This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft File: PCKK_HA7a--nNfIhKGH9b6REh80.mft (raw, json) Hash identifier: xex6OFwT0UGAjD4c3n3YizxZQGqTuDB8GgbiKz/3rUM= Subject key identifier: 45:30:1E:2A:65:A7:BB:5C:E9:11:51:FD:6A:1F:40:9F:08:B0:FA:65 Authority key identifier: 3C:22:8A:FC:70:3B:6B:EF:A7:35:F2:21:28:61:FD:6F:A4:44:87:CD Certificate issuer: /CN=3c228afc703b6befa735f2212861fd6fa44487cd Certificate serial: 019C42103DDB07C8F8856555EE84F4A65671 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCKK_HA7a--nNfIhKGH9b6REh80.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft Manifest number: 12E4 Signing time: Mon 09 Feb 2026 11:01:26 +0000 Manifest this update: Mon 09 Feb 2026 11:01:26 +0000 Manifest next update: Tue 10 Feb 2026 11:01:26 +0000 Files and hashes: 1: PCKK_HA7a--nNfIhKGH9b6REh80.crl (hash: e0FB/0jmS9suh6DTtZJwF0YfTq+nAnb6rWbbxGoWHbU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft rsync://rpki.ripe.net/repository/DEFAULT/PCKK_HA7a--nNfIhKGH9b6REh80.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:10:3d:db:07:c8:f8:85:65:55:ee:84:f4:a6:56:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c228afc703b6befa735f2212861fd6fa44487cd Validity Not Before: Feb 9 11:01:26 2026 GMT Not After : Feb 10 11:01:26 2026 GMT Subject: CN=45301e2a65a7bb5ce91151fd6a1f409f08b0fa65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:91:18:1a:af:ff:cf:0d:00:38:ed:fd:92:9d: 3c:96:a1:54:42:1b:24:d9:b5:f1:b9:86:0f:1e:e9: 94:1a:8a:d9:04:45:53:25:96:9a:37:4c:49:75:31: 69:d1:38:6b:fb:f8:04:ed:4c:8f:22:b2:09:e6:f9: f4:9c:73:c7:e2:38:82:01:69:da:82:10:36:58:75: 89:45:b2:5d:90:6a:dc:52:0e:9e:83:b8:da:ae:99: 1e:8d:6a:b7:9e:4c:6e:23:80:d7:04:0a:2f:c0:86: 94:cd:85:0f:4a:b7:34:c1:f7:02:78:b3:19:d5:4a: 33:2d:4d:12:d5:b6:75:db:f5:a0:34:53:8b:28:4b: 65:f6:bc:25:9b:4f:29:9f:73:b4:81:a0:58:bb:5b: 41:b7:5d:84:bf:41:6c:a3:58:ea:e1:09:31:84:a7: e4:22:1a:14:23:72:00:e3:91:00:28:16:2a:d8:da: cf:77:9b:b2:00:af:89:95:55:dd:05:8e:01:ac:40: 06:4a:1d:48:af:d2:b4:07:1d:1d:30:67:59:37:8b: 7e:6d:7c:43:b9:a4:59:01:e3:29:81:f8:a8:2f:1c: a1:2e:85:1d:bf:0f:7c:a0:44:50:71:a3:96:ea:7f: 7d:ca:3e:66:67:af:4b:ae:ac:27:35:6b:86:6b:c8: b3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:30:1E:2A:65:A7:BB:5C:E9:11:51:FD:6A:1F:40:9F:08:B0:FA:65 X509v3 Authority Key Identifier: keyid:3C:22:8A:FC:70:3B:6B:EF:A7:35:F2:21:28:61:FD:6F:A4:44:87:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCKK_HA7a--nNfIhKGH9b6REh80.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:47:d1:e0:1b:d6:ac:f2:2b:b3:52:c8:0c:68:37:5b:f8:c7: ac:e9:b7:7d:7b:a0:6b:38:65:ad:b9:57:50:68:d0:35:8e:a1: 54:ca:ad:58:0c:f4:94:4a:32:cb:1a:6e:49:77:14:65:33:55: f8:6d:b1:62:ba:fd:18:e9:13:de:9b:7f:87:2f:e8:3d:a5:91: c4:c1:39:c3:69:cc:70:9d:bd:6d:60:64:49:d5:52:aa:3a:9c: 24:37:68:47:0d:e9:90:d2:63:95:d4:92:fb:5d:a5:9c:04:b0: af:1b:18:4d:71:46:d2:e0:1a:f7:6f:54:81:f5:af:66:eb:14: 84:e5:79:87:9f:67:d3:41:30:32:22:a3:03:01:4f:09:67:5b: d2:c8:ef:c7:d4:74:2b:3a:d5:4e:52:76:08:8b:91:de:a3:22: ed:ed:31:7f:2d:0c:47:a4:14:13:5f:2b:51:eb:e8:42:23:73: 6e:98:9f:7b:c8:be:da:1f:9b:1c:86:a9:e8:9e:0b:f6:44:60: 4d:e9:7f:4d:99:9a:fe:01:d4:56:b8:93:22:94:58:0a:2f:41: 6a:fd:10:7a:f3:88:88:d0:7e:27:0c:cf:69:98:9a:c5:5f:9a: f7:ad:f6:7e:63:dc:43:e0:57:52:11:f8:dc:25:64:34:eb:7f: ec:70:1b:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCED3bB8j4hWVV7oT0plZxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMjI4YWZjNzAzYjZiZWZhNzM1ZjIyMTI4NjFmZDZmYTQ0 NDg3Y2QwHhcNMjYwMjA5MTEwMTI2WhcNMjYwMjEwMTEwMTI2WjAzMTEwLwYDVQQD Eyg0NTMwMWUyYTY1YTdiYjVjZTkxMTUxZmQ2YTFmNDA5ZjA4YjBmYTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5EYGq//zw0AOO39kp08lqFUQhsk 2bXxuYYPHumUGorZBEVTJZaaN0xJdTFp0Thr+/gE7UyPIrIJ5vn0nHPH4jiCAWna ghA2WHWJRbJdkGrcUg6eg7jarpkejWq3nkxuI4DXBAovwIaUzYUPSrc0wfcCeLMZ 1UozLU0S1bZ12/WgNFOLKEtl9rwlm08pn3O0gaBYu1tBt12Ev0Fso1jq4QkxhKfk IhoUI3IA45EAKBYq2NrPd5uyAK+JlVXdBY4BrEAGSh1Ir9K0Bx0dMGdZN4t+bXxD uaRZAeMpgfioLxyhLoUdvw98oERQcaOW6n99yj5mZ69LrqwnNWuGa8iz9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEUwHiplp7tc6RFR/WofQJ8IsPplMB8GA1UdIwQY MBaAFDwiivxwO2vvpzXyIShh/W+kRIfNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUENLS19IQTdhLS1uTmZJaEtHSDliNlJFaDgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy84MWEzMjUtMDliNi00NTE3LWI5M2Ut NTQ2MGU1MDkxZDE4LzEvUENLS19IQTdhLS1uTmZJaEtHSDliNlJFaDgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy84MWEzMjUtMDliNi00NTE3LWI5M2UtNTQ2MGU1MDkxZDE4 LzEvUENLS19IQTdhLS1uTmZJaEtHSDliNlJFaDgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX0fR4BvW rPIrs1LIDGg3W/jHrOm3fXugazhlrblXUGjQNY6hVMqtWAz0lEoyyxpuSXcUZTNV +G2xYrr9GOkT3pt/hy/oPaWRxME5w2nMcJ29bWBkSdVSqjqcJDdoRw3pkNJjldSS +12lnASwrxsYTXFG0uAa929UgfWvZusUhOV5h59n00EwMiKjAwFPCWdb0sjvx9R0 KzrVTlJ2CIuR3qMi7e0xfy0MR6QUE18rUevoQiNzbpife8i+2h+bHIap6J4L9kRg Tel/TZma/gHUVriTIpRYCi9Bav0QevOIiNB+JwzPaZiaxV+a9632fmPcQ+BXUhH4 3CVkNOt/7HAb9w== -----END CERTIFICATE-----Generated at Mon Feb 9 19:49:11 2026 by rpki-client