This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft File: P1jM0LF5IrWNXoss8uV5zmmrOGM.mft (raw, json) Hash identifier: muvkh3UhA4nLWS5rSK9ryeM8nYWYZNPtIpTufulP0Ac= Subject key identifier: A4:AF:B2:21:8A:75:38:48:F4:6B:FE:23:39:66:EE:67:0E:56:67:AB Authority key identifier: 3F:58:CC:D0:B1:79:22:B5:8D:5E:8B:2C:F2:E5:79:CE:69:AB:38:63 Certificate issuer: /CN=3f58ccd0b17922b58d5e8b2cf2e579ce69ab3863 Certificate serial: 019C41D8DBAF7A6116EC29C2AFDB13C25AC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1jM0LF5IrWNXoss8uV5zmmrOGM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft Manifest number: 024E Signing time: Mon 09 Feb 2026 10:00:56 +0000 Manifest this update: Mon 09 Feb 2026 10:00:56 +0000 Manifest next update: Tue 10 Feb 2026 10:00:56 +0000 Files and hashes: 1: P1jM0LF5IrWNXoss8uV5zmmrOGM.crl (hash: Q6lywH76pVXGlruTC6oyg4YcRlDAbz9RnXJovu33W0w=) 2: pwkOfI0N-Tqs6EWE-ZLxQ2pD3ZM.asa (hash: 76UHeLcM+om1iT2qZCwO5q94A8qOQbIQ5FrClESA93w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft rsync://rpki.ripe.net/repository/DEFAULT/P1jM0LF5IrWNXoss8uV5zmmrOGM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:db:af:7a:61:16:ec:29:c2:af:db:13:c2:5a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f58ccd0b17922b58d5e8b2cf2e579ce69ab3863 Validity Not Before: Feb 9 10:00:56 2026 GMT Not After : Feb 10 10:00:56 2026 GMT Subject: CN=a4afb2218a753848f46bfe233966ee670e5667ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ef:20:21:4b:c7:f8:d3:c7:63:70:45:69:f5: 1f:11:29:02:0f:58:d2:3f:3a:21:a2:c3:f6:a3:8e: 6e:8b:44:1c:29:05:66:da:e1:5f:71:99:a0:e8:df: eb:a7:47:cf:8d:4b:6b:08:39:22:eb:e2:24:1c:7c: b9:7b:f0:a6:dd:d7:31:a1:24:34:37:3b:de:53:8c: 79:49:53:84:c8:16:56:f4:f8:06:8d:0c:63:6e:47: 70:f9:77:c5:be:3c:1b:20:aa:3f:df:89:24:7f:dd: 58:f5:af:be:64:c9:87:2c:cc:48:c5:da:7d:26:fb: 8e:53:96:e1:fe:6d:b9:4b:52:e1:87:7e:53:1e:c6: c8:de:29:1b:b4:bc:12:88:f8:47:5c:84:1f:9a:16: aa:c3:ef:e1:fe:2b:29:01:03:4c:02:9b:38:2d:a4: 46:4d:10:c0:5d:74:bc:5a:02:93:a0:69:5f:83:5a: 44:2e:70:a3:5e:86:4b:b7:da:23:d5:21:f9:31:4c: 67:5e:7a:36:08:84:d3:26:22:0f:df:38:e6:df:4d: f7:23:e7:f6:66:ab:2f:cb:11:5f:4d:4f:34:57:61: b4:4c:91:b3:a2:00:87:92:21:3e:ea:f7:3e:a2:80: 6b:8f:9b:af:6d:dc:7b:03:62:ca:72:78:47:9f:7c: b1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:AF:B2:21:8A:75:38:48:F4:6B:FE:23:39:66:EE:67:0E:56:67:AB X509v3 Authority Key Identifier: keyid:3F:58:CC:D0:B1:79:22:B5:8D:5E:8B:2C:F2:E5:79:CE:69:AB:38:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1jM0LF5IrWNXoss8uV5zmmrOGM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:80:74:2b:05:d1:dc:6e:9f:6e:96:71:d0:f4:e3:55:9c:f9: fb:ba:90:3b:22:c7:d7:be:26:1b:19:3e:cc:a0:f3:e6:7e:f9: 29:22:7a:39:d1:84:e4:6e:93:da:66:cf:0c:91:8f:af:97:22: 1f:15:43:67:12:b6:79:c2:d6:97:b0:07:74:57:85:54:0c:73: 07:5c:e9:7e:e7:7d:64:e7:8f:04:57:56:85:b3:be:c7:b1:02: 25:dc:f4:d9:ee:09:26:45:d9:7d:11:f8:f2:56:6b:ed:4d:14: 54:38:c0:db:61:0a:0a:a8:f1:f6:dd:21:c9:79:84:73:bc:03: 1b:5c:63:80:a8:f3:02:fb:7f:88:f2:6e:17:e0:08:0e:24:f8: 88:e3:c7:8c:e6:47:3c:60:f2:0c:07:c4:94:0b:ea:e9:c7:56: 0d:7c:49:15:f5:dd:9a:e0:70:5b:4e:0d:33:35:66:d4:3f:c4: 7b:20:b1:d0:e7:8b:80:a8:f0:fb:1a:f1:d7:ec:99:ef:62:64: cf:de:b0:a1:f8:de:ef:59:15:89:1e:70:75:b2:d2:ba:53:74: 28:86:52:27:01:55:96:3a:e1:c2:c0:be:d6:12:ae:10:b2:0e: dc:3c:d0:e2:b5:27:de:3f:00:a1:de:06:5c:8a:7e:0c:70:54: 49:13:9a:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2NuvemEW7CnCr9sTwlrAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmNThjY2QwYjE3OTIyYjU4ZDVlOGIyY2YyZTU3OWNlNjlh YjM4NjMwHhcNMjYwMjA5MTAwMDU2WhcNMjYwMjEwMTAwMDU2WjAzMTEwLwYDVQQD EyhhNGFmYjIyMThhNzUzODQ4ZjQ2YmZlMjMzOTY2ZWU2NzBlNTY2N2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvu8gIUvH+NPHY3BFafUfESkCD1jS PzohosP2o45ui0QcKQVm2uFfcZmg6N/rp0fPjUtrCDki6+IkHHy5e/Cm3dcxoSQ0 NzveU4x5SVOEyBZW9PgGjQxjbkdw+XfFvjwbIKo/34kkf91Y9a++ZMmHLMxIxdp9 JvuOU5bh/m25S1Lhh35THsbI3ikbtLwSiPhHXIQfmhaqw+/h/ispAQNMAps4LaRG TRDAXXS8WgKToGlfg1pELnCjXoZLt9oj1SH5MUxnXno2CITTJiIP3zjm3033I+f2 ZqsvyxFfTU80V2G0TJGzogCHkiE+6vc+ooBrj5uvbdx7A2LKcnhHn3yxLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKSvsiGKdThI9Gv+Izlm7mcOVmerMB8GA1UdIwQY MBaAFD9YzNCxeSK1jV6LLPLlec5pqzhjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDFqTTBMRjVJcldOWG9zczh1VjV6bW1yT0dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8xOGRiZTItYmM2ZS00YTkyLWI5ZWYt ZWQ3OWEyZjIyNWMwLzEvUDFqTTBMRjVJcldOWG9zczh1VjV6bW1yT0dNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8xOGRiZTItYmM2ZS00YTkyLWI5ZWYtZWQ3OWEyZjIyNWMw LzEvUDFqTTBMRjVJcldOWG9zczh1VjV6bW1yT0dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAToB0KwXR 3G6fbpZx0PTjVZz5+7qQOyLH174mGxk+zKDz5n75KSJ6OdGE5G6T2mbPDJGPr5ci HxVDZxK2ecLWl7AHdFeFVAxzB1zpfud9ZOePBFdWhbO+x7ECJdz02e4JJkXZfRH4 8lZr7U0UVDjA22EKCqjx9t0hyXmEc7wDG1xjgKjzAvt/iPJuF+AIDiT4iOPHjOZH PGDyDAfElAvq6cdWDXxJFfXdmuBwW04NMzVm1D/EeyCx0OeLgKjw+xrx1+yZ72Jk z96wofje71kViR5wdbLSulN0KIZSJwFVljrhwsC+1hKuELIO3DzQ4rUn3j8Aod4G XIp+DHBUSROaqg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:53:47 2026 by rpki-client