This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft File: PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft (raw, json) Hash identifier: b9UjWDvom3AhdfTe2logH5XGZMMn2sW4KQV/3OtREWk= Subject key identifier: C5:6E:0C:A7:45:F4:8F:31:D6:09:C9:EE:9D:26:84:9C:D6:09:14:1A Authority key identifier: 3C:02:09:4C:22:10:D8:B2:17:15:F9:8D:F8:59:8B:35:32:08:D1:0C Certificate issuer: /CN=3c02094c2210d8b21715f98df8598b353208d10c Certificate serial: 019C42B44457432FA916B02699AA74ECBCBF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft Manifest number: 12AC Signing time: Mon 09 Feb 2026 14:00:35 +0000 Manifest this update: Mon 09 Feb 2026 14:00:35 +0000 Manifest next update: Tue 10 Feb 2026 14:00:35 +0000 Files and hashes: 1: 0YbW8HGBIEKTAQ0r0cJenKdydBQ.roa (hash: vBliYXFqhxyaJZryhwDIOYnS/wn1Knpp33OKiyDn4/Y=) 2: PAIJTCIQ2LIXFfmN-FmLNTII0Qw.crl (hash: OuIHR7rOsCU5rlj/P3Yyb4M1EFklVtL/wzgq4k4rMW8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft rsync://rpki.ripe.net/repository/DEFAULT/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:44:57:43:2f:a9:16:b0:26:99:aa:74:ec:bc:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c02094c2210d8b21715f98df8598b353208d10c Validity Not Before: Feb 9 14:00:35 2026 GMT Not After : Feb 10 14:00:35 2026 GMT Subject: CN=c56e0ca745f48f31d609c9ee9d26849cd609141a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2f:a8:83:af:45:28:30:bd:37:99:6a:3b:42: bf:6f:4d:a0:a4:68:06:9e:26:c4:ce:ec:88:67:46: d4:4c:52:4f:8c:5f:e3:71:9f:46:31:80:f3:33:ad: 62:37:43:ed:25:81:ff:a2:4a:23:d6:47:36:a3:b4: 05:eb:20:cd:88:3b:77:cf:38:77:5f:53:97:44:d2: 66:a3:62:27:4a:d5:96:36:f9:ea:ce:00:1e:88:3e: a4:37:6e:73:81:fc:ab:1d:95:36:0b:2d:c4:2d:d0: fd:d3:af:29:49:59:1c:40:7e:d2:5b:db:23:bf:b2: 13:ac:e8:a2:fb:26:5a:6a:ca:f6:96:7f:9a:f1:28: fd:ed:0d:66:83:e7:7d:46:c4:80:91:2d:8e:cb:6a: dd:e7:1a:df:1e:48:84:5d:89:16:54:26:8f:d9:9b: b5:d9:ed:04:94:db:aa:6b:24:1d:19:83:b2:33:6f: 47:24:8f:1c:4b:09:56:f0:c0:73:f7:42:df:fc:cd: 43:28:0c:51:4e:30:27:3f:35:ab:ef:50:07:d1:14: 1b:ad:b7:07:01:1a:92:25:2e:fa:89:4d:a4:71:80: 9e:b1:51:18:5c:d6:c1:48:1a:ad:7b:ae:43:ce:27: 35:e7:45:ef:4b:ba:d1:17:b1:d3:c1:9e:de:ef:9c: ae:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:6E:0C:A7:45:F4:8F:31:D6:09:C9:EE:9D:26:84:9C:D6:09:14:1A X509v3 Authority Key Identifier: keyid:3C:02:09:4C:22:10:D8:B2:17:15:F9:8D:F8:59:8B:35:32:08:D1:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:93:6b:9b:de:ab:3a:46:7b:ad:e0:5f:7b:2a:6a:bf:de:15: c8:83:3f:b7:b0:f6:d8:46:b1:a6:f6:bb:48:45:de:c2:98:43: c4:24:ee:88:b4:9b:f9:89:09:e2:99:3d:a6:c0:00:67:6e:4d: b1:9e:93:90:ce:72:40:12:bf:fc:2c:66:e5:f4:a6:29:1c:16: 0f:6e:9b:6a:41:6a:ae:d2:14:0a:45:76:ed:78:b3:0b:ab:dc: 86:3e:f0:c3:99:ee:02:29:09:9b:d2:53:28:ef:95:58:be:66: 26:13:29:c6:f5:9a:4f:5b:ad:b6:b5:92:2e:5e:17:80:1d:18: c8:c5:5c:43:ab:e3:7f:a7:63:1f:45:2a:5d:a8:d1:4b:0a:be: c0:c8:18:4a:de:ea:60:3b:d0:59:22:c4:e4:d5:d8:64:ec:16: 90:66:d3:9b:c6:20:46:fe:37:e4:fd:f2:f5:bd:b1:17:f3:9c: d2:55:42:b5:a3:f9:57:5b:e9:f9:ae:e9:a6:dc:2b:64:12:1c: 23:a1:f4:c8:54:b0:22:0e:50:4f:92:74:f2:c6:fd:6c:6d:24: 00:e2:d0:7d:f0:ff:3e:58:bd:dc:32:ab:82:4e:b6:79:b2:ab: 81:19:13:f9:c2:d6:6a:ee:ef:70:1b:50:38:0b:d1:c3:7f:c0: 85:4a:e6:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtERXQy+pFrAmmap07Ly/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMDIwOTRjMjIxMGQ4YjIxNzE1Zjk4ZGY4NTk4YjM1MzIw OGQxMGMwHhcNMjYwMjA5MTQwMDM1WhcNMjYwMjEwMTQwMDM1WjAzMTEwLwYDVQQD EyhjNTZlMGNhNzQ1ZjQ4ZjMxZDYwOWM5ZWU5ZDI2ODQ5Y2Q2MDkxNDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmS+og69FKDC9N5lqO0K/b02gpGgG nibEzuyIZ0bUTFJPjF/jcZ9GMYDzM61iN0PtJYH/okoj1kc2o7QF6yDNiDt3zzh3 X1OXRNJmo2InStWWNvnqzgAeiD6kN25zgfyrHZU2Cy3ELdD9068pSVkcQH7SW9sj v7ITrOii+yZaasr2ln+a8Sj97Q1mg+d9RsSAkS2Oy2rd5xrfHkiEXYkWVCaP2Zu1 2e0ElNuqayQdGYOyM29HJI8cSwlW8MBz90Lf/M1DKAxRTjAnPzWr71AH0RQbrbcH ARqSJS76iU2kcYCesVEYXNbBSBqte65Dzic150XvS7rRF7HTwZ7e75yu8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMVuDKdF9I8x1gnJ7p0mhJzWCRQaMB8GA1UdIwQY MBaAFDwCCUwiENiyFxX5jfhZizUyCNEMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEFJSlRDSVEyTElYRmZtTi1GbUxOVElJMFF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS85ODNjMmMtZGRhYi00MjJiLWJjZDIt MTczNzRiZmZiNzFhLzEvUEFJSlRDSVEyTElYRmZtTi1GbUxOVElJMFF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS85ODNjMmMtZGRhYi00MjJiLWJjZDItMTczNzRiZmZiNzFh LzEvUEFJSlRDSVEyTElYRmZtTi1GbUxOVElJMFF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZpNrm96r OkZ7reBfeypqv94VyIM/t7D22Eaxpva7SEXewphDxCTuiLSb+YkJ4pk9psAAZ25N sZ6TkM5yQBK//Cxm5fSmKRwWD26bakFqrtIUCkV27XizC6vchj7ww5nuAikJm9JT KO+VWL5mJhMpxvWaT1uttrWSLl4XgB0YyMVcQ6vjf6djH0UqXajRSwq+wMgYSt7q YDvQWSLE5NXYZOwWkGbTm8YgRv435P3y9b2xF/Oc0lVCtaP5V1vp+a7pptwrZBIc I6H0yFSwIg5QT5J08sb9bG0kAOLQffD/Pli93DKrgk62ebKrgRkT+cLWau7vcBtQ OAvRw3/AhUrmOg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:47:36 2026 by rpki-client