This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft File: Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft (raw, json) Hash identifier: cVPVDEGGl3qA6JymTrDj3abSgPUPmQYuNNbo6IZyHW4= Subject key identifier: 76:62:DD:04:09:6C:E4:2A:AF:63:9B:FF:D2:52:6A:6F:D7:2D:8B:E6 Authority key identifier: 3E:3D:1C:21:A7:7A:0B:0F:7F:0C:E6:63:3E:13:E0:C5:7B:ED:B0:8B Certificate issuer: /CN=3e3d1c21a77a0b0f7f0ce6633e13e0c57bedb08b Certificate serial: 019C438FF564BB83B2B6C814541AB528DA23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft Manifest number: 1548 Signing time: Mon 09 Feb 2026 18:00:33 +0000 Manifest this update: Mon 09 Feb 2026 18:00:33 +0000 Manifest next update: Tue 10 Feb 2026 18:00:33 +0000 Files and hashes: 1: Pj0cIad6Cw9_DOZjPhPgxXvtsIs.crl (hash: gnd1uf+mLMPcetgFAvAwLkyR410NlSfgSdqVbV50Dl8=) 2: yzTR3xr8FfAmGlnLHCuEER5nDus.roa (hash: lCWnS4QZcDJFta+7yyGjqVSAbP1bGrYcZOR4x1RNMos=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft rsync://rpki.ripe.net/repository/DEFAULT/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:f5:64:bb:83:b2:b6:c8:14:54:1a:b5:28:da:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e3d1c21a77a0b0f7f0ce6633e13e0c57bedb08b Validity Not Before: Feb 9 18:00:33 2026 GMT Not After : Feb 10 18:00:33 2026 GMT Subject: CN=7662dd04096ce42aaf639bffd2526a6fd72d8be6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:dd:8c:5a:ec:96:a4:7b:3b:f3:ea:60:ed:4c: 9c:72:cd:8d:87:c8:6a:1a:d8:ec:8a:b0:47:e7:95: bb:cc:d3:41:0c:53:68:61:04:da:ed:0f:ae:0e:4a: 8f:b8:9a:1d:af:e6:2e:43:d4:31:c6:72:0a:41:2f: a8:ec:2a:c7:cb:38:6a:56:33:20:2c:52:74:19:00: 1b:66:40:fa:bb:34:48:dd:49:e6:01:77:b8:f4:c2: 8b:1b:b2:e8:a1:50:18:f7:ae:b4:c5:72:59:70:b6: 47:d8:cd:25:5e:21:59:86:b5:60:f5:59:c5:29:55: 32:0c:aa:92:c7:d4:d8:03:71:6c:fe:47:b4:b9:5b: da:bd:9e:6d:3e:d0:cb:ff:40:5e:5a:62:56:d6:c0: 1d:af:b8:c9:01:32:c5:b5:1e:19:e1:cb:2a:61:d5: c3:43:6f:fe:eb:0c:7f:f7:f2:8e:59:61:5e:46:66: c0:63:f0:d7:19:7d:c8:a0:4d:5a:ac:f1:fb:92:91: 60:48:d3:e9:04:c1:b5:ea:c6:46:d4:b7:f4:d2:06: 97:a8:59:b9:5e:99:cc:a7:04:f7:3d:29:4d:fb:11: b4:f1:3b:46:07:f9:b7:8a:f6:82:70:76:ef:8c:2a: 6b:98:b7:bd:23:0c:49:44:fb:36:26:7f:c7:00:1c: f1:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:62:DD:04:09:6C:E4:2A:AF:63:9B:FF:D2:52:6A:6F:D7:2D:8B:E6 X509v3 Authority Key Identifier: keyid:3E:3D:1C:21:A7:7A:0B:0F:7F:0C:E6:63:3E:13:E0:C5:7B:ED:B0:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:96:b7:c8:05:a9:3f:a1:41:fe:4c:a8:4f:ca:26:48:89:81: 96:ee:41:eb:06:3e:64:0f:fc:47:8e:25:30:d8:c8:a4:68:10: 08:e1:6f:e6:d7:bb:13:a3:fe:28:df:f0:1b:6c:de:9e:08:e8: ae:ab:fc:1e:72:74:44:90:c7:28:3f:b8:4d:cc:56:fc:a6:d7: a1:88:5c:34:13:94:63:fe:b8:9d:0d:28:8d:4f:dd:2b:fc:69: 12:6c:8d:e3:35:fd:cf:9a:2d:67:05:32:2d:08:61:36:d3:65: 37:42:f7:76:46:b1:41:67:7c:06:5b:c9:12:2e:fb:7f:ea:1c: 14:69:9e:21:38:9e:1f:d1:9b:0b:ab:24:8d:9d:ef:52:85:96: 49:36:cd:d0:1b:19:53:52:92:06:3d:9f:a1:3a:fe:01:20:1e: fe:08:9a:13:9d:c3:f8:7d:65:26:3d:75:d0:a1:94:8b:30:f4: ac:fe:52:ba:d2:68:59:9c:c5:e0:87:e0:0b:74:f1:f2:f2:55: 34:60:6a:dc:a4:4d:27:67:a1:6b:f3:3c:3a:cf:48:eb:63:1a: 80:cb:0d:24:9c:42:18:78:04:27:8d:8c:bd:cc:c8:d6:5a:ea: 23:4f:05:cd:a0:3b:22:a9:36:60:88:d0:66:b1:7b:fb:92:14: 9e:2a:a7:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj/Vku4OytsgUVBq1KNojMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlM2QxYzIxYTc3YTBiMGY3ZjBjZTY2MzNlMTNlMGM1N2Jl ZGIwOGIwHhcNMjYwMjA5MTgwMDMzWhcNMjYwMjEwMTgwMDMzWjAzMTEwLwYDVQQD Eyg3NjYyZGQwNDA5NmNlNDJhYWY2MzliZmZkMjUyNmE2ZmQ3MmQ4YmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxd2MWuyWpHs78+pg7Uyccs2Nh8hq GtjsirBH55W7zNNBDFNoYQTa7Q+uDkqPuJodr+YuQ9QxxnIKQS+o7CrHyzhqVjMg LFJ0GQAbZkD6uzRI3UnmAXe49MKLG7LooVAY9660xXJZcLZH2M0lXiFZhrVg9VnF KVUyDKqSx9TYA3Fs/ke0uVvavZ5tPtDL/0BeWmJW1sAdr7jJATLFtR4Z4csqYdXD Q2/+6wx/9/KOWWFeRmbAY/DXGX3IoE1arPH7kpFgSNPpBMG16sZG1Lf00gaXqFm5 XpnMpwT3PSlN+xG08TtGB/m3ivaCcHbvjCprmLe9IwxJRPs2Jn/HABzxewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHZi3QQJbOQqr2Ob/9JSam/XLYvmMB8GA1UdIwQY MBaAFD49HCGnegsPfwzmYz4T4MV77bCLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGowY0lhZDZDdzlfRE9aalBoUGd4WHZ0c0lzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8wZTllMDAtNDZlNi00ODYzLTkzMjAt MDk4ZjI1OThlNWUzLzEvUGowY0lhZDZDdzlfRE9aalBoUGd4WHZ0c0lzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8wZTllMDAtNDZlNi00ODYzLTkzMjAtMDk4ZjI1OThlNWUz LzEvUGowY0lhZDZDdzlfRE9aalBoUGd4WHZ0c0lzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc5a3yAWp P6FB/kyoT8omSImBlu5B6wY+ZA/8R44lMNjIpGgQCOFv5te7E6P+KN/wG2zengjo rqv8HnJ0RJDHKD+4TcxW/KbXoYhcNBOUY/64nQ0ojU/dK/xpEmyN4zX9z5otZwUy LQhhNtNlN0L3dkaxQWd8BlvJEi77f+ocFGmeITieH9GbC6skjZ3vUoWWSTbN0BsZ U1KSBj2foTr+ASAe/giaE53D+H1lJj110KGUizD0rP5SutJoWZzF4IfgC3Tx8vJV NGBq3KRNJ2eha/M8Os9I62MagMsNJJxCGHgEJ42MvczI1lrqI08FzaA7Iqk2YIjQ ZrF7+5IUniqn2w== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:35 2026 by rpki-client