This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft File: PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft (raw, json) Hash identifier: 04p9YC5sETCTb5OIsVfOS8Snha9TyI6TLwK+qYLY+Mk= Subject key identifier: 59:21:DC:9E:B3:9D:68:D2:DC:A7:7E:F4:9A:17:26:C9:41:E0:C7:2D Authority key identifier: 3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4 Certificate issuer: /CN=3c87feb4ab9a57765fc0a664572c35032e866ad4 Certificate serial: 019C420F92DF628AC686D7ED3AB4758EE9D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft Manifest number: 05CC Signing time: Mon 09 Feb 2026 11:00:42 +0000 Manifest this update: Mon 09 Feb 2026 11:00:42 +0000 Manifest next update: Tue 10 Feb 2026 11:00:42 +0000 Files and hashes: 1: PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl (hash: XA5immgSddeiMTqD4/2YqHXX1UltWvn2P9CPEKTB1iQ=) 2: vYMGfpWvYNZs02-62C7WJ9xAV3E.roa (hash: sKzGuqCRJukA31DoIxhryBDpKKKc57ySQcucjlkvX1w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:92:df:62:8a:c6:86:d7:ed:3a:b4:75:8e:e9:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c87feb4ab9a57765fc0a664572c35032e866ad4 Validity Not Before: Feb 9 11:00:42 2026 GMT Not After : Feb 10 11:00:42 2026 GMT Subject: CN=5921dc9eb39d68d2dca77ef49a1726c941e0c72d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bd:aa:8b:d9:43:87:a3:1f:5a:fc:8b:97:3a: 6e:c9:9f:2b:c2:48:19:a7:de:5b:06:40:d0:4f:2c: c1:0b:57:88:0b:ee:4c:a9:bb:b6:90:f1:64:c5:91: 60:a8:ab:2f:4d:ab:2e:7a:f3:9d:f7:30:0a:5f:d2: 81:cf:38:d0:33:db:54:ca:61:4e:a2:ea:37:fc:fd: 74:95:3f:af:07:10:7e:3b:a5:2a:20:27:77:ce:e9: bd:93:d3:18:87:dd:fb:9f:4d:9d:13:eb:cf:95:9d: 1c:80:4a:7b:75:ea:bf:55:e3:2e:74:0b:6b:bf:a6: 94:d5:a3:2a:6d:a7:74:cd:29:27:de:d6:7a:03:7a: fc:ee:a1:25:c8:b8:21:0c:51:ff:2c:5d:b2:07:11: ec:bd:63:ab:3a:12:57:67:ba:7d:c0:30:2f:45:81: a6:b0:69:85:7e:e2:a2:05:7c:a8:bc:e1:92:22:92: 8d:16:98:ff:ff:0e:a1:58:81:09:9b:91:9a:7a:ff: c5:55:3f:79:da:83:6a:2b:6b:a2:ad:b4:49:6e:d6: ad:8a:db:03:a3:e1:7f:0e:a2:2b:8c:58:a0:c1:42: db:0d:37:04:e5:29:dc:90:02:96:ed:cd:f0:38:d3: e5:5c:bb:8c:02:97:a3:da:06:97:53:e8:10:37:f6: 04:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:21:DC:9E:B3:9D:68:D2:DC:A7:7E:F4:9A:17:26:C9:41:E0:C7:2D X509v3 Authority Key Identifier: keyid:3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:65:c8:e5:1a:e8:76:42:37:1a:ec:43:8a:99:76:db:42:c0: 00:7e:f9:49:48:60:dd:5b:63:ae:5a:fb:50:53:33:3e:b1:1c: ae:28:fe:aa:0b:b4:66:76:27:c8:37:bb:ad:37:eb:c2:9d:f8: ac:45:84:18:ae:14:ed:20:e1:8a:5a:5e:7c:f6:32:c3:c1:d9: a7:7f:30:a1:09:3d:40:92:0a:de:c6:3e:6b:2c:e6:34:6a:4d: 5b:7a:ef:76:8f:8a:64:67:8e:3e:4c:35:6b:17:2a:e6:a2:79: 92:e2:93:1e:3a:1e:36:9a:5e:cc:b7:2b:93:f4:a5:4c:a4:71: 58:4f:10:f8:5a:ad:bc:6f:d0:aa:ae:be:2c:61:20:3b:ee:85: b5:eb:0f:ae:4d:d6:6e:fc:8c:b9:72:87:57:35:bf:17:d0:1e: 6a:ad:05:e8:a9:08:67:4f:7b:89:21:be:36:e4:9a:60:a7:08: 18:c8:a1:20:8a:b6:ca:81:2a:65:f7:7e:40:a9:a5:e2:64:8a: 2a:a8:23:ca:c5:02:12:39:9a:56:ee:2e:67:f3:a0:f0:8e:7b: d2:52:9c:47:e5:d6:5f:83:58:fb:13:77:c3:3b:0b:1b:d9:5f: 33:af:b6:48:1e:8b:d9:56:e3:0a:af:14:0e:00:8f:5e:17:91: 56:3f:ce:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD5LfYorGhtftOrR1junSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjODdmZWI0YWI5YTU3NzY1ZmMwYTY2NDU3MmMzNTAzMmU4 NjZhZDQwHhcNMjYwMjA5MTEwMDQyWhcNMjYwMjEwMTEwMDQyWjAzMTEwLwYDVQQD Eyg1OTIxZGM5ZWIzOWQ2OGQyZGNhNzdlZjQ5YTE3MjZjOTQxZTBjNzJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApL2qi9lDh6MfWvyLlzpuyZ8rwkgZ p95bBkDQTyzBC1eIC+5Mqbu2kPFkxZFgqKsvTasuevOd9zAKX9KBzzjQM9tUymFO ouo3/P10lT+vBxB+O6UqICd3zum9k9MYh937n02dE+vPlZ0cgEp7deq/VeMudAtr v6aU1aMqbad0zSkn3tZ6A3r87qElyLghDFH/LF2yBxHsvWOrOhJXZ7p9wDAvRYGm sGmFfuKiBXyovOGSIpKNFpj//w6hWIEJm5Gaev/FVT952oNqK2uirbRJbtatitsD o+F/DqIrjFigwULbDTcE5SnckAKW7c3wONPlXLuMApej2gaXU+gQN/YELQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFkh3J6znWjS3Kd+9JoXJslB4MctMB8GA1UdIwQY MBaAFDyH/rSrmld2X8CmZFcsNQMuhmrUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUElmLXRLdWFWM1pmd0taa1Z5dzFBeTZHYXRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8wZTQxYTYtZDg0NS00ZGExLThiMzQt NDhmYjAwZmM5N2I2LzEvUElmLXRLdWFWM1pmd0taa1Z5dzFBeTZHYXRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8wZTQxYTYtZDg0NS00ZGExLThiMzQtNDhmYjAwZmM5N2I2 LzEvUElmLXRLdWFWM1pmd0taa1Z5dzFBeTZHYXRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQGXI5Rro dkI3GuxDipl220LAAH75SUhg3Vtjrlr7UFMzPrEcrij+qgu0ZnYnyDe7rTfrwp34 rEWEGK4U7SDhilpefPYyw8HZp38woQk9QJIK3sY+ayzmNGpNW3rvdo+KZGeOPkw1 axcq5qJ5kuKTHjoeNppezLcrk/SlTKRxWE8Q+FqtvG/Qqq6+LGEgO+6FtesPrk3W bvyMuXKHVzW/F9Aeaq0F6KkIZ097iSG+NuSaYKcIGMihIIq2yoEqZfd+QKml4mSK KqgjysUCEjmaVu4uZ/Og8I570lKcR+XWX4NY+xN3wzsLG9lfM6+2SB6L2VbjCq8U DgCPXheRVj/OMA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:46:02 2026 by rpki-client