This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft File: PZQks8jnL3RqWesZlFWqNkajpFc.mft (raw, json) Hash identifier: d6apVRStN7ZQh5BwwrRMOJzkphhWYEIDqCB25fRX8IA= Subject key identifier: FE:1A:14:47:1F:A6:1E:A9:87:8F:5E:E0:0B:38:C7:07:70:9E:36:F4 Authority key identifier: 3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57 Certificate issuer: /CN=3d9424b3c8e72f746a59eb199455aa3646a3a457 Certificate serial: 019C40FD801295B0917705E9058531425D45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 06:01:20 +0000 Manifest this update: Mon 09 Feb 2026 06:01:20 +0000 Manifest next update: Tue 10 Feb 2026 06:01:20 +0000 Files and hashes: 1: PZQks8jnL3RqWesZlFWqNkajpFc.crl (hash: FHdDfDdioZDhCaOXT5xEb2CxC9pHZR6AHePwiE1bp2I=) 2: S31jWM3wEsReURsulHI7U8Kz478.roa (hash: /Sp5r8Qxi7xeH5fyeueoA88dFZr2CShlD/FHWPU4Yh8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:40:fd:80:12:95:b0:91:77:05:e9:05:85:31:42:5d:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d9424b3c8e72f746a59eb199455aa3646a3a457 Validity Not Before: Feb 9 06:01:20 2026 GMT Not After : Feb 10 06:01:20 2026 GMT Subject: CN=fe1a14471fa61ea9878f5ee00b38c707709e36f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5a:0e:21:ff:32:4a:2e:b5:1d:e2:46:3a:27: 26:bd:98:a7:c1:21:b5:a5:05:a3:ff:d3:9b:af:dd: 50:90:51:b2:ba:92:98:4e:e1:ec:5b:f6:ba:16:66: cb:c5:44:76:dc:e0:19:3f:7f:69:d4:31:a0:97:55: ac:4b:a2:d6:f5:f5:1e:28:e3:ba:cc:53:cb:72:8c: bc:f3:81:1f:f9:01:72:7b:bf:f5:52:df:e9:e1:46: ec:3d:1d:79:82:44:5c:a1:e2:6d:39:15:61:71:5d: 78:35:68:f5:10:c4:1c:36:e5:ee:0c:4b:c3:04:c3: 0a:fe:c5:94:64:a5:86:6a:cb:85:9d:b8:f9:6b:92: b4:d8:eb:51:ed:26:b5:c8:18:e0:95:27:d0:ad:17: f9:19:af:d5:a4:18:12:9f:ef:8e:31:9c:fa:76:16: c7:cf:dd:c7:f6:08:45:14:03:0c:aa:0e:31:10:b4: 87:dc:6a:1a:37:9c:2f:39:50:b5:e2:d4:e0:7d:92: e1:8b:45:62:ab:e9:3b:d2:d8:84:25:77:d4:d8:3d: de:9f:07:aa:75:86:b5:ef:27:c0:a1:2a:d9:8f:fa: ed:2d:2a:b3:52:82:d2:96:de:84:af:91:e9:b6:9e: 62:7e:a1:36:4d:ff:3b:ad:02:f3:9f:5d:44:3f:6f: 83:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:1A:14:47:1F:A6:1E:A9:87:8F:5E:E0:0B:38:C7:07:70:9E:36:F4 X509v3 Authority Key Identifier: keyid:3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:b9:9f:59:b8:19:3f:4e:95:9c:b5:40:ec:cd:d3:ce:70:2e: 91:59:47:50:79:88:df:bd:e7:16:2f:31:fd:6a:d1:6d:e9:75: a8:b0:6f:d3:8f:ca:f2:8c:69:31:4a:b0:04:bd:27:68:88:f7: 40:78:7b:ef:b3:c6:6b:99:5e:80:e7:0e:c0:f9:6b:77:61:8a: bc:d2:bb:af:5a:d4:e7:49:46:a3:e1:d2:4e:24:e4:75:17:29: cb:14:18:66:ea:c8:53:bf:ed:a7:9a:f6:08:3e:36:29:10:64: 66:23:11:a0:24:f3:a8:4e:9d:1a:d1:da:ba:16:9b:29:3b:f8: f9:9f:4f:15:fe:3e:43:3e:db:3f:76:71:5f:bc:5d:c3:9a:7c: 0d:bd:51:1d:5a:a0:0a:1f:8b:25:60:09:63:2a:05:dd:67:e6: 08:0a:e1:3d:59:53:46:ba:97:68:4c:55:6b:1e:d2:ca:3f:b5: c8:4f:74:a9:9b:73:36:37:06:a4:41:94:ff:f8:09:63:7c:6b: 6e:5b:57:8d:95:c8:a2:a5:1c:ac:e8:24:cc:f0:83:d9:e1:a3: d5:a9:b4:61:a3:e0:d6:28:fb:04:4b:7e:30:f0:87:2e:80:a7: c6:e6:61:e0:59:1c:85:56:cc:14:20:ef:5a:1d:87:be:ed:3b: ce:37:50:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxA/YASlbCRdwXpBYUxQl1FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOTQyNGIzYzhlNzJmNzQ2YTU5ZWIxOTk0NTVhYTM2NDZh M2E0NTcwHhcNMjYwMjA5MDYwMTIwWhcNMjYwMjEwMDYwMTIwWjAzMTEwLwYDVQQD EyhmZTFhMTQ0NzFmYTYxZWE5ODc4ZjVlZTAwYjM4YzcwNzcwOWUzNmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0loOIf8ySi61HeJGOicmvZinwSG1 pQWj/9Obr91QkFGyupKYTuHsW/a6FmbLxUR23OAZP39p1DGgl1WsS6LW9fUeKOO6 zFPLcoy884Ef+QFye7/1Ut/p4UbsPR15gkRcoeJtORVhcV14NWj1EMQcNuXuDEvD BMMK/sWUZKWGasuFnbj5a5K02OtR7Sa1yBjglSfQrRf5Ga/VpBgSn++OMZz6dhbH z93H9ghFFAMMqg4xELSH3GoaN5wvOVC14tTgfZLhi0Viq+k70tiEJXfU2D3enweq dYa17yfAoSrZj/rtLSqzUoLSlt6Er5Hptp5ifqE2Tf87rQLzn11EP2+DHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP4aFEcfph6ph49e4As4xwdwnjb0MB8GA1UdIwQY MBaAFD2UJLPI5y90alnrGZRVqjZGo6RXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFpRa3M4am5MM1JxV2VzWmxGV3FOa2FqcEZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9kZjI5NDctY2QwNS00NDA1LTk0OWEt NmE4MDMzZGNiZTFjLzEvUFpRa3M4am5MM1JxV2VzWmxGV3FOa2FqcEZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9kZjI5NDctY2QwNS00NDA1LTk0OWEtNmE4MDMzZGNiZTFj LzEvUFpRa3M4am5MM1JxV2VzWmxGV3FOa2FqcEZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZrmfWbgZ P06VnLVA7M3TznAukVlHUHmI373nFi8x/WrRbel1qLBv04/K8oxpMUqwBL0naIj3 QHh777PGa5legOcOwPlrd2GKvNK7r1rU50lGo+HSTiTkdRcpyxQYZurIU7/tp5r2 CD42KRBkZiMRoCTzqE6dGtHauhabKTv4+Z9PFf4+Qz7bP3ZxX7xdw5p8Db1RHVqg Ch+LJWAJYyoF3WfmCArhPVlTRrqXaExVax7Syj+1yE90qZtzNjcGpEGU//gJY3xr bltXjZXIoqUcrOgkzPCD2eGj1am0YaPg1ij7BEt+MPCHLoCnxuZh4FkchVbMFCDv Wh2Hvu07zjdQ7Q== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:45 2026 by rpki-client