This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft File: pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft (raw, json) Hash identifier: ZY+IysiqndjDkpFFrK0xBeeqAhuM+PqOP3/Xqjyg6F8= Subject key identifier: 6D:D3:50:3A:35:AB:C6:20:CB:C6:14:1B:45:04:3E:87:8B:EF:56:1C Authority key identifier: A5:EC:7F:FD:60:3D:A1:48:92:28:0B:18:37:C3:A0:37:76:35:2D:54 Certificate issuer: /CN=a5ec7ffd603da14892280b1837c3a03776352d54 Certificate serial: 019C4321FC8068086B502651C2532F3872FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pex__WA9oUiSKAsYN8OgN3Y1LVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft Manifest number: 180E Signing time: Mon 09 Feb 2026 16:00:26 +0000 Manifest this update: Mon 09 Feb 2026 16:00:26 +0000 Manifest next update: Tue 10 Feb 2026 16:00:26 +0000 Files and hashes: 1: pex__WA9oUiSKAsYN8OgN3Y1LVQ.crl (hash: w7QytctKExFWYf9OrPh0eV95zxuGR3V8ZsnfMMe/FiU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pex__WA9oUiSKAsYN8OgN3Y1LVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:fc:80:68:08:6b:50:26:51:c2:53:2f:38:72:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5ec7ffd603da14892280b1837c3a03776352d54 Validity Not Before: Feb 9 16:00:26 2026 GMT Not After : Feb 10 16:00:26 2026 GMT Subject: CN=6dd3503a35abc620cbc6141b45043e878bef561c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:bc:59:2c:2e:fc:c1:7a:74:55:d9:a0:ab:c1: 5c:f9:cb:56:78:11:0e:cf:09:4f:ec:dc:75:d9:59: 42:7d:78:b2:41:e3:92:83:ed:6a:ec:bf:fc:67:25: d2:21:2a:a8:a9:83:9e:3d:9f:ea:32:b0:58:9a:4d: 62:72:53:15:90:d9:65:bc:15:04:46:45:56:47:56: b9:4b:fe:9d:0b:52:29:f4:ca:3a:4b:db:7f:ec:62: 2c:85:46:fb:c4:14:66:6d:a0:1e:60:e8:d8:13:51: 55:aa:3b:fa:54:84:4b:fc:40:5a:8d:d1:b0:43:02: 27:14:2e:31:e8:a6:a0:fd:72:cd:32:2b:44:ec:8d: ac:5a:17:33:a0:ca:0c:84:cd:b4:19:13:1c:21:28: 4c:2c:05:0b:6f:f5:14:33:8a:02:c4:93:01:2c:1c: 35:92:1b:db:51:f3:97:47:35:75:c7:12:b6:67:ac: 7e:66:4f:79:28:2b:58:74:f5:ef:4c:ff:aa:82:6a: 7f:62:14:31:c9:c6:e0:7d:94:e6:fa:04:cf:4d:f9: 56:54:e0:f9:f6:ba:fa:79:89:81:d4:c1:e6:6d:ba: 41:0d:f4:75:68:bc:d5:77:67:3e:c9:98:43:5e:b5: 0a:3e:12:c6:ab:b3:23:9f:96:d5:80:b8:94:1a:23: 3d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:D3:50:3A:35:AB:C6:20:CB:C6:14:1B:45:04:3E:87:8B:EF:56:1C X509v3 Authority Key Identifier: keyid:A5:EC:7F:FD:60:3D:A1:48:92:28:0B:18:37:C3:A0:37:76:35:2D:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pex__WA9oUiSKAsYN8OgN3Y1LVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:5b:d9:f6:a9:5b:ac:09:ea:c0:aa:18:56:d9:bb:ed:cb:0f: 3b:ee:cb:25:7d:b2:76:68:79:0b:e3:20:b9:8d:af:40:1a:94: c8:a4:b7:e8:a2:68:d5:c0:1d:74:a6:36:e5:54:ef:61:55:38: 0b:2a:0e:84:80:0d:80:3e:fc:54:33:78:9b:98:7d:c3:30:a0: db:70:50:a4:f7:0b:a4:df:1c:d0:97:d3:17:b9:41:6a:5d:a7: f5:14:b6:92:d8:45:4d:56:3d:f1:31:e8:c7:7a:7d:a0:81:33: e1:74:c2:17:b3:f0:06:0a:89:4b:23:3b:da:97:c2:f7:e2:7e: 30:72:ea:8f:c5:d0:37:28:1d:dc:82:11:c3:3d:4a:87:62:ab: a5:fd:bc:21:2a:ce:06:75:8e:31:d9:cb:c9:14:3b:54:46:5e: c5:ee:c8:b2:a8:14:11:c1:b9:ca:79:bf:89:f1:ec:24:d5:c8: 17:6b:38:0b:68:20:ae:1a:ea:c1:81:6f:7c:03:04:f4:f7:e6: b0:99:77:d8:f6:4b:d2:84:84:0b:ed:d7:a3:25:a0:69:c1:7a: 44:4e:a5:31:56:b2:a3:21:49:83:3b:c7:4a:99:ed:dd:5c:c6: 4d:2b:15:06:a8:34:3e:7b:40:ec:08:3b:f1:a7:aa:4a:6b:b4: 3f:de:67:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIfyAaAhrUCZRwlMvOHL+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1ZWM3ZmZkNjAzZGExNDg5MjI4MGIxODM3YzNhMDM3NzYz NTJkNTQwHhcNMjYwMjA5MTYwMDI2WhcNMjYwMjEwMTYwMDI2WjAzMTEwLwYDVQQD Eyg2ZGQzNTAzYTM1YWJjNjIwY2JjNjE0MWI0NTA0M2U4NzhiZWY1NjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorxZLC78wXp0Vdmgq8Fc+ctWeBEO zwlP7Nx12VlCfXiyQeOSg+1q7L/8ZyXSISqoqYOePZ/qMrBYmk1iclMVkNllvBUE RkVWR1a5S/6dC1Ip9Mo6S9t/7GIshUb7xBRmbaAeYOjYE1FVqjv6VIRL/EBajdGw QwInFC4x6Kag/XLNMitE7I2sWhczoMoMhM20GRMcIShMLAULb/UUM4oCxJMBLBw1 khvbUfOXRzV1xxK2Z6x+Zk95KCtYdPXvTP+qgmp/YhQxycbgfZTm+gTPTflWVOD5 9rr6eYmB1MHmbbpBDfR1aLzVd2c+yZhDXrUKPhLGq7Mjn5bVgLiUGiM9wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG3TUDo1q8Ygy8YUG0UEPoeL71YcMB8GA1UdIwQY MBaAFKXsf/1gPaFIkigLGDfDoDd2NS1UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGV4X19XQTlvVWlTS0FzWU44T2dOM1kxTFZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS82MjIzNTMtMmJjZi00NTYwLTljYWUt N2RiMjBlNmZjMTFkLzEvcGV4X19XQTlvVWlTS0FzWU44T2dOM1kxTFZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS82MjIzNTMtMmJjZi00NTYwLTljYWUtN2RiMjBlNmZjMTFk LzEvcGV4X19XQTlvVWlTS0FzWU44T2dOM1kxTFZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfFvZ9qlb rAnqwKoYVtm77csPO+7LJX2ydmh5C+MguY2vQBqUyKS36KJo1cAddKY25VTvYVU4 CyoOhIANgD78VDN4m5h9wzCg23BQpPcLpN8c0JfTF7lBal2n9RS2kthFTVY98THo x3p9oIEz4XTCF7PwBgqJSyM72pfC9+J+MHLqj8XQNygd3IIRwz1Kh2Krpf28ISrO BnWOMdnLyRQ7VEZexe7IsqgUEcG5ynm/ifHsJNXIF2s4C2ggrhrqwYFvfAME9Pfm sJl32PZL0oSEC+3XoyWgacF6RE6lMVayoyFJgzvHSpnt3VzGTSsVBqg0PntA7Ag7 8aeqSmu0P95nAw== -----END CERTIFICATE-----Generated at Tue Feb 10 00:16:04 2026 by rpki-client