This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.mft File: Pkgvs8n5r0cOTki23zgtPVAVRmE.mft (raw, json) Hash identifier: 7o9lFOBhBSHFn2PIAVXZEr4OZxmC90kJw/yyrHiavNI= Subject key identifier: 00:F4:E3:3E:40:D5:23:DA:06:D7:CB:2D:35:1E:31:61:10:E5:F8:0C Authority key identifier: 3E:48:2F:B3:C9:F9:AF:47:0E:4E:48:B6:DF:38:2D:3D:50:15:46:61 Certificate issuer: /CN=3e482fb3c9f9af470e4e48b6df382d3d50154661 Certificate serial: 019C41A216EBD689EA91B35A623CD84F9776 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pkgvs8n5r0cOTki23zgtPVAVRmE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 09:01:07 +0000 Manifest this update: Mon 09 Feb 2026 09:01:07 +0000 Manifest next update: Tue 10 Feb 2026 09:01:07 +0000 Files and hashes: 1: Pkgvs8n5r0cOTki23zgtPVAVRmE.crl (hash: 5OqPmh/u/JJX+yYopaqnmeBH1CWAtZ8FtiJOcYLmxOY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.crl rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.mft rsync://rpki.ripe.net/repository/DEFAULT/Pkgvs8n5r0cOTki23zgtPVAVRmE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:16:eb:d6:89:ea:91:b3:5a:62:3c:d8:4f:97:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e482fb3c9f9af470e4e48b6df382d3d50154661 Validity Not Before: Feb 9 09:01:07 2026 GMT Not After : Feb 10 09:01:07 2026 GMT Subject: CN=00f4e33e40d523da06d7cb2d351e316110e5f80c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0b:4b:48:64:83:59:d6:7e:7c:3c:4f:74:2a: 2a:58:4d:10:b3:28:aa:7a:0e:82:1b:37:1c:a7:04: 06:ce:b5:40:9d:1a:c0:7a:c0:25:7d:25:97:91:6c: a2:35:af:b4:99:af:48:5d:dc:78:a6:d5:38:ba:c7: 69:11:2b:fc:73:07:9a:94:c0:52:fc:a5:f9:bf:9e: f6:ed:92:93:ee:58:c4:5c:50:86:7f:d4:d5:8c:f8: 28:8a:be:71:c8:5f:92:dc:cb:bd:95:a8:fc:2e:e0: f3:44:49:34:c7:13:3d:7a:9f:86:b4:5e:11:44:2c: 4a:93:8f:47:c6:d4:da:33:f8:28:3b:93:fa:a5:fd: 0e:94:c9:02:a3:75:2b:f7:8f:49:8d:87:1c:bc:c5: 45:e4:6a:2c:ff:0b:23:16:8c:0f:ee:6b:4b:09:6c: 1d:af:9c:c8:65:a1:a1:40:f2:69:76:88:40:b5:68: 8e:0d:31:63:d2:81:92:0e:0d:3c:5c:fc:ca:9a:51: 0c:f2:5c:89:4a:ba:d7:85:7d:dd:d4:5b:d2:d3:9e: e2:10:b7:59:60:c9:03:64:e0:df:2b:e9:c9:f7:31: bf:a0:c7:8d:82:91:51:6b:ab:cc:30:ac:6f:ed:0e: b7:73:65:d2:ef:d9:89:39:d3:74:ac:bc:08:b0:35: f0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:F4:E3:3E:40:D5:23:DA:06:D7:CB:2D:35:1E:31:61:10:E5:F8:0C X509v3 Authority Key Identifier: keyid:3E:48:2F:B3:C9:F9:AF:47:0E:4E:48:B6:DF:38:2D:3D:50:15:46:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pkgvs8n5r0cOTki23zgtPVAVRmE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:b1:af:71:62:ad:c5:ef:e3:00:86:64:ed:67:e9:dd:b3:05: 64:32:51:3d:ac:5d:89:b7:32:23:c1:f6:21:6f:fd:67:eb:e3: 83:e7:fa:fa:36:dd:49:87:20:f7:7b:29:11:6d:31:a6:db:78: 38:32:6f:95:5d:6c:6e:e4:49:e9:0c:07:3c:ce:9a:c8:25:93: d1:00:b5:21:4b:ba:0b:ef:ad:04:86:45:e4:98:91:af:81:52: f4:db:46:96:40:5e:79:45:17:58:f9:02:29:29:18:03:ca:bd: 54:76:d2:24:01:17:e9:42:06:c3:fb:fd:f6:83:76:63:44:49: 7c:29:28:7f:ea:81:37:07:8d:c2:82:e1:b3:58:ec:8d:b4:61: b8:87:85:c1:41:19:cb:bd:de:e2:80:2d:07:7b:64:93:9d:83: 73:19:6f:ce:e7:0e:f6:de:f6:ce:b7:3e:7e:9e:11:94:61:d0: 7e:00:22:e0:82:13:ff:0c:0b:70:b7:a8:24:cb:58:d8:66:0b: 92:21:b9:77:b0:74:b8:39:67:b7:6e:22:e3:a2:cc:8c:bf:af: bd:09:88:f5:5b:89:25:8d:55:95:43:89:1a:05:74:bd:33:7b: e5:67:98:40:2b:1a:c0:ca:64:c6:c5:ee:42:45:28:c0:92:c7: 30:c4:1e:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBohbr1onqkbNaYjzYT5d2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNDgyZmIzYzlmOWFmNDcwZTRlNDhiNmRmMzgyZDNkNTAx NTQ2NjEwHhcNMjYwMjA5MDkwMTA3WhcNMjYwMjEwMDkwMTA3WjAzMTEwLwYDVQQD EygwMGY0ZTMzZTQwZDUyM2RhMDZkN2NiMmQzNTFlMzE2MTEwZTVmODBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwtLSGSDWdZ+fDxPdCoqWE0Qsyiq eg6CGzccpwQGzrVAnRrAesAlfSWXkWyiNa+0ma9IXdx4ptU4usdpESv8cwealMBS /KX5v5727ZKT7ljEXFCGf9TVjPgoir5xyF+S3Mu9laj8LuDzREk0xxM9ep+GtF4R RCxKk49HxtTaM/goO5P6pf0OlMkCo3Ur949JjYccvMVF5Gos/wsjFowP7mtLCWwd r5zIZaGhQPJpdohAtWiODTFj0oGSDg08XPzKmlEM8lyJSrrXhX3d1FvS057iELdZ YMkDZODfK+nJ9zG/oMeNgpFRa6vMMKxv7Q63c2XS79mJOdN0rLwIsDXwJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAD04z5A1SPaBtfLLTUeMWEQ5fgMMB8GA1UdIwQY MBaAFD5IL7PJ+a9HDk5Itt84LT1QFUZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGtndnM4bjVyMGNPVGtpMjN6Z3RQVkFWUm1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My81NDNiMTUtZmIxYi00NDVmLThhYTQt ZGI0ZDcxNDg1OWI1LzEvUGtndnM4bjVyMGNPVGtpMjN6Z3RQVkFWUm1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My81NDNiMTUtZmIxYi00NDVmLThhYTQtZGI0ZDcxNDg1OWI1 LzEvUGtndnM4bjVyMGNPVGtpMjN6Z3RQVkFWUm1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAebGvcWKt xe/jAIZk7Wfp3bMFZDJRPaxdibcyI8H2IW/9Z+vjg+f6+jbdSYcg93spEW0xptt4 ODJvlV1sbuRJ6QwHPM6ayCWT0QC1IUu6C++tBIZF5JiRr4FS9NtGlkBeeUUXWPkC KSkYA8q9VHbSJAEX6UIGw/v99oN2Y0RJfCkof+qBNweNwoLhs1jsjbRhuIeFwUEZ y73e4oAtB3tkk52DcxlvzucO9t72zrc+fp4RlGHQfgAi4IIT/wwLcLeoJMtY2GYL kiG5d7B0uDlnt24i46LMjL+vvQmI9VuJJY1VlUOJGgV0vTN75WeYQCsawMpkxsXu QkUowJLHMMQerQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:09 2026 by rpki-client