This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft File: PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft (raw, json) Hash identifier: u85YXhOvNPZWo2K7zaiqXllUReN63yxuMaCUSquE2Wg= Subject key identifier: 96:0C:C7:08:21:9A:7A:40:CF:36:AF:72:00:E8:55:2C:57:5C:97:9D Authority key identifier: 3C:8A:04:98:EC:3B:4E:B4:4F:4D:F2:54:1A:E3:91:80:AB:B6:5F:44 Certificate issuer: /CN=3c8a0498ec3b4eb44f4df2541ae39180abb65f44 Certificate serial: 019C4359127D88506E81EFF96A1B392F0175 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft Manifest number: 014C Signing time: Mon 09 Feb 2026 17:00:36 +0000 Manifest this update: Mon 09 Feb 2026 17:00:36 +0000 Manifest next update: Tue 10 Feb 2026 17:00:36 +0000 Files and hashes: 1: AjOeFVcLciinUkSYuM-ivopf7bY.roa (hash: dujHfSK3JJ1Up1sejLmok+P4uElPn9XkqC3TePll1TY=) 2: PIoEmOw7TrRPTfJUGuORgKu2X0Q.crl (hash: hqWAyX4OylCxiUUcHVjGkvfpgfHq07xFYbdeom9y+tY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.crl rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:12:7d:88:50:6e:81:ef:f9:6a:1b:39:2f:01:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c8a0498ec3b4eb44f4df2541ae39180abb65f44 Validity Not Before: Feb 9 17:00:36 2026 GMT Not After : Feb 10 17:00:36 2026 GMT Subject: CN=960cc708219a7a40cf36af7200e8552c575c979d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:93:aa:2f:e8:59:33:5a:c5:4c:d0:ed:04:3a: 93:88:da:5b:df:13:b3:74:77:6d:16:29:67:6c:8b: 2a:db:4c:9e:33:4c:a1:64:12:10:07:05:6c:75:e7: 76:91:f7:73:61:5f:1f:07:78:ef:47:a1:aa:84:4b: 9b:3b:90:7e:be:db:30:a9:56:fb:66:64:d8:e7:6a: 8a:b5:54:e3:64:f3:52:66:62:a0:06:38:49:21:4c: 8f:26:8d:d1:fc:88:27:84:ee:27:fb:e4:c6:12:c2: a2:04:54:65:e0:83:07:4d:26:9c:02:49:77:ed:55: c3:5e:27:41:b2:9c:e0:4a:b5:d7:3e:95:05:9a:63: 79:fc:d5:98:4b:ac:3f:df:3d:f5:23:bc:a3:67:28: d1:b8:66:ab:b8:0b:bd:2f:c5:cc:7a:1d:a2:dc:2b: 9c:50:a4:6f:46:43:b0:d2:8c:d3:29:2b:cb:7b:71: 46:1f:f6:34:cb:0a:74:c4:c2:62:b4:f1:96:82:d0: 4c:5c:46:8a:37:60:9d:6c:3c:06:e4:ee:e2:b2:3d: 97:3e:41:0a:90:e6:83:33:a3:50:d9:ad:67:e2:ba: ab:c8:94:62:9f:21:9c:61:bd:26:29:b7:b1:aa:bb: b5:05:7e:b9:30:2e:7f:1d:b7:20:ca:5a:a2:cc:ef: 96:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:0C:C7:08:21:9A:7A:40:CF:36:AF:72:00:E8:55:2C:57:5C:97:9D X509v3 Authority Key Identifier: keyid:3C:8A:04:98:EC:3B:4E:B4:4F:4D:F2:54:1A:E3:91:80:AB:B6:5F:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:2b:c3:59:ac:23:21:e0:aa:ec:a4:75:27:2a:a1:42:d2:88: 87:8c:53:cd:8d:54:19:5e:dc:45:9d:2a:55:73:28:b1:12:50: 9a:27:65:0a:de:41:9b:84:0b:07:1f:0b:aa:4d:55:69:ee:25: 76:f4:89:48:75:07:e8:e6:a7:a5:ea:4a:8e:fb:3d:2c:63:bd: 57:0b:33:f0:99:c4:30:e2:f9:82:e8:72:1e:b7:25:4b:74:97: 82:e7:45:cb:df:e7:67:b2:a7:ab:90:e6:c3:a9:22:b1:78:7c: 82:2c:79:c7:77:61:86:59:19:91:d1:92:aa:7c:f1:9c:cb:24: 11:54:c4:c3:ef:a5:5d:13:6c:81:a7:2b:be:5e:93:fb:80:60: f9:05:33:f5:6a:09:6a:b2:a4:4b:1b:5d:7f:2e:c5:cb:6c:55: 37:9a:e8:41:2e:14:08:da:d3:ea:44:ce:ea:97:49:40:36:c2: 46:c2:04:ec:e4:65:8e:14:7d:58:d8:0d:15:76:61:af:55:21: c7:ec:0f:60:bd:8a:47:85:49:85:d1:c3:44:07:e0:c4:45:c5: f1:f7:e9:af:31:55:fa:5b:c1:37:ca:a0:3e:87:53:2b:4b:41: fd:21:a9:38:00:01:60:37:3f:d3:81:52:2b:69:d2:05:d2:c0: 0b:90:7d:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWRJ9iFBuge/5ahs5LwF1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjOGEwNDk4ZWMzYjRlYjQ0ZjRkZjI1NDFhZTM5MTgwYWJi NjVmNDQwHhcNMjYwMjA5MTcwMDM2WhcNMjYwMjEwMTcwMDM2WjAzMTEwLwYDVQQD Eyg5NjBjYzcwODIxOWE3YTQwY2YzNmFmNzIwMGU4NTUyYzU3NWM5NzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpOqL+hZM1rFTNDtBDqTiNpb3xOz dHdtFilnbIsq20yeM0yhZBIQBwVsded2kfdzYV8fB3jvR6GqhEubO5B+vtswqVb7 ZmTY52qKtVTjZPNSZmKgBjhJIUyPJo3R/IgnhO4n++TGEsKiBFRl4IMHTSacAkl3 7VXDXidBspzgSrXXPpUFmmN5/NWYS6w/3z31I7yjZyjRuGaruAu9L8XMeh2i3Cuc UKRvRkOw0ozTKSvLe3FGH/Y0ywp0xMJitPGWgtBMXEaKN2CdbDwG5O7isj2XPkEK kOaDM6NQ2a1n4rqryJRinyGcYb0mKbexqru1BX65MC5/HbcgylqizO+WrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJYMxwghmnpAzzavcgDoVSxXXJedMB8GA1UdIwQY MBaAFDyKBJjsO060T03yVBrjkYCrtl9EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUElvRW1PdzdUclJQVGZKVUd1T1JnS3UyWDBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8wMmY2M2UtNGVhMi00M2FjLWFiZDUt MGRhYjIzMTI5MDJhLzEvUElvRW1PdzdUclJQVGZKVUd1T1JnS3UyWDBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8wMmY2M2UtNGVhMi00M2FjLWFiZDUtMGRhYjIzMTI5MDJh LzEvUElvRW1PdzdUclJQVGZKVUd1T1JnS3UyWDBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbivDWawj IeCq7KR1JyqhQtKIh4xTzY1UGV7cRZ0qVXMosRJQmidlCt5Bm4QLBx8Lqk1Vae4l dvSJSHUH6OanpepKjvs9LGO9Vwsz8JnEMOL5guhyHrclS3SXgudFy9/nZ7Knq5Dm w6kisXh8gix5x3dhhlkZkdGSqnzxnMskEVTEw++lXRNsgacrvl6T+4Bg+QUz9WoJ arKkSxtdfy7Fy2xVN5roQS4UCNrT6kTO6pdJQDbCRsIE7ORljhR9WNgNFXZhr1Uh x+wPYL2KR4VJhdHDRAfgxEXF8ffprzFV+lvBN8qgPodTK0tB/SGpOAABYDc/04FS K2nSBdLAC5B9DA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:14 2026 by rpki-client