This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft File: PI_isZvT639wpO7atha1MlABFSA.mft (raw, json) Hash identifier: 0JuAWZQnsEX/8JFxTMFC/vM+NtT9VRIv4t/sT89BnX4= Subject key identifier: 04:33:C8:A3:F4:6A:B9:9E:86:16:1F:CE:FD:74:21:01:B0:2D:78:A6 Authority key identifier: 3C:8F:E2:B1:9B:D3:EB:7F:70:A4:EE:DA:B6:16:B5:32:50:01:15:20 Certificate issuer: /CN=3c8fe2b19bd3eb7f70a4eedab616b53250011520 Certificate serial: 019C42EB87F06CAE64510FCB40F1A9D8E85D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft Manifest number: 04E3 Signing time: Mon 09 Feb 2026 15:00:57 +0000 Manifest this update: Mon 09 Feb 2026 15:00:57 +0000 Manifest next update: Tue 10 Feb 2026 15:00:57 +0000 Files and hashes: 1: PI_isZvT639wpO7atha1MlABFSA.crl (hash: AuqeFZiADE/Up6ORk6lEAFle3Nzcgh6458NyslQcQBk=) 2: _wDS1_1VZDZLh1V0Yi_J3rD_hL8.roa (hash: xAETLQSOhALtmZdJmJO16llGLniZWhsZVgeHdBOnhYY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.crl rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:87:f0:6c:ae:64:51:0f:cb:40:f1:a9:d8:e8:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c8fe2b19bd3eb7f70a4eedab616b53250011520 Validity Not Before: Feb 9 15:00:57 2026 GMT Not After : Feb 10 15:00:57 2026 GMT Subject: CN=0433c8a3f46ab99e86161fcefd742101b02d78a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7e:25:4e:b8:b2:e6:68:35:3f:b3:f7:91:2b: 2f:dc:6b:a3:0d:a6:16:fc:ec:b3:83:96:d2:d1:79: 75:32:f3:27:d0:4a:81:5e:b9:a3:15:96:27:86:7b: be:b9:46:55:db:64:87:50:32:bc:fb:90:94:b2:6d: 6d:35:87:9d:09:50:81:e2:ac:8c:08:bc:52:54:22: 2d:3d:bb:34:02:53:dc:c8:7a:02:52:c4:63:68:3b: b8:27:70:c1:77:13:2f:98:cb:c9:55:f6:0f:56:d9: 46:7d:32:f2:c1:96:98:15:5b:fb:4a:e6:ff:3b:f6: 62:c8:b0:51:c6:d3:30:36:30:e2:2a:80:7a:38:40: 72:b7:d9:7a:cd:c4:d6:1a:a6:04:d6:22:96:24:b7: 83:e3:fe:ae:0e:3b:a4:42:39:15:c6:9a:71:da:6f: 42:18:1e:3b:17:f6:3b:02:0a:03:e9:08:c6:5d:ea: f0:eb:3d:3d:72:4b:ed:45:2b:e8:be:81:35:f2:3c: 57:f7:fd:53:3b:f2:4e:72:0f:52:8e:6c:2d:b0:f1: 3d:9f:45:88:a2:04:16:c4:02:2d:ea:7a:b3:b2:43: 44:65:5c:00:37:4e:86:87:18:2f:de:39:24:f6:42: aa:5e:34:f8:12:b0:d2:64:62:32:1a:51:f1:3a:fa: c1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:33:C8:A3:F4:6A:B9:9E:86:16:1F:CE:FD:74:21:01:B0:2D:78:A6 X509v3 Authority Key Identifier: keyid:3C:8F:E2:B1:9B:D3:EB:7F:70:A4:EE:DA:B6:16:B5:32:50:01:15:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:d0:2b:44:ad:db:8c:97:83:3e:56:e9:d5:92:1b:a5:5b:fc: 6e:a3:cd:b1:b7:94:d2:44:94:25:99:d8:2b:f2:3b:82:f5:48: e3:c8:6a:b1:85:66:df:47:21:1b:9f:22:3e:0d:47:ce:f3:ba: 14:a9:23:cd:97:a4:6d:d0:33:ad:92:23:aa:f9:b6:8e:8b:c2: d1:f9:7f:f6:55:12:f2:d9:83:49:47:02:e0:e9:27:4d:72:6b: 9f:fe:62:45:79:d2:c5:ca:1c:6e:c2:a8:1c:9a:da:30:9f:64: da:df:e1:ed:81:36:ed:2e:11:c0:d8:be:de:1a:3b:8f:11:55: d0:0f:62:46:cd:14:d3:76:ff:17:e3:34:e3:84:31:fc:2c:41: 5c:39:24:f3:a6:25:4e:fb:98:48:f6:af:fa:12:26:15:70:96: d0:2d:24:ea:da:4c:98:1f:c4:77:9b:ca:d9:35:47:7f:b8:61: 8c:a5:d7:56:2c:3d:16:73:ba:db:9c:26:71:43:32:f8:73:39: 60:ea:5d:46:1c:01:29:e0:b6:1b:f4:4a:44:f9:b7:aa:90:1d: 13:2c:f2:48:3a:fe:63:22:53:51:d0:9e:dd:cb:b3:35:45:d6: bf:07:dd:7b:a0:65:94:a2:72:cd:69:de:f1:26:6e:71:02:6f: 4d:57:4b:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC64fwbK5kUQ/LQPGp2OhdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjOGZlMmIxOWJkM2ViN2Y3MGE0ZWVkYWI2MTZiNTMyNTAw MTE1MjAwHhcNMjYwMjA5MTUwMDU3WhcNMjYwMjEwMTUwMDU3WjAzMTEwLwYDVQQD EygwNDMzYzhhM2Y0NmFiOTllODYxNjFmY2VmZDc0MjEwMWIwMmQ3OGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoX4lTriy5mg1P7P3kSsv3GujDaYW /Oyzg5bS0Xl1MvMn0EqBXrmjFZYnhnu+uUZV22SHUDK8+5CUsm1tNYedCVCB4qyM CLxSVCItPbs0AlPcyHoCUsRjaDu4J3DBdxMvmMvJVfYPVtlGfTLywZaYFVv7Sub/ O/ZiyLBRxtMwNjDiKoB6OEByt9l6zcTWGqYE1iKWJLeD4/6uDjukQjkVxppx2m9C GB47F/Y7AgoD6QjGXerw6z09ckvtRSvovoE18jxX9/1TO/JOcg9SjmwtsPE9n0WI ogQWxAIt6nqzskNEZVwAN06Ghxgv3jkk9kKqXjT4ErDSZGIyGlHxOvrBjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAQzyKP0armehhYfzv10IQGwLXimMB8GA1UdIwQY MBaAFDyP4rGb0+t/cKTu2rYWtTJQARUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUElfaXNadlQ2Mzl3cE83YXRoYTFNbEFCRlNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lN2VkZDEtYzc5Zi00ODkwLWExNzUt MTJlNmE2ZWRkMTI0LzEvUElfaXNadlQ2Mzl3cE83YXRoYTFNbEFCRlNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9lN2VkZDEtYzc5Zi00ODkwLWExNzUtMTJlNmE2ZWRkMTI0 LzEvUElfaXNadlQ2Mzl3cE83YXRoYTFNbEFCRlNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARtArRK3b jJeDPlbp1ZIbpVv8bqPNsbeU0kSUJZnYK/I7gvVI48hqsYVm30chG58iPg1HzvO6 FKkjzZekbdAzrZIjqvm2jovC0fl/9lUS8tmDSUcC4OknTXJrn/5iRXnSxcocbsKo HJraMJ9k2t/h7YE27S4RwNi+3ho7jxFV0A9iRs0U03b/F+M044Qx/CxBXDkk86Yl TvuYSPav+hImFXCW0C0k6tpMmB/Ed5vK2TVHf7hhjKXXViw9FnO625wmcUMy+HM5 YOpdRhwBKeC2G/RKRPm3qpAdEyzySDr+YyJTUdCe3cuzNUXWvwfde6BllKJyzWne 8SZucQJvTVdLSw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:31:23 2026 by rpki-client