This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft File: pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft (raw, json) Hash identifier: t3z7+wPHsnsYibIxaYTCq2qWY3aTlQiMpooyIDcQnuI= Subject key identifier: 51:D0:F3:30:BE:C0:71:10:8E:3A:63:E2:99:E6:39:96:90:4D:E8:8C Authority key identifier: A5:C2:28:64:E3:92:0E:16:0A:D9:B8:4F:F0:1D:A8:66:AA:40:97:85 Certificate issuer: /CN=a5c22864e3920e160ad9b84ff01da866aa409785 Certificate serial: 019C420F3FBEEFF7BBA6997794CBC842BBAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcIoZOOSDhYK2bhP8B2oZqpAl4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft Manifest number: 06E3 Signing time: Mon 09 Feb 2026 11:00:21 +0000 Manifest this update: Mon 09 Feb 2026 11:00:21 +0000 Manifest next update: Tue 10 Feb 2026 11:00:21 +0000 Files and hashes: 1: pcIoZOOSDhYK2bhP8B2oZqpAl4U.crl (hash: JwR/EHsD4RzAWZSwc1awarYo2FXb1OJqvFVbnEO+7UQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.crl rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft rsync://rpki.ripe.net/repository/DEFAULT/pcIoZOOSDhYK2bhP8B2oZqpAl4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:3f:be:ef:f7:bb:a6:99:77:94:cb:c8:42:bb:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5c22864e3920e160ad9b84ff01da866aa409785 Validity Not Before: Feb 9 11:00:21 2026 GMT Not After : Feb 10 11:00:21 2026 GMT Subject: CN=51d0f330bec071108e3a63e299e63996904de88c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ca:9a:23:18:2a:0e:95:25:21:86:7e:8a:07: 3c:c7:27:59:7c:d0:c0:55:6c:75:53:ab:cb:07:c7: f2:f1:03:f9:00:72:6d:fe:e3:61:04:e9:4f:6b:8e: 5c:99:15:de:00:6a:c6:d6:ff:77:2f:4b:10:d9:55: 4b:04:a7:90:25:8d:40:ef:eb:f9:68:82:f3:90:93: 64:a7:dd:7b:34:3c:ef:2b:ee:00:af:c7:55:fc:b7: e5:31:5e:71:ef:4c:11:d4:f0:53:e3:ca:89:3e:17: bb:ef:d1:26:5d:5f:80:46:6c:a6:1d:5e:41:48:85: 94:7d:00:30:fd:4a:25:8a:a1:35:6c:db:93:70:af: bd:4e:af:03:40:00:79:3f:ec:a4:db:7e:70:a7:65: 50:63:04:09:4a:da:ea:f7:07:6b:b3:83:f4:8c:4c: 94:25:c6:92:56:08:71:77:40:95:a9:fd:d9:26:7e: 5c:96:cc:b0:52:17:78:88:70:07:12:21:e3:6c:87: df:d5:a4:73:2a:86:27:ac:dd:62:8a:2d:1c:98:cd: c5:13:19:c8:3f:02:d3:09:d5:a2:b6:87:0f:5a:0b: 03:65:6c:95:ff:d4:9b:08:27:76:96:b9:c7:04:0c: 95:33:06:db:4f:27:9d:b1:7f:d0:45:bd:aa:e8:4a: 26:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:D0:F3:30:BE:C0:71:10:8E:3A:63:E2:99:E6:39:96:90:4D:E8:8C X509v3 Authority Key Identifier: keyid:A5:C2:28:64:E3:92:0E:16:0A:D9:B8:4F:F0:1D:A8:66:AA:40:97:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcIoZOOSDhYK2bhP8B2oZqpAl4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:b2:82:b6:5b:ca:92:63:61:29:43:31:30:21:8e:80:09:ec: 43:b4:5b:3d:15:e1:1b:2d:98:92:09:5d:cd:9f:50:4b:10:91: 90:cb:53:13:8d:78:7c:d1:3e:17:c8:46:2f:57:34:b9:35:09: 44:c6:1c:3e:aa:5f:e2:93:87:68:fc:b2:3c:e0:51:f6:a2:21: 57:70:de:d2:5a:74:0c:e1:5b:ae:7a:9b:50:15:b9:ae:d8:aa: 1e:5a:5b:be:73:11:38:6f:c4:30:6e:19:f4:e7:05:06:f9:58: b2:0d:fa:d6:28:37:65:79:ce:2a:b2:7f:02:40:cb:a8:45:0c: 40:d3:06:58:b0:ab:8e:16:d2:5a:b8:57:4d:df:25:15:9a:a9: 8d:52:07:04:d6:6b:fd:e9:19:b7:91:12:6f:83:47:64:84:85: 8b:38:21:e4:8d:2b:57:81:a9:3b:77:ee:49:52:00:de:e8:49: e8:79:ed:8b:07:d5:b0:3e:00:92:92:4a:6a:e7:a1:75:ce:85: a3:69:30:a6:7b:2a:00:ce:b9:c9:0e:f2:5b:7c:8e:f2:b2:2a: 70:37:16:1b:31:55:99:73:8b:e3:31:34:52:5f:75:a3:87:01: c5:a5:fb:40:54:81:4b:71:cf:05:d2:2e:51:fb:19:90:d5:61: 21:23:20:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCDz++7/e7ppl3lMvIQruuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YzIyODY0ZTM5MjBlMTYwYWQ5Yjg0ZmYwMWRhODY2YWE0 MDk3ODUwHhcNMjYwMjA5MTEwMDIxWhcNMjYwMjEwMTEwMDIxWjAzMTEwLwYDVQQD Eyg1MWQwZjMzMGJlYzA3MTEwOGUzYTYzZTI5OWU2Mzk5NjkwNGRlODhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8qaIxgqDpUlIYZ+igc8xydZfNDA VWx1U6vLB8fy8QP5AHJt/uNhBOlPa45cmRXeAGrG1v93L0sQ2VVLBKeQJY1A7+v5 aILzkJNkp917NDzvK+4Ar8dV/LflMV5x70wR1PBT48qJPhe779EmXV+ARmymHV5B SIWUfQAw/UoliqE1bNuTcK+9Tq8DQAB5P+yk235wp2VQYwQJStrq9wdrs4P0jEyU JcaSVghxd0CVqf3ZJn5clsywUhd4iHAHEiHjbIff1aRzKoYnrN1iii0cmM3FExnI PwLTCdWitocPWgsDZWyV/9SbCCd2lrnHBAyVMwbbTyedsX/QRb2q6EomnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFHQ8zC+wHEQjjpj4pnmOZaQTeiMMB8GA1UdIwQY MBaAFKXCKGTjkg4WCtm4T/AdqGaqQJeFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGNJb1pPT1NEaFlLMmJoUDhCMm9acXBBbDRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9hZDk4NGEtOTlhYy00MTNhLWJkZGUt NTRjODg5MGRmZjJkLzEvcGNJb1pPT1NEaFlLMmJoUDhCMm9acXBBbDRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9hZDk4NGEtOTlhYy00MTNhLWJkZGUtNTRjODg5MGRmZjJk LzEvcGNJb1pPT1NEaFlLMmJoUDhCMm9acXBBbDRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP7KCtlvK kmNhKUMxMCGOgAnsQ7RbPRXhGy2YkgldzZ9QSxCRkMtTE414fNE+F8hGL1c0uTUJ RMYcPqpf4pOHaPyyPOBR9qIhV3De0lp0DOFbrnqbUBW5rtiqHlpbvnMROG/EMG4Z 9OcFBvlYsg361ig3ZXnOKrJ/AkDLqEUMQNMGWLCrjhbSWrhXTd8lFZqpjVIHBNZr /ekZt5ESb4NHZISFizgh5I0rV4GpO3fuSVIA3uhJ6HntiwfVsD4AkpJKauehdc6F o2kwpnsqAM65yQ7yW3yO8rIqcDcWGzFVmXOL4zE0Ul91o4cBxaX7QFSBS3HPBdIu UfsZkNVhISMgWQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:04 2026 by rpki-client