This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft File: PGvK_z6ArkGaFdG8s24xmN744ic.mft (raw, json) Hash identifier: C1STHfuyvFz603pgPiL3yyn8MPJ8EUTKIuRwplxw/5g= Subject key identifier: 86:07:B6:0E:59:15:A1:5E:7E:CD:77:FC:E7:D3:59:A2:AD:43:B3:C2 Authority key identifier: 3C:6B:CA:FF:3E:80:AE:41:9A:15:D1:BC:B3:6E:31:98:DE:F8:E2:27 Certificate issuer: /CN=3c6bcaff3e80ae419a15d1bcb36e3198def8e227 Certificate serial: 019C427D868904B923AA51FCCFB3CC2D3052 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft Manifest number: 08C6 Signing time: Mon 09 Feb 2026 13:00:48 +0000 Manifest this update: Mon 09 Feb 2026 13:00:48 +0000 Manifest next update: Tue 10 Feb 2026 13:00:48 +0000 Files and hashes: 1: K7W2HCvsA8JxFMmzeilzEcsyppo.roa (hash: jiMWX4J6RYOzWaNm/5z8OYJi7Equ31upjXJ+Jtp8KZY=) 2: PGvK_z6ArkGaFdG8s24xmN744ic.crl (hash: KCkJw4EGJeXFjtScjx2z7jNwBNEb75p1XgGvRAbE5wU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:86:89:04:b9:23:aa:51:fc:cf:b3:cc:2d:30:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c6bcaff3e80ae419a15d1bcb36e3198def8e227 Validity Not Before: Feb 9 13:00:48 2026 GMT Not After : Feb 10 13:00:48 2026 GMT Subject: CN=8607b60e5915a15e7ecd77fce7d359a2ad43b3c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:fa:c6:24:08:ff:0d:e3:f1:ff:d9:b5:11:0c: 7c:b8:c2:54:10:31:62:f1:cd:ea:19:e4:7a:c2:2b: 4d:c3:3d:2a:da:2c:3a:ac:9d:50:87:28:19:43:64: 0d:e5:c9:67:9b:ef:e7:86:e5:db:9c:3b:d7:e1:92: 36:09:74:97:e2:09:0e:b6:60:5a:65:89:bb:fd:96: 92:84:1e:2e:21:34:89:cd:ae:b8:cb:34:6e:fd:42: 1c:fd:b9:53:94:d1:e6:d6:62:69:43:d5:7a:ae:d2: 9c:9e:7c:2e:a0:90:9e:3c:27:1f:ca:5d:c1:b3:52: 55:05:d4:1e:9c:5e:e3:20:08:5a:84:16:ca:d5:b6: bf:3d:dc:20:31:6b:2a:9f:ca:24:f9:0e:32:f1:16: f5:2a:68:85:85:a8:31:a1:8a:58:82:2b:bb:b0:7b: db:cf:b8:51:fc:ba:a0:a4:ef:96:2a:30:de:28:fd: 75:74:ce:ad:81:cb:8d:40:1f:47:e5:6d:12:6a:d0: 94:50:a9:a8:6e:71:05:db:5f:f9:db:68:2d:3a:c7: 41:ba:56:5d:93:ab:21:c5:e2:12:df:c5:b8:a6:ce: 71:67:cd:96:56:2b:03:c6:e3:45:78:ed:0f:b8:39: 60:63:15:48:95:50:fe:72:03:25:c6:c8:1b:f9:a5: 6d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:07:B6:0E:59:15:A1:5E:7E:CD:77:FC:E7:D3:59:A2:AD:43:B3:C2 X509v3 Authority Key Identifier: keyid:3C:6B:CA:FF:3E:80:AE:41:9A:15:D1:BC:B3:6E:31:98:DE:F8:E2:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:97:d3:a7:41:a5:f2:35:a9:9a:92:7f:b3:2a:b4:82:df:d5: 88:e5:28:79:63:cf:a6:df:37:ea:2c:99:99:f6:28:a7:dc:4e: 93:77:d6:fc:56:db:14:64:1b:81:fc:d1:20:7e:26:29:1b:fc: ed:ac:34:60:18:ff:d5:44:23:bd:28:95:c3:dc:17:06:a3:bf: 81:a1:0e:19:b7:f0:18:3c:80:8d:48:2a:b6:67:b8:52:9b:63: 80:d5:da:7f:5d:6f:b2:2a:26:6b:96:77:91:0d:bf:80:5d:07: c8:59:8b:b4:65:52:98:78:ca:af:51:43:9a:a2:d8:c3:e3:71: 1d:d5:3f:8e:39:cb:d9:8b:61:f9:37:ed:83:82:85:ea:8d:d9: 69:73:4a:29:ef:f2:6d:5b:d1:b3:85:23:24:bb:ee:7b:0d:4e: 7d:0a:98:1f:1b:be:79:6a:a8:55:08:a9:18:5c:c7:03:00:a3: 87:3c:59:31:4d:f6:f7:41:c3:d1:58:89:65:90:73:9e:7e:8a: e6:a1:02:b5:7f:bc:51:13:a9:3f:a5:5b:7a:e5:58:a3:34:58: 4f:cc:d2:eb:d3:25:86:54:df:b3:2d:0e:01:27:48:83:04:5d: 49:8e:48:c6:d2:1f:52:f3:5e:e2:c9:42:5b:cc:b3:f0:ca:b8: 0e:d3:23:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfYaJBLkjqlH8z7PMLTBSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjNmJjYWZmM2U4MGFlNDE5YTE1ZDFiY2IzNmUzMTk4ZGVm OGUyMjcwHhcNMjYwMjA5MTMwMDQ4WhcNMjYwMjEwMTMwMDQ4WjAzMTEwLwYDVQQD Eyg4NjA3YjYwZTU5MTVhMTVlN2VjZDc3ZmNlN2QzNTlhMmFkNDNiM2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PrGJAj/DePx/9m1EQx8uMJUEDFi 8c3qGeR6witNwz0q2iw6rJ1QhygZQ2QN5clnm+/nhuXbnDvX4ZI2CXSX4gkOtmBa ZYm7/ZaShB4uITSJza64yzRu/UIc/blTlNHm1mJpQ9V6rtKcnnwuoJCePCcfyl3B s1JVBdQenF7jIAhahBbK1ba/PdwgMWsqn8ok+Q4y8Rb1KmiFhagxoYpYgiu7sHvb z7hR/LqgpO+WKjDeKP11dM6tgcuNQB9H5W0SatCUUKmobnEF21/522gtOsdBulZd k6shxeIS38W4ps5xZ82WVisDxuNFeO0PuDlgYxVIlVD+cgMlxsgb+aVtIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIYHtg5ZFaFefs13/OfTWaKtQ7PCMB8GA1UdIwQY MBaAFDxryv8+gK5BmhXRvLNuMZje+OInMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEd2S196NkFya0dhRmRHOHMyNHhtTjc0NGljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9mMzI4ZmYtOTI3Zi00MTE2LThlMzMt NDA0M2IyYzc3YmJmLzEvUEd2S196NkFya0dhRmRHOHMyNHhtTjc0NGljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9mMzI4ZmYtOTI3Zi00MTE2LThlMzMtNDA0M2IyYzc3YmJm LzEvUEd2S196NkFya0dhRmRHOHMyNHhtTjc0NGljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArpfTp0Gl 8jWpmpJ/syq0gt/ViOUoeWPPpt836iyZmfYop9xOk3fW/FbbFGQbgfzRIH4mKRv8 7aw0YBj/1UQjvSiVw9wXBqO/gaEOGbfwGDyAjUgqtme4UptjgNXaf11vsioma5Z3 kQ2/gF0HyFmLtGVSmHjKr1FDmqLYw+NxHdU/jjnL2Yth+Tftg4KF6o3ZaXNKKe/y bVvRs4UjJLvuew1OfQqYHxu+eWqoVQipGFzHAwCjhzxZMU3290HD0ViJZZBznn6K 5qECtX+8UROpP6VbeuVYozRYT8zS69MlhlTfsy0OASdIgwRdSY5IxtIfUvNe4slC W8yz8Mq4DtMjpA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:07 2026 by rpki-client