This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft File: PBHQXNKatxkq8DnPXz0AvpIVeTk.mft (raw, json) Hash identifier: QEbu7osNlmrws0O7L5y6RDDWaWB9DX0Dl/aHHlcn7eI= Subject key identifier: 4F:F9:0C:2A:C9:6F:DF:35:7B:CA:07:F5:CA:68:A3:34:43:D4:E0:8D Authority key identifier: 3C:11:D0:5C:D2:9A:B7:19:2A:F0:39:CF:5F:3D:00:BE:92:15:79:39 Certificate issuer: /CN=3c11d05cd29ab7192af039cf5f3d00be92157939 Certificate serial: 019C446C1402FB677C865791E05F9E668DB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft Manifest number: 0A60 Signing time: Mon 09 Feb 2026 22:00:59 +0000 Manifest this update: Mon 09 Feb 2026 22:00:59 +0000 Manifest next update: Tue 10 Feb 2026 22:00:59 +0000 Files and hashes: 1: PBHQXNKatxkq8DnPXz0AvpIVeTk.crl (hash: uCVIfPNc2WY7tvSfIWnSwEYOzFvpiTM6ob6Nx4kxaY0=) 2: bKvy0wAyXjDdBCSQNQJ_GGUvadk.roa (hash: OCcyy3rJb6EJk7Jn3nr3zoEQ6CrNcyPKVMt0C1tP8r4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6c:14:02:fb:67:7c:86:57:91:e0:5f:9e:66:8d:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c11d05cd29ab7192af039cf5f3d00be92157939 Validity Not Before: Feb 9 22:00:59 2026 GMT Not After : Feb 10 22:00:59 2026 GMT Subject: CN=4ff90c2ac96fdf357bca07f5ca68a33443d4e08d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:32:cb:e6:5f:6a:e1:85:ba:36:3a:43:33:9c: 8d:d1:52:58:c5:33:2a:d2:3a:27:b4:fb:28:c7:39: bc:41:88:4f:1d:75:d9:02:0e:5f:0b:50:f8:86:1c: 4d:fd:8e:49:55:a3:0d:7c:7d:29:3c:76:c6:34:71: 66:3b:ed:b4:3f:be:c9:32:4a:c0:33:5b:3a:de:f4: d9:46:ee:b3:c8:55:66:24:ea:11:f6:0c:62:3f:7d: 70:d6:29:af:3c:15:d6:d1:13:2d:60:65:e8:82:a0: 94:ab:77:eb:bd:f8:e5:20:01:e9:dd:9b:5c:ee:5d: 89:f8:9c:6c:af:ca:a8:56:0b:d0:5e:9d:13:06:a1: 45:a5:86:64:c9:02:02:57:ce:96:d5:42:0a:5a:a0: 29:19:29:f4:43:34:9f:92:06:71:19:1c:38:cb:78: b5:34:fb:bb:53:9a:b8:52:b2:2b:c4:b7:e9:96:11: f4:86:e8:32:ab:c3:a5:6d:6d:da:0f:b9:3a:17:a6: 16:f5:ae:e3:5b:03:57:f4:be:4c:db:0d:62:b6:4d: 36:2d:06:4e:5f:52:f1:1d:89:75:7c:c3:a3:af:d4: 44:ac:d9:82:32:4a:7a:29:14:90:6c:04:a3:67:21: 41:6d:ec:59:b1:a7:e3:46:df:a5:de:e0:db:6a:75: e3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:F9:0C:2A:C9:6F:DF:35:7B:CA:07:F5:CA:68:A3:34:43:D4:E0:8D X509v3 Authority Key Identifier: keyid:3C:11:D0:5C:D2:9A:B7:19:2A:F0:39:CF:5F:3D:00:BE:92:15:79:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:60:f0:6c:d4:92:f7:64:77:4c:7b:7a:48:f8:f1:39:65:7d: ac:6c:b2:98:d3:4a:9d:5b:41:bf:aa:22:71:a9:35:91:57:07: a8:a7:7f:22:fe:0f:31:8a:a4:b9:52:3b:86:f0:22:47:24:69: e1:b4:3d:ce:33:f8:c9:38:08:9e:b0:f6:14:1b:39:13:d4:71: 72:87:69:c7:47:09:2c:af:4e:40:c3:27:e8:94:96:48:4f:a1: 2c:1c:cd:3e:fa:79:4e:af:70:8a:3f:43:54:4d:1e:d8:36:11: 66:ba:73:0d:9a:6b:9e:ea:6e:74:e8:ab:1f:87:e5:6a:c3:66: 2b:df:13:7b:d0:44:c6:7a:50:c9:37:9c:22:10:00:9a:93:5d: c2:64:07:5c:cb:6d:96:bc:b4:66:75:82:1d:c5:ba:dc:96:da: f2:b3:00:d5:d6:dd:fa:d1:d6:1c:b0:bb:d2:91:4d:83:ad:6d: b8:6d:24:a4:83:04:3a:ed:fb:af:57:e0:17:13:d2:0e:59:01: c5:e8:95:9a:fc:49:69:73:27:ae:f8:51:81:c8:7c:e0:31:b3: 31:a0:17:35:84:12:53:91:d0:37:2e:4a:bc:0c:43:b7:81:2e: 70:89:e2:e3:c5:d2:9d:36:c4:5a:2f:00:a0:1e:7e:94:54:b1: e1:cb:bb:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEbBQC+2d8hleR4F+eZo24MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMTFkMDVjZDI5YWI3MTkyYWYwMzljZjVmM2QwMGJlOTIx NTc5MzkwHhcNMjYwMjA5MjIwMDU5WhcNMjYwMjEwMjIwMDU5WjAzMTEwLwYDVQQD Eyg0ZmY5MGMyYWM5NmZkZjM1N2JjYTA3ZjVjYTY4YTMzNDQzZDRlMDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDLL5l9q4YW6NjpDM5yN0VJYxTMq 0jontPsoxzm8QYhPHXXZAg5fC1D4hhxN/Y5JVaMNfH0pPHbGNHFmO+20P77JMkrA M1s63vTZRu6zyFVmJOoR9gxiP31w1imvPBXW0RMtYGXogqCUq3frvfjlIAHp3Ztc 7l2J+Jxsr8qoVgvQXp0TBqFFpYZkyQICV86W1UIKWqApGSn0QzSfkgZxGRw4y3i1 NPu7U5q4UrIrxLfplhH0hugyq8OlbW3aD7k6F6YW9a7jWwNX9L5M2w1itk02LQZO X1LxHYl1fMOjr9RErNmCMkp6KRSQbASjZyFBbexZsafjRt+l3uDbanXjEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE/5DCrJb981e8oH9cpoozRD1OCNMB8GA1UdIwQY MBaAFDwR0FzSmrcZKvA5z189AL6SFXk5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEJIUVhOS2F0eGtxOERuUFh6MEF2cElWZVRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9jZGIxMDQtMDVkYi00Y2RiLWE0MmUt NzA4ZGMwOTdmZmZlLzEvUEJIUVhOS2F0eGtxOERuUFh6MEF2cElWZVRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9jZGIxMDQtMDVkYi00Y2RiLWE0MmUtNzA4ZGMwOTdmZmZl LzEvUEJIUVhOS2F0eGtxOERuUFh6MEF2cElWZVRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU2DwbNSS 92R3THt6SPjxOWV9rGyymNNKnVtBv6oicak1kVcHqKd/Iv4PMYqkuVI7hvAiRyRp 4bQ9zjP4yTgInrD2FBs5E9Rxcodpx0cJLK9OQMMn6JSWSE+hLBzNPvp5Tq9wij9D VE0e2DYRZrpzDZprnupudOirH4flasNmK98Te9BExnpQyTecIhAAmpNdwmQHXMtt lry0ZnWCHcW63Jba8rMA1dbd+tHWHLC70pFNg61tuG0kpIMEOu37r1fgFxPSDlkB xeiVmvxJaXMnrvhRgch84DGzMaAXNYQSU5HQNy5KvAxDt4EucIni48XSnTbEWi8A oB5+lFSx4cu79g== -----END CERTIFICATE-----Generated at Tue Feb 10 01:41:37 2026 by rpki-client