This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.mft File: pWT0IqqXs96coPZ5Gfv4LrH93dI.mft (raw, json) Hash identifier: XyaZ0L2P9lY574trducgNV8+eNQVT0Oe5nq/4LE9WDM= Subject key identifier: 0D:25:67:5E:C7:8B:7A:81:4E:F5:6B:24:D5:84:07:44:2A:76:96:49 Authority key identifier: A5:64:F4:22:AA:97:B3:DE:9C:A0:F6:79:19:FB:F8:2E:B1:FD:DD:D2 Certificate issuer: /CN=a564f422aa97b3de9ca0f67919fbf82eb1fdddd2 Certificate serial: 019C43226E093E2E47FA5830CE6079932412 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pWT0IqqXs96coPZ5Gfv4LrH93dI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.mft Manifest number: 083A Signing time: Mon 09 Feb 2026 16:00:55 +0000 Manifest this update: Mon 09 Feb 2026 16:00:55 +0000 Manifest next update: Tue 10 Feb 2026 16:00:55 +0000 Files and hashes: 1: pWT0IqqXs96coPZ5Gfv4LrH93dI.crl (hash: CRB4WQjiVdxMJPpJSt4u1jGqfLETXdTWKn8Py+HKYvE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.mft rsync://rpki.ripe.net/repository/DEFAULT/pWT0IqqXs96coPZ5Gfv4LrH93dI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:6e:09:3e:2e:47:fa:58:30:ce:60:79:93:24:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a564f422aa97b3de9ca0f67919fbf82eb1fdddd2 Validity Not Before: Feb 9 16:00:55 2026 GMT Not After : Feb 10 16:00:55 2026 GMT Subject: CN=0d25675ec78b7a814ef56b24d58407442a769649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4b:99:b5:a5:10:f8:ff:d8:ed:df:b4:f2:21: 95:ae:88:53:ad:6d:90:98:14:3c:20:2c:a3:1d:85: 12:ab:42:f7:46:b1:81:4e:0a:36:50:4c:8b:fe:79: 72:86:69:60:8e:a6:b7:9b:4e:71:01:c3:61:4e:c1: cf:ab:b4:0f:05:d0:72:2e:24:38:6b:d3:f5:67:74: 32:a5:62:7f:02:ae:3f:fc:43:b9:08:c6:22:b7:07: 69:06:c9:35:b1:0c:e5:3b:3a:15:ba:10:83:37:30: 6a:19:b8:b8:47:fa:82:b0:f1:6d:df:c8:3a:26:dd: d8:57:40:89:0c:5b:c6:15:1b:8a:50:b0:f2:47:d1: 14:90:5c:17:84:bd:f6:e9:01:b1:89:95:66:be:84: f4:11:74:73:b0:84:7a:c7:6e:b1:49:3e:0a:6d:05: d9:d5:ac:02:ce:a7:b0:46:3f:ae:0a:84:81:20:b4: e5:34:88:3c:7c:cc:c1:ad:c7:b7:22:6a:6b:d5:fa: a5:8b:f8:11:d6:a3:8d:80:51:39:7e:7b:63:03:aa: ac:74:f1:93:84:e6:93:65:79:73:4a:11:eb:68:23: 00:52:11:87:08:f2:a5:51:93:7b:3c:e0:ff:9c:3f: fe:f6:61:4d:9e:bd:da:a4:b4:00:19:89:f7:38:1b: 9c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:25:67:5E:C7:8B:7A:81:4E:F5:6B:24:D5:84:07:44:2A:76:96:49 X509v3 Authority Key Identifier: keyid:A5:64:F4:22:AA:97:B3:DE:9C:A0:F6:79:19:FB:F8:2E:B1:FD:DD:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWT0IqqXs96coPZ5Gfv4LrH93dI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:a9:da:73:56:62:54:35:d4:c5:92:06:ca:09:7e:d2:86:c3: 06:98:bb:7b:5c:46:52:24:d0:f4:6b:85:76:f2:f2:e2:05:a8: aa:6b:82:7d:5b:cf:65:ad:6a:f3:fa:ee:fa:d3:9a:98:60:12: ce:51:ba:d4:ee:a2:ce:02:d9:9b:2f:ed:0c:4d:f4:c4:08:c7: 91:17:fd:0a:b7:a1:6e:37:80:61:3b:0e:3c:20:3e:4a:06:f0: 56:69:48:55:6e:18:a9:72:74:46:6c:ba:16:ce:68:d2:e9:6e: 71:cb:e0:58:3c:a1:2e:b8:f7:ea:03:b6:b6:62:0d:59:0d:fd: 44:7d:ff:42:36:42:8f:31:90:36:b3:20:dd:07:8d:85:fb:5b: dc:60:2c:e5:fe:07:db:2a:f2:b3:83:ad:f6:9a:76:19:e2:1c: b1:ee:ac:23:56:2a:2d:42:7c:34:69:14:73:70:9c:6a:a5:55: f3:c7:36:da:0b:cd:89:72:06:d3:83:3a:3e:8e:29:c8:32:b4: a9:c7:06:4f:5d:7b:50:8a:7b:a8:ae:22:91:b0:c5:1d:57:a6: 3e:f9:08:fe:84:cb:08:74:6a:51:4e:0b:aa:79:cb:2d:d7:a9: 6f:d4:63:47:7f:5a:9c:8c:94:52:63:96:1c:82:2c:df:3e:08: ea:1f:d1:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIm4JPi5H+lgwzmB5kyQSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NjRmNDIyYWE5N2IzZGU5Y2EwZjY3OTE5ZmJmODJlYjFm ZGRkZDIwHhcNMjYwMjA5MTYwMDU1WhcNMjYwMjEwMTYwMDU1WjAzMTEwLwYDVQQD EygwZDI1Njc1ZWM3OGI3YTgxNGVmNTZiMjRkNTg0MDc0NDJhNzY5NjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEuZtaUQ+P/Y7d+08iGVrohTrW2Q mBQ8ICyjHYUSq0L3RrGBTgo2UEyL/nlyhmlgjqa3m05xAcNhTsHPq7QPBdByLiQ4 a9P1Z3QypWJ/Aq4//EO5CMYitwdpBsk1sQzlOzoVuhCDNzBqGbi4R/qCsPFt38g6 Jt3YV0CJDFvGFRuKULDyR9EUkFwXhL326QGxiZVmvoT0EXRzsIR6x26xST4KbQXZ 1awCzqewRj+uCoSBILTlNIg8fMzBrce3Impr1fqli/gR1qONgFE5fntjA6qsdPGT hOaTZXlzShHraCMAUhGHCPKlUZN7POD/nD/+9mFNnr3apLQAGYn3OBuchQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA0lZ17Hi3qBTvVrJNWEB0QqdpZJMB8GA1UdIwQY MBaAFKVk9CKql7PenKD2eRn7+C6x/d3SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFdUMElxcVhzOTZjb1BaNUdmdjRMckg5M2RJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9kNTllOTgtMjEwZi00YjU1LWFjNGEt MDI2ODM4MTEwN2FmLzEvcFdUMElxcVhzOTZjb1BaNUdmdjRMckg5M2RJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9kNTllOTgtMjEwZi00YjU1LWFjNGEtMDI2ODM4MTEwN2Fm LzEvcFdUMElxcVhzOTZjb1BaNUdmdjRMckg5M2RJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPqnac1Zi VDXUxZIGygl+0obDBpi7e1xGUiTQ9GuFdvLy4gWoqmuCfVvPZa1q8/ru+tOamGAS zlG61O6izgLZmy/tDE30xAjHkRf9CrehbjeAYTsOPCA+SgbwVmlIVW4YqXJ0Rmy6 Fs5o0uluccvgWDyhLrj36gO2tmINWQ39RH3/QjZCjzGQNrMg3QeNhftb3GAs5f4H 2yrys4Ot9pp2GeIcse6sI1YqLUJ8NGkUc3CcaqVV88c22gvNiXIG04M6Po4pyDK0 qccGT117UIp7qK4ikbDFHVemPvkI/oTLCHRqUU4LqnnLLdepb9RjR39anIyUUmOW HIIs3z4I6h/Ruw== -----END CERTIFICATE-----Generated at Tue Feb 10 00:15:24 2026 by rpki-client