This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft File: PgzNJQR7nLi28Bhnze3oJW9zSiM.mft (raw, json) Hash identifier: hd8l3GT0E3P8FOJljZcfa+7eA6geHyjojlVbFw6otHU= Subject key identifier: 64:86:FC:F6:E9:6A:93:6C:F6:EC:C4:EA:0C:3A:86:9B:73:10:87:58 Authority key identifier: 3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23 Certificate issuer: /CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23 Certificate serial: 019C446C5E1F6B0616E5A65ECABE8A028FAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft Manifest number: 0AC8 Signing time: Mon 09 Feb 2026 22:01:18 +0000 Manifest this update: Mon 09 Feb 2026 22:01:18 +0000 Manifest next update: Tue 10 Feb 2026 22:01:18 +0000 Files and hashes: 1: KtoPkAE5nCUmPI6qfmi3YYDoF7k.roa (hash: PS9lMK9tTOArIAjACwFudf6mNlSsPDT6Xbro0UuwZlI=) 2: PgzNJQR7nLi28Bhnze3oJW9zSiM.crl (hash: nbW6WrAc2JUJRO0Qq78C5yP20vVk4T3T+2tbzgBwuU8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6c:5e:1f:6b:06:16:e5:a6:5e:ca:be:8a:02:8f:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23 Validity Not Before: Feb 9 22:01:18 2026 GMT Not After : Feb 10 22:01:18 2026 GMT Subject: CN=6486fcf6e96a936cf6ecc4ea0c3a869b73108758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:33:8d:58:ae:ba:1a:f0:76:fd:58:08:20:c6: 90:ab:86:b1:9f:f2:14:bd:9e:34:b9:e0:82:52:62: b5:15:4f:dd:14:ef:b0:e3:dc:57:4f:91:ba:0e:05: 9c:70:8f:96:e8:45:49:f7:26:82:bc:88:28:a8:69: 86:d2:e2:3c:49:bb:93:2f:63:2c:0f:cd:79:18:84: 46:e4:44:7a:92:a1:6c:b6:78:63:ba:91:f6:e6:95: dd:6c:49:8e:54:84:08:7e:e6:ff:68:72:4a:c5:5d: 4a:f9:ec:06:f0:54:d3:fb:c8:fa:ef:0f:6e:42:25: f1:42:1b:14:d1:ea:df:e1:a3:1b:e6:ea:35:6b:74: 6b:aa:ff:1b:99:ca:b0:e8:3a:5a:5d:9a:4f:c4:e5: a0:5c:ac:04:c3:a2:3a:03:1b:24:88:e8:52:52:f8: 9b:6a:dc:ef:8e:5f:38:62:5c:8f:f1:e9:38:d6:3d: f1:c8:84:64:d6:0a:82:d0:90:a7:11:b0:59:88:6c: 7f:22:5d:c2:13:96:62:f2:50:c9:a7:56:fd:7e:59: fa:12:1f:62:1e:f6:54:fb:c9:63:de:99:a8:59:d2: 9e:d9:26:93:7d:24:06:9f:79:a4:87:fe:d3:53:9c: 7b:d4:84:ed:cf:32:12:73:1c:bb:66:67:d9:1f:45: 71:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:86:FC:F6:E9:6A:93:6C:F6:EC:C4:EA:0C:3A:86:9B:73:10:87:58 X509v3 Authority Key Identifier: keyid:3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:30:17:9f:bf:37:48:aa:b1:f2:65:1e:fc:d7:f4:29:44:67: 90:97:ee:e7:b8:30:e2:01:5c:92:62:95:3a:dd:3a:0d:5c:3d: f8:57:24:ef:03:e6:3a:67:5d:54:d5:96:c9:83:69:78:9d:6f: f0:4b:80:7c:c9:92:1a:21:08:87:08:db:1d:6a:61:7a:3f:c0: 30:21:65:9f:5a:b4:fd:4a:1c:c2:dd:3c:80:4f:73:46:69:4a: 50:90:98:49:37:35:2d:77:48:18:5c:6d:45:dc:b0:9b:65:68: f1:37:64:3f:23:b7:a0:52:e4:eb:65:37:b9:dd:01:32:01:72: 4f:5f:d0:dc:2e:27:d8:0b:8e:90:92:fe:11:f5:cb:27:13:87: 7d:be:8f:c5:23:f0:3a:66:75:6f:76:c8:12:fc:f3:09:c8:2b: 93:8f:bf:5f:a3:ff:a5:83:14:58:a2:e0:ea:83:a1:ec:cc:a8: 48:d5:69:ab:a4:f5:b4:0a:27:d7:c3:55:9e:fc:5e:85:d6:fc: 9c:7c:ec:d2:8c:42:67:9a:11:ec:89:85:80:fa:89:8d:2a:bd: 0c:11:f9:de:d9:e0:c1:7e:f8:c7:7c:77:02:56:74:6e:70:5d: 1f:30:fc:18:b6:10:64:1a:4c:46:0f:ae:3c:7b:9c:2c:67:b6: 92:2d:b9:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEbF4fawYW5aZeyr6KAo+vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMGNjZDI1MDQ3YjljYjhiNmYwMTg2N2NkZWRlODI1NmY3 MzRhMjMwHhcNMjYwMjA5MjIwMTE4WhcNMjYwMjEwMjIwMTE4WjAzMTEwLwYDVQQD Eyg2NDg2ZmNmNmU5NmE5MzZjZjZlY2M0ZWEwYzNhODY5YjczMTA4NzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDONWK66GvB2/VgIIMaQq4axn/IU vZ40ueCCUmK1FU/dFO+w49xXT5G6DgWccI+W6EVJ9yaCvIgoqGmG0uI8SbuTL2Ms D815GIRG5ER6kqFstnhjupH25pXdbEmOVIQIfub/aHJKxV1K+ewG8FTT+8j67w9u QiXxQhsU0erf4aMb5uo1a3Rrqv8bmcqw6DpaXZpPxOWgXKwEw6I6AxskiOhSUvib atzvjl84YlyP8ek41j3xyIRk1gqC0JCnEbBZiGx/Il3CE5Zi8lDJp1b9fln6Eh9i HvZU+8lj3pmoWdKe2SaTfSQGn3mkh/7TU5x71ITtzzIScxy7ZmfZH0VxMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGSG/PbpapNs9uzE6gw6hptzEIdYMB8GA1UdIwQY MBaAFD4MzSUEe5y4tvAYZ83t6CVvc0ojMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGd6TkpRUjduTGkyOEJobnplM29KVzl6U2lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC85Yzg2MzEtZGM2YS00NWMyLWJjZjkt OWNkMDE3MjQzYTA2LzEvUGd6TkpRUjduTGkyOEJobnplM29KVzl6U2lNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC85Yzg2MzEtZGM2YS00NWMyLWJjZjktOWNkMDE3MjQzYTA2 LzEvUGd6TkpRUjduTGkyOEJobnplM29KVzl6U2lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJDAXn783 SKqx8mUe/Nf0KURnkJfu57gw4gFckmKVOt06DVw9+Fck7wPmOmddVNWWyYNpeJ1v 8EuAfMmSGiEIhwjbHWphej/AMCFln1q0/Uocwt08gE9zRmlKUJCYSTc1LXdIGFxt Rdywm2Vo8TdkPyO3oFLk62U3ud0BMgFyT1/Q3C4n2AuOkJL+EfXLJxOHfb6PxSPw OmZ1b3bIEvzzCcgrk4+/X6P/pYMUWKLg6oOh7MyoSNVpq6T1tAon18NVnvxehdb8 nHzs0oxCZ5oR7ImFgPqJjSq9DBH53tngwX74x3x3AlZ0bnBdHzD8GLYQZBpMRg+u PHucLGe2ki25nQ== -----END CERTIFICATE-----Generated at Tue Feb 10 00:16:17 2026 by rpki-client