This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft File: PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft (raw, json) Hash identifier: O3W3Q992yr4FErZPcMt+GPzItgZ1LSVg+4j3VX6PFWg= Subject key identifier: 28:F4:C3:D6:6F:48:D1:1F:D2:83:F6:46:76:5C:E7:E5:60:EB:49:E5 Authority key identifier: 3F:37:C9:4A:96:C4:8F:CF:84:12:8E:84:7A:E9:02:0D:6B:C6:63:04 Certificate issuer: /CN=3f37c94a96c48fcf84128e847ae9020d6bc66304 Certificate serial: 019C446C59792E7A3785F6CFB16D6602F39A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft Manifest number: 12B0 Signing time: Mon 09 Feb 2026 22:01:17 +0000 Manifest this update: Mon 09 Feb 2026 22:01:17 +0000 Manifest next update: Tue 10 Feb 2026 22:01:17 +0000 Files and hashes: 1: PzfJSpbEj8-EEo6EeukCDWvGYwQ.crl (hash: A5hE5avSlLfwS+E1rMfOeYyqImcPoKtkwNho0XkpQQE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6c:59:79:2e:7a:37:85:f6:cf:b1:6d:66:02:f3:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f37c94a96c48fcf84128e847ae9020d6bc66304 Validity Not Before: Feb 9 22:01:17 2026 GMT Not After : Feb 10 22:01:17 2026 GMT Subject: CN=28f4c3d66f48d11fd283f646765ce7e560eb49e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e3:34:65:3d:a1:7c:44:69:1b:7a:3d:67:77: 82:f5:90:4f:fa:cb:15:ab:c7:90:a3:b6:cb:3e:6c: 3e:9d:db:b5:d3:f9:5a:9d:db:85:79:8b:a8:bb:21: 28:54:f4:02:68:11:19:81:e7:f6:d2:e3:c2:c6:db: ac:25:04:98:a1:b7:36:e1:35:e0:26:13:1f:bc:45: 3d:d0:af:c5:f0:5b:55:53:d1:f5:f7:4c:5b:7f:cb: fc:d9:09:f0:22:e4:68:c1:2e:fa:18:fe:0c:54:90: 40:a5:2d:d9:a4:4d:4b:78:06:7e:13:b6:84:5d:3f: e3:9b:ca:dd:c0:07:e3:93:f7:48:74:82:f4:67:e1: 1a:57:66:c3:f2:76:eb:6e:b8:6c:a2:8b:70:3c:4f: d8:09:fb:d2:35:e4:96:63:4b:ce:a1:1d:04:2b:e9: 8c:00:60:3d:5e:26:50:5c:2a:8d:e8:65:06:34:86: fc:eb:bc:9c:9d:dc:0e:9c:b9:8e:ac:4f:76:ed:2f: 90:a4:ed:78:d4:5b:19:12:16:d3:d6:c0:d9:75:b2: 0a:88:6d:3f:e1:c7:29:39:9d:e5:c6:d9:bb:ae:aa: 4e:d8:8a:0c:0d:8d:4c:94:85:de:21:6e:db:39:82: b1:db:bf:a7:a0:cc:d4:9d:1a:b6:a5:cd:e2:bd:72: 78:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:F4:C3:D6:6F:48:D1:1F:D2:83:F6:46:76:5C:E7:E5:60:EB:49:E5 X509v3 Authority Key Identifier: keyid:3F:37:C9:4A:96:C4:8F:CF:84:12:8E:84:7A:E9:02:0D:6B:C6:63:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:f8:69:73:39:1b:04:b4:fe:a9:c2:fa:dd:3f:bc:af:5a:5f: 58:45:2e:95:9a:81:6f:04:2e:18:64:36:3c:05:53:13:44:86: 44:27:ad:94:bf:b0:c6:34:ab:f2:ab:7a:04:cf:52:79:97:ef: 01:8f:55:83:f2:9b:09:59:ad:d1:94:e1:a8:6c:76:23:8b:79: 97:c1:bc:51:05:67:96:01:b2:c4:1d:2a:72:ff:f9:d6:92:0e: 32:58:14:d2:ef:bd:65:c5:3b:90:d6:09:78:66:dc:7e:7e:55: 11:e3:fe:e9:14:c5:1f:38:9e:44:ec:ff:d5:51:11:c6:22:b1: ef:86:39:04:91:3f:13:a5:e2:ce:26:9c:f3:89:51:4e:62:83: 3f:54:84:0d:4c:f0:cd:46:91:16:f4:24:28:83:88:77:2d:52: ab:59:dd:75:fb:94:ec:bb:da:2f:bb:a1:e4:a7:38:91:fe:99: 18:a6:9f:0e:e5:e0:eb:39:da:c3:4c:18:49:d8:25:f2:d6:89: 95:01:c8:73:05:ea:ad:08:31:4d:6d:39:03:8c:6e:df:9e:45: 7e:28:7f:f7:e4:03:00:44:30:a0:26:11:a0:b8:de:69:33:63: 82:42:e5:54:13:29:47:16:be:ff:55:44:d0:fe:07:49:72:bb: 44:99:22:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEbFl5Lno3hfbPsW1mAvOaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmMzdjOTRhOTZjNDhmY2Y4NDEyOGU4NDdhZTkwMjBkNmJj NjYzMDQwHhcNMjYwMjA5MjIwMTE3WhcNMjYwMjEwMjIwMTE3WjAzMTEwLwYDVQQD EygyOGY0YzNkNjZmNDhkMTFmZDI4M2Y2NDY3NjVjZTdlNTYwZWI0OWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeM0ZT2hfERpG3o9Z3eC9ZBP+ssV q8eQo7bLPmw+ndu10/landuFeYuouyEoVPQCaBEZgef20uPCxtusJQSYobc24TXg JhMfvEU90K/F8FtVU9H190xbf8v82QnwIuRowS76GP4MVJBApS3ZpE1LeAZ+E7aE XT/jm8rdwAfjk/dIdIL0Z+EaV2bD8nbrbrhsootwPE/YCfvSNeSWY0vOoR0EK+mM AGA9XiZQXCqN6GUGNIb867ycndwOnLmOrE927S+QpO141FsZEhbT1sDZdbIKiG0/ 4ccpOZ3lxtm7rqpO2IoMDY1MlIXeIW7bOYKx27+noMzUnRq2pc3ivXJ41wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCj0w9ZvSNEf0oP2RnZc5+Vg60nlMB8GA1UdIwQY MBaAFD83yUqWxI/PhBKOhHrpAg1rxmMEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHpmSlNwYkVqOC1FRW82RWV1a0NEV3ZHWXdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zNWE5YmMtYjE0Mi00NDVmLTgxZTct ZWY5OTBjNThiNDhiLzEvUHpmSlNwYkVqOC1FRW82RWV1a0NEV3ZHWXdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8zNWE5YmMtYjE0Mi00NDVmLTgxZTctZWY5OTBjNThiNDhi LzEvUHpmSlNwYkVqOC1FRW82RWV1a0NEV3ZHWXdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhvhpczkb BLT+qcL63T+8r1pfWEUulZqBbwQuGGQ2PAVTE0SGRCetlL+wxjSr8qt6BM9SeZfv AY9Vg/KbCVmt0ZThqGx2I4t5l8G8UQVnlgGyxB0qcv/51pIOMlgU0u+9ZcU7kNYJ eGbcfn5VEeP+6RTFHzieROz/1VERxiKx74Y5BJE/E6Xiziac84lRTmKDP1SEDUzw zUaRFvQkKIOIdy1Sq1nddfuU7LvaL7uh5Kc4kf6ZGKafDuXg6znaw0wYSdgl8taJ lQHIcwXqrQgxTW05A4xu355Ffih/9+QDAEQwoCYRoLjeaTNjgkLlVBMpRxa+/1VE 0P4HSXK7RJkinA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:35:55 2026 by rpki-client