This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft File: pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft (raw, json) Hash identifier: gmPuff/kDPv6R45f7oz+1NakQuUmi5jLlL0zs/d5i/U= Subject key identifier: 43:8A:90:2A:34:EE:4E:AC:A1:1E:05:C5:A7:91:44:2B:0B:33:BB:1A Authority key identifier: A4:0C:1A:D5:47:B9:3E:BF:65:5C:58:04:38:DF:A5:AE:42:7C:65:11 Certificate issuer: /CN=a40c1ad547b93ebf655c580438dfa5ae427c6511 Certificate serial: 019C43228E0B6D60786929E2920A0A30F40C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft Manifest number: 0E5F Signing time: Mon 09 Feb 2026 16:01:03 +0000 Manifest this update: Mon 09 Feb 2026 16:01:03 +0000 Manifest next update: Tue 10 Feb 2026 16:01:03 +0000 Files and hashes: 1: _lqYoZCtbgCjPqgBQS1sChiV3po.roa (hash: DngSWjpo0gMX1VJjUcfS5UeVdo84wIcXiRvQtRs7PEI=) 2: pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.crl (hash: ulsDh3uNklvNJud1K57HrRx4QgW62Xnr66QhS0C2w5o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft rsync://rpki.ripe.net/repository/DEFAULT/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:8e:0b:6d:60:78:69:29:e2:92:0a:0a:30:f4:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a40c1ad547b93ebf655c580438dfa5ae427c6511 Validity Not Before: Feb 9 16:01:03 2026 GMT Not After : Feb 10 16:01:03 2026 GMT Subject: CN=438a902a34ee4eaca11e05c5a791442b0b33bb1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d7:f7:1a:f6:64:fa:ce:ae:f9:9d:f7:c1:b0: 20:f3:75:85:72:6c:c1:f8:44:c6:9e:80:34:08:db: a6:c5:aa:95:1f:01:91:01:29:98:37:f2:03:17:0f: d7:2c:ea:e5:19:1f:f7:1b:b1:6f:91:89:fa:e3:24: fa:7a:d1:e6:b3:06:a1:ff:5b:c4:2d:3c:98:23:88: 0e:9e:77:4c:c4:c6:52:dd:09:4c:85:da:a1:78:07: 4a:88:3b:64:c5:00:80:b5:56:c5:12:b4:01:26:fc: 90:a6:3c:e9:ff:6e:2c:b1:2c:c8:d0:ae:02:73:34: 57:b8:d5:9b:b1:40:b8:43:88:a3:53:9a:67:b4:90: 0e:28:6c:e2:ee:7b:b7:92:48:36:09:57:33:96:c3: 15:d4:79:4a:0d:f2:a4:84:c9:01:28:19:bf:67:7e: 7a:3a:61:a5:67:92:e0:66:07:d9:57:38:2c:9a:97: b5:4d:2c:f3:e9:a9:90:ef:95:a7:1b:2d:a7:25:26: 58:0b:5e:e8:18:1b:94:ce:f1:63:91:d9:52:22:4f: 59:0f:88:e8:bf:9e:fa:d3:1b:32:c0:8a:5c:ee:90: b9:2a:b9:7b:f9:ef:ac:a3:fa:eb:09:69:52:d5:ab: 10:1c:ff:65:33:72:35:dd:e7:3b:ba:3f:92:5b:d4: 27:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:8A:90:2A:34:EE:4E:AC:A1:1E:05:C5:A7:91:44:2B:0B:33:BB:1A X509v3 Authority Key Identifier: keyid:A4:0C:1A:D5:47:B9:3E:BF:65:5C:58:04:38:DF:A5:AE:42:7C:65:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:95:c6:5a:1a:fb:ce:8e:c1:46:65:68:ad:da:08:72:77:a9: 99:2c:a6:c5:a4:fd:db:6c:aa:14:85:92:68:45:36:2a:98:26: 3f:68:67:cd:63:29:e3:1f:3c:a3:55:07:da:54:1a:05:7f:bd: 09:c3:42:ed:de:a4:ee:9d:a8:13:11:d1:d8:c5:19:0a:e4:0c: 36:12:f3:b9:c3:9f:d8:58:af:70:a1:0a:91:6e:97:4c:9d:2c: 3c:23:57:ea:7a:c6:61:5f:21:9c:33:93:d3:29:e9:34:c5:ce: 08:ba:34:5a:e9:8c:14:a4:5b:93:9e:af:6b:c0:76:da:1a:1a: 0b:e4:ab:ad:94:54:b2:fe:cb:43:70:a7:ca:f5:87:07:80:ec: a0:1c:0b:8a:24:0d:83:ce:5b:96:72:7c:be:6e:21:8b:55:b1: ef:c7:7d:c3:19:0d:64:10:87:e7:3a:66:89:1f:50:fa:68:b9: 36:a4:da:c8:0a:ac:a2:d8:ce:2c:fe:d6:d2:20:a3:b2:78:fc: 7a:0e:c3:12:6b:b6:27:dc:b3:90:b2:fb:7a:9d:bb:e6:35:03: eb:34:94:a2:8d:d8:e5:84:24:ec:12:cc:cc:73:f8:50:33:0b: 68:af:4f:3e:b3:a9:42:d8:73:d4:98:65:47:6b:50:be:e2:2c: 02:70:96:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIo4LbWB4aSnikgoKMPQMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MGMxYWQ1NDdiOTNlYmY2NTVjNTgwNDM4ZGZhNWFlNDI3 YzY1MTEwHhcNMjYwMjA5MTYwMTAzWhcNMjYwMjEwMTYwMTAzWjAzMTEwLwYDVQQD Eyg0MzhhOTAyYTM0ZWU0ZWFjYTExZTA1YzVhNzkxNDQyYjBiMzNiYjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtf3GvZk+s6u+Z33wbAg83WFcmzB +ETGnoA0CNumxaqVHwGRASmYN/IDFw/XLOrlGR/3G7FvkYn64yT6etHmswah/1vE LTyYI4gOnndMxMZS3QlMhdqheAdKiDtkxQCAtVbFErQBJvyQpjzp/24ssSzI0K4C czRXuNWbsUC4Q4ijU5pntJAOKGzi7nu3kkg2CVczlsMV1HlKDfKkhMkBKBm/Z356 OmGlZ5LgZgfZVzgsmpe1TSzz6amQ75WnGy2nJSZYC17oGBuUzvFjkdlSIk9ZD4jo v5760xsywIpc7pC5Krl7+e+so/rrCWlS1asQHP9lM3I13ec7uj+SW9QncQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEOKkCo07k6soR4FxaeRRCsLM7saMB8GA1UdIwQY MBaAFKQMGtVHuT6/ZVxYBDjfpa5CfGURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEF3YTFVZTVQcjlsWEZnRU9OLWxya0o4WlJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy82YTRlNTctZmJlMy00YmMyLWI4YTUt ZGM4ZmNjNmJkYWFhLzEvcEF3YTFVZTVQcjlsWEZnRU9OLWxya0o4WlJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy82YTRlNTctZmJlMy00YmMyLWI4YTUtZGM4ZmNjNmJkYWFh LzEvcEF3YTFVZTVQcjlsWEZnRU9OLWxya0o4WlJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw5XGWhr7 zo7BRmVordoIcnepmSymxaT922yqFIWSaEU2KpgmP2hnzWMp4x88o1UH2lQaBX+9 CcNC7d6k7p2oExHR2MUZCuQMNhLzucOf2FivcKEKkW6XTJ0sPCNX6nrGYV8hnDOT 0ynpNMXOCLo0WumMFKRbk56va8B22hoaC+SrrZRUsv7LQ3CnyvWHB4DsoBwLiiQN g85blnJ8vm4hi1Wx78d9wxkNZBCH5zpmiR9Q+mi5NqTayAqsotjOLP7W0iCjsnj8 eg7DEmu2J9yzkLL7ep275jUD6zSUoo3Y5YQk7BLMzHP4UDMLaK9PPrOpQthz1Jhl R2tQvuIsAnCWYw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:19 2026 by rpki-client