This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft File: PnFWq-5roji5BzFd-cVShlrc2ug.mft (raw, json) Hash identifier: i79/0vQ892Llg1Qgec09cvliU5FIZjmDq6RIujhLC0k= Subject key identifier: 4B:8D:45:65:79:71:D1:39:91:52:49:DC:3C:17:9F:34:DD:C4:A1:AF Authority key identifier: 3E:71:56:AB:EE:6B:A2:38:B9:07:31:5D:F9:C5:52:86:5A:DC:DA:E8 Certificate issuer: /CN=3e7156abee6ba238b907315df9c552865adcdae8 Certificate serial: 019C4358BD93D0857F9A6E5C10D10290E53C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnFWq-5roji5BzFd-cVShlrc2ug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft Manifest number: 0A82 Signing time: Mon 09 Feb 2026 17:00:15 +0000 Manifest this update: Mon 09 Feb 2026 17:00:15 +0000 Manifest next update: Tue 10 Feb 2026 17:00:15 +0000 Files and hashes: 1: 1_igJmtMDXKz9bhBLaRP5dFDztQ.roa (hash: JOImpk+FDhBna11hSj1TGTrJNMUKv4JDlCeaLCzdNVU=) 2: PnFWq-5roji5BzFd-cVShlrc2ug.crl (hash: vVvbcleeDY0iYRQeOlBIFxEXALHKK2HKRqyUhdoWlw0=) 3: X4LcadFcj7rRiTLEgHHTLMKNzsU.roa (hash: Cf5UA76UUfIOCKC2kd8gwCuNI+KqNFW/rTGifC2FORk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.crl rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft rsync://rpki.ripe.net/repository/DEFAULT/PnFWq-5roji5BzFd-cVShlrc2ug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:bd:93:d0:85:7f:9a:6e:5c:10:d1:02:90:e5:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e7156abee6ba238b907315df9c552865adcdae8 Validity Not Before: Feb 9 17:00:15 2026 GMT Not After : Feb 10 17:00:15 2026 GMT Subject: CN=4b8d45657971d139915249dc3c179f34ddc4a1af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bd:c0:ce:56:3a:16:23:fd:9f:10:9c:d9:5a: e3:02:d0:8e:24:7c:15:24:72:77:df:00:fe:6f:13: 73:e1:6e:4c:e8:25:5f:30:78:78:b7:ef:7d:bb:a0: 28:47:92:f9:97:1e:2c:54:24:53:2d:e9:f8:d5:c8: 03:57:dc:ab:df:e1:8b:7c:0d:c9:35:f5:66:23:0f: f0:fe:80:20:ca:9c:cf:f1:f6:48:01:d1:2a:e9:c1: aa:f5:83:72:e5:1d:13:53:9b:0f:cf:4d:89:02:d4: cc:c6:4a:96:39:aa:30:4c:da:f3:1c:5e:fd:62:17: b6:87:95:80:e0:77:08:f1:8a:9d:a3:af:f8:54:88: 3a:20:3e:69:01:f3:6a:41:7d:78:d5:6e:99:35:9f: 0f:ab:c4:dd:a2:6c:39:20:17:e8:3f:b6:7e:fe:0d: 9b:ab:65:dc:f2:f1:2a:92:68:d5:43:24:72:0c:66: db:6f:d4:55:1e:da:d0:a6:c4:5c:fd:21:97:fe:b8: 38:08:eb:ab:cf:87:c9:19:df:e9:6f:dd:6a:72:c0: 49:e0:c5:87:ad:d9:88:12:c4:1d:b2:29:0a:5c:7e: 22:62:2f:a9:af:58:31:54:6f:82:48:2c:ac:72:b5: d9:60:07:01:13:25:cf:89:ec:d4:92:3e:7a:57:37: 0d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:8D:45:65:79:71:D1:39:91:52:49:DC:3C:17:9F:34:DD:C4:A1:AF X509v3 Authority Key Identifier: keyid:3E:71:56:AB:EE:6B:A2:38:B9:07:31:5D:F9:C5:52:86:5A:DC:DA:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnFWq-5roji5BzFd-cVShlrc2ug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:e2:5d:6c:c5:66:37:50:8c:5c:1a:82:01:2f:a9:b8:bf:90: 10:8f:6b:92:98:4e:a2:7f:e3:ab:34:c8:88:36:01:42:76:b8: 9f:d1:da:89:e0:03:54:3a:35:43:39:c5:f4:af:dc:ad:4a:c8: 93:d2:1e:18:bd:c8:3e:10:aa:d6:e7:af:66:f2:e5:7d:21:5e: db:45:b4:a7:b4:6c:c6:44:2f:c4:16:e4:4e:6e:8d:4b:97:59: b8:85:04:e1:7b:3a:bd:a4:f5:ab:9a:9a:b4:9d:f0:6c:a7:d9: e2:93:d5:dd:51:c1:23:51:e0:7a:61:64:f7:41:be:2b:ef:73: b3:b6:b6:f7:e0:d2:a3:52:15:16:39:fd:16:8f:18:08:96:9a: 23:d7:80:19:ba:95:5d:bb:2b:f5:07:c3:f9:84:53:82:8b:b0: 82:ce:4e:f0:d0:44:c7:7b:13:d0:b5:a2:92:6b:77:11:44:7a: c8:d9:f4:5d:50:20:9d:4b:eb:b0:08:17:5d:dd:2f:8d:f9:09: 00:b1:80:6e:05:31:b7:ba:e4:9e:5b:4c:bd:0e:82:14:a5:7d: 77:20:16:64:11:be:db:c1:5a:40:98:b9:c0:d7:f1:46:cb:2e: 0c:2b:87:55:f1:f5:89:95:58:aa:f4:f0:4c:c6:f7:4d:ee:fb: 58:68:ec:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWL2T0IV/mm5cENECkOU8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNzE1NmFiZWU2YmEyMzhiOTA3MzE1ZGY5YzU1Mjg2NWFk Y2RhZTgwHhcNMjYwMjA5MTcwMDE1WhcNMjYwMjEwMTcwMDE1WjAzMTEwLwYDVQQD Eyg0YjhkNDU2NTc5NzFkMTM5OTE1MjQ5ZGMzYzE3OWYzNGRkYzRhMWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArL3AzlY6FiP9nxCc2VrjAtCOJHwV JHJ33wD+bxNz4W5M6CVfMHh4t+99u6AoR5L5lx4sVCRTLen41cgDV9yr3+GLfA3J NfVmIw/w/oAgypzP8fZIAdEq6cGq9YNy5R0TU5sPz02JAtTMxkqWOaowTNrzHF79 Yhe2h5WA4HcI8Yqdo6/4VIg6ID5pAfNqQX141W6ZNZ8Pq8Tdomw5IBfoP7Z+/g2b q2Xc8vEqkmjVQyRyDGbbb9RVHtrQpsRc/SGX/rg4COurz4fJGd/pb91qcsBJ4MWH rdmIEsQdsikKXH4iYi+pr1gxVG+CSCyscrXZYAcBEyXPiezUkj56VzcNywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEuNRWV5cdE5kVJJ3DwXnzTdxKGvMB8GA1UdIwQY MBaAFD5xVqvua6I4uQcxXfnFUoZa3NroMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG5GV3EtNXJvamk1QnpGZC1jVlNobHJjMnVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9hNGEwZjctN2RiZC00YjAzLWI3Zjkt NThmMmQ0NGZmMjgxLzEvUG5GV3EtNXJvamk1QnpGZC1jVlNobHJjMnVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9hNGEwZjctN2RiZC00YjAzLWI3ZjktNThmMmQ0NGZmMjgx LzEvUG5GV3EtNXJvamk1QnpGZC1jVlNobHJjMnVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAheJdbMVm N1CMXBqCAS+puL+QEI9rkphOon/jqzTIiDYBQna4n9HaieADVDo1QznF9K/crUrI k9IeGL3IPhCq1uevZvLlfSFe20W0p7RsxkQvxBbkTm6NS5dZuIUE4Xs6vaT1q5qa tJ3wbKfZ4pPV3VHBI1HgemFk90G+K+9zs7a29+DSo1IVFjn9Fo8YCJaaI9eAGbqV Xbsr9QfD+YRTgouwgs5O8NBEx3sT0LWikmt3EUR6yNn0XVAgnUvrsAgXXd0vjfkJ ALGAbgUxt7rknltMvQ6CFKV9dyAWZBG+28FaQJi5wNfxRssuDCuHVfH1iZVYqvTw TMb3Te77WGjsIA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:31:33 2026 by rpki-client