This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft File: PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft (raw, json) Hash identifier: pcBGKfJqZR6HjjoWoc06S1pGeNLSwpxojzWezBska0s= Subject key identifier: 27:DD:F7:04:F4:E8:DC:93:2F:F5:C4:1C:2E:75:11:AB:36:02:CA:21 Authority key identifier: 3C:4C:F8:81:77:44:2A:54:F3:21:B8:FA:80:B6:CF:5D:F4:04:CF:F6 Certificate issuer: /CN=3c4cf88177442a54f321b8fa80b6cf5df404cff6 Certificate serial: 019C457EEDC95C5208DD51F4549C3979A192 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft Manifest number: 1813 Signing time: Tue 10 Feb 2026 03:01:12 +0000 Manifest this update: Tue 10 Feb 2026 03:01:12 +0000 Manifest next update: Wed 11 Feb 2026 03:01:12 +0000 Files and hashes: 1: N-Sz7eb5ejVM1p6qryCc5zRHIbU.roa (hash: YnpBvRTMf+9uMxTp+5UfUvUMx9s/3sJS6dWYTJ+uzTs=) 2: PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl (hash: Y691vFRUAwtlbXKmtZ5NSWTlUL6cq/u++Niq0wUeS6g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:45:7e:ed:c9:5c:52:08:dd:51:f4:54:9c:39:79:a1:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4cf88177442a54f321b8fa80b6cf5df404cff6 Validity Not Before: Feb 10 03:01:12 2026 GMT Not After : Feb 11 03:01:12 2026 GMT Subject: CN=27ddf704f4e8dc932ff5c41c2e7511ab3602ca21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:32:9c:6b:29:3c:b4:6d:ed:b2:c3:64:a8:5f: 83:1c:e7:e9:b8:3c:44:01:0b:2d:9b:8c:87:c8:8c: 9e:77:53:3a:5a:d0:26:4c:63:b1:29:d5:bd:40:7b: 2d:41:c6:0e:ad:c0:6a:aa:a5:90:77:a0:ab:31:d8: 86:e1:8b:a0:17:0d:33:aa:85:ed:19:d7:e6:89:bc: 44:e8:93:b1:32:9b:a2:76:34:62:4c:56:d9:bd:92: ba:47:eb:64:29:bf:4b:12:30:a6:e9:55:02:94:03: aa:ed:bd:aa:8e:eb:48:e1:6e:f9:f5:2b:02:e2:43: 79:cd:32:5c:74:f4:92:c9:ce:a1:09:2d:0e:75:ca: 42:a7:82:3d:0d:9c:66:62:fb:8a:cb:26:e1:de:af: 80:2d:76:bd:2a:19:b4:d6:54:97:0e:ff:ba:74:8b: f4:eb:17:ee:45:11:32:b3:b1:b1:da:87:0d:20:d4: c8:f3:b9:40:39:f3:71:a3:ad:f0:eb:f4:26:89:dd: 08:e9:b8:5d:57:97:b6:26:ac:01:61:3c:b0:ff:b2: c4:ba:40:d9:94:18:36:4c:0d:fb:2f:52:e3:be:93: fa:3a:72:fc:b4:9e:94:d5:d1:6c:9f:7e:c4:e2:22: d3:be:bc:b2:ce:1c:08:e2:c6:ed:72:07:01:94:0c: 16:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:DD:F7:04:F4:E8:DC:93:2F:F5:C4:1C:2E:75:11:AB:36:02:CA:21 X509v3 Authority Key Identifier: keyid:3C:4C:F8:81:77:44:2A:54:F3:21:B8:FA:80:B6:CF:5D:F4:04:CF:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:47:8d:8e:23:50:21:70:fe:7c:4e:95:99:20:b9:03:c5:fd: 13:1c:94:3c:2e:58:b2:b4:55:bc:97:35:ae:d4:68:ea:a2:d5: 14:cc:87:06:54:19:d8:1a:69:af:f3:0a:3a:24:57:f9:d4:52: 27:76:c2:27:53:26:c5:da:cd:a4:c3:1c:27:8e:a1:fd:40:b0: ff:3c:70:69:3c:32:ca:e5:f6:4d:ca:b9:d1:67:32:a2:ae:fd: c5:47:c2:e9:f5:5a:60:7e:56:7a:d3:13:4f:f0:dc:f4:0e:33: d4:86:34:70:2a:2c:7f:3b:c5:23:9c:b1:3e:45:5e:4d:32:50: b0:f4:6f:f2:43:63:7c:15:62:4c:37:23:46:e2:1b:71:12:02: 3a:90:db:47:29:cc:6d:2a:a0:fc:9c:6d:1e:f9:dd:5d:b0:12: 2c:49:75:f8:c9:61:0e:0c:c0:b6:b6:d7:6c:66:4f:87:d1:14: 3f:6f:99:36:62:1b:20:7d:6e:54:8b:e2:5c:9b:b4:c1:22:50: 46:5c:f6:c1:93:ba:c6:8e:cc:49:d5:08:68:4d:eb:1d:68:de: 7d:1d:fc:1b:b3:be:ad:86:4d:e8:78:21:88:e6:01:59:48:69: 17:d1:08:85:80:74:ed:00:2c:78:77:53:ca:bf:4d:38:f6:50: e6:ce:72:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxFfu3JXFII3VH0VJw5eaGSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjNGNmODgxNzc0NDJhNTRmMzIxYjhmYTgwYjZjZjVkZjQw NGNmZjYwHhcNMjYwMjEwMDMwMTEyWhcNMjYwMjExMDMwMTEyWjAzMTEwLwYDVQQD EygyN2RkZjcwNGY0ZThkYzkzMmZmNWM0MWMyZTc1MTFhYjM2MDJjYTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzKcayk8tG3tssNkqF+DHOfpuDxE AQstm4yHyIyed1M6WtAmTGOxKdW9QHstQcYOrcBqqqWQd6CrMdiG4YugFw0zqoXt GdfmibxE6JOxMpuidjRiTFbZvZK6R+tkKb9LEjCm6VUClAOq7b2qjutI4W759SsC 4kN5zTJcdPSSyc6hCS0OdcpCp4I9DZxmYvuKyybh3q+ALXa9Khm01lSXDv+6dIv0 6xfuRREys7Gx2ocNINTI87lAOfNxo63w6/Qmid0I6bhdV5e2JqwBYTyw/7LEukDZ lBg2TA37L1LjvpP6OnL8tJ6U1dFsn37E4iLTvryyzhwI4sbtcgcBlAwWTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCfd9wT06NyTL/XEHC51Eas2AsohMB8GA1UdIwQY MBaAFDxM+IF3RCpU8yG4+oC2z130BM/2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEV6NGdYZEVLbFR6SWJqNmdMYlBYZlFFel9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8zYTQwYzAtMjQ3NS00ODE0LTg1NTkt NzAwZTMwMjdmNjIzLzEvUEV6NGdYZEVLbFR6SWJqNmdMYlBYZlFFel9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS8zYTQwYzAtMjQ3NS00ODE0LTg1NTktNzAwZTMwMjdmNjIz LzEvUEV6NGdYZEVLbFR6SWJqNmdMYlBYZlFFel9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYUeNjiNQ IXD+fE6VmSC5A8X9ExyUPC5YsrRVvJc1rtRo6qLVFMyHBlQZ2Bppr/MKOiRX+dRS J3bCJ1MmxdrNpMMcJ46h/UCw/zxwaTwyyuX2Tcq50Wcyoq79xUfC6fVaYH5WetMT T/Dc9A4z1IY0cCosfzvFI5yxPkVeTTJQsPRv8kNjfBViTDcjRuIbcRICOpDbRynM bSqg/JxtHvndXbASLEl1+MlhDgzAtrbXbGZPh9EUP2+ZNmIbIH1uVIviXJu0wSJQ Rlz2wZO6xo7MSdUIaE3rHWjefR38G7O+rYZN6HghiOYBWUhpF9EIhYB07QAseHdT yr9NOPZQ5s5yew== -----END CERTIFICATE-----Generated at Tue Feb 10 09:06:20 2026 by rpki-client