This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.mft File: pKjiRyzmwW7Vr1amu_PfgP9j4SM.mft (raw, json) Hash identifier: FsqLCVEmrChtwEIfIZMDpYcWuAHev6HlLi7SqZGlQBk= Subject key identifier: 3B:AC:AE:80:19:AB:B9:BE:DC:EF:24:B7:F2:82:A4:1C:8E:A9:5A:C8 Authority key identifier: A4:A8:E2:47:2C:E6:C1:6E:D5:AF:56:A6:BB:F3:DF:80:FF:63:E1:23 Certificate issuer: /CN=a4a8e2472ce6c16ed5af56a6bbf3df80ff63e123 Certificate serial: 019C427D5349A2B7DF9117C267EAEC454A3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKjiRyzmwW7Vr1amu_PfgP9j4SM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.mft Manifest number: 163F Signing time: Mon 09 Feb 2026 13:00:35 +0000 Manifest this update: Mon 09 Feb 2026 13:00:35 +0000 Manifest next update: Tue 10 Feb 2026 13:00:35 +0000 Files and hashes: 1: pKjiRyzmwW7Vr1amu_PfgP9j4SM.crl (hash: NrRioWvApnWHzpB7xl7DnmPqysqA1iAvbA3kGVEIjyI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.mft rsync://rpki.ripe.net/repository/DEFAULT/pKjiRyzmwW7Vr1amu_PfgP9j4SM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:53:49:a2:b7:df:91:17:c2:67:ea:ec:45:4a:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4a8e2472ce6c16ed5af56a6bbf3df80ff63e123 Validity Not Before: Feb 9 13:00:35 2026 GMT Not After : Feb 10 13:00:35 2026 GMT Subject: CN=3bacae8019abb9bedcef24b7f282a41c8ea95ac8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:9f:7f:bb:02:73:b9:4f:8e:1b:8b:e5:a1:db: d5:8a:f1:82:7b:1f:61:cb:b5:7f:23:6b:f6:d8:ad: 15:79:22:4a:d4:bf:1d:e8:cb:0a:26:25:98:50:76: 45:af:8e:a2:20:8c:a1:a1:81:9a:66:de:68:61:e7: ef:ce:11:3a:da:7b:52:81:1e:59:c9:70:c7:e1:dc: 82:a6:c6:dc:3d:b1:89:a2:33:37:f0:5c:ff:ad:02: c6:90:f9:c5:e5:6b:00:ea:dc:81:9a:68:bc:be:fe: b3:59:a6:6d:f0:70:38:c3:da:6e:fd:d9:21:c1:91: ba:e2:a2:0e:ce:79:a7:1c:2d:2a:14:88:80:65:cc: 34:bf:dc:94:2e:25:62:a3:e0:85:04:2d:1b:32:60: 75:67:86:1f:6d:d9:9f:cd:cf:41:f8:86:04:ff:bf: dd:77:b0:ff:28:45:65:11:5c:2c:c8:fd:6a:6d:3e: 50:1f:1d:17:c5:db:d9:ee:6b:43:37:a2:32:af:ad: 49:97:e3:89:8d:fa:1b:73:31:8c:32:f7:38:cc:fd: 40:f2:f4:20:a6:a6:ff:f8:d9:a9:33:cd:2c:2b:eb: 4c:d9:2f:c7:f4:a4:f9:6e:95:30:a3:2d:36:af:55: 02:4a:86:d1:13:6c:c4:e6:59:e4:82:9a:06:2b:2f: 52:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:AC:AE:80:19:AB:B9:BE:DC:EF:24:B7:F2:82:A4:1C:8E:A9:5A:C8 X509v3 Authority Key Identifier: keyid:A4:A8:E2:47:2C:E6:C1:6E:D5:AF:56:A6:BB:F3:DF:80:FF:63:E1:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKjiRyzmwW7Vr1amu_PfgP9j4SM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:e4:dc:08:8a:e7:f3:4c:53:11:76:bd:16:52:50:b6:60:d6: 53:31:3a:8d:d7:15:22:ac:08:00:cb:91:59:e2:5d:f1:29:cf: 3c:f1:67:e8:e6:25:22:88:84:08:cc:3e:99:71:08:93:fd:8f: 74:1c:1d:e5:cc:07:0b:2e:7b:3f:01:f5:44:47:da:aa:f6:c5: 72:7a:f4:9b:17:7a:c2:2a:42:91:dd:d5:d4:23:82:27:bc:a8: 3c:01:ce:a0:1b:24:39:bd:43:36:9c:21:10:a0:1c:6c:42:2c: f3:19:68:a9:54:97:1b:6f:13:d3:e5:e6:db:42:2a:51:c5:48: 94:24:0f:3b:3c:c6:2a:df:4d:5b:18:04:16:ed:a2:55:4b:9e: b9:5b:5f:ef:25:9c:2c:52:79:14:1a:cf:7a:7c:de:4d:36:2b: b8:c0:0f:1f:67:d3:bd:fe:3a:be:82:87:c3:20:b1:87:63:9d: ff:82:46:93:15:75:94:54:ef:7d:23:57:e2:cf:96:7c:2a:da: 5e:90:1f:96:8c:82:05:89:b2:00:e4:53:e6:6e:ba:86:f7:19: 39:96:a5:35:b6:71:bc:8b:58:92:06:54:12:e8:26:e4:76:ba: 6d:dc:3d:2d:06:9e:f0:15:c0:cc:8b:c9:55:26:de:f4:7e:3b: 49:68:7a:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfVNJorffkRfCZ+rsRUo9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YThlMjQ3MmNlNmMxNmVkNWFmNTZhNmJiZjNkZjgwZmY2 M2UxMjMwHhcNMjYwMjA5MTMwMDM1WhcNMjYwMjEwMTMwMDM1WjAzMTEwLwYDVQQD EygzYmFjYWU4MDE5YWJiOWJlZGNlZjI0YjdmMjgyYTQxYzhlYTk1YWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Z9/uwJzuU+OG4vlodvVivGCex9h y7V/I2v22K0VeSJK1L8d6MsKJiWYUHZFr46iIIyhoYGaZt5oYefvzhE62ntSgR5Z yXDH4dyCpsbcPbGJojM38Fz/rQLGkPnF5WsA6tyBmmi8vv6zWaZt8HA4w9pu/dkh wZG64qIOznmnHC0qFIiAZcw0v9yULiVio+CFBC0bMmB1Z4Yfbdmfzc9B+IYE/7/d d7D/KEVlEVwsyP1qbT5QHx0XxdvZ7mtDN6Iyr61Jl+OJjfobczGMMvc4zP1A8vQg pqb/+NmpM80sK+tM2S/H9KT5bpUwoy02r1UCSobRE2zE5lnkgpoGKy9SkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDusroAZq7m+3O8kt/KCpByOqVrIMB8GA1UdIwQY MBaAFKSo4kcs5sFu1a9Wprvz34D/Y+EjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEtqaVJ5em13VzdWcjFhbXVfUGZnUDlqNFNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9hMDFlYTgtZTg4Zi00MjA3LWIyODYt YzRmOWY3NWRjMmYzLzEvcEtqaVJ5em13VzdWcjFhbXVfUGZnUDlqNFNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9hMDFlYTgtZTg4Zi00MjA3LWIyODYtYzRmOWY3NWRjMmYz LzEvcEtqaVJ5em13VzdWcjFhbXVfUGZnUDlqNFNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP+TcCIrn 80xTEXa9FlJQtmDWUzE6jdcVIqwIAMuRWeJd8SnPPPFn6OYlIoiECMw+mXEIk/2P dBwd5cwHCy57PwH1REfaqvbFcnr0mxd6wipCkd3V1COCJ7yoPAHOoBskOb1DNpwh EKAcbEIs8xloqVSXG28T0+Xm20IqUcVIlCQPOzzGKt9NWxgEFu2iVUueuVtf7yWc LFJ5FBrPenzeTTYruMAPH2fTvf46voKHwyCxh2Od/4JGkxV1lFTvfSNX4s+WfCra XpAfloyCBYmyAORT5m66hvcZOZalNbZxvItYkgZUEugm5Ha6bdw9LQae8BXAzIvJ VSbe9H47SWh60w== -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:24 2026 by rpki-client