 9 15:00:14 2026 GMT Not After : Feb 10 15:00:14 2026 GMT Subject: CN=57cfeb1e141f7a8b0561450e0f1aebd7ea64a420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4a:74:49:c5:49:68:df:65:49:81:a5:e8:a7: ed:df:fb:ea:67:69:32:ae:ae:49:75:d2:7e:21:4a: 00:52:83:a7:db:ba:56:fb:11:99:d2:01:9b:00:eb: 10:d7:8f:d2:1e:af:75:e9:6c:e3:0b:69:7e:b0:e1: 15:96:9c:92:2e:25:66:f4:b0:53:38:f4:e5:4e:f4: bb:41:a9:ed:f1:62:e6:9b:fe:5a:27:a2:db:6d:36: 80:54:05:4f:32:7b:dd:57:f6:0f:fc:af:e2:64:bf: a4:e6:32:a0:98:4d:94:3c:b0:68:11:8d:6b:e2:80: f1:64:a2:95:83:fc:3d:fb:3f:8d:05:b5:c0:bf:ee: fe:23:0f:c7:2e:93:10:03:7b:a9:03:1a:a0:40:2b: fc:28:5a:51:75:37:d1:9c:41:56:ae:67:aa:b2:d5: d2:a0:e8:74:48:d9:c8:2c:92:5a:50:6f:41:ff:31: d9:a1:ba:7f:bd:8a:5d:66:d9:c2:eb:55:89:04:96: 69:35:1b:bf:ee:87:cf:0a:bd:63:21:58:c4:ca:48: 69:4f:91:3d:9e:05:bc:70:28:d6:5f:78:cd:56:3b: c8:f4:6b:1e:95:2c:cd:2b:b4:0f:b7:1d:45:c0:58: a5:4f:0b:75:93:f7:db:5e:84:1d:46:f2:ec:ec:0f: 07:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:CF:EB:1E:14:1F:7A:8B:05:61:45:0E:0F:1A:EB:D7:EA:64:A4:20 X509v3 Authority Key Identifier: keyid:3F:96:24:09:98:FC:E4:12:4C:3C:B4:DF:BA:CB:B0:ED:16:18:40:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:c2:1c:01:bf:bf:58:2c:66:a4:b1:96:a7:65:99:bd:ea:d7: 7f:07:37:19:ac:e9:47:a2:e2:e1:6b:62:8f:7e:24:8e:e6:7c: 5b:aa:8e:45:3a:4a:f6:a4:01:f0:b3:d9:84:3e:a2:ff:42:03: 8e:90:16:c9:4d:ca:91:e1:fe:2e:3c:a2:e6:6b:b5:94:99:2f: d5:ff:8f:9c:d5:20:84:83:33:5b:05:24:0d:88:13:c1:6c:f9: 7d:55:ae:69:d7:21:54:f1:d2:0d:da:66:25:36:47:e5:6f:05: 57:15:ea:1f:61:05:15:10:ba:03:3a:17:93:bd:bc:a8:ee:a6: ed:d3:f1:ab:65:6c:07:5e:9c:79:ce:bb:d5:de:0d:44:9a:39: fa:dd:06:2a:3f:df:06:d8:9e:2d:47:17:d8:0a:8b:df:a8:58: 3a:a3:ea:a9:a1:74:f5:1b:39:40:40:9e:ff:cb:5d:0b:cc:7b: 24:af:24:f8:9d:db:23:76:ac:53:d7:40:39:09:c3:df:c6:2b: 9e:2c:3a:1f:ea:e8:eb:7e:a0:d1:13:30:4c:c8:8b:55:04:16: 36:1f:51:00:c3:21:af:e7:4a:1c:d2:e4:ae:42:c3:f7:de:43: 66:7a:d0:6c:f5:6a:fe:3a:12:0e:6c:ac:c5:8d:56:01:ce:ca: 0b:a8:f8:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6t/C9E2F2dWLQirajt8mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmOTYyNDA5OThmY2U0MTI0YzNjYjRkZmJhY2JiMGVkMTYx ODQwNWEwHhcNMjYwMjA5MTUwMDE0WhcNMjYwMjEwMTUwMDE0WjAzMTEwLwYDVQQD Eyg1N2NmZWIxZTE0MWY3YThiMDU2MTQ1MGUwZjFhZWJkN2VhNjRhNDIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0p0ScVJaN9lSYGl6Kft3/vqZ2ky rq5JddJ+IUoAUoOn27pW+xGZ0gGbAOsQ14/SHq916WzjC2l+sOEVlpySLiVm9LBT OPTlTvS7Qant8WLmm/5aJ6LbbTaAVAVPMnvdV/YP/K/iZL+k5jKgmE2UPLBoEY1r 4oDxZKKVg/w9+z+NBbXAv+7+Iw/HLpMQA3upAxqgQCv8KFpRdTfRnEFWrmeqstXS oOh0SNnILJJaUG9B/zHZobp/vYpdZtnC61WJBJZpNRu/7ofPCr1jIVjEykhpT5E9 ngW8cCjWX3jNVjvI9GselSzNK7QPtx1FwFilTwt1k/fbXoQdRvLs7A8HnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFfP6x4UH3qLBWFFDg8a69fqZKQgMB8GA1UdIwQY MBaAFD+WJAmY/OQSTDy037rLsO0WGEBaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDVZa0Naajg1QkpNUExUZnVzdXc3UllZUUZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi82MGZlYzctMGI1MS00NDQ2LTliNWQt Yzc0MWMyN2I0ZTIyLzEvUDVZa0Naajg1QkpNUExUZnVzdXc3UllZUUZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi82MGZlYzctMGI1MS00NDQ2LTliNWQtYzc0MWMyN2I0ZTIy LzEvUDVZa0Naajg1QkpNUExUZnVzdXc3UllZUUZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJMIcAb+/ WCxmpLGWp2WZverXfwc3GazpR6Li4Wtij34kjuZ8W6qORTpK9qQB8LPZhD6i/0ID jpAWyU3KkeH+Ljyi5mu1lJkv1f+PnNUghIMzWwUkDYgTwWz5fVWuadchVPHSDdpm JTZH5W8FVxXqH2EFFRC6AzoXk728qO6m7dPxq2VsB16cec671d4NRJo5+t0GKj/f BtieLUcX2AqL36hYOqPqqaF09Rs5QECe/8tdC8x7JK8k+J3bI3asU9dAOQnD38Yr niw6H+ro636g0RMwTMiLVQQWNh9RAMMhr+dKHNLkrkLD995DZnrQbPVq/joSDmys xY1WAc7KC6j4tA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:53 2026 by rpki-client