This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft File: pRZKRoFl6caTvYGEw8pWbKcP1WA.mft (raw, json) Hash identifier: +KfKys6aFmOxYx/vwe6A6+T3F7pY0UFkApycLdtqWvk= Subject key identifier: E4:CB:37:22:C3:B8:EB:A0:63:84:4B:33:B7:84:8A:F5:60:7B:E0:83 Authority key identifier: A5:16:4A:46:81:65:E9:C6:93:BD:81:84:C3:CA:56:6C:A7:0F:D5:60 Certificate issuer: /CN=a5164a468165e9c693bd8184c3ca566ca70fd560 Certificate serial: 019C41A1BD9214A54BD51F52890363B42C6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pRZKRoFl6caTvYGEw8pWbKcP1WA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft Manifest number: 02D1 Signing time: Mon 09 Feb 2026 09:00:44 +0000 Manifest this update: Mon 09 Feb 2026 09:00:44 +0000 Manifest next update: Tue 10 Feb 2026 09:00:44 +0000 Files and hashes: 1: G0P5WlNlZGFjbEhb_R1Zn2df2xs.roa (hash: CL8qT2kYIrJ9NwJgE0Acghs3urkbaGANrFWydwL2iRg=) 2: pRZKRoFl6caTvYGEw8pWbKcP1WA.crl (hash: FsMSyF1cTY2mZt05fFvKCAORlWMcQ9Usz2MAkN2DBdE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.crl rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft rsync://rpki.ripe.net/repository/DEFAULT/pRZKRoFl6caTvYGEw8pWbKcP1WA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:bd:92:14:a5:4b:d5:1f:52:89:03:63:b4:2c:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5164a468165e9c693bd8184c3ca566ca70fd560 Validity Not Before: Feb 9 09:00:44 2026 GMT Not After : Feb 10 09:00:44 2026 GMT Subject: CN=e4cb3722c3b8eba063844b33b7848af5607be083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:13:f1:14:50:ee:f5:1a:a8:3b:ed:a6:a1:39: 9d:25:9f:04:78:20:5d:97:a3:40:8c:a6:d5:6d:c5: 8b:52:f1:f9:8e:3f:2f:d8:d8:2c:5a:07:b5:7d:3d: c9:5b:96:32:f0:52:9e:0d:7c:2c:c9:53:6d:75:36: 91:2b:d5:09:6b:03:dc:87:8a:af:4c:1d:b6:ef:9d: 9b:4b:0c:67:b7:aa:aa:25:ab:00:1a:bf:0d:82:07: dd:48:71:6a:6e:32:d4:31:ad:b6:9c:60:87:43:81: dd:68:8e:28:53:ac:9e:11:88:ef:ce:ba:90:b1:a9: 6f:13:54:24:e5:0a:a7:16:c3:08:2d:12:a9:82:a3: b0:bf:e3:8f:78:14:4f:b5:d1:58:b8:e4:75:65:a9: 25:31:86:e4:4f:bc:53:24:7a:e4:a4:74:8b:4d:46: cb:b7:b9:23:77:33:bf:ba:68:85:34:b0:d8:ad:1b: 5c:9b:6a:f5:ed:dc:c1:7f:eb:a3:d2:a5:d7:cf:8d: c3:31:cb:77:97:bb:ec:91:6d:8e:17:be:10:b3:99: aa:c5:58:e5:8c:fa:e0:15:87:e7:77:bf:1b:33:24: bf:d2:7c:9c:c5:cf:c7:bf:55:60:e7:a5:36:3b:0c: 9c:29:75:01:a8:93:0a:9e:0f:d6:b4:f9:11:c7:37: 85:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:CB:37:22:C3:B8:EB:A0:63:84:4B:33:B7:84:8A:F5:60:7B:E0:83 X509v3 Authority Key Identifier: keyid:A5:16:4A:46:81:65:E9:C6:93:BD:81:84:C3:CA:56:6C:A7:0F:D5:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pRZKRoFl6caTvYGEw8pWbKcP1WA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:8c:38:30:a8:9b:15:cd:bd:9d:85:af:eb:10:d8:84:b9:77: e1:5e:3c:72:73:b3:63:2e:57:f3:fe:e3:a1:9b:79:c8:95:6e: 1d:f1:ce:2f:f5:8e:63:6e:f9:15:bc:b4:4a:d5:90:6e:63:93: cd:33:4a:d5:cb:6f:5e:2e:26:c5:55:5c:01:50:bb:28:1c:f4: f6:04:4c:8a:f0:ec:f0:bd:1c:64:c4:6f:be:e1:4c:35:09:9e: fe:12:87:5b:6a:0f:f5:d2:b7:64:aa:23:ff:06:1f:b2:98:49: 24:2c:bb:d3:21:65:fc:54:fa:2a:43:65:01:2c:b6:e4:fc:fb: a0:21:64:19:e7:fe:94:0c:a6:ed:11:ff:86:1f:e9:d6:2e:ac: 1f:6f:d2:9a:75:f3:ca:6e:85:ca:0b:5e:1a:58:b5:42:f8:a5: 47:f6:fd:27:4d:26:b8:cb:fb:7d:bb:c9:1e:18:20:2f:db:81: 12:cd:6c:40:9e:f7:aa:17:50:fa:57:34:95:5e:5f:ee:aa:07: 9a:cf:e6:be:1f:89:72:a2:0a:7c:2b:71:04:40:e5:02:fe:84: a8:a2:0f:d1:bb:fe:cd:4e:c9:0a:f5:b3:6b:23:1b:c6:d0:f4: 62:d9:fb:f7:58:d3:63:d1:e1:0e:da:0f:db:1e:00:d9:47:40: 96:f0:af:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBob2SFKVL1R9SiQNjtCxuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1MTY0YTQ2ODE2NWU5YzY5M2JkODE4NGMzY2E1NjZjYTcw ZmQ1NjAwHhcNMjYwMjA5MDkwMDQ0WhcNMjYwMjEwMDkwMDQ0WjAzMTEwLwYDVQQD EyhlNGNiMzcyMmMzYjhlYmEwNjM4NDRiMzNiNzg0OGFmNTYwN2JlMDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hPxFFDu9RqoO+2moTmdJZ8EeCBd l6NAjKbVbcWLUvH5jj8v2NgsWge1fT3JW5Yy8FKeDXwsyVNtdTaRK9UJawPch4qv TB22752bSwxnt6qqJasAGr8NggfdSHFqbjLUMa22nGCHQ4HdaI4oU6yeEYjvzrqQ salvE1Qk5QqnFsMILRKpgqOwv+OPeBRPtdFYuOR1ZaklMYbkT7xTJHrkpHSLTUbL t7kjdzO/umiFNLDYrRtcm2r17dzBf+uj0qXXz43DMct3l7vskW2OF74Qs5mqxVjl jPrgFYfnd78bMyS/0nycxc/Hv1Vg56U2OwycKXUBqJMKng/WtPkRxzeFtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOTLNyLDuOugY4RLM7eEivVge+CDMB8GA1UdIwQY MBaAFKUWSkaBZenGk72BhMPKVmynD9VgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFJaS1JvRmw2Y2FUdllHRXc4cFdiS2NQMVdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xZmNmYmEtY2RhMC00YWQzLTk4OTMt OTQ1ODdkODMzMWY5LzEvcFJaS1JvRmw2Y2FUdllHRXc4cFdiS2NQMVdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8xZmNmYmEtY2RhMC00YWQzLTk4OTMtOTQ1ODdkODMzMWY5 LzEvcFJaS1JvRmw2Y2FUdllHRXc4cFdiS2NQMVdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPYw4MKib Fc29nYWv6xDYhLl34V48cnOzYy5X8/7joZt5yJVuHfHOL/WOY275Fby0StWQbmOT zTNK1ctvXi4mxVVcAVC7KBz09gRMivDs8L0cZMRvvuFMNQme/hKHW2oP9dK3ZKoj /wYfsphJJCy70yFl/FT6KkNlASy25Pz7oCFkGef+lAym7RH/hh/p1i6sH2/SmnXz ym6FygteGli1QvilR/b9J00muMv7fbvJHhggL9uBEs1sQJ73qhdQ+lc0lV5f7qoH ms/mvh+JcqIKfCtxBEDlAv6EqKIP0bv+zU7JCvWzayMbxtD0Ytn791jTY9HhDtoP 2x4A2UdAlvCvMA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:52 2026 by rpki-client