This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1002c1-00bc-4308-b55d-54da0468fdad/1/PkJOJFpkMkpocx3SbzDGhbqopng.mft File: PkJOJFpkMkpocx3SbzDGhbqopng.mft (raw, json) Hash identifier: fBwYE03nlBYsl026mGrPgLLOFPtf/h3KQ/Cl74OdAlA= Subject key identifier: D9:33:E3:A3:B4:5A:FA:1F:60:4D:1C:3C:85:DA:2E:98:28:DA:93:8D Authority key identifier: 3E:42:4E:24:5A:64:32:4A:68:73:1D:D2:6F:30:C6:85:BA:A8:A6:78 Certificate issuer: /CN=3e424e245a64324a68731dd26f30c685baa8a678 Certificate serial: 019C435900DA0F6A8B4EA61904B1A1E8C781 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PkJOJFpkMkpocx3SbzDGhbqopng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/1002c1-00bc-4308-b55d-54da0468fdad/1/PkJOJFpkMkpocx3SbzDGhbqopng.mft Manifest number: 1813 Signing time: Mon 09 Feb 2026 17:00:32 +0000 Manifest this update: Mon 09 Feb 2026 17:00:32 +0000 Manifest next update: Tue 10 Feb 2026 17:00:32 +0000 Files and hashes: 1: Cj8ujoa5KmTTSWCTdwnTGnYwzAk.roa (hash: M+8fZqB3T6uLKV8atcb+P0CXiywaKxIVWcjCJ6STrHE=) 2: PkJOJFpkMkpocx3SbzDGhbqopng.crl (hash: jArHwNJR8QHsJqcR/SH1pCHzAfVW+hm1Ikw5z348SSs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/1002c1-00bc-4308-b55d-54da0468fdad/1/PkJOJFpkMkpocx3SbzDGhbqopng.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/1002c1-00bc-4308-b55d-54da0468fdad/1/PkJOJFpkMkpocx3SbzDGhbqopng.mft rsync://rpki.ripe.net/repository/DEFAULT/PkJOJFpkMkpocx3SbzDGhbqopng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:00:da:0f:6a:8b:4e:a6:19:04:b1:a1:e8:c7:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e424e245a64324a68731dd26f30c685baa8a678 Validity Not Before: Feb 9 17:00:32 2026 GMT Not After : Feb 10 17:00:32 2026 GMT Subject: CN=d933e3a3b45afa1f604d1c3c85da2e9828da938d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:88:2a:28:7f:b8:28:a3:9d:8e:c4:e9:2a:f6: 86:09:75:9a:04:04:de:5b:30:92:2d:4d:aa:31:af: f1:4e:e3:c4:60:a2:bc:58:4f:c7:b9:94:55:60:65: a5:76:2a:1b:dd:a6:76:04:d2:5e:36:59:a4:b7:80: c1:06:2d:fb:b9:76:0b:e7:0a:92:df:1b:96:5e:b2: 9b:dc:96:00:c2:18:5e:ca:9f:25:2d:97:b0:59:8a: 03:2c:67:d3:ac:87:17:b7:e1:29:f8:69:37:0a:1e: 07:60:41:21:8d:98:e3:ee:ac:31:f1:aa:42:74:93: 8f:b9:99:cb:10:9d:29:76:92:dd:8e:cb:ab:7b:27: c2:22:af:93:1c:83:4f:16:4b:48:a1:5e:9f:8b:76: 31:c6:82:b0:7b:41:95:ad:c2:0a:0b:07:51:77:27: 8b:55:9c:69:08:47:93:ba:57:06:11:e7:ad:cb:77: 4d:05:ce:a9:cd:e0:03:26:4a:a7:2b:d4:98:53:84: 28:9b:75:e9:e0:a4:cc:88:24:1f:60:e5:34:6d:2b: 22:f8:fa:8e:96:8d:42:64:f1:89:16:3d:bd:1c:3e: 89:ab:d7:98:a0:8f:fd:11:3b:40:d0:35:18:38:4b: e4:fb:92:55:49:ec:34:1f:da:22:9e:4e:34:9a:62: 43:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:33:E3:A3:B4:5A:FA:1F:60:4D:1C:3C:85:DA:2E:98:28:DA:93:8D X509v3 Authority Key Identifier: keyid:3E:42:4E:24:5A:64:32:4A:68:73:1D:D2:6F:30:C6:85:BA:A8:A6:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkJOJFpkMkpocx3SbzDGhbqopng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1002c1-00bc-4308-b55d-54da0468fdad/1/PkJOJFpkMkpocx3SbzDGhbqopng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1002c1-00bc-4308-b55d-54da0468fdad/1/PkJOJFpkMkpocx3SbzDGhbqopng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:9a:e3:42:48:9e:d2:31:ee:fe:e6:b4:ca:54:09:3f:10:70: 07:c2:5e:2c:3a:27:50:b3:a0:41:11:67:f6:69:f0:53:bd:07: 77:60:4e:03:d1:2d:e5:f8:d7:87:40:f0:44:1a:0f:e4:be:1e: 7b:d5:dc:d2:0f:80:df:31:e8:33:6e:09:7a:bf:50:c1:f9:57: 9c:3e:40:14:dd:65:88:f8:13:90:e1:b4:36:a3:7a:86:82:bb: cb:0f:aa:8c:ff:a8:f8:26:f2:31:37:af:af:ce:df:19:66:51: a8:8c:6e:d5:ef:48:33:9c:d3:23:9e:a8:90:21:2d:bd:c4:dd: 8e:d8:d8:12:df:9f:64:7e:09:d9:cc:2f:94:bd:dd:26:d3:ff: 95:95:eb:b2:72:96:62:e6:c6:9b:b2:e4:8d:b3:bb:2f:50:b4: 01:d3:9c:dd:8d:09:4d:f9:4a:0c:1e:02:63:b2:50:57:13:28: e0:fe:04:a7:ae:46:6d:67:eb:2a:77:89:7c:d9:3c:cf:bd:f8: 83:58:3d:51:02:b0:83:0a:7b:34:15:16:a1:f1:e0:e4:45:78: 10:71:bf:2a:b2:87:f3:30:1d:29:08:85:79:30:81:f0:a4:8a: 3d:d9:1c:5a:1b:00:ae:03:79:d8:86:7d:e9:e5:43:78:1f:ab: 74:eb:b3:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWQDaD2qLTqYZBLGh6MeBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNDI0ZTI0NWE2NDMyNGE2ODczMWRkMjZmMzBjNjg1YmFh OGE2NzgwHhcNMjYwMjA5MTcwMDMyWhcNMjYwMjEwMTcwMDMyWjAzMTEwLwYDVQQD EyhkOTMzZTNhM2I0NWFmYTFmNjA0ZDFjM2M4NWRhMmU5ODI4ZGE5MzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34gqKH+4KKOdjsTpKvaGCXWaBATe WzCSLU2qMa/xTuPEYKK8WE/HuZRVYGWldiob3aZ2BNJeNlmkt4DBBi37uXYL5wqS 3xuWXrKb3JYAwhheyp8lLZewWYoDLGfTrIcXt+Ep+Gk3Ch4HYEEhjZjj7qwx8apC dJOPuZnLEJ0pdpLdjsureyfCIq+THINPFktIoV6fi3YxxoKwe0GVrcIKCwdRdyeL VZxpCEeTulcGEeety3dNBc6pzeADJkqnK9SYU4Qom3Xp4KTMiCQfYOU0bSsi+PqO lo1CZPGJFj29HD6Jq9eYoI/9ETtA0DUYOEvk+5JVSew0H9oink40mmJDSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNkz46O0WvofYE0cPIXaLpgo2pONMB8GA1UdIwQY MBaAFD5CTiRaZDJKaHMd0m8wxoW6qKZ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGtKT0pGcGtNa3BvY3gzU2J6REdoYnFvcG5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8xMDAyYzEtMDBiYy00MzA4LWI1NWQt NTRkYTA0NjhmZGFkLzEvUGtKT0pGcGtNa3BvY3gzU2J6REdoYnFvcG5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8xMDAyYzEtMDBiYy00MzA4LWI1NWQtNTRkYTA0NjhmZGFk LzEvUGtKT0pGcGtNa3BvY3gzU2J6REdoYnFvcG5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApZrjQkie 0jHu/ua0ylQJPxBwB8JeLDonULOgQRFn9mnwU70Hd2BOA9Et5fjXh0DwRBoP5L4e e9Xc0g+A3zHoM24Jer9QwflXnD5AFN1liPgTkOG0NqN6hoK7yw+qjP+o+CbyMTev r87fGWZRqIxu1e9IM5zTI56okCEtvcTdjtjYEt+fZH4J2cwvlL3dJtP/lZXrsnKW YubGm7LkjbO7L1C0AdOc3Y0JTflKDB4CY7JQVxMo4P4Ep65GbWfrKneJfNk8z734 g1g9UQKwgwp7NBUWofHg5EV4EHG/KrKH8zAdKQiFeTCB8KSKPdkcWhsArgN52IZ9 6eVDeB+rdOuzTg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:30 2026 by rpki-client