This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft File: P1jM0LF5IrWNXoss8uV5zmmrOGM.mft (raw, json) Hash identifier: YgG2bxxwHQsQpcjjjDLDAnU0v9RzZJBnB8Cwe8m8q5k= Subject key identifier: DC:9D:6D:B9:08:23:1B:2F:5B:F2:35:D4:8C:25:3A:D3:3D:56:16:21 Authority key identifier: 3F:58:CC:D0:B1:79:22:B5:8D:5E:8B:2C:F2:E5:79:CE:69:AB:38:63 Certificate issuer: /CN=3f58ccd0b17922b58d5e8b2cf2e579ce69ab3863 Certificate serial: 019C5AF37FA778F34A9979C23ABE058989DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1jM0LF5IrWNXoss8uV5zmmrOGM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft Manifest number: 025B Signing time: Sat 14 Feb 2026 07:00:33 +0000 Manifest this update: Sat 14 Feb 2026 07:00:33 +0000 Manifest next update: Sun 15 Feb 2026 07:00:33 +0000 Files and hashes: 1: P1jM0LF5IrWNXoss8uV5zmmrOGM.crl (hash: y307BcwhpWoIbO/PJcdGH1t1axeDXZuVZfRTtCM0Hu4=) 2: pwkOfI0N-Tqs6EWE-ZLxQ2pD3ZM.asa (hash: 76UHeLcM+om1iT2qZCwO5q94A8qOQbIQ5FrClESA93w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft rsync://rpki.ripe.net/repository/DEFAULT/P1jM0LF5IrWNXoss8uV5zmmrOGM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 07:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:5a:f3:7f:a7:78:f3:4a:99:79:c2:3a:be:05:89:89:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f58ccd0b17922b58d5e8b2cf2e579ce69ab3863 Validity Not Before: Feb 14 07:00:33 2026 GMT Not After : Feb 15 07:00:33 2026 GMT Subject: CN=dc9d6db908231b2f5bf235d48c253ad33d561621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c5:77:c5:f5:50:8a:8f:25:a8:31:e2:6e:f6: 07:d9:5b:65:8d:4e:3e:fc:a6:46:d4:57:80:19:c0: 95:5e:e7:3e:66:1f:b5:cd:e9:43:3f:34:17:c5:bd: e4:71:2d:a2:02:36:3e:dc:00:c3:a5:ce:43:96:8f: 09:f4:d4:94:ca:f0:c0:61:a4:ce:8e:9c:63:71:21: 14:9c:98:f9:35:1b:24:fe:6f:7f:6a:38:92:25:5b: 17:9d:30:3b:10:7d:9b:01:3f:cb:a0:a5:f4:4b:fd: 3a:e9:fa:df:e7:00:c1:b4:89:1c:a5:0a:3c:f7:a7: 8f:e8:5e:b0:8b:67:fb:1d:67:64:0c:bd:4a:80:76: 96:d9:cd:eb:03:72:e9:a9:de:e8:3a:b4:25:2f:fc: 3b:36:10:9a:96:aa:01:8f:30:29:40:c2:e2:a5:83: 86:4a:cd:a8:b6:1b:8c:4a:a4:4d:7b:04:e2:4f:63: 91:ce:ee:7b:07:b7:88:e2:79:6e:a6:09:ea:0e:dc: 61:fe:bd:8c:c5:d5:5d:98:e3:ba:1c:14:1c:81:b5: 2b:60:a3:07:e8:13:6b:1b:b2:d0:e2:e0:5b:29:75: a2:54:5c:5d:75:a5:10:1d:c5:a5:33:04:be:23:45: 7d:9b:39:65:61:bd:5f:84:2b:52:4b:27:dc:38:de: 02:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:9D:6D:B9:08:23:1B:2F:5B:F2:35:D4:8C:25:3A:D3:3D:56:16:21 X509v3 Authority Key Identifier: keyid:3F:58:CC:D0:B1:79:22:B5:8D:5E:8B:2C:F2:E5:79:CE:69:AB:38:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1jM0LF5IrWNXoss8uV5zmmrOGM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:3a:7d:4e:90:21:77:5a:13:9b:83:2f:01:ea:73:b4:51:ff: 7d:ba:fd:66:44:e1:5e:63:60:d5:d8:67:ac:c9:44:58:30:a4: 4e:50:b0:dc:61:9a:6c:67:1d:50:e9:b9:97:39:c6:e9:8a:4b: d4:c3:e9:75:86:00:49:60:7f:49:d1:d6:48:d1:ec:0b:66:0c: 49:32:6a:20:c9:50:25:1b:7e:68:40:cd:a4:77:b4:ed:69:e2: 89:a9:d1:01:27:14:37:6d:f3:b5:2c:78:3f:ed:2a:f6:d9:38: a9:e0:21:83:8d:1e:03:c4:5d:99:ee:87:02:76:df:35:0b:52: 13:a9:7e:ac:d7:bb:5a:21:f2:58:69:f0:25:86:f7:ec:c6:85: 48:11:b5:a1:76:17:be:27:64:cd:2b:77:64:3e:05:b0:6c:bc: da:1e:49:28:7e:b8:3e:a3:82:68:aa:c1:5f:99:0b:d0:6c:9d: 3f:d1:c8:da:55:a9:d0:43:38:22:2e:b3:ba:4d:6c:82:4a:5c: e2:73:93:5d:30:f9:91:38:f6:ea:9a:f6:a4:2c:e0:ce:ea:70: 57:da:38:ca:3f:f3:b4:26:3e:59:32:48:7f:c4:ec:27:fb:b4: 95:13:6a:e5:10:11:20:86:ef:6e:0d:d2:02:04:3d:07:bd:e1: bf:99:7d:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxa83+nePNKmXnCOr4FiYnfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmNThjY2QwYjE3OTIyYjU4ZDVlOGIyY2YyZTU3OWNlNjlh YjM4NjMwHhcNMjYwMjE0MDcwMDMzWhcNMjYwMjE1MDcwMDMzWjAzMTEwLwYDVQQD EyhkYzlkNmRiOTA4MjMxYjJmNWJmMjM1ZDQ4YzI1M2FkMzNkNTYxNjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMV3xfVQio8lqDHibvYH2VtljU4+ /KZG1FeAGcCVXuc+Zh+1zelDPzQXxb3kcS2iAjY+3ADDpc5Dlo8J9NSUyvDAYaTO jpxjcSEUnJj5NRsk/m9/ajiSJVsXnTA7EH2bAT/LoKX0S/066frf5wDBtIkcpQo8 96eP6F6wi2f7HWdkDL1KgHaW2c3rA3Lpqd7oOrQlL/w7NhCalqoBjzApQMLipYOG Ss2othuMSqRNewTiT2ORzu57B7eI4nlupgnqDtxh/r2MxdVdmOO6HBQcgbUrYKMH 6BNrG7LQ4uBbKXWiVFxddaUQHcWlMwS+I0V9mzllYb1fhCtSSyfcON4CNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNydbbkIIxsvW/I11IwlOtM9VhYhMB8GA1UdIwQY MBaAFD9YzNCxeSK1jV6LLPLlec5pqzhjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDFqTTBMRjVJcldOWG9zczh1VjV6bW1yT0dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8xOGRiZTItYmM2ZS00YTkyLWI5ZWYt ZWQ3OWEyZjIyNWMwLzEvUDFqTTBMRjVJcldOWG9zczh1VjV6bW1yT0dNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8xOGRiZTItYmM2ZS00YTkyLWI5ZWYtZWQ3OWEyZjIyNWMw LzEvUDFqTTBMRjVJcldOWG9zczh1VjV6bW1yT0dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASDp9TpAh d1oTm4MvAepztFH/fbr9ZkThXmNg1dhnrMlEWDCkTlCw3GGabGcdUOm5lznG6YpL 1MPpdYYASWB/SdHWSNHsC2YMSTJqIMlQJRt+aEDNpHe07WniianRAScUN23ztSx4 P+0q9tk4qeAhg40eA8Rdme6HAnbfNQtSE6l+rNe7WiHyWGnwJYb37MaFSBG1oXYX vidkzSt3ZD4FsGy82h5JKH64PqOCaKrBX5kL0GydP9HI2lWp0EM4Ii6zuk1sgkpc 4nOTXTD5kTj26pr2pCzgzupwV9o4yj/ztCY+WTJIf8TsJ/u0lRNq5RARIIbvbg3S AgQ9B73hv5l92A== -----END CERTIFICATE-----Generated at Sat Feb 14 14:14:05 2026 by rpki-client