This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.mft File: PKb6mZ6KZ0qlMy3rcfG60CRcjcE.mft (raw, json) Hash identifier: kvd5+kDKwXtcCsYsywYHtvLEJtbTuN+L4hm6dvzswRU= Subject key identifier: 33:FD:5E:01:C0:90:15:D5:66:CD:AD:72:8D:83:6C:A6:DD:BC:2D:1E Authority key identifier: 3C:A6:FA:99:9E:8A:67:4A:A5:33:2D:EB:71:F1:BA:D0:24:5C:8D:C1 Certificate issuer: /CN=3ca6fa999e8a674aa5332deb71f1bad0245c8dc1 Certificate serial: 019C43FE41E53F02C374CEF500031DFC35C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.mft Manifest number: 0F8B Signing time: Mon 09 Feb 2026 20:01:02 +0000 Manifest this update: Mon 09 Feb 2026 20:01:02 +0000 Manifest next update: Tue 10 Feb 2026 20:01:02 +0000 Files and hashes: 1: 61Tc_pSMqhnofPsV7DrPU_3IvV4.roa (hash: b1b/Y82gxJDN9f/iG4TCunLXSlk+6vM16ISqmCSzCXg=) 2: PKb6mZ6KZ0qlMy3rcfG60CRcjcE.crl (hash: LtwPELufB3S+fE3eXFM5xTkH5ZSaFsuxMghr78SFpPw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.crl rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.mft rsync://rpki.ripe.net/repository/DEFAULT/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:41:e5:3f:02:c3:74:ce:f5:00:03:1d:fc:35:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ca6fa999e8a674aa5332deb71f1bad0245c8dc1 Validity Not Before: Feb 9 20:01:02 2026 GMT Not After : Feb 10 20:01:02 2026 GMT Subject: CN=33fd5e01c09015d566cdad728d836ca6ddbc2d1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:be:c8:8b:4f:37:1d:f5:b0:b5:47:c8:0b:1d: 75:14:71:cd:99:e5:8f:e3:09:d7:b4:f4:b0:b9:5b: 33:0d:cb:30:22:de:f1:84:5d:ab:15:0f:c1:00:45: 83:c1:45:4a:be:0b:7f:29:b9:bb:3d:e3:c1:df:15: 74:99:01:96:45:7c:99:d7:09:21:f0:eb:87:b3:5a: 8b:f5:d9:0f:d3:1e:57:fb:4a:60:8a:c5:b9:51:d3: 92:d2:de:ce:9d:3e:b3:62:a3:16:1a:69:75:b3:76: bf:89:97:66:40:bd:2c:80:b1:ea:6e:80:d9:80:ca: 54:45:a2:5a:e3:85:22:4c:c8:c4:a6:46:1b:08:3c: 6e:d0:48:52:06:f5:6b:16:16:5e:5e:aa:65:65:d0: 63:71:0c:ee:2b:29:4a:1b:c1:b8:64:b9:dd:9f:3e: 88:70:79:a3:59:52:a9:53:3b:71:8c:bc:7d:fd:74: 6a:22:72:a9:15:ff:20:37:32:25:f0:36:6b:83:c7: a0:52:de:34:10:1b:62:33:35:a9:2f:35:d7:1f:b0: 82:6b:96:a0:4a:b6:61:db:8e:08:5b:bf:48:8c:bb: 35:1c:b8:cc:fe:9b:01:f3:79:62:0b:f2:ef:00:c0: c0:72:0a:7d:19:20:6f:80:0e:bb:55:55:ac:d6:3e: 18:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:FD:5E:01:C0:90:15:D5:66:CD:AD:72:8D:83:6C:A6:DD:BC:2D:1E X509v3 Authority Key Identifier: keyid:3C:A6:FA:99:9E:8A:67:4A:A5:33:2D:EB:71:F1:BA:D0:24:5C:8D:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:9d:6e:8e:85:85:d4:08:15:d1:1e:2e:8f:25:fe:e4:74:c0: 43:1d:3c:1c:d9:b9:4d:41:a8:17:15:a2:cd:29:1a:3c:ce:07: 79:c5:fb:db:30:1f:c8:d5:c5:49:0c:e9:78:42:82:51:be:ea: aa:9b:54:27:7c:5b:b9:cb:4a:81:00:c5:73:c4:41:2a:de:26: b3:e7:99:ac:ff:a8:4a:b7:c6:1f:07:7a:6a:a5:e5:0b:2a:88: 18:6e:32:f6:c2:91:ce:ad:61:a2:b5:c9:d7:60:e2:ff:31:3b: 1e:12:b9:b6:4b:c1:50:25:7d:07:34:9a:67:d5:23:69:f1:ae: 73:1f:fe:7b:46:50:4e:32:ce:3f:0e:94:2e:3d:29:2a:6d:94: 6e:9f:8d:6b:b5:aa:80:2b:dc:1b:f3:6f:1b:11:79:30:7d:a2: 48:7f:e8:2e:15:a1:9a:47:b5:1d:6a:57:13:4e:a6:4e:fa:e6: 6e:70:b3:f2:56:0a:42:5e:db:18:8a:9a:62:9d:cb:12:b2:39: f9:ee:43:6b:13:72:2f:ed:0e:39:f2:ca:5a:1e:b9:2f:88:88: 5d:cc:e7:5b:e2:8a:8a:17:d0:da:ea:0c:f1:0b:1d:5c:ca:27: fe:d8:30:ec:74:a5:52:cf:13:4a:34:83:df:ff:7e:74:fe:92: 77:61:c8:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/kHlPwLDdM71AAMd/DXIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjYTZmYTk5OWU4YTY3NGFhNTMzMmRlYjcxZjFiYWQwMjQ1 YzhkYzEwHhcNMjYwMjA5MjAwMTAyWhcNMjYwMjEwMjAwMTAyWjAzMTEwLwYDVQQD EygzM2ZkNWUwMWMwOTAxNWQ1NjZjZGFkNzI4ZDgzNmNhNmRkYmMyZDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiL7Ii083HfWwtUfICx11FHHNmeWP 4wnXtPSwuVszDcswIt7xhF2rFQ/BAEWDwUVKvgt/Kbm7PePB3xV0mQGWRXyZ1wkh 8OuHs1qL9dkP0x5X+0pgisW5UdOS0t7OnT6zYqMWGml1s3a/iZdmQL0sgLHqboDZ gMpURaJa44UiTMjEpkYbCDxu0EhSBvVrFhZeXqplZdBjcQzuKylKG8G4ZLndnz6I cHmjWVKpUztxjLx9/XRqInKpFf8gNzIl8DZrg8egUt40EBtiMzWpLzXXH7CCa5ag SrZh244IW79IjLs1HLjM/psB83liC/LvAMDAcgp9GSBvgA67VVWs1j4YcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDP9XgHAkBXVZs2tco2DbKbdvC0eMB8GA1UdIwQY MBaAFDym+pmeimdKpTMt63HxutAkXI3BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEtiNm1aNktaMHFsTXkzcmNmRzYwQ1JjamNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9mOTdkM2QtZWQ2NC00MGI3LThiN2Mt MTUyYjBhYmQ3YzBjLzEvUEtiNm1aNktaMHFsTXkzcmNmRzYwQ1JjamNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9mOTdkM2QtZWQ2NC00MGI3LThiN2MtMTUyYjBhYmQ3YzBj LzEvUEtiNm1aNktaMHFsTXkzcmNmRzYwQ1JjamNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARp1ujoWF 1AgV0R4ujyX+5HTAQx08HNm5TUGoFxWizSkaPM4HecX72zAfyNXFSQzpeEKCUb7q qptUJ3xbuctKgQDFc8RBKt4ms+eZrP+oSrfGHwd6aqXlCyqIGG4y9sKRzq1horXJ 12Di/zE7HhK5tkvBUCV9BzSaZ9UjafGucx/+e0ZQTjLOPw6ULj0pKm2Ubp+Na7Wq gCvcG/NvGxF5MH2iSH/oLhWhmke1HWpXE06mTvrmbnCz8lYKQl7bGIqaYp3LErI5 +e5DaxNyL+0OOfLKWh65L4iIXcznW+KKihfQ2uoM8QsdXMon/tgw7HSlUs8TSjSD 3/9+dP6Sd2HIWg== -----END CERTIFICATE-----Generated at Tue Feb 10 01:46:58 2026 by rpki-client