This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft File: PgiDSzspc5CcCq9btdNUscDlyj4.mft (raw, json) Hash identifier: XEXYT3LWYLK6ZoN2UvBYpDPmN0SZr2icD29GGsUr4Fk= Subject key identifier: BF:DF:D1:42:59:4E:3D:49:6C:AB:18:F6:56:06:22:DF:29:E9:76:E9 Authority key identifier: 3E:08:83:4B:3B:29:73:90:9C:0A:AF:5B:B5:D3:54:B1:C0:E5:CA:3E Certificate issuer: /CN=3e08834b3b2973909c0aaf5bb5d354b1c0e5ca3e Certificate serial: 019C43C6DA7AB22D67B50F22B0B15B496B4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PgiDSzspc5CcCq9btdNUscDlyj4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft Manifest number: 06F2 Signing time: Mon 09 Feb 2026 19:00:31 +0000 Manifest this update: Mon 09 Feb 2026 19:00:31 +0000 Manifest next update: Tue 10 Feb 2026 19:00:31 +0000 Files and hashes: 1: PgiDSzspc5CcCq9btdNUscDlyj4.crl (hash: DkLoiA3POu3K188eB3hP2kb/hko0zwy8wby4GlBPm8Y=) 2: dNajQCUoGaoowLS9HpOXxA6vUe8.roa (hash: hhwbI1QROgF/W8q/u8jmMb63ziVKKIX34GLWc4neSDQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.crl rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft rsync://rpki.ripe.net/repository/DEFAULT/PgiDSzspc5CcCq9btdNUscDlyj4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c6:da:7a:b2:2d:67:b5:0f:22:b0:b1:5b:49:6b:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e08834b3b2973909c0aaf5bb5d354b1c0e5ca3e Validity Not Before: Feb 9 19:00:31 2026 GMT Not After : Feb 10 19:00:31 2026 GMT Subject: CN=bfdfd142594e3d496cab18f6560622df29e976e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:6a:61:23:b8:2a:25:c4:a9:6e:f8:d7:04:35: 3f:6f:52:7e:51:d1:b8:ab:38:fc:c3:99:64:58:60: ec:95:3a:dd:93:ba:36:db:fd:a8:1c:70:d2:91:49: c9:42:2e:c2:1f:a9:63:c5:0d:ee:fb:ca:4c:32:55: 18:41:b0:db:81:56:d1:2c:80:21:aa:d2:e6:59:66: 61:86:ba:03:8c:2a:9d:d2:5c:20:e0:e5:63:12:d0: 94:cc:7b:34:64:db:ba:82:87:6e:c1:a1:1f:b7:d2: 75:2d:7a:24:5d:97:11:9e:e2:49:a6:5b:c8:7d:ef: 5a:db:b1:d2:56:f1:0d:d6:63:6b:13:3d:34:89:23: c7:c4:1c:48:50:cd:36:53:74:6f:f2:42:84:1f:27: 6c:e9:48:e4:f1:4c:46:78:3f:f6:dd:ea:48:0c:74: 26:c2:50:8e:88:7d:b4:f3:75:7d:87:16:5a:4d:f3: 9d:8e:b1:07:3d:c1:e9:e2:2b:7d:97:76:6d:4f:07: 89:65:10:eb:f8:de:41:b9:20:52:f1:f0:04:c4:f5: 8c:4e:77:de:65:ca:9c:ca:ab:82:c8:87:db:cf:21: 4e:7d:e2:c9:65:7c:4f:e3:f2:08:7d:d4:da:17:71: bf:9c:43:87:73:f1:6d:f6:d2:de:d9:b0:35:a9:f2: e4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:DF:D1:42:59:4E:3D:49:6C:AB:18:F6:56:06:22:DF:29:E9:76:E9 X509v3 Authority Key Identifier: keyid:3E:08:83:4B:3B:29:73:90:9C:0A:AF:5B:B5:D3:54:B1:C0:E5:CA:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgiDSzspc5CcCq9btdNUscDlyj4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:90:99:32:c3:1e:b2:de:be:ff:57:89:2f:53:46:0e:d1:d4: 6c:04:d4:77:8b:4b:b3:78:d2:2e:db:6d:5e:74:e3:6d:d0:ea: bc:f7:a9:d0:6f:29:b2:ef:4e:f8:00:c0:d3:a3:bf:04:b4:60: a2:f7:2f:7c:54:9d:e8:e9:d0:11:f9:a2:c1:55:a5:37:9f:4c: d7:ae:7d:32:4d:8c:a2:ac:28:7b:c9:89:78:11:bb:ce:5f:94: 08:4d:8b:6e:a8:65:53:2d:ce:85:45:4f:57:a6:2e:f3:86:83: ac:ea:e8:a6:9a:07:4a:c4:6e:58:a8:92:26:6b:02:cc:83:44: 3a:a3:17:48:31:86:2b:59:f1:c6:f0:ab:ff:df:f6:e2:49:73: c4:c3:de:d5:a4:20:84:4b:b2:b9:50:77:21:3b:89:c8:7b:2d: 71:a7:d3:b0:6f:00:a9:cc:01:cd:e8:b3:42:89:26:c3:29:da: 2e:c1:5d:2a:2e:e4:65:40:6b:c2:97:3a:4f:a6:2a:33:3c:f0: 70:44:2a:58:85:b3:50:ae:0d:d7:9f:b8:a3:23:7e:6a:ed:32: 5b:3d:ac:a2:f2:78:80:8c:a6:7d:b5:6e:c5:31:da:5c:51:fd: 6a:8f:5c:c6:2d:20:2c:d9:fc:15:de:fa:3c:b7:c8:c9:bb:72: 50:31:f7:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxtp6si1ntQ8isLFbSWtOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMDg4MzRiM2IyOTczOTA5YzBhYWY1YmI1ZDM1NGIxYzBl NWNhM2UwHhcNMjYwMjA5MTkwMDMxWhcNMjYwMjEwMTkwMDMxWjAzMTEwLwYDVQQD EyhiZmRmZDE0MjU5NGUzZDQ5NmNhYjE4ZjY1NjA2MjJkZjI5ZTk3NmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GphI7gqJcSpbvjXBDU/b1J+UdG4 qzj8w5lkWGDslTrdk7o22/2oHHDSkUnJQi7CH6ljxQ3u+8pMMlUYQbDbgVbRLIAh qtLmWWZhhroDjCqd0lwg4OVjEtCUzHs0ZNu6goduwaEft9J1LXokXZcRnuJJplvI fe9a27HSVvEN1mNrEz00iSPHxBxIUM02U3Rv8kKEHyds6Ujk8UxGeD/23epIDHQm wlCOiH2083V9hxZaTfOdjrEHPcHp4it9l3ZtTweJZRDr+N5BuSBS8fAExPWMTnfe ZcqcyquCyIfbzyFOfeLJZXxP4/IIfdTaF3G/nEOHc/Ft9tLe2bA1qfLkdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL/f0UJZTj1JbKsY9lYGIt8p6XbpMB8GA1UdIwQY MBaAFD4Ig0s7KXOQnAqvW7XTVLHA5co+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGdpRFN6c3BjNUNjQ3E5YnRkTlVzY0RseWo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9lZjAzYjMtNzQ3Mi00NmRlLTk1ODYt ZmQ3Yjk3MzljYTI2LzEvUGdpRFN6c3BjNUNjQ3E5YnRkTlVzY0RseWo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9lZjAzYjMtNzQ3Mi00NmRlLTk1ODYtZmQ3Yjk3MzljYTI2 LzEvUGdpRFN6c3BjNUNjQ3E5YnRkTlVzY0RseWo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfJCZMsMe st6+/1eJL1NGDtHUbATUd4tLs3jSLtttXnTjbdDqvPep0G8psu9O+ADA06O/BLRg ovcvfFSd6OnQEfmiwVWlN59M1659Mk2Moqwoe8mJeBG7zl+UCE2LbqhlUy3OhUVP V6Yu84aDrOroppoHSsRuWKiSJmsCzINEOqMXSDGGK1nxxvCr/9/24klzxMPe1aQg hEuyuVB3ITuJyHstcafTsG8AqcwBzeizQokmwynaLsFdKi7kZUBrwpc6T6YqMzzw cEQqWIWzUK4N15+4oyN+au0yWz2sovJ4gIymfbVuxTHaXFH9ao9cxi0gLNn8Fd76 PLfIybtyUDH3NA== -----END CERTIFICATE-----Generated at Tue Feb 10 03:15:57 2026 by rpki-client