This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft File: PB4_3feITXhacI_U5mS2LekQ6-g.mft (raw, json) Hash identifier: fbL4iaSzsehd8/A3BF9nRYATsvLqlvGySLm4uKhrL4s= Subject key identifier: A9:5E:C1:44:C9:58:50:BC:94:5E:DB:C9:C8:2F:21:8D:CC:47:E8:F0 Authority key identifier: 3C:1E:3F:DD:F7:88:4D:78:5A:70:8F:D4:E6:64:B6:2D:E9:10:EB:E8 Certificate issuer: /CN=3c1e3fddf7884d785a708fd4e664b62de910ebe8 Certificate serial: 019C446B61CED76A51B943FDA02BE1C689B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft Manifest number: 1814 Signing time: Mon 09 Feb 2026 22:00:13 +0000 Manifest this update: Mon 09 Feb 2026 22:00:13 +0000 Manifest next update: Tue 10 Feb 2026 22:00:13 +0000 Files and hashes: 1: PB4_3feITXhacI_U5mS2LekQ6-g.crl (hash: UOBq56nGx27itISa90F30PBOd/1QMkWE35BCojrSONo=) 2: PpggW4Z2oygN7a5ac0zakE7Pnfo.roa (hash: 22hm4c5Osenfb32qhznGQLzeTvo39sm+f1ynIhOO3B8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.crl rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6b:61:ce:d7:6a:51:b9:43:fd:a0:2b:e1:c6:89:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c1e3fddf7884d785a708fd4e664b62de910ebe8 Validity Not Before: Feb 9 22:00:13 2026 GMT Not After : Feb 10 22:00:13 2026 GMT Subject: CN=a95ec144c95850bc945edbc9c82f218dcc47e8f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:84:6c:5c:61:77:e7:35:fe:5a:ab:8e:d6:63: 95:c9:41:5e:62:90:cf:b6:39:d9:16:b0:14:99:7a: 8f:46:e8:1c:d9:82:ad:93:7d:4f:93:7f:9e:8f:1c: 1a:f9:ff:c0:16:ea:25:f9:55:29:42:d9:0b:64:0f: da:46:d8:6b:b0:69:58:04:ef:f2:1a:60:c9:3c:aa: 36:89:98:c3:68:b4:39:18:ad:0f:d5:66:31:c7:21: cd:30:9b:5c:53:3c:b9:3e:8e:e5:7e:7f:db:64:31: bc:3e:21:29:dc:2a:8d:af:d0:c7:16:1e:40:d7:3a: 76:92:61:b1:ca:8c:31:71:ef:dd:53:95:2f:45:1e: c6:90:09:27:82:1f:6e:0f:64:b5:84:71:4e:fc:c6: ef:79:b3:24:1e:cd:51:c9:a7:22:e6:2c:a1:fe:76: 95:37:9d:aa:fb:23:ce:b0:26:60:73:be:a2:7a:8a: ee:84:16:7f:f7:53:a2:5f:74:7d:c2:b1:4d:f2:8a: 8a:b3:27:5c:18:22:56:42:50:1c:f9:0a:97:15:f6: 56:56:2e:05:01:4a:68:c9:ac:65:25:11:ac:f6:4e: 3d:73:34:5e:c2:aa:f1:88:9e:51:a3:e9:c4:34:2f: 36:d9:1b:85:cb:38:72:3b:84:4d:ea:91:ee:a4:ec: a1:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:5E:C1:44:C9:58:50:BC:94:5E:DB:C9:C8:2F:21:8D:CC:47:E8:F0 X509v3 Authority Key Identifier: keyid:3C:1E:3F:DD:F7:88:4D:78:5A:70:8F:D4:E6:64:B6:2D:E9:10:EB:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:63:6d:33:63:29:4a:c6:97:18:1d:58:a9:d0:a1:e1:7c:a0: 03:09:4c:0b:fc:19:c9:85:2b:2f:34:2d:35:1d:f9:f1:c1:bb: cf:3d:f5:b4:89:e4:54:c5:49:c0:fa:be:27:57:88:e4:98:1d: 33:36:93:cf:e1:8d:e8:13:9f:ae:26:df:c7:69:95:8a:14:f4: e4:d4:3c:c6:91:1f:fb:b0:a7:99:9c:24:2b:c6:e6:07:98:af: 16:91:43:3e:0d:61:aa:e7:c9:8d:9b:21:ef:a4:b6:36:f1:1c: 56:d0:a8:34:8e:48:1d:5f:d6:e7:c6:3e:29:46:6c:61:15:64: ff:cb:5e:f5:41:18:f6:48:b0:6f:84:b5:2a:d7:2d:4f:e8:74: e1:b2:c5:f6:3c:4f:61:15:c8:c5:d0:59:4a:5e:92:e5:27:80: fb:b3:d5:11:70:15:1f:1c:fc:41:e2:0e:4c:84:11:e7:ba:5b: e6:3b:9f:1e:16:e3:ca:57:c8:8f:f6:23:98:bb:db:7b:58:c2: 25:dc:b6:e3:e4:0f:cd:21:0b:d7:72:73:c6:d9:12:12:b8:fb: 34:f8:d9:c5:12:e6:a6:47:52:c0:1c:18:dc:59:71:28:70:16: 2e:a5:58:d0:5c:d7:f9:d9:33:2a:e8:ef:a2:d6:60:bc:2a:89: 37:92:2c:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEa2HO12pRuUP9oCvhxomwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMWUzZmRkZjc4ODRkNzg1YTcwOGZkNGU2NjRiNjJkZTkx MGViZTgwHhcNMjYwMjA5MjIwMDEzWhcNMjYwMjEwMjIwMDEzWjAzMTEwLwYDVQQD EyhhOTVlYzE0NGM5NTg1MGJjOTQ1ZWRiYzljODJmMjE4ZGNjNDdlOGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4RsXGF35zX+WquO1mOVyUFeYpDP tjnZFrAUmXqPRugc2YKtk31Pk3+ejxwa+f/AFuol+VUpQtkLZA/aRthrsGlYBO/y GmDJPKo2iZjDaLQ5GK0P1WYxxyHNMJtcUzy5Po7lfn/bZDG8PiEp3CqNr9DHFh5A 1zp2kmGxyowxce/dU5UvRR7GkAkngh9uD2S1hHFO/MbvebMkHs1Ryaci5iyh/naV N52q+yPOsCZgc76ieoruhBZ/91OiX3R9wrFN8oqKsydcGCJWQlAc+QqXFfZWVi4F AUpoyaxlJRGs9k49czRewqrxiJ5Ro+nENC822RuFyzhyO4RN6pHupOyhLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKlewUTJWFC8lF7bycgvIY3MR+jwMB8GA1UdIwQY MBaAFDweP933iE14WnCP1OZkti3pEOvoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEI0XzNmZUlUWGhhY0lfVTVtUzJMZWtRNi1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80ZThlNzQtNzdlNi00MWViLTkwNDct NTljMThhZGEzNTJmLzEvUEI0XzNmZUlUWGhhY0lfVTVtUzJMZWtRNi1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS80ZThlNzQtNzdlNi00MWViLTkwNDctNTljMThhZGEzNTJm LzEvUEI0XzNmZUlUWGhhY0lfVTVtUzJMZWtRNi1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY2NtM2Mp SsaXGB1YqdCh4XygAwlMC/wZyYUrLzQtNR358cG7zz31tInkVMVJwPq+J1eI5Jgd MzaTz+GN6BOfribfx2mVihT05NQ8xpEf+7CnmZwkK8bmB5ivFpFDPg1hqufJjZsh 76S2NvEcVtCoNI5IHV/W58Y+KUZsYRVk/8te9UEY9kiwb4S1KtctT+h04bLF9jxP YRXIxdBZSl6S5SeA+7PVEXAVHxz8QeIOTIQR57pb5jufHhbjylfIj/YjmLvbe1jC Jdy24+QPzSEL13JzxtkSErj7NPjZxRLmpkdSwBwY3FlxKHAWLqVY0FzX+dkzKujv otZgvCqJN5IsiQ== -----END CERTIFICATE-----Generated at Tue Feb 10 03:15:46 2026 by rpki-client