This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft File: Pbiird2wAoUIVJlqlLcrh_Snsw8.mft (raw, json) Hash identifier: +1r7PXxMPMd3Fs8+kK/EybykAMQy2cV8kxe19UpZ1Gs= Subject key identifier: 30:44:26:91:8D:9B:1C:21:71:88:B3:99:FC:5C:C1:44:4B:86:F7:D8 Authority key identifier: 3D:B8:A2:AD:DD:B0:02:85:08:54:99:6A:94:B7:2B:87:F4:A7:B3:0F Certificate issuer: /CN=3db8a2adddb002850854996a94b72b87f4a7b30f Certificate serial: 019C438FD169155AB4F3391D13AA7A1DC7A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pbiird2wAoUIVJlqlLcrh_Snsw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft Manifest number: 10BE Signing time: Mon 09 Feb 2026 18:00:24 +0000 Manifest this update: Mon 09 Feb 2026 18:00:24 +0000 Manifest next update: Tue 10 Feb 2026 18:00:24 +0000 Files and hashes: 1: Pbiird2wAoUIVJlqlLcrh_Snsw8.crl (hash: bM3IT5V7vUrsOXb55v2WXv4pz4HUVtR6qRQ8UcGO8IM=) 2: d1oY-rePzrEhSHN4TgD8ubZR5-k.roa (hash: jS9ynsZdE/EEvcdn5+RIkD8jADjtptlW575sCzvdXBM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.crl rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft rsync://rpki.ripe.net/repository/DEFAULT/Pbiird2wAoUIVJlqlLcrh_Snsw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:d1:69:15:5a:b4:f3:39:1d:13:aa:7a:1d:c7:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3db8a2adddb002850854996a94b72b87f4a7b30f Validity Not Before: Feb 9 18:00:24 2026 GMT Not After : Feb 10 18:00:24 2026 GMT Subject: CN=304426918d9b1c217188b399fc5cc1444b86f7d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:81:60:f3:d7:a3:b0:36:92:18:16:c0:a2:30: e3:4f:c1:3a:cb:db:6c:1a:39:18:d4:2e:83:5c:2e: 89:3d:d0:e0:8e:10:28:c7:cd:97:36:48:21:e7:f6: e0:35:41:a4:49:b8:49:15:be:47:c9:ed:e8:d4:ac: 3e:7f:25:91:d6:fc:c9:35:55:ca:69:4f:1c:9e:49: 39:e5:da:98:f5:14:2f:35:62:2c:75:ad:83:0f:b5: 51:77:86:4b:00:23:31:5d:98:a1:34:b2:3b:ab:10: 26:3b:ed:35:fa:d8:aa:bc:32:cc:40:04:f9:a5:b7: 79:af:a8:dc:a1:4d:5d:4a:25:a2:44:42:5a:79:29: 06:45:dd:4d:2a:0c:06:50:ca:f8:64:a5:47:0f:61: de:1a:a7:0b:ea:6f:a4:30:b2:a1:87:a0:27:39:3d: f6:08:fb:92:14:69:69:5d:3e:2a:65:b6:4f:e6:33: 1f:b6:65:0f:1d:e8:0d:c2:85:1c:75:af:18:ea:93: d2:74:90:65:37:de:88:d6:32:e6:5b:50:e5:f5:57: df:2a:c2:d1:64:dd:95:2b:57:32:3f:bb:59:dc:c2: 18:a0:86:ed:8a:50:ac:d0:ad:de:f5:75:cb:99:7b: bc:79:4c:19:06:6e:80:10:bc:a6:e7:97:75:8b:74: d6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:44:26:91:8D:9B:1C:21:71:88:B3:99:FC:5C:C1:44:4B:86:F7:D8 X509v3 Authority Key Identifier: keyid:3D:B8:A2:AD:DD:B0:02:85:08:54:99:6A:94:B7:2B:87:F4:A7:B3:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pbiird2wAoUIVJlqlLcrh_Snsw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:0b:ea:19:d6:90:df:9d:c6:c9:73:23:30:e5:82:ad:a1:bb: 23:72:49:77:2d:ec:9f:9c:4a:bf:f9:5f:2b:13:08:11:b9:6d: be:26:f4:e4:08:6e:c0:fa:3d:77:f3:82:27:34:e7:f4:3a:27: e8:92:e2:bd:c1:7e:56:06:bb:01:5a:33:a5:83:71:27:c3:cd: b1:0e:ea:38:15:0b:b8:6e:eb:66:ed:a5:59:2c:fe:a8:48:30: 5d:cd:4f:97:b4:41:29:34:62:bb:a7:52:3d:62:3e:14:16:fb: ca:6a:bf:2d:3f:2f:b6:03:69:63:1c:1b:61:cb:8f:57:94:f4: ef:f6:2d:f1:5b:4c:61:f3:58:33:6a:08:21:a0:b5:dd:fd:67: d1:82:df:b7:d0:ce:5d:0f:b0:93:68:4b:bd:58:27:a7:38:af: 0f:11:3d:3e:5a:90:82:b4:6f:dd:71:ee:71:72:82:60:c8:bd: 8f:21:33:e2:8b:f7:38:ec:d7:fb:d4:c3:62:11:22:d7:d9:e6: 06:e6:e8:7d:c4:e0:10:d5:43:21:b2:0d:2d:46:b1:e4:9a:27: 4a:cb:99:f7:47:ec:a1:15:b3:53:71:80:ee:db:dd:c5:fa:02: d9:b7:14:39:c6:97:30:fa:c0:16:f0:cc:84:52:e9:bd:71:52: 01:17:a1:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj9FpFVq08zkdE6p6HceiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkYjhhMmFkZGRiMDAyODUwODU0OTk2YTk0YjcyYjg3ZjRh N2IzMGYwHhcNMjYwMjA5MTgwMDI0WhcNMjYwMjEwMTgwMDI0WjAzMTEwLwYDVQQD EygzMDQ0MjY5MThkOWIxYzIxNzE4OGIzOTlmYzVjYzE0NDRiODZmN2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYFg89ejsDaSGBbAojDjT8E6y9ts GjkY1C6DXC6JPdDgjhAox82XNkgh5/bgNUGkSbhJFb5Hye3o1Kw+fyWR1vzJNVXK aU8cnkk55dqY9RQvNWIsda2DD7VRd4ZLACMxXZihNLI7qxAmO+01+tiqvDLMQAT5 pbd5r6jcoU1dSiWiREJaeSkGRd1NKgwGUMr4ZKVHD2HeGqcL6m+kMLKhh6AnOT32 CPuSFGlpXT4qZbZP5jMftmUPHegNwoUcda8Y6pPSdJBlN96I1jLmW1Dl9VffKsLR ZN2VK1cyP7tZ3MIYoIbtilCs0K3e9XXLmXu8eUwZBm6AELym55d1i3TWSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDBEJpGNmxwhcYizmfxcwURLhvfYMB8GA1UdIwQY MBaAFD24oq3dsAKFCFSZapS3K4f0p7MPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGJpaXJkMndBb1VJVkpscWxMY3JoX1Nuc3c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yZDQzYzItM2IyZS00ZjJlLWE2YWQt YTBhNzJhNzMzYzAyLzEvUGJpaXJkMndBb1VJVkpscWxMY3JoX1Nuc3c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8yZDQzYzItM2IyZS00ZjJlLWE2YWQtYTBhNzJhNzMzYzAy LzEvUGJpaXJkMndBb1VJVkpscWxMY3JoX1Nuc3c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtgvqGdaQ 353GyXMjMOWCraG7I3JJdy3sn5xKv/lfKxMIEbltvib05AhuwPo9d/OCJzTn9Don 6JLivcF+Vga7AVozpYNxJ8PNsQ7qOBULuG7rZu2lWSz+qEgwXc1Pl7RBKTRiu6dS PWI+FBb7ymq/LT8vtgNpYxwbYcuPV5T07/Yt8VtMYfNYM2oIIaC13f1n0YLft9DO XQ+wk2hLvVgnpzivDxE9PlqQgrRv3XHucXKCYMi9jyEz4ov3OOzX+9TDYhEi19nm BubofcTgENVDIbINLUax5JonSsuZ90fsoRWzU3GA7tvdxfoC2bcUOcaXMPrAFvDM hFLpvXFSARehvA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:17:43 2026 by rpki-client