This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/pAV70TnJ_S0FGLcgOcPe_NEBpVs.mft File: pAV70TnJ_S0FGLcgOcPe_NEBpVs.mft (raw, json) Hash identifier: yD54u5IodfZZSSkntdgyKq4p0xjjJ9F3dNfH9O3A2Xs= Subject key identifier: E3:90:15:DE:77:6C:BE:7B:4E:D4:92:DA:B0:EF:CA:4E:78:50:C1:04 Authority key identifier: A4:05:7B:D1:39:C9:FD:2D:05:18:B7:20:39:C3:DE:FC:D1:01:A5:5B Certificate issuer: /CN=a4057bd139c9fd2d0518b72039c3defcd101a55b Certificate serial: 019C4322D49B5F06F998AAADD283BF12422D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAV70TnJ_S0FGLcgOcPe_NEBpVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/pAV70TnJ_S0FGLcgOcPe_NEBpVs.mft Manifest number: 0C1E Signing time: Mon 09 Feb 2026 16:01:21 +0000 Manifest this update: Mon 09 Feb 2026 16:01:21 +0000 Manifest next update: Tue 10 Feb 2026 16:01:21 +0000 Files and hashes: 1: ez-_2yXQINxTXFqz70FZ9NoROGQ.roa (hash: olw+Bd9k/ZVI7cVK/9gF+FMThvydmQHcFJPrW3uNy3k=) 2: pAV70TnJ_S0FGLcgOcPe_NEBpVs.crl (hash: 157Z+7+m01Gye3KqqfVF7ywj9WTomBpjGs4RYrwlEjg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/pAV70TnJ_S0FGLcgOcPe_NEBpVs.crl rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/pAV70TnJ_S0FGLcgOcPe_NEBpVs.mft rsync://rpki.ripe.net/repository/DEFAULT/pAV70TnJ_S0FGLcgOcPe_NEBpVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:d4:9b:5f:06:f9:98:aa:ad:d2:83:bf:12:42:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4057bd139c9fd2d0518b72039c3defcd101a55b Validity Not Before: Feb 9 16:01:21 2026 GMT Not After : Feb 10 16:01:21 2026 GMT Subject: CN=e39015de776cbe7b4ed492dab0efca4e7850c104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:fc:15:ba:95:8e:62:19:e9:1c:54:e2:72:5f: 9b:83:57:7b:11:a7:ad:ee:e6:80:65:ee:af:8d:6f: aa:5c:94:15:dc:a5:7f:43:eb:03:81:d4:72:e9:86: 02:58:70:db:13:36:6e:a8:aa:a5:b0:cd:2e:a0:e6: 02:08:41:78:9a:09:51:1a:1f:d6:22:93:a1:f4:3e: 40:d0:cd:90:29:af:4c:8e:90:2a:a9:e3:95:e2:7d: 1a:00:3c:b5:06:1f:76:07:a2:0b:d2:16:bf:95:1b: f9:2c:7e:72:2f:a5:2b:3c:4b:d2:62:30:35:e2:d3: 07:00:57:04:b7:a3:d9:d3:c4:e1:45:05:9d:4c:06: 0f:fe:d6:36:2c:c8:c8:42:bd:0c:ac:fe:ae:00:94: e9:54:52:f1:13:7e:57:f4:10:ed:fa:96:5b:b1:aa: e8:38:25:23:20:0d:66:76:72:ed:92:42:6f:03:24: c0:5a:6c:81:02:03:88:7d:0d:5d:19:cb:82:9a:98: 89:51:fb:af:a9:d8:dc:ef:95:52:4d:a1:b3:02:c8: de:f5:b9:ac:a8:cb:e7:c0:15:27:f9:7d:18:5f:e6: 88:c6:16:16:87:7c:b1:43:fd:b6:8f:a1:43:02:1a: 0a:6a:fa:e4:64:0e:7b:f8:b4:2c:d8:bf:b9:82:8f: 42:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:90:15:DE:77:6C:BE:7B:4E:D4:92:DA:B0:EF:CA:4E:78:50:C1:04 X509v3 Authority Key Identifier: keyid:A4:05:7B:D1:39:C9:FD:2D:05:18:B7:20:39:C3:DE:FC:D1:01:A5:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAV70TnJ_S0FGLcgOcPe_NEBpVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/pAV70TnJ_S0FGLcgOcPe_NEBpVs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/pAV70TnJ_S0FGLcgOcPe_NEBpVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:cf:ae:a0:44:87:e0:a6:b4:d1:dd:ee:5e:68:d5:4a:64:de: 73:44:86:4f:fb:65:d2:30:9c:16:42:61:4f:f7:d5:5a:26:d8: ee:61:ec:b8:0b:83:ee:ae:89:36:64:75:1e:39:af:9a:50:b9: 24:f8:7c:b3:2d:e2:81:48:25:57:d7:d3:ed:74:e9:62:7a:fc: 8f:2a:ac:cc:f0:f9:b1:cd:c2:9d:0e:eb:0f:b9:90:d4:81:dd: cb:c5:9e:92:f9:08:f5:d3:67:b8:6b:da:b3:d2:ad:c0:7c:aa: 45:29:a8:52:e5:0a:49:03:9e:30:a4:be:a9:ad:af:81:57:f6: 73:3a:97:06:eb:55:b4:a6:67:4d:dd:d1:08:cd:e2:85:f4:41: dc:d2:38:0f:c2:60:d0:d3:2c:6e:e6:b1:8e:7a:51:40:a2:27: 47:77:cc:e1:a1:da:71:37:0f:c6:d7:bd:e9:51:fc:25:f1:0f: 1c:41:40:92:e8:dc:c0:49:6a:53:52:2d:c3:e0:8f:33:63:cd: e6:51:5b:6a:a9:d1:1f:ff:f6:f0:55:ba:5f:94:45:19:e5:a8: f1:7f:2b:2a:a1:32:c3:06:95:8a:8c:e2:24:4c:c1:e1:cd:14: f0:cb:8a:83:33:e3:9d:73:1d:13:93:37:f6:a8:da:ee:a7:50: b2:a6:23:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDItSbXwb5mKqt0oO/EkItMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MDU3YmQxMzljOWZkMmQwNTE4YjcyMDM5YzNkZWZjZDEw MWE1NWIwHhcNMjYwMjA5MTYwMTIxWhcNMjYwMjEwMTYwMTIxWjAzMTEwLwYDVQQD EyhlMzkwMTVkZTc3NmNiZTdiNGVkNDkyZGFiMGVmY2E0ZTc4NTBjMTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifwVupWOYhnpHFTicl+bg1d7Eaet 7uaAZe6vjW+qXJQV3KV/Q+sDgdRy6YYCWHDbEzZuqKqlsM0uoOYCCEF4mglRGh/W IpOh9D5A0M2QKa9MjpAqqeOV4n0aADy1Bh92B6IL0ha/lRv5LH5yL6UrPEvSYjA1 4tMHAFcEt6PZ08ThRQWdTAYP/tY2LMjIQr0MrP6uAJTpVFLxE35X9BDt+pZbsaro OCUjIA1mdnLtkkJvAyTAWmyBAgOIfQ1dGcuCmpiJUfuvqdjc75VSTaGzAsje9bms qMvnwBUn+X0YX+aIxhYWh3yxQ/22j6FDAhoKavrkZA57+LQs2L+5go9CJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOOQFd53bL57TtSS2rDvyk54UMEEMB8GA1UdIwQY MBaAFKQFe9E5yf0tBRi3IDnD3vzRAaVbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEFWNzBUbkpfUzBGR0xjZ09jUGVfTkVCcFZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC82M2ViNTAtMTUwZi00MDFkLTkyY2Qt MTYyZDcyM2I1MTBhLzEvcEFWNzBUbkpfUzBGR0xjZ09jUGVfTkVCcFZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC82M2ViNTAtMTUwZi00MDFkLTkyY2QtMTYyZDcyM2I1MTBh LzEvcEFWNzBUbkpfUzBGR0xjZ09jUGVfTkVCcFZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe8+uoESH 4Ka00d3uXmjVSmTec0SGT/tl0jCcFkJhT/fVWibY7mHsuAuD7q6JNmR1HjmvmlC5 JPh8sy3igUglV9fT7XTpYnr8jyqszPD5sc3CnQ7rD7mQ1IHdy8WekvkI9dNnuGva s9KtwHyqRSmoUuUKSQOeMKS+qa2vgVf2czqXButVtKZnTd3RCM3ihfRB3NI4D8Jg 0NMsbuaxjnpRQKInR3fM4aHacTcPxte96VH8JfEPHEFAkujcwElqU1Itw+CPM2PN 5lFbaqnRH//28FW6X5RFGeWo8X8rKqEywwaVioziJEzB4c0U8MuKgzPjnXMdE5M3 9qja7qdQsqYjKw== -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:57 2026 by rpki-client