This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft File: 1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft (raw, json) Hash identifier: Czmz9po8NT08SRXieQqlQ2ZUhgYkIdRskn6kUNt8Uzw= Subject key identifier: 41:85:F1:EC:21:F7:BF:3E:A6:24:D4:A7:34:E6:87:06:BB:98:EF:8A Authority key identifier: F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04 Certificate issuer: /CN=f8f19e224c73f83c4fdd196d06608aeb3a881804 Certificate serial: 019C427DDFE0CC8A4776E5533B4EF329E79A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft Manifest number: 1814 Signing time: Mon 09 Feb 2026 13:01:11 +0000 Manifest this update: Mon 09 Feb 2026 13:01:11 +0000 Manifest next update: Tue 10 Feb 2026 13:01:11 +0000 Files and hashes: 1: 1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl (hash: qXdlRZgeakWwSZTZeQrhxltcJ/r++b7P37gsMV6ZFTU=) 2: 2NBuPX9Sr7_9fzAA2_SqLU2A0xs.roa (hash: qnZc+3b2NxrywxDp6pPyOY9sOLIQiJ8XLeTOBtAP7ro=) 3: 5o42lxEDEDt3W8NdF-yOn7UvTZc.roa (hash: oNLBYQIHXcwUoe2IZOdpad4iTA7mmS0+SZkfH4CWA+E=) 4: BboWftCmyMgRxa5UHpCqG5AVr2Y.roa (hash: Pw6aLj1FvUnztUVc/3jeZrh/n8MLIzjwCWo9Eed2G2w=) 5: FP32CXa4bJkrAzn-mUypAVuTRcU.roa (hash: 2l89ddYZWse7SniAD+u1r0X1fyl4WgZC/mow8ll5aKY=) 6: TfDEDSgAF-UuRojXKYwf49xN9QY.roa (hash: l+8RUoTM1uw0SrqFD9LLiUFpKCi1Zds5YbMXCL51Vlw=) 7: VmYFVolGbLMMfwkvFM8kJCuQGzE.roa (hash: /WuPYjGHN6jIW+r1DMVdwmeNT1yyt/R8q6y8mp9Mt4A=) 8: gXjXRAudejpISpM7AMXoYnkEzWE.roa (hash: xP+l+X63e5wpSk358qKPtRUqLC7IdUkmyq8Z3HG079Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:df:e0:cc:8a:47:76:e5:53:3b:4e:f3:29:e7:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8f19e224c73f83c4fdd196d06608aeb3a881804 Validity Not Before: Feb 9 13:01:11 2026 GMT Not After : Feb 10 13:01:11 2026 GMT Subject: CN=4185f1ec21f7bf3ea624d4a734e68706bb98ef8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2a:5e:37:cd:10:8b:8f:3f:53:e9:51:22:58: cd:43:da:f8:69:f4:2b:f1:08:d8:31:6f:27:59:c3: 7c:b6:5a:18:03:d2:ba:59:b7:a4:88:e0:ff:7d:06: 9e:0d:54:67:86:e3:4f:d2:05:55:8c:24:b3:d6:d5: 43:5e:da:ed:1d:76:5b:c9:38:1b:15:18:e3:ff:52: f6:a4:cb:9f:a5:f1:f5:ef:7c:81:5e:ca:d5:83:90: 6d:2b:b7:96:78:55:52:45:13:30:f9:90:46:2d:dc: b8:0c:c3:ea:32:5c:a2:54:7e:70:8a:93:51:4a:85: ab:0b:5a:15:ab:75:01:dc:43:ca:a4:67:06:53:3c: 17:c5:a2:af:b6:12:c4:f9:20:ca:8d:58:55:ad:99: 73:4e:1e:c6:74:0c:eb:a5:e8:eb:38:c7:a2:7e:d5: b1:52:17:6a:2b:90:82:ab:84:86:1e:f3:c2:09:9d: 3f:24:1f:30:27:12:36:96:d4:4a:39:9e:a6:f9:f1: bb:55:cb:fe:ed:eb:71:76:49:6d:8b:40:b1:00:58: e9:16:5c:58:32:13:83:80:42:37:aa:16:35:6c:21: 82:33:1a:e5:68:49:48:ee:8a:60:51:5d:ba:f1:66: 68:91:90:22:ed:4a:58:07:4b:cf:30:3a:bc:ba:11: 33:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:85:F1:EC:21:F7:BF:3E:A6:24:D4:A7:34:E6:87:06:BB:98:EF:8A X509v3 Authority Key Identifier: keyid:F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:ef:0d:8e:b5:8a:5e:32:a1:c6:1e:c2:4b:8f:3c:58:1e:7f: b8:1d:16:bb:52:c7:68:f4:8f:9a:6e:4d:76:a7:7f:9e:99:d7: 9d:ab:01:2d:22:34:44:ae:67:d5:35:32:cd:e6:4b:ec:a1:9b: 9a:47:bf:fa:3d:24:a5:11:ec:6d:1a:b7:82:f5:1d:ef:dc:3b: cf:39:48:a0:a8:36:10:da:9d:90:a8:c6:f2:22:07:65:a8:46: 44:c6:94:6b:fe:05:87:38:2d:57:f1:c2:01:4c:44:3f:f1:cf: 30:ba:94:47:f4:20:2e:9d:32:91:69:cb:01:8a:2d:76:60:aa: c7:e0:ed:5c:2b:84:cc:33:e1:25:e5:94:8a:0f:a9:71:e2:36: 36:8a:f8:f1:30:06:cc:d8:f9:4f:65:1c:e7:5f:85:40:54:5c: 8d:f4:80:75:54:36:45:96:57:87:8a:c1:57:fc:2d:ec:c3:df: 07:64:40:94:d4:21:e2:2c:6f:1e:38:16:37:ae:f0:f8:83:04: 4e:76:98:a0:60:a1:76:09:ac:f0:a7:af:76:61:10:bc:2b:b2: 01:a8:d4:2e:cd:12:93:18:1d:cb:c0:5e:7a:43:3e:df:a4:9d: ef:86:8d:6b:5f:59:5b:25:73:1d:b8:99:26:2a:db:be:08:85: 38:cf:25:c2 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZxCfd/gzIpHduVTO07zKeeaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZjE5ZTIyNGM3M2Y4M2M0ZmRkMTk2ZDA2NjA4YWViM2E4 ODE4MDQwHhcNMjYwMjA5MTMwMTExWhcNMjYwMjEwMTMwMTExWjAzMTEwLwYDVQQD Eyg0MTg1ZjFlYzIxZjdiZjNlYTYyNGQ0YTczNGU2ODcwNmJiOThlZjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCpeN80Qi48/U+lRIljNQ9r4afQr 8QjYMW8nWcN8tloYA9K6WbekiOD/fQaeDVRnhuNP0gVVjCSz1tVDXtrtHXZbyTgb FRjj/1L2pMufpfH173yBXsrVg5BtK7eWeFVSRRMw+ZBGLdy4DMPqMlyiVH5wipNR SoWrC1oVq3UB3EPKpGcGUzwXxaKvthLE+SDKjVhVrZlzTh7GdAzrpejrOMeiftWx UhdqK5CCq4SGHvPCCZ0/JB8wJxI2ltRKOZ6m+fG7Vcv+7etxdklti0CxAFjpFlxY MhODgEI3qhY1bCGCMxrlaElI7opgUV268WZokZAi7UpYB0vPMDq8uhEzvwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFEGF8ewh978+piTUpzTmhwa7mO+KMB8GA1UdIwQY MBaAFPjxniJMc/g8T90ZbQZgius6iBgEMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1QR2VJa3h6LUR4UDNSbHRCbUNLNnpxSUdBUS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcvZjQwNDg2LTJjZDktNDc1Yi1iYmUx LTE2Y2Q4ZjRmYjRiOS8xLzEtUEdlSWt4ei1EeFAzUmx0Qm1DSzZ6cUlHQVEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzc3L2Y0MDQ4Ni0yY2Q5LTQ3NWItYmJlMS0xNmNkOGY0ZmI0 YjkvMS8xLVBHZUlreHotRHhQM1JsdEJtQ0s2enFJR0FRLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADu8N jrWKXjKhxh7CS488WB5/uB0Wu1LHaPSPmm5Ndqd/npnXnasBLSI0RK5n1TUyzeZL 7KGbmke/+j0kpRHsbRq3gvUd79w7zzlIoKg2ENqdkKjG8iIHZahGRMaUa/4Fhzgt V/HCAUxEP/HPMLqUR/QgLp0ykWnLAYotdmCqx+DtXCuEzDPhJeWUig+pceI2Nor4 8TAGzNj5T2Uc51+FQFRcjfSAdVQ2RZZXh4rBV/wt7MPfB2RAlNQh4ixvHjgWN67w +IMETnaYoGChdgms8KevdmEQvCuyAajULs0Skxgdy8BeekM+36Sd74aNa19ZWyVz HbiZJirbvgiFOM8lwg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:55:46 2026 by rpki-client