This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft File: pLTIq4O22Sp069zeiLwhlXxX8eg.mft (raw, json) Hash identifier: NiTmegyGIOjhOa950XRX1Xp5Gdg3R4mPVfmMHQXj334= Subject key identifier: AD:90:FF:7A:E4:6E:2B:C0:EA:DD:16:41:38:EF:6D:D3:A3:7A:4C:4B Authority key identifier: A4:B4:C8:AB:83:B6:D9:2A:74:EB:DC:DE:88:BC:21:95:7C:57:F1:E8 Certificate issuer: /CN=a4b4c8ab83b6d92a74ebdcde88bc21957c57f1e8 Certificate serial: 019C43228C2C89BDC12B1F54D252BC041B5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLTIq4O22Sp069zeiLwhlXxX8eg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft Manifest number: 180B Signing time: Mon 09 Feb 2026 16:01:03 +0000 Manifest this update: Mon 09 Feb 2026 16:01:03 +0000 Manifest next update: Tue 10 Feb 2026 16:01:03 +0000 Files and hashes: 1: pLTIq4O22Sp069zeiLwhlXxX8eg.crl (hash: R0Fyz2xzN+P8GuAzsZCdwPT5LBVi4FJJ/WHiplYcZxg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.crl rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft rsync://rpki.ripe.net/repository/DEFAULT/pLTIq4O22Sp069zeiLwhlXxX8eg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:8c:2c:89:bd:c1:2b:1f:54:d2:52:bc:04:1b:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4b4c8ab83b6d92a74ebdcde88bc21957c57f1e8 Validity Not Before: Feb 9 16:01:03 2026 GMT Not After : Feb 10 16:01:03 2026 GMT Subject: CN=ad90ff7ae46e2bc0eadd164138ef6dd3a37a4c4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:08:0f:81:a9:14:d5:42:3d:eb:73:bb:b8:07: 0f:de:04:d4:32:8f:1b:53:4e:08:d4:9e:c4:f6:3a: 1b:ca:be:7c:d1:07:06:3e:0a:13:ea:67:9f:e4:a0: 15:40:f8:e4:27:be:e9:ea:03:42:10:8c:97:da:50: 39:16:ce:0e:28:d7:2b:73:0c:fd:c1:fb:70:9f:c5: f7:43:70:20:41:eb:b5:e1:35:14:e6:61:98:4b:00: 99:1f:87:cc:92:97:fe:9f:29:32:62:93:9e:0b:f0: 37:41:27:2a:a2:f0:ee:cf:86:57:85:5a:d3:ee:c3: c7:cb:f0:4c:8d:e0:2a:f6:c8:ac:cf:0a:2c:e4:37: ed:e6:74:c2:20:d2:69:36:7d:02:b4:bc:c9:c0:b0: d0:a9:ec:fb:57:27:37:2e:74:9f:84:61:73:c6:88: ae:4c:0f:da:5f:2b:99:bc:6c:a5:dc:9f:71:2b:88: 1b:84:8b:c8:8d:81:2b:26:bf:e0:19:97:18:db:9b: c8:0a:1d:f9:37:fe:fb:2b:63:58:10:81:ea:a7:d3: e8:1f:7f:f1:3e:45:f0:64:fc:d7:bf:28:9e:6a:4e: 02:72:22:35:ef:bc:97:1f:8e:1c:82:e0:16:57:34: 16:7f:32:16:fb:da:bb:14:8d:e3:81:f0:13:9b:2a: 64:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:90:FF:7A:E4:6E:2B:C0:EA:DD:16:41:38:EF:6D:D3:A3:7A:4C:4B X509v3 Authority Key Identifier: keyid:A4:B4:C8:AB:83:B6:D9:2A:74:EB:DC:DE:88:BC:21:95:7C:57:F1:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLTIq4O22Sp069zeiLwhlXxX8eg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:c6:f0:17:1c:32:83:a7:80:d9:3c:df:5b:07:5b:8c:d7:17: 1b:d6:9e:39:23:bc:9e:24:5e:66:56:33:e8:8b:d1:a9:8b:1a: d5:f4:51:7d:7e:ef:7e:9d:d5:e8:e5:40:30:e9:94:59:b9:9a: f6:5c:4c:90:c0:eb:4b:f7:94:98:77:c4:6e:4b:2c:d3:d1:76: b4:24:da:1e:78:f7:05:64:9c:fe:d4:aa:1d:21:d0:af:0f:e8: 9f:b9:13:80:e6:3f:fa:35:bf:55:bc:ae:d4:54:2a:9a:a5:db: 8b:63:f2:fe:01:4c:32:ac:0d:b6:97:44:5a:7c:ee:39:7c:b4: 8a:fb:c3:f0:e2:b9:3b:2d:11:dd:1d:d3:07:69:45:55:11:99: cd:22:eb:8b:4c:22:73:1b:bc:9a:84:ae:2c:66:62:ff:4d:1a: 3f:0c:c7:ad:a0:48:5f:e9:d4:9d:00:79:04:73:0c:48:66:9e: ed:e6:45:ce:a5:a0:86:0a:bd:17:20:7a:8a:ba:3e:03:3c:54: 5c:7e:0f:1a:bd:f3:87:06:70:ca:ed:b1:85:7c:e0:d0:f1:81: 58:2a:54:d7:0a:50:ed:8d:3f:50:8c:77:4c:ff:5d:ef:c9:a6: d1:5f:00:69:fb:c4:e0:9a:fd:57:cd:64:ad:3c:fc:43:e9:b8: f7:1c:be:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIowsib3BKx9U0lK8BBtcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YjRjOGFiODNiNmQ5MmE3NGViZGNkZTg4YmMyMTk1N2M1 N2YxZTgwHhcNMjYwMjA5MTYwMTAzWhcNMjYwMjEwMTYwMTAzWjAzMTEwLwYDVQQD EyhhZDkwZmY3YWU0NmUyYmMwZWFkZDE2NDEzOGVmNmRkM2EzN2E0YzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQgPgakU1UI963O7uAcP3gTUMo8b U04I1J7E9jobyr580QcGPgoT6mef5KAVQPjkJ77p6gNCEIyX2lA5Fs4OKNcrcwz9 wftwn8X3Q3AgQeu14TUU5mGYSwCZH4fMkpf+nykyYpOeC/A3QScqovDuz4ZXhVrT 7sPHy/BMjeAq9siszwos5Dft5nTCINJpNn0CtLzJwLDQqez7Vyc3LnSfhGFzxoiu TA/aXyuZvGyl3J9xK4gbhIvIjYErJr/gGZcY25vICh35N/77K2NYEIHqp9PoH3/x PkXwZPzXvyieak4CciI177yXH44cguAWVzQWfzIW+9q7FI3jgfATmypkhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK2Q/3rkbivA6t0WQTjvbdOjekxLMB8GA1UdIwQY MBaAFKS0yKuDttkqdOvc3oi8IZV8V/HoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcExUSXE0TzIyU3AwNjl6ZWlMd2hsWHhYOGVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9hNWY5ZjYtMzYwNy00NWQzLTk5NGIt NTQxZTQ1MDMxNGJjLzEvcExUSXE0TzIyU3AwNjl6ZWlMd2hsWHhYOGVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9hNWY5ZjYtMzYwNy00NWQzLTk5NGItNTQxZTQ1MDMxNGJj LzEvcExUSXE0TzIyU3AwNjl6ZWlMd2hsWHhYOGVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHsbwFxwy g6eA2TzfWwdbjNcXG9aeOSO8niReZlYz6IvRqYsa1fRRfX7vfp3V6OVAMOmUWbma 9lxMkMDrS/eUmHfEbkss09F2tCTaHnj3BWSc/tSqHSHQrw/on7kTgOY/+jW/Vbyu 1FQqmqXbi2Py/gFMMqwNtpdEWnzuOXy0ivvD8OK5Oy0R3R3TB2lFVRGZzSLri0wi cxu8moSuLGZi/00aPwzHraBIX+nUnQB5BHMMSGae7eZFzqWghgq9FyB6iro+AzxU XH4PGr3zhwZwyu2xhXzg0PGBWCpU1wpQ7Y0/UIx3TP9d78mm0V8AafvE4Jr9V81k rTz8Q+m49xy+nw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:09:06 2026 by rpki-client