This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft File: PetYF7vn5aHF-xMFUbhKtIgBb5I.mft (raw, json) Hash identifier: NlIjfKb2/SS64idWGu6Vdv0ASxN2aNmdlmhihSL/6U0= Subject key identifier: B2:3E:2B:A6:41:DE:E0:48:F6:D2:B1:26:69:6D:60:58:0B:B3:2A:C7 Authority key identifier: 3D:EB:58:17:BB:E7:E5:A1:C5:FB:13:05:51:B8:4A:B4:88:01:6F:92 Certificate issuer: /CN=3deb5817bbe7e5a1c5fb130551b84ab488016f92 Certificate serial: 019C420F6C758C3C2E961AD6F633A5CEE659 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PetYF7vn5aHF-xMFUbhKtIgBb5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft Manifest number: 0471 Signing time: Mon 09 Feb 2026 11:00:32 +0000 Manifest this update: Mon 09 Feb 2026 11:00:32 +0000 Manifest next update: Tue 10 Feb 2026 11:00:32 +0000 Files and hashes: 1: 09Idh6750rzqiPUR4c726kV5rOk.roa (hash: mc1V6hIQgSw8lLoVocREyrEscnS5kZmkg0rvjeUzfkM=) 2: PetYF7vn5aHF-xMFUbhKtIgBb5I.crl (hash: pERG1uamsxhfTiz3t9LfjGmAzzvS7nZH0xuB8llsdok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft rsync://rpki.ripe.net/repository/DEFAULT/PetYF7vn5aHF-xMFUbhKtIgBb5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:6c:75:8c:3c:2e:96:1a:d6:f6:33:a5:ce:e6:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3deb5817bbe7e5a1c5fb130551b84ab488016f92 Validity Not Before: Feb 9 11:00:32 2026 GMT Not After : Feb 10 11:00:32 2026 GMT Subject: CN=b23e2ba641dee048f6d2b126696d60580bb32ac7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:f6:18:1e:05:17:8a:69:91:14:e3:19:fe:87: f3:2e:19:13:23:6d:1c:6c:ca:ab:db:39:4c:a0:45: 76:91:6d:7a:e7:27:8f:59:0f:24:b6:77:6d:16:90: f0:3e:4a:f6:68:0a:e2:d7:3c:80:a4:c1:13:94:24: 66:8b:26:8d:a1:8b:48:7c:03:11:5e:7d:2d:82:e1: 72:d2:ed:85:22:74:e7:4b:e5:4a:8a:33:4f:8f:39: 80:9b:cb:22:0b:d8:77:7a:69:42:b9:3d:cd:b9:b0: f9:f7:91:2f:ac:1b:5c:f0:df:93:48:18:d8:fe:db: 0a:2d:78:00:fb:19:cf:7d:54:4b:d0:0f:5f:4f:5c: 50:13:48:d5:d6:e9:7d:7d:13:a7:66:a9:45:58:24: c2:14:b6:3f:81:a1:69:38:ef:55:90:10:f5:c9:af: d6:c9:9b:10:dd:c0:7b:88:2c:6b:39:e3:0a:55:9a: 20:e9:1d:ca:e8:c0:6e:60:0b:0a:74:86:03:10:6d: 21:67:a4:33:f2:34:c9:a8:d9:b3:c8:57:32:5d:b5: ab:4a:af:01:15:8b:71:38:a5:0a:4e:ee:7c:c3:e7: 6b:f1:07:03:81:95:4a:70:22:c6:8f:ab:bc:b7:d7: 21:a2:f6:07:9d:55:3c:f3:59:1a:7b:d7:7f:75:ef: 5f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:3E:2B:A6:41:DE:E0:48:F6:D2:B1:26:69:6D:60:58:0B:B3:2A:C7 X509v3 Authority Key Identifier: keyid:3D:EB:58:17:BB:E7:E5:A1:C5:FB:13:05:51:B8:4A:B4:88:01:6F:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PetYF7vn5aHF-xMFUbhKtIgBb5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:dc:73:1f:d0:8e:ec:b6:56:c1:b9:8c:e8:c5:f8:60:f5:f1: f7:91:cf:28:9e:5c:77:0b:c8:8b:4a:15:9c:51:2b:fd:d9:58: d1:69:da:02:71:93:42:d3:a2:e9:75:63:76:6b:cb:38:bf:10: e0:43:cc:96:e2:e9:5f:9e:3b:9e:5b:61:3d:5a:8f:07:92:59: 91:b8:46:55:9e:8e:77:0a:3b:e1:3b:d3:b0:92:fa:c8:4d:3b: ef:f9:8c:f8:f2:4f:4d:1b:6f:7b:b3:a6:f3:2e:94:7a:3c:4d: bf:ae:16:29:f9:be:8a:99:ad:28:6c:1a:2e:72:f4:54:c1:3c: 31:43:cc:d2:f9:fe:fa:85:59:5d:7a:17:6b:53:c9:17:d0:1b: 42:c1:83:3c:18:dc:ca:13:93:96:46:8a:eb:e4:1e:d0:27:ee: a6:91:a3:fb:d7:8e:b0:9b:b4:94:af:12:8a:b1:89:6b:62:a2: 27:ca:eb:79:81:3e:76:9f:5c:fa:4f:6b:e1:0e:ca:88:f1:5f: 07:66:ac:bd:c2:27:39:fc:e6:eb:12:24:a6:0a:1c:f8:42:17: c7:5c:ad:19:4a:8b:1a:aa:2c:81:bf:b6:4b:0f:62:82:94:35: 9d:2d:71:df:f4:70:4d:c2:8d:51:53:a3:6a:d5:59:0b:ff:93: 5f:cd:b0:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD2x1jDwulhrW9jOlzuZZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkZWI1ODE3YmJlN2U1YTFjNWZiMTMwNTUxYjg0YWI0ODgw MTZmOTIwHhcNMjYwMjA5MTEwMDMyWhcNMjYwMjEwMTEwMDMyWjAzMTEwLwYDVQQD EyhiMjNlMmJhNjQxZGVlMDQ4ZjZkMmIxMjY2OTZkNjA1ODBiYjMyYWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+fYYHgUXimmRFOMZ/ofzLhkTI20c bMqr2zlMoEV2kW165yePWQ8ktndtFpDwPkr2aAri1zyApMETlCRmiyaNoYtIfAMR Xn0tguFy0u2FInTnS+VKijNPjzmAm8siC9h3emlCuT3NubD595EvrBtc8N+TSBjY /tsKLXgA+xnPfVRL0A9fT1xQE0jV1ul9fROnZqlFWCTCFLY/gaFpOO9VkBD1ya/W yZsQ3cB7iCxrOeMKVZog6R3K6MBuYAsKdIYDEG0hZ6Qz8jTJqNmzyFcyXbWrSq8B FYtxOKUKTu58w+dr8QcDgZVKcCLGj6u8t9chovYHnVU881kae9d/de9fNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLI+K6ZB3uBI9tKxJmltYFgLsyrHMB8GA1UdIwQY MBaAFD3rWBe75+WhxfsTBVG4SrSIAW+SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGV0WUY3dm41YUhGLXhNRlViaEt0SWdCYjVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wZTQ5YTEtNzNhOS00NTgxLWI4OGMt ZjEwNDg2ZTYwYTUzLzEvUGV0WUY3dm41YUhGLXhNRlViaEt0SWdCYjVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8wZTQ5YTEtNzNhOS00NTgxLWI4OGMtZjEwNDg2ZTYwYTUz LzEvUGV0WUY3dm41YUhGLXhNRlViaEt0SWdCYjVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK9xzH9CO 7LZWwbmM6MX4YPXx95HPKJ5cdwvIi0oVnFEr/dlY0WnaAnGTQtOi6XVjdmvLOL8Q 4EPMluLpX547nlthPVqPB5JZkbhGVZ6Odwo74TvTsJL6yE077/mM+PJPTRtve7Om 8y6UejxNv64WKfm+ipmtKGwaLnL0VME8MUPM0vn++oVZXXoXa1PJF9AbQsGDPBjc yhOTlkaK6+Qe0CfuppGj+9eOsJu0lK8SirGJa2KiJ8rreYE+dp9c+k9r4Q7KiPFf B2asvcInOfzm6xIkpgoc+EIXx1ytGUqLGqosgb+2Sw9igpQ1nS1x3/RwTcKNUVOj atVZC/+TX82wzA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:00:59 2026 by rpki-client