This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft File: PseNgibLWq_xXGdSWvK4q8t7X5I.mft (raw, json) Hash identifier: fio8PtgKAOUNaJH2rOJjDOAP5pVTDI3XfCe9HEQh5/w= Subject key identifier: 5F:E4:BE:CE:E1:32:8D:49:9E:C2:F5:5E:E5:A8:84:4C:5D:87:F2:1D Authority key identifier: 3E:C7:8D:82:26:CB:5A:AF:F1:5C:67:52:5A:F2:B8:AB:CB:7B:5F:92 Certificate issuer: /CN=3ec78d8226cb5aaff15c67525af2b8abcb7b5f92 Certificate serial: 019C43FE4600CE804C9616B7C15F2A8F7C61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 20:01:03 +0000 Manifest this update: Mon 09 Feb 2026 20:01:03 +0000 Manifest next update: Tue 10 Feb 2026 20:01:03 +0000 Files and hashes: 1: PseNgibLWq_xXGdSWvK4q8t7X5I.crl (hash: VSR4kPrHiMSQaPSpIFY7A5KVm7xf5+hN8zzlqASkLfY=) 2: qKVtlv3W7vjWS1xd7JwxDC1EnCE.roa (hash: pQJ4/lFMndf01cjoPvkJY3R02om+5915006Zk5RIRaU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:46:00:ce:80:4c:96:16:b7:c1:5f:2a:8f:7c:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ec78d8226cb5aaff15c67525af2b8abcb7b5f92 Validity Not Before: Feb 9 20:01:03 2026 GMT Not After : Feb 10 20:01:03 2026 GMT Subject: CN=5fe4becee1328d499ec2f55ee5a8844c5d87f21d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:25:3f:05:a7:a4:78:e9:57:49:67:4b:97:3b: 94:e9:f2:86:aa:55:ce:97:95:2b:3d:be:cf:f5:44: 5e:75:6d:b9:a1:68:82:11:c9:8e:22:73:ae:ac:3a: da:ec:5d:6b:51:17:8e:8d:5b:e2:ab:25:93:8b:49: a3:fc:f2:4e:d5:a1:87:25:bc:7d:34:87:6f:c6:69: 7f:45:88:1d:3e:70:59:d2:99:45:5e:16:3d:d1:b6: 08:ab:e5:7c:08:f6:5b:65:41:c1:99:3b:95:a3:01: 31:32:0e:d9:09:d6:38:e3:2d:b6:83:17:62:f5:8e: ff:1a:42:e1:9d:34:be:c5:be:b2:8f:63:d1:f0:e4: bc:91:e4:24:3a:f2:3a:9c:1d:22:80:ba:22:dd:34: 24:53:c2:cd:dc:37:55:a8:fc:3c:39:3d:1a:f6:f3: 4e:2a:5e:d3:44:f9:d2:3f:21:f5:63:65:ca:a0:fb: a8:1e:ce:c9:7e:85:5f:4e:e8:59:4a:4b:28:83:96: 93:84:9d:eb:99:de:23:09:d1:fd:5a:13:89:c1:c5: e6:6c:34:95:e7:2a:8a:0a:70:16:e7:ee:a5:3e:ed: 1c:11:c2:6f:ca:30:28:e5:dc:bc:b0:73:4f:92:c5: dd:ac:17:fc:6a:c5:11:39:71:db:e8:a1:90:72:59: 21:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:E4:BE:CE:E1:32:8D:49:9E:C2:F5:5E:E5:A8:84:4C:5D:87:F2:1D X509v3 Authority Key Identifier: keyid:3E:C7:8D:82:26:CB:5A:AF:F1:5C:67:52:5A:F2:B8:AB:CB:7B:5F:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:24:9f:9c:9b:95:04:f2:c8:de:c8:bf:37:8e:76:20:d3:d4: 21:f4:0b:39:55:65:9c:de:a9:7a:f7:54:63:eb:af:22:19:ef: 67:e5:3e:58:d7:87:ee:4e:42:86:d9:bf:17:1a:dc:fe:dc:2a: 37:45:0b:36:a0:37:92:96:ec:95:e2:c0:17:ba:18:17:fb:e2: e7:29:d6:c9:2b:e9:1a:43:3c:6b:0c:a0:39:35:32:78:01:97: 15:a5:49:d0:e1:bb:10:13:c4:93:1e:d3:8e:04:10:a4:2c:e8: 9f:77:c2:93:c8:3b:ee:fd:cb:59:07:81:b6:a4:82:14:71:9f: 01:e4:da:d0:07:66:19:ba:21:5d:87:b0:e0:d7:0c:e7:f0:e2: cb:58:30:b2:ee:54:23:55:56:60:62:c0:9d:7b:c9:95:dd:96: 81:34:99:65:fc:89:70:df:47:04:9f:c9:17:81:d0:8c:e9:31: 5b:36:51:85:97:58:22:2f:9f:68:be:ca:b4:7a:7c:fc:03:8a: 48:5c:3e:0e:23:1c:75:87:02:ce:c7:d0:e6:1b:35:88:83:c7: 06:b1:aa:bd:5c:40:38:96:7f:23:e4:e3:8b:73:6a:41:d1:cc: 88:68:73:3a:cd:52:2b:0b:8d:f9:23:6f:c8:d4:70:a5:fe:80: 4b:37:84:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/kYAzoBMlha3wV8qj3xhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYzc4ZDgyMjZjYjVhYWZmMTVjNjc1MjVhZjJiOGFiY2I3 YjVmOTIwHhcNMjYwMjA5MjAwMTAzWhcNMjYwMjEwMjAwMTAzWjAzMTEwLwYDVQQD Eyg1ZmU0YmVjZWUxMzI4ZDQ5OWVjMmY1NWVlNWE4ODQ0YzVkODdmMjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9CU/BaekeOlXSWdLlzuU6fKGqlXO l5UrPb7P9URedW25oWiCEcmOInOurDra7F1rUReOjVviqyWTi0mj/PJO1aGHJbx9 NIdvxml/RYgdPnBZ0plFXhY90bYIq+V8CPZbZUHBmTuVowExMg7ZCdY44y22gxdi 9Y7/GkLhnTS+xb6yj2PR8OS8keQkOvI6nB0igLoi3TQkU8LN3DdVqPw8OT0a9vNO Kl7TRPnSPyH1Y2XKoPuoHs7JfoVfTuhZSksog5aThJ3rmd4jCdH9WhOJwcXmbDSV 5yqKCnAW5+6lPu0cEcJvyjAo5dy8sHNPksXdrBf8asUROXHb6KGQclkhVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF/kvs7hMo1JnsL1XuWohExdh/IdMB8GA1UdIwQY MBaAFD7HjYImy1qv8VxnUlryuKvLe1+SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHNlTmdpYkxXcV94WEdkU1d2SzRxOHQ3WDVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9kYjM3NDEtNDM0ZC00YjVhLTg5MGIt MjA1OGM3MDM2N2FhLzEvUHNlTmdpYkxXcV94WEdkU1d2SzRxOHQ3WDVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9kYjM3NDEtNDM0ZC00YjVhLTg5MGItMjA1OGM3MDM2N2Fh LzEvUHNlTmdpYkxXcV94WEdkU1d2SzRxOHQ3WDVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAACSfnJuV BPLI3si/N452INPUIfQLOVVlnN6pevdUY+uvIhnvZ+U+WNeH7k5Chtm/Fxrc/twq N0ULNqA3kpbsleLAF7oYF/vi5ynWySvpGkM8awygOTUyeAGXFaVJ0OG7EBPEkx7T jgQQpCzon3fCk8g77v3LWQeBtqSCFHGfAeTa0AdmGbohXYew4NcM5/Diy1gwsu5U I1VWYGLAnXvJld2WgTSZZfyJcN9HBJ/JF4HQjOkxWzZRhZdYIi+faL7KtHp8/AOK SFw+DiMcdYcCzsfQ5hs1iIPHBrGqvVxAOJZ/I+Tji3NqQdHMiGhzOs1SKwuN+SNv yNRwpf6ASzeEPQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:38 2026 by rpki-client