This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.mft File: pnac0wPoTc03o3XW52tgKfzDZ7Q.mft (raw, json) Hash identifier: cpcmWFr+O/xDiwNlhchHFogw0Ulp3bLiYb9HPh+Be8w= Subject key identifier: 8F:05:AA:12:36:89:23:30:DC:10:4F:E1:18:FC:7F:9A:1C:57:85:FB Authority key identifier: A6:76:9C:D3:03:E8:4D:CD:37:A3:75:D6:E7:6B:60:29:FC:C3:67:B4 Certificate issuer: /CN=a6769cd303e84dcd37a375d6e76b6029fcc367b4 Certificate serial: 019C420F234DC63DF692250E1693BE77FE71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnac0wPoTc03o3XW52tgKfzDZ7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.mft Manifest number: 019B Signing time: Mon 09 Feb 2026 11:00:14 +0000 Manifest this update: Mon 09 Feb 2026 11:00:14 +0000 Manifest next update: Tue 10 Feb 2026 11:00:14 +0000 Files and hashes: 1: ODmnFvkoRJ8KBXIwmG3VyMbhpMg.roa (hash: UzQ9zfqJ6GmOojpgnIMRQs0ikmH8yfkpdXYgZqB0SfM=) 2: pnac0wPoTc03o3XW52tgKfzDZ7Q.crl (hash: e4ICwPOX3x8zACQv67LG5V0bVr62QDMAT4iRdFxfYLM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/pnac0wPoTc03o3XW52tgKfzDZ7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:23:4d:c6:3d:f6:92:25:0e:16:93:be:77:fe:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6769cd303e84dcd37a375d6e76b6029fcc367b4 Validity Not Before: Feb 9 11:00:14 2026 GMT Not After : Feb 10 11:00:14 2026 GMT Subject: CN=8f05aa1236892330dc104fe118fc7f9a1c5785fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4b:95:23:9d:9a:4e:7c:39:fd:6b:7d:36:ef: 0d:bd:c9:53:2f:75:1f:93:81:6f:7c:7d:af:4b:3d: 0a:9d:d4:8c:31:24:61:60:33:1c:69:57:c6:58:ff: 16:f1:0e:19:2d:99:d9:1f:a9:45:4f:74:9f:e6:6c: 45:d2:18:9b:3c:82:b9:d7:b7:81:5c:25:6e:4a:ac: 94:4c:ab:de:bd:5e:b0:b8:ff:b4:8b:d4:4c:16:6c: a5:67:5e:eb:7a:04:61:3f:92:82:04:fb:26:84:18: 9e:4d:59:88:c7:48:16:50:7b:61:92:2c:81:5b:a6: aa:fa:7b:a4:19:fd:57:30:38:6e:5d:74:11:81:b7: 56:9a:c4:54:70:6b:7d:6d:29:77:24:6f:4c:90:fc: 0e:4d:fc:b0:cf:a8:a9:c4:94:b1:d5:46:c5:e3:83: 89:2d:0b:94:82:44:e6:20:1b:78:3b:74:7a:90:7e: 8c:71:6a:db:92:a1:c7:38:3c:a7:26:42:1a:40:aa: e8:bc:0e:c7:a6:ba:14:59:c1:f7:c4:5a:29:07:e1: 2f:e0:75:47:1b:91:94:ae:3c:1d:0a:0c:c0:18:10: 48:91:8f:91:bd:c7:24:70:c3:e0:22:df:42:f3:79: 51:fe:33:bd:b8:d6:22:68:c5:be:cc:32:09:6f:14: 0e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:05:AA:12:36:89:23:30:DC:10:4F:E1:18:FC:7F:9A:1C:57:85:FB X509v3 Authority Key Identifier: keyid:A6:76:9C:D3:03:E8:4D:CD:37:A3:75:D6:E7:6B:60:29:FC:C3:67:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnac0wPoTc03o3XW52tgKfzDZ7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:4c:a4:a4:b5:80:b0:fd:fe:a5:2d:c4:b8:57:98:82:2a:ea: 4a:c7:78:33:f3:6e:85:d5:ea:96:5b:e4:34:48:22:02:4f:63: e9:6d:96:a5:1c:4c:53:8b:29:07:b1:8d:a5:28:0b:ce:dd:ce: d9:2e:d2:68:65:63:5f:c7:7c:9e:05:5d:bb:a0:0e:5c:6c:68: a6:5e:0a:60:fa:93:56:e6:6f:1b:6d:79:c0:3a:6f:6d:5e:0f: 86:5b:63:ef:53:f9:a4:26:8e:d9:fe:bd:a9:4e:0a:74:f5:65: a7:af:9b:3a:1d:f8:ff:38:3f:88:de:28:a5:5f:69:d0:31:ec: 0f:0b:ad:a9:91:c4:9c:94:aa:94:4d:75:e3:32:0b:cf:43:0c: d9:cd:06:4e:81:96:6f:25:d0:3a:27:55:14:f2:cb:d7:0d:53: 52:4f:fb:d9:65:25:9e:fa:c0:07:3c:8d:98:20:e7:6e:55:0d: 54:e5:b8:d0:dd:ab:15:12:4f:e2:e7:dc:18:c5:96:c7:3f:55: e8:d0:ed:71:af:d3:e1:60:32:76:c2:df:a4:7d:ba:46:de:08: 27:1a:0c:e5:1f:ed:52:81:e8:82:f7:d8:17:68:9e:ce:73:05: 49:9e:cd:21:66:5f:11:7c:2f:86:8b:cc:cf:bb:fe:dd:d4:36: 74:fe:eb:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCDyNNxj32kiUOFpO+d/5xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2NzY5Y2QzMDNlODRkY2QzN2EzNzVkNmU3NmI2MDI5ZmNj MzY3YjQwHhcNMjYwMjA5MTEwMDE0WhcNMjYwMjEwMTEwMDE0WjAzMTEwLwYDVQQD Eyg4ZjA1YWExMjM2ODkyMzMwZGMxMDRmZTExOGZjN2Y5YTFjNTc4NWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkuVI52aTnw5/Wt9Nu8NvclTL3Uf k4FvfH2vSz0KndSMMSRhYDMcaVfGWP8W8Q4ZLZnZH6lFT3Sf5mxF0hibPIK517eB XCVuSqyUTKvevV6wuP+0i9RMFmylZ17regRhP5KCBPsmhBieTVmIx0gWUHthkiyB W6aq+nukGf1XMDhuXXQRgbdWmsRUcGt9bSl3JG9MkPwOTfywz6ipxJSx1UbF44OJ LQuUgkTmIBt4O3R6kH6McWrbkqHHODynJkIaQKrovA7HproUWcH3xFopB+Ev4HVH G5GUrjwdCgzAGBBIkY+RvcckcMPgIt9C83lR/jO9uNYiaMW+zDIJbxQOBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI8FqhI2iSMw3BBP4Rj8f5ocV4X7MB8GA1UdIwQY MBaAFKZ2nNMD6E3NN6N11udrYCn8w2e0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcG5hYzB3UG9UYzAzbzNYVzUydGdLZnpEWjdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wMjM3YmMtOWQ1ZC00ZGI0LWFmOWIt OTdhN2I5MzI3Nzg3LzEvcG5hYzB3UG9UYzAzbzNYVzUydGdLZnpEWjdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8wMjM3YmMtOWQ1ZC00ZGI0LWFmOWItOTdhN2I5MzI3Nzg3 LzEvcG5hYzB3UG9UYzAzbzNYVzUydGdLZnpEWjdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfEykpLWA sP3+pS3EuFeYgirqSsd4M/NuhdXqllvkNEgiAk9j6W2WpRxMU4spB7GNpSgLzt3O 2S7SaGVjX8d8ngVdu6AOXGxopl4KYPqTVuZvG215wDpvbV4Phltj71P5pCaO2f69 qU4KdPVlp6+bOh34/zg/iN4opV9p0DHsDwutqZHEnJSqlE114zILz0MM2c0GToGW byXQOidVFPLL1w1TUk/72WUlnvrABzyNmCDnblUNVOW40N2rFRJP4ufcGMWWxz9V 6NDtca/T4WAydsLfpH26Rt4IJxoM5R/tUoHogvfYF2ieznMFSZ7NIWZfEXwvhovM z7v+3dQ2dP7rDQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:13 2026 by rpki-client