This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.mft File: PI0Z2SQBkcNql0ti35PCIUNtm90.mft (raw, json) Hash identifier: qlUv74Mz+i/sYeQEz7utD0Ii2z5bUDvtC+zZLR7pU8Q= Subject key identifier: C4:6C:40:B1:6B:5B:ED:57:27:28:AD:6F:D7:6A:F6:F3:9B:0A:1F:52 Authority key identifier: 3C:8D:19:D9:24:01:91:C3:6A:97:4B:62:DF:93:C2:21:43:6D:9B:DD Certificate issuer: /CN=3c8d19d9240191c36a974b62df93c221436d9bdd Certificate serial: 019C43227AA5A94A5A4FA8090B64A49901B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PI0Z2SQBkcNql0ti35PCIUNtm90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.mft Manifest number: 0C4A Signing time: Mon 09 Feb 2026 16:00:58 +0000 Manifest this update: Mon 09 Feb 2026 16:00:58 +0000 Manifest next update: Tue 10 Feb 2026 16:00:58 +0000 Files and hashes: 1: PI0Z2SQBkcNql0ti35PCIUNtm90.crl (hash: tk3YkxqwzPPZvci4ac2dA7Dg3GqBtn4+ZkbXRJjj0mw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.crl rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.mft rsync://rpki.ripe.net/repository/DEFAULT/PI0Z2SQBkcNql0ti35PCIUNtm90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:7a:a5:a9:4a:5a:4f:a8:09:0b:64:a4:99:01:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c8d19d9240191c36a974b62df93c221436d9bdd Validity Not Before: Feb 9 16:00:58 2026 GMT Not After : Feb 10 16:00:58 2026 GMT Subject: CN=c46c40b16b5bed572728ad6fd76af6f39b0a1f52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ca:30:c6:d6:1d:3b:7a:16:e1:76:fc:df:fa: a1:20:58:10:8a:d0:d5:9b:64:92:52:2f:11:29:9b: 86:11:55:ab:fd:a0:31:1b:6e:87:32:d1:3b:8c:3a: 7b:3e:08:9e:72:45:8c:2a:95:12:fc:29:31:63:b4: 7f:cd:5a:e6:c9:76:61:6d:35:de:ce:0f:98:af:c9: be:61:11:f2:a8:03:df:6e:0e:e9:68:5f:ba:d8:d1: 24:4b:17:fb:fe:ce:f3:56:f1:f6:31:ed:41:cd:37: 3b:af:ba:2b:52:1e:5e:59:3e:ce:29:14:d1:67:4c: 89:cf:63:f7:cf:fa:7c:f6:b8:42:d1:c4:da:c7:57: bd:7a:6a:a4:7e:fa:06:fb:ec:56:c4:c9:cc:6d:be: 7f:aa:d1:43:13:ca:61:67:df:a2:1b:1b:cb:65:66: 94:d8:93:94:26:be:79:c1:ea:23:88:46:cb:68:10: af:a5:6e:ec:f3:e9:bb:19:6f:d1:88:c4:e8:48:97: 2d:76:d7:aa:f0:83:da:20:e7:33:6e:67:9b:47:a0: 19:66:e9:e5:e9:2e:cd:93:f8:38:ca:ec:8c:9f:ee: 5f:6a:37:c6:c9:15:22:1b:dd:5b:47:4c:f2:8e:0b: a6:71:48:d3:9c:95:38:f1:38:17:ff:1f:41:2b:df: 42:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:6C:40:B1:6B:5B:ED:57:27:28:AD:6F:D7:6A:F6:F3:9B:0A:1F:52 X509v3 Authority Key Identifier: keyid:3C:8D:19:D9:24:01:91:C3:6A:97:4B:62:DF:93:C2:21:43:6D:9B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PI0Z2SQBkcNql0ti35PCIUNtm90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:f5:10:59:7a:84:fe:68:b2:fa:81:f5:90:39:eb:1e:e5:d0: 6b:a3:18:07:95:8d:10:40:ca:2b:d4:c7:4e:ee:22:94:4d:c1: 1a:c4:de:7d:52:83:53:02:dd:77:9a:33:6b:2e:7e:07:26:5c: 31:87:40:f2:a7:2f:99:77:c4:3a:20:9b:fd:89:2a:71:37:3f: 20:08:ba:e8:02:15:60:70:05:85:b3:a0:b2:17:81:d8:65:50: 7a:47:e0:ec:3d:ae:4e:5e:4d:72:1f:0a:1b:ca:9a:da:7f:09: 2a:8b:f9:b4:63:c7:44:3b:7b:d3:4b:28:ac:38:f7:f3:28:40: 88:ce:51:95:c8:1f:bf:90:af:4c:d5:88:7d:ad:4f:2c:5c:b9: 21:a4:38:ed:39:4c:86:7d:fc:de:c7:2f:64:6a:a1:0a:45:e8: cb:2f:aa:1e:df:62:08:d8:d2:38:bf:30:a0:f3:2d:4f:68:37: 4e:65:0d:74:bc:d3:c0:81:b5:b5:53:8c:43:73:7f:f5:d0:5f: 59:ae:51:55:5e:08:44:2c:b3:2a:fa:8f:19:e4:3d:fb:49:6b: 28:ca:8c:88:1c:c7:20:f7:77:8a:f2:b1:92:64:8a:a8:bb:42: d5:fa:18:84:d3:d8:f9:ae:b4:d4:58:49:32:41:f7:0c:4e:3e: 58:6a:89:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDInqlqUpaT6gJC2SkmQG5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjOGQxOWQ5MjQwMTkxYzM2YTk3NGI2MmRmOTNjMjIxNDM2 ZDliZGQwHhcNMjYwMjA5MTYwMDU4WhcNMjYwMjEwMTYwMDU4WjAzMTEwLwYDVQQD EyhjNDZjNDBiMTZiNWJlZDU3MjcyOGFkNmZkNzZhZjZmMzliMGExZjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cowxtYdO3oW4Xb83/qhIFgQitDV m2SSUi8RKZuGEVWr/aAxG26HMtE7jDp7PgieckWMKpUS/CkxY7R/zVrmyXZhbTXe zg+Yr8m+YRHyqAPfbg7paF+62NEkSxf7/s7zVvH2Me1BzTc7r7orUh5eWT7OKRTR Z0yJz2P3z/p89rhC0cTax1e9emqkfvoG++xWxMnMbb5/qtFDE8phZ9+iGxvLZWaU 2JOUJr55weojiEbLaBCvpW7s8+m7GW/RiMToSJctdteq8IPaIOczbmebR6AZZunl 6S7Nk/g4yuyMn+5fajfGyRUiG91bR0zyjgumcUjTnJU48TgX/x9BK99CywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMRsQLFrW+1XJyitb9dq9vObCh9SMB8GA1UdIwQY MBaAFDyNGdkkAZHDapdLYt+TwiFDbZvdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEkwWjJTUUJrY05xbDB0aTM1UENJVU50bTkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS84MDBlMzktZjliMS00ZjhkLTljMTAt MTAzNTdiODdjYjIzLzEvUEkwWjJTUUJrY05xbDB0aTM1UENJVU50bTkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS84MDBlMzktZjliMS00ZjhkLTljMTAtMTAzNTdiODdjYjIz LzEvUEkwWjJTUUJrY05xbDB0aTM1UENJVU50bTkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANPUQWXqE /miy+oH1kDnrHuXQa6MYB5WNEEDKK9THTu4ilE3BGsTefVKDUwLdd5ozay5+ByZc MYdA8qcvmXfEOiCb/YkqcTc/IAi66AIVYHAFhbOgsheB2GVQekfg7D2uTl5Nch8K G8qa2n8JKov5tGPHRDt700sorDj38yhAiM5Rlcgfv5CvTNWIfa1PLFy5IaQ47TlM hn383scvZGqhCkXoyy+qHt9iCNjSOL8woPMtT2g3TmUNdLzTwIG1tVOMQ3N/9dBf Wa5RVV4IRCyzKvqPGeQ9+0lrKMqMiBzHIPd3ivKxkmSKqLtC1foYhNPY+a601FhJ MkH3DE4+WGqJhA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:43:48 2026 by rpki-client