This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/81dd1c-866d-4bbb-8295-14e930ffbd44/1/Pw5Q8wQo8xNlAgv9gW4urLPABIo.mft File: Pw5Q8wQo8xNlAgv9gW4urLPABIo.mft (raw, json) Hash identifier: YqfUsVHROLwHmVzErttklrWYUxUfCVXRbELBvNRjF+4= Subject key identifier: 44:0E:7B:C2:35:ED:D5:92:2F:B7:1F:4D:E3:DA:24:20:89:5C:8C:65 Authority key identifier: 3F:0E:50:F3:04:28:F3:13:65:02:0B:FD:81:6E:2E:AC:B3:C0:04:8A Certificate issuer: /CN=3f0e50f30428f31365020bfd816e2eacb3c0048a Certificate serial: 019C4134908303692062F7442508C3183B01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pw5Q8wQo8xNlAgv9gW4urLPABIo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/81dd1c-866d-4bbb-8295-14e930ffbd44/1/Pw5Q8wQo8xNlAgv9gW4urLPABIo.mft Manifest number: 05 Signing time: Mon 09 Feb 2026 07:01:29 +0000 Manifest this update: Mon 09 Feb 2026 07:01:29 +0000 Manifest next update: Tue 10 Feb 2026 07:01:29 +0000 Files and hashes: 1: Pw5Q8wQo8xNlAgv9gW4urLPABIo.crl (hash: 9AD5ddTNl9tkUoTed+NRpCQKikYxCwZxo9chpypcuuA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/81dd1c-866d-4bbb-8295-14e930ffbd44/1/Pw5Q8wQo8xNlAgv9gW4urLPABIo.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/81dd1c-866d-4bbb-8295-14e930ffbd44/1/Pw5Q8wQo8xNlAgv9gW4urLPABIo.mft rsync://rpki.ripe.net/repository/DEFAULT/Pw5Q8wQo8xNlAgv9gW4urLPABIo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:34:90:83:03:69:20:62:f7:44:25:08:c3:18:3b:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f0e50f30428f31365020bfd816e2eacb3c0048a Validity Not Before: Feb 9 07:01:29 2026 GMT Not After : Feb 10 07:01:29 2026 GMT Subject: CN=440e7bc235edd5922fb71f4de3da2420895c8c65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:87:ec:a2:2c:f2:64:bb:ad:eb:ef:74:4a:d6: 17:e5:26:b8:36:a6:e3:09:c2:8b:58:4d:f7:c5:8f: 02:c3:39:7f:b7:bc:10:99:d3:a5:d3:80:b2:0a:77: 56:06:7b:00:c4:4c:28:7e:f3:8e:f2:42:1b:14:66: aa:bc:37:e6:59:bf:b0:f8:ce:3a:e9:32:e4:12:af: 6f:e7:9d:8e:64:27:3d:ea:b2:dc:29:75:2a:68:0d: f1:13:58:cc:0f:ed:18:82:29:02:95:1f:fd:e2:70: b2:47:8c:3d:c8:58:6c:44:33:58:d8:4c:95:01:90: b9:78:97:41:37:1e:8e:69:37:2f:c1:8e:2b:32:98: ec:89:ab:02:d4:c9:87:0f:b2:14:22:db:11:b5:71: cc:39:f7:11:0f:57:ca:9c:d0:0b:f8:47:36:37:63: 9e:1b:90:65:08:73:ec:5b:a6:37:ce:75:c2:1c:08: ed:a8:ca:79:d8:9f:9d:84:9e:cf:ed:6c:be:e2:c6: ff:e6:51:af:45:59:aa:b4:8b:17:a1:9a:8a:05:67: b7:a0:92:e6:dd:29:29:cb:32:34:fb:79:87:a7:b3: f2:d7:15:ef:e8:b7:0b:ac:5f:8e:8e:55:ea:b6:16: cb:e5:d2:52:5b:81:73:43:e5:54:85:8a:3d:1c:2d: 19:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:0E:7B:C2:35:ED:D5:92:2F:B7:1F:4D:E3:DA:24:20:89:5C:8C:65 X509v3 Authority Key Identifier: keyid:3F:0E:50:F3:04:28:F3:13:65:02:0B:FD:81:6E:2E:AC:B3:C0:04:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pw5Q8wQo8xNlAgv9gW4urLPABIo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/81dd1c-866d-4bbb-8295-14e930ffbd44/1/Pw5Q8wQo8xNlAgv9gW4urLPABIo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/81dd1c-866d-4bbb-8295-14e930ffbd44/1/Pw5Q8wQo8xNlAgv9gW4urLPABIo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:54:58:3d:b6:26:e6:cd:5f:18:8b:9b:17:1b:a2:a8:5f:83: 8a:91:55:ea:eb:7a:b8:52:62:16:1b:81:f0:7f:fa:96:13:7b: 9d:85:53:62:5b:dd:cb:1c:9d:56:7d:1c:2b:6c:7c:8e:78:46: 05:21:84:7b:1f:c7:f7:6a:69:90:c9:98:6f:7b:3c:1f:bc:03: df:a3:49:ac:1f:00:e2:ef:6c:c4:a0:cd:63:5a:d8:69:06:90: c8:92:51:5e:ef:36:20:c0:0b:0a:75:1a:bb:fb:80:44:c8:c0: db:9d:2e:a5:36:85:b0:de:51:44:c6:aa:90:00:51:f5:ee:d4: 6f:39:9d:72:23:64:3d:f7:07:ed:a3:dc:b2:74:2e:59:f8:eb: e2:fa:46:bf:d6:0f:a9:97:65:79:32:0f:42:8c:fd:df:fb:46: 5e:84:d8:14:3b:06:f5:fa:f5:5e:2a:ca:d1:95:05:57:9d:f7: 54:da:ce:88:01:93:3a:3f:79:1a:c4:79:34:3a:3b:50:a1:a8: 59:56:92:9e:65:2e:1e:87:32:55:5f:cd:3f:fc:4a:ac:7c:a8: 3e:60:bd:27:9e:9b:19:17:c2:ca:71:f4:d6:00:71:ce:59:3e: 75:76:e0:98:55:a3:29:96:2e:21:c9:a9:4e:20:9b:59:a9:e1: d6:6e:db:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBNJCDA2kgYvdEJQjDGDsBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmMGU1MGYzMDQyOGYzMTM2NTAyMGJmZDgxNmUyZWFjYjNj MDA0OGEwHhcNMjYwMjA5MDcwMTI5WhcNMjYwMjEwMDcwMTI5WjAzMTEwLwYDVQQD Eyg0NDBlN2JjMjM1ZWRkNTkyMmZiNzFmNGRlM2RhMjQyMDg5NWM4YzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmofsoizyZLut6+90StYX5Sa4Nqbj CcKLWE33xY8Cwzl/t7wQmdOl04CyCndWBnsAxEwofvOO8kIbFGaqvDfmWb+w+M46 6TLkEq9v552OZCc96rLcKXUqaA3xE1jMD+0YgikClR/94nCyR4w9yFhsRDNY2EyV AZC5eJdBNx6OaTcvwY4rMpjsiasC1MmHD7IUItsRtXHMOfcRD1fKnNAL+Ec2N2Oe G5BlCHPsW6Y3znXCHAjtqMp52J+dhJ7P7Wy+4sb/5lGvRVmqtIsXoZqKBWe3oJLm 3SkpyzI0+3mHp7Py1xXv6LcLrF+OjlXqthbL5dJSW4FzQ+VUhYo9HC0ZMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEQOe8I17dWSL7cfTePaJCCJXIxlMB8GA1UdIwQY MBaAFD8OUPMEKPMTZQIL/YFuLqyzwASKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHc1UTh3UW84eE5sQWd2OWdXNHVyTFBBQklvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS84MWRkMWMtODY2ZC00YmJiLTgyOTUt MTRlOTMwZmZiZDQ0LzEvUHc1UTh3UW84eE5sQWd2OWdXNHVyTFBBQklvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS84MWRkMWMtODY2ZC00YmJiLTgyOTUtMTRlOTMwZmZiZDQ0 LzEvUHc1UTh3UW84eE5sQWd2OWdXNHVyTFBBQklvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt1RYPbYm 5s1fGIubFxuiqF+DipFV6ut6uFJiFhuB8H/6lhN7nYVTYlvdyxydVn0cK2x8jnhG BSGEex/H92ppkMmYb3s8H7wD36NJrB8A4u9sxKDNY1rYaQaQyJJRXu82IMALCnUa u/uARMjA250upTaFsN5RRMaqkABR9e7UbzmdciNkPfcH7aPcsnQuWfjr4vpGv9YP qZdleTIPQoz93/tGXoTYFDsG9fr1XirK0ZUFV533VNrOiAGTOj95GsR5NDo7UKGo WVaSnmUuHocyVV/NP/xKrHyoPmC9J56bGRfCynH01gBxzlk+dXbgmFWjKZYuIcmp TiCbWanh1m7blw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:12 2026 by rpki-client