This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft File: pKB83NCVA-z-Pml8wyZphRga6Co.mft (raw, json) Hash identifier: 1YQ1SfJbPyLa8ERP0l+z67ZBC9sZB2ZWl9f7Le3vN5s= Subject key identifier: 32:57:9D:1B:3C:D0:39:26:5C:05:62:D8:5F:40:4C:E2:FD:A2:A1:98 Authority key identifier: A4:A0:7C:DC:D0:95:03:EC:FE:3E:69:7C:C3:26:69:85:18:1A:E8:2A Certificate issuer: /CN=a4a07cdcd09503ecfe3e697cc3266985181ae82a Certificate serial: 019C416A6C8D9F7859729F8E2CC5861CA8DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKB83NCVA-z-Pml8wyZphRga6Co.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft Manifest number: 14B1 Signing time: Mon 09 Feb 2026 08:00:19 +0000 Manifest this update: Mon 09 Feb 2026 08:00:19 +0000 Manifest next update: Tue 10 Feb 2026 08:00:19 +0000 Files and hashes: 1: OtTzKBhHOY6wOBoHAZ0VbR54kA4.roa (hash: aU0rHFNkYFHdV5H8egljpHkLcw9iIq3HEwixa6GSrPc=) 2: pKB83NCVA-z-Pml8wyZphRga6Co.crl (hash: eBkj2BnaQjzZ1bNoiFa5bNxI4JZmzoNACKVUm9DWu2Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.crl rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft rsync://rpki.ripe.net/repository/DEFAULT/pKB83NCVA-z-Pml8wyZphRga6Co.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 08:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:6a:6c:8d:9f:78:59:72:9f:8e:2c:c5:86:1c:a8:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4a07cdcd09503ecfe3e697cc3266985181ae82a Validity Not Before: Feb 9 08:00:19 2026 GMT Not After : Feb 10 08:00:19 2026 GMT Subject: CN=32579d1b3cd039265c0562d85f404ce2fda2a198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:31:b1:48:fc:a4:10:c6:6f:70:08:8e:e9:26: d3:e5:4f:66:ee:38:6b:28:a3:3d:ad:96:23:8b:46: 48:07:ec:e3:6c:7a:67:ea:b8:d0:fa:a2:90:6b:b1: e2:16:02:b6:05:99:29:87:c5:05:41:4c:94:31:e0: 0a:7b:70:9a:c0:87:6c:48:15:8f:77:3b:8c:eb:17: 59:f9:25:f1:cc:f1:9e:53:ff:54:b5:1a:43:0a:46: 0a:5a:a9:ef:dc:35:fc:41:64:b6:43:4a:aa:e8:26: a2:32:be:4f:e9:55:9d:ed:06:7c:c9:bc:7c:a6:c6: 87:65:b8:e4:84:05:bf:2c:5c:c1:7f:bb:63:8f:2d: 05:5c:1d:51:a2:44:cc:8e:78:0d:1a:18:eb:47:30: 35:00:be:1f:03:8f:25:01:57:6c:6a:ab:e5:5b:f9: 69:6f:6f:ac:f3:46:2c:a2:2d:76:13:99:81:63:30: 62:33:31:9e:60:c1:49:77:68:6c:f9:b9:29:b9:e7: f7:b5:2e:d2:a5:8c:52:bd:c5:78:de:86:7a:ed:02: 34:2c:da:95:42:49:d8:2f:bc:27:01:de:47:b2:05: 0c:7d:f1:3a:66:ce:c0:53:66:94:e5:cd:5d:53:a8: 1b:17:f3:1b:40:23:db:af:c0:aa:d0:fa:4c:e1:38: a3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:57:9D:1B:3C:D0:39:26:5C:05:62:D8:5F:40:4C:E2:FD:A2:A1:98 X509v3 Authority Key Identifier: keyid:A4:A0:7C:DC:D0:95:03:EC:FE:3E:69:7C:C3:26:69:85:18:1A:E8:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKB83NCVA-z-Pml8wyZphRga6Co.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:b6:74:66:96:d8:57:d3:08:ae:da:64:3d:fd:8a:ef:26:39: 79:27:c5:23:8e:e1:29:d4:9d:2c:f6:7d:ad:39:8e:2b:9a:9a: 6e:da:37:2f:c0:89:31:91:84:7b:e2:1a:93:2f:b0:05:03:cd: 15:96:7c:2d:01:2c:c7:1a:8a:15:7f:cc:a7:aa:ce:84:26:46: 77:6f:74:cb:15:aa:a6:99:c0:39:15:95:00:15:a9:20:f8:22: 3c:ea:54:a4:b0:94:45:94:6f:f3:5f:62:df:7f:34:2b:a8:9b: dd:90:b5:8e:eb:53:a4:94:2f:87:88:b9:b0:f6:33:4a:4b:ef: 8d:62:b0:ea:36:37:14:57:fa:8f:2d:1a:ce:e7:83:a1:6f:b4: a2:d8:c2:67:63:9b:36:5b:76:e7:bf:27:86:05:fa:e3:f9:9d: af:c0:09:8a:5b:27:5e:21:6e:cb:68:e2:e2:f0:36:29:db:ba: 7b:dd:bc:63:0c:f3:bc:ab:40:38:1c:82:35:eb:02:8e:d8:c7: 70:f8:f5:98:10:a8:74:42:3a:a5:24:86:95:9f:c1:9a:71:04: d6:aa:b8:24:2b:0a:e7:8d:04:3e:82:45:92:02:43:7b:d7:12: cc:c4:42:b5:fb:f5:ed:89:d3:b2:c6:75:29:c5:8d:d7:7a:8d: 5b:23:81:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBamyNn3hZcp+OLMWGHKjcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YTA3Y2RjZDA5NTAzZWNmZTNlNjk3Y2MzMjY2OTg1MTgx YWU4MmEwHhcNMjYwMjA5MDgwMDE5WhcNMjYwMjEwMDgwMDE5WjAzMTEwLwYDVQQD EygzMjU3OWQxYjNjZDAzOTI2NWMwNTYyZDg1ZjQwNGNlMmZkYTJhMTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDGxSPykEMZvcAiO6SbT5U9m7jhr KKM9rZYji0ZIB+zjbHpn6rjQ+qKQa7HiFgK2BZkph8UFQUyUMeAKe3CawIdsSBWP dzuM6xdZ+SXxzPGeU/9UtRpDCkYKWqnv3DX8QWS2Q0qq6CaiMr5P6VWd7QZ8ybx8 psaHZbjkhAW/LFzBf7tjjy0FXB1RokTMjngNGhjrRzA1AL4fA48lAVdsaqvlW/lp b2+s80Ysoi12E5mBYzBiMzGeYMFJd2hs+bkpuef3tS7SpYxSvcV43oZ67QI0LNqV QknYL7wnAd5HsgUMffE6Zs7AU2aU5c1dU6gbF/MbQCPbr8Cq0PpM4TijXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDJXnRs80DkmXAVi2F9ATOL9oqGYMB8GA1UdIwQY MBaAFKSgfNzQlQPs/j5pfMMmaYUYGugqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEtCODNOQ1ZBLXotUG1sOHd5WnBoUmdhNkNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9kODU0OGMtMzBiMS00OGE0LWFlMjgt ZDZiMGJjOTBmMmY1LzEvcEtCODNOQ1ZBLXotUG1sOHd5WnBoUmdhNkNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9kODU0OGMtMzBiMS00OGE0LWFlMjgtZDZiMGJjOTBmMmY1 LzEvcEtCODNOQ1ZBLXotUG1sOHd5WnBoUmdhNkNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATLZ0ZpbY V9MIrtpkPf2K7yY5eSfFI47hKdSdLPZ9rTmOK5qabto3L8CJMZGEe+Iaky+wBQPN FZZ8LQEsxxqKFX/Mp6rOhCZGd290yxWqppnAORWVABWpIPgiPOpUpLCURZRv819i 3380K6ib3ZC1jutTpJQvh4i5sPYzSkvvjWKw6jY3FFf6jy0azueDoW+0otjCZ2Ob Nlt2578nhgX64/mdr8AJilsnXiFuy2ji4vA2Kdu6e928YwzzvKtAOByCNesCjtjH cPj1mBCodEI6pSSGlZ/BmnEE1qq4JCsK540EPoJFkgJDe9cSzMRCtfv17YnTssZ1 KcWN13qNWyOBNg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:55:27 2026 by rpki-client