This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft File: plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft (raw, json) Hash identifier: nd3NbKX+GYTNpr5MXF/PBpPikLDK0FJqxHi7U30haDI= Subject key identifier: 4E:EE:22:77:24:A0:D8:16:60:DD:10:A6:C6:42:4B:86:58:3B:AF:BF Authority key identifier: A6:56:83:04:99:37:86:98:E3:E6:E6:59:79:93:CD:3B:00:E1:DC:CC Certificate issuer: /CN=a656830499378698e3e6e6597993cd3b00e1dccc Certificate serial: 019C432254EEA004D66243B9B9C9B34B17E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/plaDBJk3hpjj5uZZeZPNOwDh3Mw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft Manifest number: 0CE7 Signing time: Mon 09 Feb 2026 16:00:49 +0000 Manifest this update: Mon 09 Feb 2026 16:00:49 +0000 Manifest next update: Tue 10 Feb 2026 16:00:49 +0000 Files and hashes: 1: plaDBJk3hpjj5uZZeZPNOwDh3Mw.crl (hash: FO+MYwQ6A3Ysnwvjx/gRCF8rZvO3UUqA6W08VcRND0s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft rsync://rpki.ripe.net/repository/DEFAULT/plaDBJk3hpjj5uZZeZPNOwDh3Mw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:54:ee:a0:04:d6:62:43:b9:b9:c9:b3:4b:17:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a656830499378698e3e6e6597993cd3b00e1dccc Validity Not Before: Feb 9 16:00:49 2026 GMT Not After : Feb 10 16:00:49 2026 GMT Subject: CN=4eee227724a0d81660dd10a6c6424b86583bafbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ba:36:d2:c7:3c:bb:13:57:3d:2d:53:cd:99: ec:74:90:d0:95:ad:4e:64:70:d8:bd:91:b4:c4:cc: bd:9c:fe:d2:62:e7:89:70:b0:b4:b6:0a:8b:f2:80: c1:cb:8e:43:94:4e:fc:b5:51:c2:bd:0d:1e:0f:ec: 90:18:f7:7b:ac:20:39:6b:c9:27:ae:c6:e7:23:73: b0:a0:c4:39:e9:1f:75:1b:fb:4f:c1:1f:47:8c:10: c7:8c:6a:ba:df:cf:a2:ee:95:77:1b:e4:67:18:ae: 4a:95:33:e4:ed:27:7f:73:1c:31:8e:81:45:09:15: 1c:61:72:76:a5:ca:dc:60:c6:c3:eb:99:23:a6:9a: f2:f6:8f:c7:6d:ac:c6:85:b7:4d:9b:40:b8:11:1e: 9b:63:9c:b9:93:f1:0c:78:a6:39:e9:b8:59:d6:2f: 50:63:67:56:05:92:a2:5e:67:33:d8:78:d2:39:46: b0:07:80:71:b6:98:4a:33:cc:7a:00:8e:a0:87:b6: a0:0e:5b:9d:59:76:f4:ee:91:5a:ec:05:b5:ba:3a: ed:8c:df:51:f8:9c:48:51:7c:22:82:23:c7:47:9d: b7:41:f7:d5:a7:41:ee:76:b5:c4:8a:6d:ed:d0:0f: 4d:59:32:a0:87:06:79:b0:ff:72:fb:37:04:1f:6b: 6a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:EE:22:77:24:A0:D8:16:60:DD:10:A6:C6:42:4B:86:58:3B:AF:BF X509v3 Authority Key Identifier: keyid:A6:56:83:04:99:37:86:98:E3:E6:E6:59:79:93:CD:3B:00:E1:DC:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plaDBJk3hpjj5uZZeZPNOwDh3Mw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:14:3c:cc:04:ec:fd:64:8e:1d:26:cd:62:e5:5c:44:cd:d9: 64:d1:fa:81:55:c7:89:7d:be:1a:06:be:b8:82:c5:64:0d:d6: 35:31:66:44:fc:c0:a2:ca:31:0c:b3:49:a3:c7:97:f3:53:99: 20:35:21:f4:4a:bd:32:c6:50:82:27:99:34:78:13:62:53:bb: 0d:49:84:81:29:f2:6e:6b:57:ba:76:11:3e:25:2d:4e:1e:82: 36:4a:53:c4:57:b1:2c:e1:43:73:d1:2f:a0:7e:1b:0a:b3:c6: 3f:aa:41:91:57:25:28:98:62:cd:f9:66:5b:d7:50:70:c2:d3: 70:7e:0d:2b:ec:f1:59:94:42:38:56:f8:d1:5b:92:76:53:20: 1f:b8:7d:ad:d0:72:1c:17:a3:bd:1f:56:39:eb:2a:b5:98:16: 90:11:56:13:d7:10:be:34:e0:53:4b:13:a5:22:44:7c:d9:12: 29:6a:a7:4c:a7:25:c6:18:66:cf:3c:d3:3f:f0:76:bf:3d:66: c4:19:a3:8b:d1:f3:01:21:92:c2:70:3c:99:b8:97:51:c3:3f: ca:34:c5:79:94:38:5c:69:5d:68:1e:29:9c:0b:10:28:42:05: 62:72:f0:12:83:f3:54:c5:9e:4d:a9:c3:c5:dc:db:6a:0d:3c: c2:f6:3a:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIlTuoATWYkO5ucmzSxfiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2NTY4MzA0OTkzNzg2OThlM2U2ZTY1OTc5OTNjZDNiMDBl MWRjY2MwHhcNMjYwMjA5MTYwMDQ5WhcNMjYwMjEwMTYwMDQ5WjAzMTEwLwYDVQQD Eyg0ZWVlMjI3NzI0YTBkODE2NjBkZDEwYTZjNjQyNGI4NjU4M2JhZmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLo20sc8uxNXPS1TzZnsdJDQla1O ZHDYvZG0xMy9nP7SYueJcLC0tgqL8oDBy45DlE78tVHCvQ0eD+yQGPd7rCA5a8kn rsbnI3OwoMQ56R91G/tPwR9HjBDHjGq638+i7pV3G+RnGK5KlTPk7Sd/cxwxjoFF CRUcYXJ2pcrcYMbD65kjppry9o/HbazGhbdNm0C4ER6bY5y5k/EMeKY56bhZ1i9Q Y2dWBZKiXmcz2HjSOUawB4BxtphKM8x6AI6gh7agDludWXb07pFa7AW1ujrtjN9R +JxIUXwigiPHR523QffVp0HudrXEim3t0A9NWTKghwZ5sP9y+zcEH2tqIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE7uInckoNgWYN0QpsZCS4ZYO6+/MB8GA1UdIwQY MBaAFKZWgwSZN4aY4+bmWXmTzTsA4dzMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGxhREJKazNocGpqNXVaWmVaUE5Pd0RoM013LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8zOTAwYzYtNTYyYi00N2JjLWEzZWUt NjU2NDcwMzQzNGUyLzEvcGxhREJKazNocGpqNXVaWmVaUE5Pd0RoM013Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi8zOTAwYzYtNTYyYi00N2JjLWEzZWUtNjU2NDcwMzQzNGUy LzEvcGxhREJKazNocGpqNXVaWmVaUE5Pd0RoM013LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYRQ8zATs /WSOHSbNYuVcRM3ZZNH6gVXHiX2+Gga+uILFZA3WNTFmRPzAosoxDLNJo8eX81OZ IDUh9Eq9MsZQgieZNHgTYlO7DUmEgSnybmtXunYRPiUtTh6CNkpTxFexLOFDc9Ev oH4bCrPGP6pBkVclKJhizflmW9dQcMLTcH4NK+zxWZRCOFb40VuSdlMgH7h9rdBy HBejvR9WOesqtZgWkBFWE9cQvjTgU0sTpSJEfNkSKWqnTKclxhhmzzzTP/B2vz1m xBmji9HzASGSwnA8mbiXUcM/yjTFeZQ4XGldaB4pnAsQKEIFYnLwEoPzVMWeTanD xdzbag08wvY6og== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:22 2026 by rpki-client