This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft File: PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft (raw, json) Hash identifier: bXsGNNhi4i9NEM8gv5LItmFxsNKGU7Cmx/lfuL+zwRw= Subject key identifier: 17:8A:E3:68:14:C0:63:DF:73:2C:47:93:C6:24:36:FA:5A:DB:6B:98 Authority key identifier: 3C:52:F8:C1:7D:F4:6F:86:33:60:E0:32:FA:9D:31:68:9E:4A:F6:F1 Certificate issuer: /CN=3c52f8c17df46f863360e032fa9d31689e4af6f1 Certificate serial: 019C41D86B108FFCC533A71650FBD1145A45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft Manifest number: 13E5 Signing time: Mon 09 Feb 2026 10:00:28 +0000 Manifest this update: Mon 09 Feb 2026 10:00:28 +0000 Manifest next update: Tue 10 Feb 2026 10:00:28 +0000 Files and hashes: 1: PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl (hash: NASp9X48g48yifGhMuSGHi4ZWg1HqhLvys2owr9YDI8=) 2: Ydl5RfFIrbsmSH6-XTvntjcnl-A.roa (hash: lwEnqSA72LQH4xIm5xneqDzJT1+5eNfuOciZJI5TDZk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:6b:10:8f:fc:c5:33:a7:16:50:fb:d1:14:5a:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c52f8c17df46f863360e032fa9d31689e4af6f1 Validity Not Before: Feb 9 10:00:28 2026 GMT Not After : Feb 10 10:00:28 2026 GMT Subject: CN=178ae36814c063df732c4793c62436fa5adb6b98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:22:18:e3:e1:30:c7:16:f1:40:ea:c6:10:af: 7a:aa:4b:ba:68:ed:8a:25:1f:40:5f:1b:b2:df:8d: f2:bb:2f:ca:a1:85:ac:aa:58:31:e9:37:fc:dc:56: 58:87:cb:0b:5a:73:78:bc:63:68:77:1a:e0:41:e9: 48:86:75:3e:e0:87:25:29:68:df:62:b8:79:e8:65: 01:97:26:2c:9e:79:ef:3b:28:ba:82:0c:57:4d:58: 4b:6c:f0:7b:f2:3c:59:3e:20:8c:e1:70:a1:21:df: 0d:89:67:0b:b7:c5:7c:ca:c3:eb:0d:de:86:27:23: 3e:f5:54:20:e0:d7:76:1d:b0:3e:cd:f6:49:18:b6: a8:3b:1d:22:d6:dd:f5:31:77:33:89:a1:5f:86:13: 5a:c8:5a:7b:d7:0e:fe:f0:4e:9b:15:27:d0:08:8b: c8:2e:ff:93:84:d9:78:11:c6:a1:70:a4:ef:e9:f3: d7:34:6d:5c:0f:10:44:1a:99:0c:c0:3b:f2:18:6e: ff:2a:f4:38:20:b5:6b:86:34:f0:38:01:fc:28:be: f3:c3:56:e7:65:f5:67:c6:86:d8:b1:c6:35:a5:1d: 62:c7:b7:b7:70:a3:e8:6b:d2:b6:77:3d:e9:b4:3f: 34:5f:d8:fe:a9:23:09:3e:2d:73:3c:5c:07:a6:6e: 7e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:8A:E3:68:14:C0:63:DF:73:2C:47:93:C6:24:36:FA:5A:DB:6B:98 X509v3 Authority Key Identifier: keyid:3C:52:F8:C1:7D:F4:6F:86:33:60:E0:32:FA:9D:31:68:9E:4A:F6:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:0f:5f:6c:4f:0a:07:19:bc:a4:16:98:7c:43:f9:2f:15:0f: d0:cf:25:f9:ab:e6:87:32:40:9d:f9:6b:40:3c:f9:13:01:c4: 99:02:e7:f3:b8:eb:a2:86:cc:81:db:ed:9a:65:c3:2c:89:3e: 61:50:c3:cf:0d:8d:8b:50:6e:00:5b:fb:b7:c3:00:0b:09:81: cc:6d:e3:e2:ea:6c:e0:c9:7e:81:fe:94:f1:8b:25:68:78:22: 80:5a:16:83:87:ff:0e:5a:b7:99:58:01:20:45:28:ed:38:ab: 98:f0:cb:04:55:73:50:21:64:84:d6:38:9e:6d:9d:d1:b0:3f: a9:a8:a3:8c:3e:19:be:64:bc:68:08:35:c7:89:7c:13:87:51: a2:be:4d:08:8c:cc:a3:de:5d:96:55:60:84:99:fc:50:ef:68: f6:f7:fc:aa:24:5b:20:92:1b:5d:93:dc:cf:f1:1c:68:8e:fb: 45:5a:94:97:7b:07:8f:d0:c6:bc:dd:06:bd:80:84:8d:8f:c4: d2:59:c9:70:35:ea:9d:86:a4:de:2f:64:15:68:a2:af:2c:e2: e8:1c:98:20:b2:1d:60:be:45:40:1b:02:aa:33:50:92:70:f8: 28:4a:2e:92:19:0b:d1:16:21:09:73:46:a1:2a:10:cd:73:42: 89:34:15:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2GsQj/zFM6cWUPvRFFpFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjNTJmOGMxN2RmNDZmODYzMzYwZTAzMmZhOWQzMTY4OWU0 YWY2ZjEwHhcNMjYwMjA5MTAwMDI4WhcNMjYwMjEwMTAwMDI4WjAzMTEwLwYDVQQD EygxNzhhZTM2ODE0YzA2M2RmNzMyYzQ3OTNjNjI0MzZmYTVhZGI2Yjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSIY4+EwxxbxQOrGEK96qku6aO2K JR9AXxuy343yuy/KoYWsqlgx6Tf83FZYh8sLWnN4vGNodxrgQelIhnU+4IclKWjf Yrh56GUBlyYsnnnvOyi6ggxXTVhLbPB78jxZPiCM4XChId8NiWcLt8V8ysPrDd6G JyM+9VQg4Nd2HbA+zfZJGLaoOx0i1t31MXcziaFfhhNayFp71w7+8E6bFSfQCIvI Lv+ThNl4EcahcKTv6fPXNG1cDxBEGpkMwDvyGG7/KvQ4ILVrhjTwOAH8KL7zw1bn ZfVnxobYscY1pR1ix7e3cKPoa9K2dz3ptD80X9j+qSMJPi1zPFwHpm5+rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBeK42gUwGPfcyxHk8YkNvpa22uYMB8GA1UdIwQY MBaAFDxS+MF99G+GM2DgMvqdMWieSvbxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEZMNHdYMzBiNFl6WU9BeS1wMHhhSjVLOXZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS85MDEwMTItMGUyYy00MWJhLTg3MzQt YmYwNmQ3ODczZjAyLzEvUEZMNHdYMzBiNFl6WU9BeS1wMHhhSjVLOXZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS85MDEwMTItMGUyYy00MWJhLTg3MzQtYmYwNmQ3ODczZjAy LzEvUEZMNHdYMzBiNFl6WU9BeS1wMHhhSjVLOXZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlQ9fbE8K Bxm8pBaYfEP5LxUP0M8l+avmhzJAnflrQDz5EwHEmQLn87jroobMgdvtmmXDLIk+ YVDDzw2Ni1BuAFv7t8MACwmBzG3j4ups4Ml+gf6U8YslaHgigFoWg4f/Dlq3mVgB IEUo7TirmPDLBFVzUCFkhNY4nm2d0bA/qaijjD4ZvmS8aAg1x4l8E4dRor5NCIzM o95dllVghJn8UO9o9vf8qiRbIJIbXZPcz/EcaI77RVqUl3sHj9DGvN0GvYCEjY/E 0lnJcDXqnYak3i9kFWiiryzi6ByYILIdYL5FQBsCqjNQknD4KEoukhkL0RYhCXNG oSoQzXNCiTQVSQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:47:21 2026 by rpki-client