This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft File: PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft (raw, json) Hash identifier: 5YOD64qrVaKG8MKxZkzOnmwDDwyCw8riYkTrwPY11QU= Subject key identifier: E2:4B:76:B7:2F:3B:99:21:F2:33:AC:1A:6F:0A:1C:2A:EB:BB:EB:94 Authority key identifier: 3E:A6:ED:31:F9:7F:37:C5:E5:C5:50:73:2F:85:D2:46:90:96:2C:EF Certificate issuer: /CN=3ea6ed31f97f37c5e5c550732f85d24690962cef Certificate serial: 019C4322C3E8F738863D3D7A8C7D71929CA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqbtMfl_N8XlxVBzL4XSRpCWLO8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft Manifest number: 180B Signing time: Mon 09 Feb 2026 16:01:17 +0000 Manifest this update: Mon 09 Feb 2026 16:01:17 +0000 Manifest next update: Tue 10 Feb 2026 16:01:17 +0000 Files and hashes: 1: PqbtMfl_N8XlxVBzL4XSRpCWLO8.crl (hash: PBdf8UAlMPZlmjNPIHEmzizh8Rc0Le52QwXtzAMnEjU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft rsync://rpki.ripe.net/repository/DEFAULT/PqbtMfl_N8XlxVBzL4XSRpCWLO8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:c3:e8:f7:38:86:3d:3d:7a:8c:7d:71:92:9c:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ea6ed31f97f37c5e5c550732f85d24690962cef Validity Not Before: Feb 9 16:01:17 2026 GMT Not After : Feb 10 16:01:17 2026 GMT Subject: CN=e24b76b72f3b9921f233ac1a6f0a1c2aebbbeb94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:45:85:9f:9a:91:ba:1d:02:84:42:fc:ab:05: 4b:fe:d8:29:dd:7d:46:9f:b6:33:6b:a1:7c:06:c6: 8c:c2:fd:87:15:b7:e2:dd:7c:eb:98:0e:1d:3c:21: 7a:4f:35:9d:f4:6d:a1:55:4f:0f:e7:e0:c1:dc:fb: fa:9a:f8:43:55:92:b8:d6:cc:c5:b6:b9:34:18:14: b2:6d:12:23:6a:94:72:e4:a0:53:95:c0:12:d0:ec: c0:08:aa:a9:58:a8:ce:3c:dc:6c:a0:0d:3c:54:ea: bf:a7:87:b9:b2:56:33:55:0f:55:3f:d7:55:81:f0: 5b:54:a9:c1:b7:4d:07:eb:32:39:8c:bb:30:28:6d: 9e:fc:4b:bb:b2:12:8c:4c:64:4b:2e:88:96:ee:7d: 17:8e:12:40:5a:04:6c:60:c3:7b:25:90:22:19:9b: 60:0d:19:eb:f6:55:87:59:46:28:6d:59:f3:13:28: 77:19:8f:45:db:35:45:84:5f:8f:34:3e:0e:0e:7c: cc:0a:34:a9:5d:d2:fb:22:f0:eb:9e:ad:d6:ad:59: 4e:40:74:6e:30:4a:87:73:34:2e:a5:fa:39:af:c3: 1a:7a:f3:77:f2:8a:7c:14:f4:ff:02:8f:87:1a:b6: 1c:74:d6:46:77:be:ab:5b:ce:9d:8a:32:53:8b:bd: 92:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:4B:76:B7:2F:3B:99:21:F2:33:AC:1A:6F:0A:1C:2A:EB:BB:EB:94 X509v3 Authority Key Identifier: keyid:3E:A6:ED:31:F9:7F:37:C5:E5:C5:50:73:2F:85:D2:46:90:96:2C:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqbtMfl_N8XlxVBzL4XSRpCWLO8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:14:2b:a6:e9:b6:06:ed:30:6b:e2:e0:21:02:25:4f:6e:4f: a6:a1:bc:0c:f3:52:50:02:e1:49:a2:10:d6:50:57:01:93:29: 2f:2a:7b:d1:12:c3:04:97:09:62:e8:48:4d:08:de:18:c1:4a: d5:97:da:fc:b6:15:7b:9c:32:20:67:ab:58:d6:ba:c4:ce:2a: 3f:4e:6d:98:b3:a8:0c:01:dc:92:dd:9f:1d:79:6d:26:60:2f: 5c:15:57:64:a5:8c:91:3e:1f:4c:46:22:43:39:74:8a:45:d0: 35:18:fa:09:54:a4:86:07:84:d3:10:cb:79:86:5b:3f:95:cc: b0:8f:21:ef:e4:c8:71:8d:98:4d:1b:34:18:89:42:10:d1:4c: 17:2b:b5:a2:9e:e4:0c:6c:ef:33:01:ff:4a:67:d6:04:96:af: a5:d8:d0:a3:b4:43:9e:3d:b6:cb:9b:96:77:c0:b1:30:0b:b3: 6d:c2:d7:6a:7f:d6:e6:2c:3d:21:70:e4:c7:11:4a:3d:4a:99: 12:73:ec:ac:49:6f:0d:e7:41:c0:bb:a1:0b:f5:6b:98:89:45: 74:04:ab:68:cd:55:93:a7:0a:68:2a:2b:63:a5:df:a6:0d:1a: 65:0d:c1:77:92:a0:67:96:be:f7:10:f4:53:32:20:d6:a8:57: 76:bb:2f:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIsPo9ziGPT16jH1xkpymMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYTZlZDMxZjk3ZjM3YzVlNWM1NTA3MzJmODVkMjQ2OTA5 NjJjZWYwHhcNMjYwMjA5MTYwMTE3WhcNMjYwMjEwMTYwMTE3WjAzMTEwLwYDVQQD EyhlMjRiNzZiNzJmM2I5OTIxZjIzM2FjMWE2ZjBhMWMyYWViYmJlYjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEWFn5qRuh0ChEL8qwVL/tgp3X1G n7Yza6F8BsaMwv2HFbfi3XzrmA4dPCF6TzWd9G2hVU8P5+DB3Pv6mvhDVZK41szF trk0GBSybRIjapRy5KBTlcAS0OzACKqpWKjOPNxsoA08VOq/p4e5slYzVQ9VP9dV gfBbVKnBt00H6zI5jLswKG2e/Eu7shKMTGRLLoiW7n0XjhJAWgRsYMN7JZAiGZtg DRnr9lWHWUYobVnzEyh3GY9F2zVFhF+PND4ODnzMCjSpXdL7IvDrnq3WrVlOQHRu MEqHczQupfo5r8MaevN38op8FPT/Ao+HGrYcdNZGd76rW86dijJTi72SnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOJLdrcvO5kh8jOsGm8KHCrru+uUMB8GA1UdIwQY MBaAFD6m7TH5fzfF5cVQcy+F0kaQlizvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHFidE1mbF9OOFhseFZCekw0WFNScENXTE84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zNWFkYjEtNjdlZC00OTJkLWJhODkt MmU2NzkxNjk0YWViLzEvUHFidE1mbF9OOFhseFZCekw0WFNScENXTE84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi8zNWFkYjEtNjdlZC00OTJkLWJhODktMmU2NzkxNjk0YWVi LzEvUHFidE1mbF9OOFhseFZCekw0WFNScENXTE84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYRQrpum2 Bu0wa+LgIQIlT25PpqG8DPNSUALhSaIQ1lBXAZMpLyp70RLDBJcJYuhITQjeGMFK 1Zfa/LYVe5wyIGerWNa6xM4qP05tmLOoDAHckt2fHXltJmAvXBVXZKWMkT4fTEYi Qzl0ikXQNRj6CVSkhgeE0xDLeYZbP5XMsI8h7+TIcY2YTRs0GIlCENFMFyu1op7k DGzvMwH/SmfWBJavpdjQo7RDnj22y5uWd8CxMAuzbcLXan/W5iw9IXDkxxFKPUqZ EnPsrElvDedBwLuhC/VrmIlFdASraM1Vk6cKaCorY6Xfpg0aZQ3Bd5KgZ5a+9xD0 UzIg1qhXdrsvlA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:54:23 2026 by rpki-client