This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.mft File: Pc9PDCdz75iQD5w1kHXMph0XwLM.mft (raw, json) Hash identifier: pTPX2TsI6lWWUhrNjDhqenrw+wlnvCVpsEYlg+5Y/1M= Subject key identifier: 58:B1:F0:B9:79:01:1A:61:2C:1C:E1:4F:65:53:C5:88:76:67:06:61 Authority key identifier: 3D:CF:4F:0C:27:73:EF:98:90:0F:9C:35:90:75:CC:A6:1D:17:C0:B3 Certificate issuer: /CN=3dcf4f0c2773ef98900f9c359075cca61d17c0b3 Certificate serial: 019C43FE700CBB4C5F3C47A7733F70098FBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pc9PDCdz75iQD5w1kHXMph0XwLM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.mft Manifest number: 180C Signing time: Mon 09 Feb 2026 20:01:14 +0000 Manifest this update: Mon 09 Feb 2026 20:01:14 +0000 Manifest next update: Tue 10 Feb 2026 20:01:14 +0000 Files and hashes: 1: Pc9PDCdz75iQD5w1kHXMph0XwLM.crl (hash: G2bYf9hIdKk7bjrrCsqqnCG8PqMo2db9m2hPqNFYTC0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.crl rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.mft rsync://rpki.ripe.net/repository/DEFAULT/Pc9PDCdz75iQD5w1kHXMph0XwLM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:70:0c:bb:4c:5f:3c:47:a7:73:3f:70:09:8f:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3dcf4f0c2773ef98900f9c359075cca61d17c0b3 Validity Not Before: Feb 9 20:01:14 2026 GMT Not After : Feb 10 20:01:14 2026 GMT Subject: CN=58b1f0b979011a612c1ce14f6553c58876670661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:af:05:e4:4b:f4:b8:4d:5e:46:fb:f6:d3:81: 48:bb:b9:ef:0b:d6:03:96:8d:13:56:c1:f7:25:f3: ce:23:50:b0:b2:0c:09:c8:68:c3:00:b4:90:98:81: e4:10:c0:d3:c9:bd:8c:6b:90:11:7f:e8:41:d2:1a: a2:bb:8a:d2:9b:1e:a8:3e:94:96:d7:79:97:64:88: 3f:29:0a:f0:f6:11:75:15:eb:a1:ad:ab:89:92:b4: eb:df:20:2e:3d:a0:6b:6a:2c:47:e1:3c:b5:ee:46: 76:5c:6d:40:00:3a:4d:f6:75:c2:7c:29:ea:ac:d5: 9f:6f:8e:99:e9:58:b5:37:ab:d9:a6:92:70:44:85: 6e:a9:25:5e:83:33:67:a4:d9:96:ed:99:a0:6c:1e: 24:96:d5:af:d9:b7:22:1c:7d:b0:1b:6c:46:ab:68: 6b:71:60:05:da:a7:b8:62:c6:2e:9f:a9:a3:a8:ea: ad:e6:e8:70:d2:a2:ab:12:bf:40:fb:fc:12:47:cc: 93:a9:a5:8e:a4:de:e4:3a:2e:21:13:56:0a:ea:e3: 38:d1:e1:b6:2e:6b:8b:65:1a:3a:aa:6d:c9:26:07: d1:f6:11:2e:33:a5:88:78:ec:4a:82:92:ca:ee:85: 6b:b8:5b:a2:39:d6:8b:6f:b7:71:b2:88:bd:f9:6a: 39:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:B1:F0:B9:79:01:1A:61:2C:1C:E1:4F:65:53:C5:88:76:67:06:61 X509v3 Authority Key Identifier: keyid:3D:CF:4F:0C:27:73:EF:98:90:0F:9C:35:90:75:CC:A6:1D:17:C0:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pc9PDCdz75iQD5w1kHXMph0XwLM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:81:f1:0d:3f:25:1a:d3:63:e2:8a:a0:cb:29:0b:82:8f:32: 92:af:37:b8:74:de:b4:91:c1:f8:fc:f5:fd:2e:bf:04:f9:c2: 23:7e:f7:87:b2:00:3d:1f:fb:f6:6f:b4:ff:cb:0a:76:b6:f3: f4:3f:d6:06:08:f7:05:3a:18:3a:97:ae:8c:13:4a:6f:72:76: 55:4c:f0:cb:32:c0:64:e4:c5:da:01:a5:d4:0c:23:66:7e:9e: 39:25:a4:ef:1c:36:d7:c5:ff:5f:11:75:cb:fe:c3:bc:66:f3: f0:fc:4e:cb:4d:f7:6d:eb:ae:ee:29:f6:75:5b:34:57:3b:35: 90:30:31:b7:ee:b3:1d:6e:e5:4d:3e:bf:5f:57:16:4f:82:d6: b8:91:b9:55:47:f1:ee:47:c9:da:b9:08:84:98:41:33:8b:7d: 1d:ed:0d:37:ea:7b:b2:cd:eb:0d:a1:72:28:b5:cc:63:56:b8: 22:e9:bf:09:99:2c:ce:48:d0:0b:52:b0:0b:ca:86:be:a1:55: 36:f8:7d:53:16:bf:1d:6f:d5:6f:1f:59:68:33:4c:9a:68:83: f4:db:d0:f9:59:06:c8:c3:e0:15:a4:4e:cf:a3:e1:67:1a:c1: e7:e8:33:97:1d:31:6e:32:e9:d5:f3:db:11:60:80:9c:4c:ef: d7:a1:e5:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/nAMu0xfPEencz9wCY++MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkY2Y0ZjBjMjc3M2VmOTg5MDBmOWMzNTkwNzVjY2E2MWQx N2MwYjMwHhcNMjYwMjA5MjAwMTE0WhcNMjYwMjEwMjAwMTE0WjAzMTEwLwYDVQQD Eyg1OGIxZjBiOTc5MDExYTYxMmMxY2UxNGY2NTUzYzU4ODc2NjcwNjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAla8F5Ev0uE1eRvv204FIu7nvC9YD lo0TVsH3JfPOI1CwsgwJyGjDALSQmIHkEMDTyb2Ma5ARf+hB0hqiu4rSmx6oPpSW 13mXZIg/KQrw9hF1FeuhrauJkrTr3yAuPaBraixH4Ty17kZ2XG1AADpN9nXCfCnq rNWfb46Z6Vi1N6vZppJwRIVuqSVegzNnpNmW7ZmgbB4kltWv2bciHH2wG2xGq2hr cWAF2qe4YsYun6mjqOqt5uhw0qKrEr9A+/wSR8yTqaWOpN7kOi4hE1YK6uM40eG2 LmuLZRo6qm3JJgfR9hEuM6WIeOxKgpLK7oVruFuiOdaLb7dxsoi9+Wo57wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFix8Ll5ARphLBzhT2VTxYh2ZwZhMB8GA1UdIwQY MBaAFD3PTwwnc++YkA+cNZB1zKYdF8CzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGM5UERDZHo3NWlRRDV3MWtIWE1waDBYd0xNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8wOTgxNzItYzk4YS00OGZjLWFmYzYt M2JkZTczOTZiN2I0LzEvUGM5UERDZHo3NWlRRDV3MWtIWE1waDBYd0xNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8wOTgxNzItYzk4YS00OGZjLWFmYzYtM2JkZTczOTZiN2I0 LzEvUGM5UERDZHo3NWlRRDV3MWtIWE1waDBYd0xNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGIHxDT8l GtNj4oqgyykLgo8ykq83uHTetJHB+Pz1/S6/BPnCI373h7IAPR/79m+0/8sKdrbz 9D/WBgj3BToYOpeujBNKb3J2VUzwyzLAZOTF2gGl1AwjZn6eOSWk7xw218X/XxF1 y/7DvGbz8PxOy033beuu7in2dVs0Vzs1kDAxt+6zHW7lTT6/X1cWT4LWuJG5VUfx 7kfJ2rkIhJhBM4t9He0NN+p7ss3rDaFyKLXMY1a4Ium/CZkszkjQC1KwC8qGvqFV Nvh9Uxa/HW/Vbx9ZaDNMmmiD9NvQ+VkGyMPgFaROz6PhZxrB5+gzlx0xbjLp1fPb EWCAnEzv16HlCg== -----END CERTIFICATE-----Generated at Tue Feb 10 02:55:05 2026 by rpki-client