This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.mft File: Pr6uqg8H3D1UvBFcziAq2pggsdU.mft (raw, json) Hash identifier: WqjehipCwbSWBfEF2drO7VoxFXevhBko4oaCJmob9CI= Subject key identifier: AA:10:71:FA:64:95:BF:DC:14:7A:85:97:9C:F0:BD:28:4C:8F:0F:37 Authority key identifier: 3E:BE:AE:AA:0F:07:DC:3D:54:BC:11:5C:CE:20:2A:DA:98:20:B1:D5 Certificate issuer: /CN=3ebeaeaa0f07dc3d54bc115cce202ada9820b1d5 Certificate serial: 019C44D9C2471B3075E8E667FF361CE8FFFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pr6uqg8H3D1UvBFcziAq2pggsdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.mft Manifest number: 09A4 Signing time: Tue 10 Feb 2026 00:00:47 +0000 Manifest this update: Tue 10 Feb 2026 00:00:47 +0000 Manifest next update: Wed 11 Feb 2026 00:00:47 +0000 Files and hashes: 1: Pr6uqg8H3D1UvBFcziAq2pggsdU.crl (hash: b2Cg5KBgHyEgCiQC/eGUbLaUHXLe20C+3+JyXmrfBRM=) 2: ralErmH8EJ-9ydnhnrCvDlZV9ys.roa (hash: sDfjqe7LCY2kx4pVv1vmwGHXaRFhYudsoSBTeUiDShY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.crl rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.mft rsync://rpki.ripe.net/repository/DEFAULT/Pr6uqg8H3D1UvBFcziAq2pggsdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:d9:c2:47:1b:30:75:e8:e6:67:ff:36:1c:e8:ff:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ebeaeaa0f07dc3d54bc115cce202ada9820b1d5 Validity Not Before: Feb 10 00:00:47 2026 GMT Not After : Feb 11 00:00:47 2026 GMT Subject: CN=aa1071fa6495bfdc147a85979cf0bd284c8f0f37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:66:db:e4:ff:0f:47:36:c0:90:1e:90:10:3f: 55:70:6c:27:85:cb:26:6b:00:20:9d:dc:80:e4:2b: ab:41:4c:2a:fd:f4:45:a0:3b:df:a4:ad:e9:ba:cf: cd:6c:86:cc:51:e8:9a:51:d6:40:bb:14:01:bc:36: 61:6d:3b:d9:65:f1:86:53:e3:0f:8c:b3:94:c1:d0: 49:aa:4f:12:b7:3b:13:24:95:ba:3e:48:a7:01:4f: 5a:47:ae:a7:e0:97:40:df:3a:91:0b:51:97:f6:0e: 62:06:0c:ff:e8:d6:40:5c:7d:35:cc:92:90:1c:4a: 28:7f:70:40:84:be:b1:ba:53:af:f4:df:91:06:fd: 9b:01:22:a3:74:2c:81:d3:41:9d:72:6a:84:93:3e: 72:af:ae:8d:b9:d6:fa:ab:5c:75:90:c3:80:0b:f9: 24:ff:08:4f:9d:ba:19:1a:9c:4f:a1:f2:8d:98:20: ee:19:05:78:8f:5e:b1:17:6f:57:db:af:1e:a4:75: 73:9e:1f:c3:17:ac:44:d2:6d:a7:fe:bc:2c:1c:ae: 72:c8:3c:35:f4:af:0c:f1:9c:b9:32:8b:0d:33:ac: e0:2a:a3:ac:b4:ed:00:a5:45:c2:30:5f:fd:fa:f5: 67:f0:ac:b9:e4:d4:c3:46:b5:b6:f1:01:d1:46:fa: 8b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:10:71:FA:64:95:BF:DC:14:7A:85:97:9C:F0:BD:28:4C:8F:0F:37 X509v3 Authority Key Identifier: keyid:3E:BE:AE:AA:0F:07:DC:3D:54:BC:11:5C:CE:20:2A:DA:98:20:B1:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pr6uqg8H3D1UvBFcziAq2pggsdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:fb:25:74:fd:05:d3:9e:14:3f:db:fe:62:8b:45:07:a8:8c: 75:ee:48:fa:58:6e:b1:8d:10:b8:63:06:6e:54:c0:e3:8f:4e: c1:7d:96:1f:60:7d:7b:03:22:b7:1f:11:6c:fb:8f:aa:43:50: 07:5d:c5:da:e9:e8:8c:7c:c8:f7:00:2a:c0:79:b7:09:ce:11: 81:e8:58:23:32:2c:fa:98:81:1a:f0:94:a5:cc:29:18:72:fb: fb:7d:05:c2:3f:dd:60:48:57:f6:28:12:7b:90:fd:e6:0e:99: 55:69:14:ae:aa:73:ba:cc:f4:65:92:f6:27:e6:d9:fe:86:d7: cb:20:6d:57:85:f8:3b:2e:dd:69:e3:aa:c1:65:96:a3:00:b7: e0:f4:54:ef:79:03:5b:ea:8e:41:0c:ff:71:97:28:9c:ef:54: 8a:5b:32:31:f0:ed:7f:7a:ef:c1:c5:20:29:88:a1:85:e6:f8: 5c:f8:13:93:89:82:c0:aa:ff:15:93:40:18:73:3b:c5:8f:3e: b6:e9:bb:18:8b:18:83:5e:d9:13:28:19:56:d6:68:65:25:71: 3f:91:b4:8d:b8:2f:b8:a4:02:94:5d:86:56:4e:61:de:2a:9f: d0:48:77:2d:5a:26:33:e9:2c:eb:f6:88:75:1f:3f:2e:7f:fd: 15:d5:67:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxE2cJHGzB16OZn/zYc6P/7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYmVhZWFhMGYwN2RjM2Q1NGJjMTE1Y2NlMjAyYWRhOTgy MGIxZDUwHhcNMjYwMjEwMDAwMDQ3WhcNMjYwMjExMDAwMDQ3WjAzMTEwLwYDVQQD EyhhYTEwNzFmYTY0OTViZmRjMTQ3YTg1OTc5Y2YwYmQyODRjOGYwZjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWbb5P8PRzbAkB6QED9VcGwnhcsm awAgndyA5CurQUwq/fRFoDvfpK3pus/NbIbMUeiaUdZAuxQBvDZhbTvZZfGGU+MP jLOUwdBJqk8StzsTJJW6PkinAU9aR66n4JdA3zqRC1GX9g5iBgz/6NZAXH01zJKQ HEoof3BAhL6xulOv9N+RBv2bASKjdCyB00GdcmqEkz5yr66Nudb6q1x1kMOAC/kk /whPnboZGpxPofKNmCDuGQV4j16xF29X268epHVznh/DF6xE0m2n/rwsHK5yyDw1 9K8M8Zy5MosNM6zgKqOstO0ApUXCMF/9+vVn8Ky55NTDRrW28QHRRvqLQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKoQcfpklb/cFHqFl5zwvShMjw83MB8GA1UdIwQY MBaAFD6+rqoPB9w9VLwRXM4gKtqYILHVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHI2dXFnOEgzRDFVdkJGY3ppQXEycGdnc2RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8zYTAzNjgtNTcwYy00ODQ3LThkNGEt ZmY0YWQxZTNkYWY1LzEvUHI2dXFnOEgzRDFVdkJGY3ppQXEycGdnc2RVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS8zYTAzNjgtNTcwYy00ODQ3LThkNGEtZmY0YWQxZTNkYWY1 LzEvUHI2dXFnOEgzRDFVdkJGY3ppQXEycGdnc2RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKvsldP0F 054UP9v+YotFB6iMde5I+lhusY0QuGMGblTA449OwX2WH2B9ewMitx8RbPuPqkNQ B13F2unojHzI9wAqwHm3Cc4RgehYIzIs+piBGvCUpcwpGHL7+30Fwj/dYEhX9igS e5D95g6ZVWkUrqpzusz0ZZL2J+bZ/obXyyBtV4X4Oy7daeOqwWWWowC34PRU73kD W+qOQQz/cZconO9UilsyMfDtf3rvwcUgKYihheb4XPgTk4mCwKr/FZNAGHM7xY8+ tum7GIsYg17ZEygZVtZoZSVxP5G0jbgvuKQClF2GVk5h3iqf0Eh3LVomM+ks6/aI dR8/Ln/9FdVnNQ== -----END CERTIFICATE-----Generated at Tue Feb 10 02:51:08 2026 by rpki-client