This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft File: Psb9kdKkNl09wWch_t9pIXK7MHM.mft (raw, json) Hash identifier: sIUpI9KUnserb5KTG6ShLY8Y0FMDa637t2NudyC1nwg= Subject key identifier: 04:7B:48:F2:FD:91:7A:18:B1:55:EA:E5:49:1D:0E:CD:E2:C9:7B:D0 Authority key identifier: 3E:C6:FD:91:D2:A4:36:5D:3D:C1:67:21:FE:DF:69:21:72:BB:30:73 Certificate issuer: /CN=3ec6fd91d2a4365d3dc16721fedf692172bb3073 Certificate serial: 019C427DA3A7FC1D4DF6E75AA5352F3DF9A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft Manifest number: 1554 Signing time: Mon 09 Feb 2026 13:00:56 +0000 Manifest this update: Mon 09 Feb 2026 13:00:56 +0000 Manifest next update: Tue 10 Feb 2026 13:00:56 +0000 Files and hashes: 1: Psb9kdKkNl09wWch_t9pIXK7MHM.crl (hash: WR0PT97V8aOjyz71jLj29KVSpQVLBpJZMOJ789Z6h28=) 2: jA_MaskNZFY8z3uRE6NiAvucTrk.roa (hash: Vxa7/BRh9g/VVz94ZqeAg8BjOYIzREIfs64pIZKkHnc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.crl rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:a3:a7:fc:1d:4d:f6:e7:5a:a5:35:2f:3d:f9:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ec6fd91d2a4365d3dc16721fedf692172bb3073 Validity Not Before: Feb 9 13:00:56 2026 GMT Not After : Feb 10 13:00:56 2026 GMT Subject: CN=047b48f2fd917a18b155eae5491d0ecde2c97bd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0f:04:90:ee:08:1a:46:47:ce:0e:9a:d3:6f: 18:c3:eb:4b:02:b3:c0:b5:f4:01:00:03:a2:45:53: fc:51:80:29:2c:51:50:bc:42:b7:89:75:85:9b:37: db:16:21:1b:ad:b6:ae:e1:5a:d8:f3:f5:7c:7a:4f: 5d:59:b5:f7:de:55:a0:a7:6b:b8:b2:e5:13:28:46: 56:29:24:4a:e2:a8:42:6d:59:50:62:89:c6:fd:b9: 70:d2:c0:12:13:65:92:e9:79:cf:b1:3b:b8:70:1d: 01:0f:b3:25:4a:ea:b2:d6:a0:d8:3d:66:a1:c2:d7: 78:c0:a1:39:8e:d4:83:e9:12:a2:2e:94:f6:e0:bf: 07:4e:f5:45:41:39:b7:80:0f:a3:b4:eb:e3:07:63: 76:52:c8:d5:b1:1a:cb:d7:a8:bb:4d:89:68:f9:3e: 2f:0f:99:ec:db:88:5f:df:05:59:d3:85:75:f8:01: 78:e7:ef:3e:fc:b4:b0:ef:6c:fd:40:b4:36:7a:2f: 7b:34:e4:60:c3:26:bc:f5:0e:f9:8f:c4:5e:80:f6: 18:e4:66:b5:6b:47:00:44:0d:43:3a:a2:4c:99:1d: 0b:fe:4a:97:57:e2:80:b7:d8:6f:2e:28:9a:9b:28: ac:17:e0:70:b9:e6:f3:01:8f:a0:1c:42:d9:15:78: 4b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:7B:48:F2:FD:91:7A:18:B1:55:EA:E5:49:1D:0E:CD:E2:C9:7B:D0 X509v3 Authority Key Identifier: keyid:3E:C6:FD:91:D2:A4:36:5D:3D:C1:67:21:FE:DF:69:21:72:BB:30:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:58:c7:3d:1f:d3:a6:7f:6b:b7:b8:23:67:f3:fc:57:d9:82: 11:93:ff:e1:a9:64:6f:ea:05:de:c5:6d:bd:57:fe:8f:17:9f: fc:b5:f9:06:b1:60:d7:c8:0c:56:43:80:d5:4a:07:6b:cb:6a: 45:b5:f1:2f:90:b1:16:10:81:b6:01:ff:9d:71:2c:82:eb:c2: 7c:65:60:7f:7e:d0:a3:12:96:ac:dd:e3:7a:79:5a:bc:ab:dd: 6b:2d:24:33:8c:70:19:44:22:ae:b5:1d:70:4e:71:ff:7e:ad: 79:da:26:eb:ed:87:4d:01:34:27:fd:28:80:d9:15:d2:0d:76: 0b:b6:0f:66:51:36:59:ad:70:e4:ea:91:0f:a7:f0:48:03:39: 9d:12:9e:b2:2d:4e:cc:ae:2f:bc:7e:96:ff:c9:cb:67:77:72: d4:18:2d:3f:a9:58:42:b0:5f:43:8e:c5:13:0f:95:29:a3:54: bc:d8:ba:49:05:9d:71:fb:b0:cb:18:6e:ef:41:e8:b8:1c:5f: 97:7c:f5:31:f1:0e:73:68:6c:38:06:bc:d4:15:e5:57:db:d6: 84:15:54:6e:b3:1c:5a:33:8b:13:00:e5:0a:24:b6:37:54:84: a0:63:de:d7:f9:ea:9d:84:94:c4:53:ee:94:20:75:6b:d6:06: 72:e9:ba:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfaOn/B1N9udapTUvPfmnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYzZmZDkxZDJhNDM2NWQzZGMxNjcyMWZlZGY2OTIxNzJi YjMwNzMwHhcNMjYwMjA5MTMwMDU2WhcNMjYwMjEwMTMwMDU2WjAzMTEwLwYDVQQD EygwNDdiNDhmMmZkOTE3YTE4YjE1NWVhZTU0OTFkMGVjZGUyYzk3YmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnw8EkO4IGkZHzg6a028Yw+tLArPA tfQBAAOiRVP8UYApLFFQvEK3iXWFmzfbFiEbrbau4VrY8/V8ek9dWbX33lWgp2u4 suUTKEZWKSRK4qhCbVlQYonG/blw0sASE2WS6XnPsTu4cB0BD7MlSuqy1qDYPWah wtd4wKE5jtSD6RKiLpT24L8HTvVFQTm3gA+jtOvjB2N2UsjVsRrL16i7TYlo+T4v D5ns24hf3wVZ04V1+AF45+8+/LSw72z9QLQ2ei97NORgwya89Q75j8RegPYY5Ga1 a0cARA1DOqJMmR0L/kqXV+KAt9hvLiiamyisF+BwuebzAY+gHELZFXhLwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAR7SPL9kXoYsVXq5UkdDs3iyXvQMB8GA1UdIwQY MBaAFD7G/ZHSpDZdPcFnIf7faSFyuzBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHNiOWtkS2tObDA5d1djaF90OXBJWEs3TUhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC80Y2RhNDctMzg0YS00MzU0LWJjYjQt YmVmMzU2MDViY2Q0LzEvUHNiOWtkS2tObDA5d1djaF90OXBJWEs3TUhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC80Y2RhNDctMzg0YS00MzU0LWJjYjQtYmVmMzU2MDViY2Q0 LzEvUHNiOWtkS2tObDA5d1djaF90OXBJWEs3TUhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANVjHPR/T pn9rt7gjZ/P8V9mCEZP/4alkb+oF3sVtvVf+jxef/LX5BrFg18gMVkOA1UoHa8tq RbXxL5CxFhCBtgH/nXEsguvCfGVgf37QoxKWrN3jenlavKvday0kM4xwGUQirrUd cE5x/36tedom6+2HTQE0J/0ogNkV0g12C7YPZlE2Wa1w5OqRD6fwSAM5nRKesi1O zK4vvH6W/8nLZ3dy1BgtP6lYQrBfQ47FEw+VKaNUvNi6SQWdcfuwyxhu70HouBxf l3z1MfEOc2hsOAa81BXlV9vWhBVUbrMcWjOLEwDlCiS2N1SEoGPe1/nqnYSUxFPu lCB1a9YGcum6Qw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:59:52 2026 by rpki-client