This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft File: pFACAit6PkeQuLTi9tW3o9q93OE.mft (raw, json) Hash identifier: pWWg/ih9YEOIi60HxcvXh9c+a2POVmxTrJZMZSwGhH0= Subject key identifier: 70:D9:6C:92:38:78:C7:7F:67:86:47:D6:D6:2B:5E:F2:D2:E1:70:0D Authority key identifier: A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1 Certificate issuer: /CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1 Certificate serial: 019C4358F4E7C8E8FE47A13873CF28ECE42C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft Manifest number: 17A6 Signing time: Mon 09 Feb 2026 17:00:29 +0000 Manifest this update: Mon 09 Feb 2026 17:00:29 +0000 Manifest next update: Tue 10 Feb 2026 17:00:29 +0000 Files and hashes: 1: 6UmN9y_dGxk3f2bPNDV9-52tnk8.roa (hash: V5OnlzxBvWPOU5x3iXhGrQf3yLTzDNB/C3jplNE0X7E=) 2: pFACAit6PkeQuLTi9tW3o9q93OE.crl (hash: 1Vm6iowR5orII8zOY69NttQXbpCGmVrP1JGCdNjiNMw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:f4:e7:c8:e8:fe:47:a1:38:73:cf:28:ec:e4:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1 Validity Not Before: Feb 9 17:00:29 2026 GMT Not After : Feb 10 17:00:29 2026 GMT Subject: CN=70d96c923878c77f678647d6d62b5ef2d2e1700d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bd:a6:c3:fc:6a:a4:1e:e8:68:27:12:6d:30: a4:b3:87:5c:36:5d:96:92:d6:e0:70:9f:03:44:f1: 06:fc:79:1e:12:de:ec:7a:d8:b1:2a:3c:73:35:42: 70:45:b8:09:e4:99:3a:1c:d1:df:1f:ef:30:17:59: 95:42:90:ae:ae:0b:f4:0d:40:aa:82:89:db:15:9d: 79:b3:08:6e:be:63:33:69:f5:53:4f:f0:ba:ec:3e: bb:98:27:ee:44:f8:08:34:f1:e0:0d:e0:b2:ee:a0: 12:56:c8:09:fe:79:9c:65:fb:41:fe:32:07:1a:7a: d3:e7:fc:be:08:f9:ec:56:ac:df:db:cf:5f:aa:42: 95:8b:1b:11:8c:ae:0d:ca:d6:0f:11:a9:ae:53:e1: 21:cf:56:81:d1:d8:15:02:97:31:d1:6d:f8:e9:85: a9:f1:61:6f:ac:98:13:3d:d1:4c:09:ad:8d:48:71: 0c:dd:9b:74:f3:fc:eb:c9:7f:54:96:94:d0:32:7a: d3:81:6f:70:1c:f4:86:b0:d6:36:fa:92:57:18:31: a3:c1:a1:86:d5:e9:26:34:64:1b:fd:35:cc:69:b1: ea:ff:57:c0:7e:d0:a7:55:37:a5:4b:f3:f3:7f:14: 74:85:38:9f:f7:bf:65:7e:3b:94:c7:73:76:86:3c: fb:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:D9:6C:92:38:78:C7:7F:67:86:47:D6:D6:2B:5E:F2:D2:E1:70:0D X509v3 Authority Key Identifier: keyid:A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:9a:38:b7:6c:0d:fa:76:0d:d7:de:5a:36:b8:7f:98:d9:a8: 3e:e9:95:80:00:61:63:6d:87:d9:f7:20:26:7e:c9:f4:62:38: d1:eb:7d:be:73:42:e4:42:90:21:50:f8:82:72:e8:21:ab:01: 4f:08:3b:d7:7a:06:49:1c:bc:68:e2:a3:8e:09:35:cf:88:82: 32:39:d7:7f:45:3a:f9:69:7c:73:a3:61:25:8e:35:0c:12:c1: 90:d9:4b:2e:fc:00:97:85:86:f7:cb:ab:9e:d5:13:b1:c6:48: 74:91:1e:f8:e2:65:cf:81:27:40:6e:8a:96:32:fd:f2:f9:f1: 7b:57:54:1e:7a:4a:42:1f:b6:ea:08:f4:1f:2d:cb:85:b2:cd: 4b:a6:e5:10:30:b6:4d:c6:34:fe:48:8d:4b:6c:17:ce:d6:5a: 30:1f:01:fd:ef:ae:ee:a5:8e:95:73:7a:b8:c3:c3:5d:d2:6c: 03:87:d9:6c:e2:4f:0a:17:9c:12:20:0b:f8:10:f9:ca:b5:41: d9:22:8e:67:68:1c:70:1b:56:b5:a0:c6:fa:80:8a:73:50:35: c1:9f:cf:5e:0c:30:a4:4d:79:84:e8:e0:71:b1:79:d5:bb:c9: 8b:ec:04:50:4c:95:34:31:84:ee:99:59:b6:48:77:10:42:90: 2e:49:96:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWPTnyOj+R6E4c88o7OQsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0NTAwMjAyMmI3YTNlNDc5MGI4YjRlMmY2ZDViN2EzZGFi ZGRjZTEwHhcNMjYwMjA5MTcwMDI5WhcNMjYwMjEwMTcwMDI5WjAzMTEwLwYDVQQD Eyg3MGQ5NmM5MjM4NzhjNzdmNjc4NjQ3ZDZkNjJiNWVmMmQyZTE3MDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq72mw/xqpB7oaCcSbTCks4dcNl2W ktbgcJ8DRPEG/HkeEt7setixKjxzNUJwRbgJ5Jk6HNHfH+8wF1mVQpCurgv0DUCq gonbFZ15swhuvmMzafVTT/C67D67mCfuRPgINPHgDeCy7qASVsgJ/nmcZftB/jIH GnrT5/y+CPnsVqzf289fqkKVixsRjK4NytYPEamuU+Ehz1aB0dgVApcx0W346YWp 8WFvrJgTPdFMCa2NSHEM3Zt08/zryX9UlpTQMnrTgW9wHPSGsNY2+pJXGDGjwaGG 1ekmNGQb/TXMabHq/1fAftCnVTelS/PzfxR0hTif979lfjuUx3N2hjz75QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHDZbJI4eMd/Z4ZH1tYrXvLS4XANMB8GA1UdIwQY MBaAFKRQAgIrej5HkLi04vbVt6PavdzhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEZBQ0FpdDZQa2VRdUxUaTl0VzNvOXE5M09FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9kODA5YjMtMzY3NS00ZmQ4LTg4MjEt YjM2N2ViZGYzMDJiLzEvcEZBQ0FpdDZQa2VRdUxUaTl0VzNvOXE5M09FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9kODA5YjMtMzY3NS00ZmQ4LTg4MjEtYjM2N2ViZGYzMDJi LzEvcEZBQ0FpdDZQa2VRdUxUaTl0VzNvOXE5M09FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhJo4t2wN +nYN195aNrh/mNmoPumVgABhY22H2fcgJn7J9GI40et9vnNC5EKQIVD4gnLoIasB Twg713oGSRy8aOKjjgk1z4iCMjnXf0U6+Wl8c6NhJY41DBLBkNlLLvwAl4WG98ur ntUTscZIdJEe+OJlz4EnQG6KljL98vnxe1dUHnpKQh+26gj0Hy3LhbLNS6blEDC2 TcY0/kiNS2wXztZaMB8B/e+u7qWOlXN6uMPDXdJsA4fZbOJPChecEiAL+BD5yrVB 2SKOZ2gccBtWtaDG+oCKc1A1wZ/PXgwwpE15hOjgcbF51bvJi+wEUEyVNDGE7plZ tkh3EEKQLkmWNg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:41:29 2026 by rpki-client