This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d04124-77b1-4816-a77c-cc91ca18011f/1/pktGhxxk3a5ARC_JIWZ2xUB0OPk.mft File: pktGhxxk3a5ARC_JIWZ2xUB0OPk.mft (raw, json) Hash identifier: iVrz8YOPgCpPZnh7HfYLrt1z5G0aWSbuhS1uWqlZjbM= Subject key identifier: 7F:F5:EC:7F:D0:CB:17:F8:15:E4:B2:40:53:70:97:A3:64:53:0F:B2 Authority key identifier: A6:4B:46:87:1C:64:DD:AE:40:44:2F:C9:21:66:76:C5:40:74:38:F9 Certificate issuer: /CN=a64b46871c64ddae40442fc9216676c5407438f9 Certificate serial: 019C432220498E8974F69A3B545A9B1AD0FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pktGhxxk3a5ARC_JIWZ2xUB0OPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d04124-77b1-4816-a77c-cc91ca18011f/1/pktGhxxk3a5ARC_JIWZ2xUB0OPk.mft Manifest number: 01B7 Signing time: Mon 09 Feb 2026 16:00:35 +0000 Manifest this update: Mon 09 Feb 2026 16:00:35 +0000 Manifest next update: Tue 10 Feb 2026 16:00:35 +0000 Files and hashes: 1: pktGhxxk3a5ARC_JIWZ2xUB0OPk.crl (hash: J+xFxLasvHSVQl7MhpraCvvqfnrjpexTZtUn83S4OfI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d04124-77b1-4816-a77c-cc91ca18011f/1/pktGhxxk3a5ARC_JIWZ2xUB0OPk.crl rsync://rpki.ripe.net/repository/DEFAULT/23/d04124-77b1-4816-a77c-cc91ca18011f/1/pktGhxxk3a5ARC_JIWZ2xUB0OPk.mft rsync://rpki.ripe.net/repository/DEFAULT/pktGhxxk3a5ARC_JIWZ2xUB0OPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:20:49:8e:89:74:f6:9a:3b:54:5a:9b:1a:d0:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a64b46871c64ddae40442fc9216676c5407438f9 Validity Not Before: Feb 9 16:00:35 2026 GMT Not After : Feb 10 16:00:35 2026 GMT Subject: CN=7ff5ec7fd0cb17f815e4b240537097a364530fb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:be:67:4d:c1:50:fa:cf:ee:a2:52:13:f2:18: 17:e9:c5:6a:57:82:fa:55:0e:1d:d2:fc:34:a5:98: a6:f3:ed:65:2b:ba:12:26:77:b8:f9:11:5f:0d:9d: 5c:d6:4e:7c:64:fd:e1:4a:d9:cb:27:69:32:67:d9: f4:21:62:88:36:d3:6a:c8:17:c9:d5:25:a3:7b:66: 50:ae:16:6c:39:24:41:b1:c7:57:46:5f:7e:38:5a: 36:71:a8:29:88:b9:65:73:eb:9c:d6:c8:1e:27:2f: c2:f1:38:f2:10:8d:0b:2d:fd:c5:72:ce:95:07:01: 99:4b:59:c4:39:da:fc:87:8d:07:dc:98:13:0c:38: 5e:70:29:6f:54:92:3a:a0:30:22:57:96:91:5e:6a: f0:c5:af:03:33:30:c2:c0:b6:04:70:1a:68:8e:ba: 08:f0:a9:40:cc:57:38:ec:02:9b:7c:32:91:15:a3: 58:76:6a:88:65:3d:ea:aa:ac:b6:c7:5c:76:07:5e: 06:16:69:a6:61:03:8c:c1:2a:9f:7d:d2:7f:87:77: 5c:2e:a6:a9:5b:86:03:ce:17:56:35:d7:fe:76:d5: db:9e:15:97:24:ff:38:09:bd:87:7c:29:41:29:19: 2c:f8:7d:02:0c:af:0a:32:d7:1e:d5:c3:c3:42:a5: ab:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:F5:EC:7F:D0:CB:17:F8:15:E4:B2:40:53:70:97:A3:64:53:0F:B2 X509v3 Authority Key Identifier: keyid:A6:4B:46:87:1C:64:DD:AE:40:44:2F:C9:21:66:76:C5:40:74:38:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pktGhxxk3a5ARC_JIWZ2xUB0OPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d04124-77b1-4816-a77c-cc91ca18011f/1/pktGhxxk3a5ARC_JIWZ2xUB0OPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d04124-77b1-4816-a77c-cc91ca18011f/1/pktGhxxk3a5ARC_JIWZ2xUB0OPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:df:67:41:c1:b2:f4:ce:40:55:80:03:1b:8f:74:90:40:5a: 66:92:5c:ac:10:e1:36:19:70:94:a2:ef:bf:1f:d7:ae:03:d6: 13:ba:6a:57:d7:a6:7e:8b:97:e3:24:60:b5:4d:01:e8:29:7b: dd:00:07:11:84:6c:91:c5:ed:b8:f8:83:d6:49:3f:05:7b:5f: 3a:aa:10:8d:7d:a7:52:f3:93:b3:60:55:23:33:ab:e5:88:a3: 61:05:d6:ae:63:0d:6e:1c:82:74:f1:74:7e:c4:c5:2e:c4:dc: 8a:66:4a:3f:ba:d9:d9:00:65:7d:ae:08:58:73:46:ea:b3:75: d1:7a:49:78:34:c8:82:d5:07:3c:6b:93:e4:70:3e:e8:f6:1a: 6a:67:bb:83:68:c9:d5:23:a2:46:ac:8b:5c:4b:09:82:28:2a: f1:14:86:ec:31:11:bd:12:00:aa:50:0c:8d:1d:c6:38:8e:69: 33:ae:ff:ab:41:d6:6a:5c:74:b5:43:66:c9:ab:98:35:d7:f8: d6:34:66:69:f4:8a:9b:b3:a4:d4:9d:28:ae:ac:40:02:f5:12: 96:b9:0f:70:40:a8:84:5c:cc:ac:84:53:a7:92:84:59:21:5e: 94:e0:e3:b0:58:d6:1e:c5:e7:17:5f:e8:38:45:6a:9f:7b:8d: 57:c9:df:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIiBJjol09po7VFqbGtD9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2NGI0Njg3MWM2NGRkYWU0MDQ0MmZjOTIxNjY3NmM1NDA3 NDM4ZjkwHhcNMjYwMjA5MTYwMDM1WhcNMjYwMjEwMTYwMDM1WjAzMTEwLwYDVQQD Eyg3ZmY1ZWM3ZmQwY2IxN2Y4MTVlNGIyNDA1MzcwOTdhMzY0NTMwZmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3r5nTcFQ+s/uolIT8hgX6cVqV4L6 VQ4d0vw0pZim8+1lK7oSJne4+RFfDZ1c1k58ZP3hStnLJ2kyZ9n0IWKINtNqyBfJ 1SWje2ZQrhZsOSRBscdXRl9+OFo2cagpiLllc+uc1sgeJy/C8TjyEI0LLf3Fcs6V BwGZS1nEOdr8h40H3JgTDDhecClvVJI6oDAiV5aRXmrwxa8DMzDCwLYEcBpojroI 8KlAzFc47AKbfDKRFaNYdmqIZT3qqqy2x1x2B14GFmmmYQOMwSqffdJ/h3dcLqap W4YDzhdWNdf+dtXbnhWXJP84Cb2HfClBKRks+H0CDK8KMtce1cPDQqWrWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH/17H/Qyxf4FeSyQFNwl6NkUw+yMB8GA1UdIwQY MBaAFKZLRoccZN2uQEQvySFmdsVAdDj5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGt0R2h4eGszYTVBUkNfSklXWjJ4VUIwT1BrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9kMDQxMjQtNzdiMS00ODE2LWE3N2Mt Y2M5MWNhMTgwMTFmLzEvcGt0R2h4eGszYTVBUkNfSklXWjJ4VUIwT1BrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9kMDQxMjQtNzdiMS00ODE2LWE3N2MtY2M5MWNhMTgwMTFm LzEvcGt0R2h4eGszYTVBUkNfSklXWjJ4VUIwT1BrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmN9nQcGy 9M5AVYADG490kEBaZpJcrBDhNhlwlKLvvx/XrgPWE7pqV9emfouX4yRgtU0B6Cl7 3QAHEYRskcXtuPiD1kk/BXtfOqoQjX2nUvOTs2BVIzOr5YijYQXWrmMNbhyCdPF0 fsTFLsTcimZKP7rZ2QBlfa4IWHNG6rN10XpJeDTIgtUHPGuT5HA+6PYaame7g2jJ 1SOiRqyLXEsJgigq8RSG7DERvRIAqlAMjR3GOI5pM67/q0HWalx0tUNmyauYNdf4 1jRmafSKm7Ok1J0orqxAAvUSlrkPcECohFzMrIRTp5KEWSFelODjsFjWHsXnF1/o OEVqn3uNV8nfDQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:40 2026 by rpki-client