This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft File: 0pigcUzBvyWsfH8c9sKIbIxhkqM.mft (raw, json) Hash identifier: OZ/bjmPqScZaJeaMPJvHqiztx0WX8yUZ8yRHxdzLQEY= Subject key identifier: 55:E3:D1:A0:3B:45:75:30:F2:B8:01:9B:7A:34:18:27:9B:FD:AB:6C Authority key identifier: D2:98:A0:71:4C:C1:BF:25:AC:7C:7F:1C:F6:C2:88:6C:8C:61:92:A3 Certificate issuer: /CN=d298a0714cc1bf25ac7c7f1cf6c2886c8c6192a3 Certificate serial: 019C4434C1EE1486355C78BA3505220BB129 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft Manifest number: 058C Signing time: Mon 09 Feb 2026 21:00:33 +0000 Manifest this update: Mon 09 Feb 2026 21:00:33 +0000 Manifest next update: Tue 10 Feb 2026 21:00:33 +0000 Files and hashes: 1: 0pigcUzBvyWsfH8c9sKIbIxhkqM.crl (hash: XBDKQGmlK7pIkd2t3QdbtA7qJa196ONAl0YCR8UYTQk=) 2: cMXu7WrvsmC-lThLKVR5Js2GYXY.roa (hash: EpVFpanfzZyTV+MCY5Rt4j7mVt0TS3sr2EacwZSVOVc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.crl rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:34:c1:ee:14:86:35:5c:78:ba:35:05:22:0b:b1:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d298a0714cc1bf25ac7c7f1cf6c2886c8c6192a3 Validity Not Before: Feb 9 21:00:33 2026 GMT Not After : Feb 10 21:00:33 2026 GMT Subject: CN=55e3d1a03b457530f2b8019b7a3418279bfdab6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cc:9d:4b:6a:64:50:1c:fd:e7:e0:0a:42:20: 62:8d:9e:4e:f5:af:81:53:f1:16:1c:0a:9e:50:40: 4f:98:3e:4a:54:51:17:af:23:97:7a:c7:1a:cd:7b: 08:63:41:52:42:95:0f:24:ed:73:4c:b2:2d:4c:dd: 21:bd:1c:b0:e7:ab:17:f2:45:d9:28:b8:21:5d:84: d5:91:34:3e:ee:a5:7b:bd:08:35:58:7a:ee:77:f6: 36:cb:c8:75:56:4d:b4:b2:ec:93:9b:0e:c0:e0:5f: 18:35:ed:0e:ba:ba:04:5b:3a:d6:a6:a2:fa:65:c8: 88:16:fc:10:3c:77:7d:bf:15:1c:ce:01:2e:4e:1b: 31:98:3b:76:1f:d3:41:bc:41:74:85:db:eb:f5:8c: 03:ef:39:50:93:0e:3a:de:f5:e3:fb:fe:5c:9b:b4: 78:65:77:37:74:68:f0:05:c7:0f:43:1c:45:6a:a8: 06:2e:24:74:46:71:72:dd:fb:b3:08:8d:f3:7c:b1: 27:a3:b3:78:12:39:cf:80:4f:b9:e7:55:ed:af:27: 0d:85:49:61:8b:df:ae:28:45:6f:94:7d:58:60:d5: ca:7f:d7:86:c0:3d:52:8b:db:1c:02:1c:a7:2e:3d: 7c:46:b2:be:15:d2:2f:f2:4e:84:b6:8f:6a:7e:8a: a7:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:E3:D1:A0:3B:45:75:30:F2:B8:01:9B:7A:34:18:27:9B:FD:AB:6C X509v3 Authority Key Identifier: keyid:D2:98:A0:71:4C:C1:BF:25:AC:7C:7F:1C:F6:C2:88:6C:8C:61:92:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:e9:91:19:c5:fb:7c:c1:5c:5c:44:93:18:b4:0a:08:86:e4: d5:c8:99:2c:84:5b:ab:4e:5e:19:fc:80:b8:65:ce:55:ca:dc: 89:c3:bd:1d:55:65:06:69:bc:1c:fa:0b:58:8d:9f:5e:bf:d0: 5a:4c:02:90:5f:e4:9d:e5:ba:67:20:d7:c8:27:9a:25:aa:83: d3:42:e3:58:bf:f5:eb:af:27:93:e5:be:eb:fc:47:bf:a2:ef: da:cd:56:f8:6f:b3:3f:30:55:53:80:18:fa:60:ed:3c:32:27: ee:64:38:9f:83:ce:bf:b9:3f:d1:e4:98:9b:62:44:22:46:9e: 4e:ce:db:d7:f8:03:f9:49:77:0d:5f:6f:8c:7e:03:60:5a:a9: 48:9e:0b:30:20:3b:a8:a2:c9:8b:36:13:b6:cb:97:4d:02:8d: a0:5b:cd:38:d1:40:63:49:87:ef:c1:07:14:81:79:ce:50:cb: af:31:dc:23:8b:9c:c5:4f:db:f1:c8:f9:28:0d:c2:3f:70:b5: 3b:e9:e6:aa:ca:6f:b3:77:20:ca:3f:8a:20:97:f2:80:40:a5: c4:12:42:0c:f4:cb:41:d9:87:73:21:8c:30:ac:7b:30:18:24: 35:60:d4:ba:dd:ed:48:d5:ff:49:57:4f:b8:e5:07:ec:39:90: 36:b9:d2:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxENMHuFIY1XHi6NQUiC7EpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyOThhMDcxNGNjMWJmMjVhYzdjN2YxY2Y2YzI4ODZjOGM2 MTkyYTMwHhcNMjYwMjA5MjEwMDMzWhcNMjYwMjEwMjEwMDMzWjAzMTEwLwYDVQQD Eyg1NWUzZDFhMDNiNDU3NTMwZjJiODAxOWI3YTM0MTgyNzliZmRhYjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucydS2pkUBz95+AKQiBijZ5O9a+B U/EWHAqeUEBPmD5KVFEXryOXescazXsIY0FSQpUPJO1zTLItTN0hvRyw56sX8kXZ KLghXYTVkTQ+7qV7vQg1WHrud/Y2y8h1Vk20suyTmw7A4F8YNe0OuroEWzrWpqL6 ZciIFvwQPHd9vxUczgEuThsxmDt2H9NBvEF0hdvr9YwD7zlQkw463vXj+/5cm7R4 ZXc3dGjwBccPQxxFaqgGLiR0RnFy3fuzCI3zfLEno7N4EjnPgE+551XtrycNhUlh i9+uKEVvlH1YYNXKf9eGwD1Si9scAhynLj18RrK+FdIv8k6Eto9qfoqnhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFXj0aA7RXUw8rgBm3o0GCeb/atsMB8GA1UdIwQY MBaAFNKYoHFMwb8lrHx/HPbCiGyMYZKjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHBpZ2NVekJ2eVdzZkg4YzlzS0liSXhoa3FNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kOTdhZWEtZmEzMi00NmRhLTg1MWUt NzVhNDcyNWFhNmZkLzEvMHBpZ2NVekJ2eVdzZkg4YzlzS0liSXhoa3FNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9kOTdhZWEtZmEzMi00NmRhLTg1MWUtNzVhNDcyNWFhNmZk LzEvMHBpZ2NVekJ2eVdzZkg4YzlzS0liSXhoa3FNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqumRGcX7 fMFcXESTGLQKCIbk1ciZLIRbq05eGfyAuGXOVcrcicO9HVVlBmm8HPoLWI2fXr/Q WkwCkF/kneW6ZyDXyCeaJaqD00LjWL/1668nk+W+6/xHv6Lv2s1W+G+zPzBVU4AY +mDtPDIn7mQ4n4POv7k/0eSYm2JEIkaeTs7b1/gD+Ul3DV9vjH4DYFqpSJ4LMCA7 qKLJizYTtsuXTQKNoFvNONFAY0mH78EHFIF5zlDLrzHcI4ucxU/b8cj5KA3CP3C1 O+nmqspvs3cgyj+KIJfygEClxBJCDPTLQdmHcyGMMKx7MBgkNWDUut3tSNX/SVdP uOUH7DmQNrnSUw== -----END CERTIFICATE-----Generated at Tue Feb 10 01:48:53 2026 by rpki-client