This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.mft File: PRKXkoZrFiE7VsW_pr66x8YYsVA.mft (raw, json) Hash identifier: RTLTuFZ4+exOwIVQ1v1MoWgDo3jc3/b9My9kB4IBlFU= Subject key identifier: 0E:31:5C:EB:52:EB:13:ED:93:B0:24:14:1F:DE:07:1F:16:C2:25:19 Authority key identifier: 3D:12:97:92:86:6B:16:21:3B:56:C5:BF:A6:BE:BA:C7:C6:18:B1:50 Certificate issuer: /CN=3d129792866b16213b56c5bfa6bebac7c618b150 Certificate serial: 019C4322557A43075A4937AA6EE030E6D3E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRKXkoZrFiE7VsW_pr66x8YYsVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.mft Manifest number: 139E Signing time: Mon 09 Feb 2026 16:00:49 +0000 Manifest this update: Mon 09 Feb 2026 16:00:49 +0000 Manifest next update: Tue 10 Feb 2026 16:00:49 +0000 Files and hashes: 1: PRKXkoZrFiE7VsW_pr66x8YYsVA.crl (hash: 8YFrQwHrh4Pin8NHeogCJwO04Vk6iNxzvfgmb66nPH0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.mft rsync://rpki.ripe.net/repository/DEFAULT/PRKXkoZrFiE7VsW_pr66x8YYsVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:55:7a:43:07:5a:49:37:aa:6e:e0:30:e6:d3:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d129792866b16213b56c5bfa6bebac7c618b150 Validity Not Before: Feb 9 16:00:49 2026 GMT Not After : Feb 10 16:00:49 2026 GMT Subject: CN=0e315ceb52eb13ed93b024141fde071f16c22519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:44:b3:c1:e1:70:ec:ca:5f:7d:e8:f7:b3:b8: 13:ab:2d:98:5a:72:56:31:6c:fb:72:73:80:d0:19: f1:d7:97:40:63:88:0e:99:dd:7f:66:30:41:16:a2: 0e:36:32:a1:2a:94:00:2d:53:30:5b:47:af:f8:1c: 1d:30:57:d0:c5:51:25:e8:5b:38:f1:2d:8d:01:be: 1d:6e:49:6c:df:3a:bb:aa:89:1a:a5:86:96:54:a5: 91:96:54:0d:cd:37:b7:10:57:e1:64:ed:be:00:29: a2:64:c0:e5:89:5c:04:ce:7f:8e:37:32:bc:d5:d5: df:a2:b3:c8:04:44:e5:17:f2:72:8d:e0:68:df:d0: 26:74:c4:13:a6:ed:19:48:f9:cf:9e:ef:91:cd:c8: e3:dd:d0:59:b5:65:5f:1e:45:ee:30:bd:a8:aa:59: 0b:c8:f7:ae:0a:5e:d7:8a:fa:eb:a3:92:9e:ea:42: b3:7c:da:3f:83:3a:4a:00:93:48:d8:cb:f7:09:95: be:ec:a5:82:04:bb:4b:37:e4:b2:9f:13:33:61:d7: 87:e3:cb:5e:27:4e:62:33:9a:90:7d:b2:2f:51:cd: 68:24:6b:b3:c3:1c:7e:87:49:14:13:e9:fe:d9:71: 12:43:d5:10:76:93:60:b8:17:17:66:dd:f4:f6:a2: e6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:31:5C:EB:52:EB:13:ED:93:B0:24:14:1F:DE:07:1F:16:C2:25:19 X509v3 Authority Key Identifier: keyid:3D:12:97:92:86:6B:16:21:3B:56:C5:BF:A6:BE:BA:C7:C6:18:B1:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRKXkoZrFiE7VsW_pr66x8YYsVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:17:09:bd:44:ea:f8:26:60:5c:82:7a:80:d4:63:9b:4a:43: 6e:fc:26:98:18:15:79:1b:a2:73:22:71:3b:8d:79:60:d2:71: 1e:77:53:e5:85:38:63:db:75:25:6a:46:51:72:b5:8d:4d:8e: 08:3d:b8:f1:d0:0b:82:af:0c:cc:89:22:60:c7:e6:a9:cf:15: 89:e6:85:85:82:dd:21:08:2a:d0:24:34:f7:52:ef:d7:23:9e: 49:f4:29:90:79:df:61:1c:6e:b1:9f:b6:8d:c2:fc:21:19:a9: d3:0d:74:42:73:ba:3c:ec:ac:14:c5:5c:5d:e7:61:e0:99:b8: 48:a6:84:63:dc:28:98:ff:e6:19:1a:9f:43:a0:c8:b5:7d:c6: 09:59:ce:da:87:85:f1:93:46:2a:4e:90:9b:95:81:95:26:06: b9:e6:a9:58:df:8b:9a:a5:3b:b8:4a:5a:bb:c3:0b:77:84:5e: 59:4b:9f:8b:6f:d3:25:3a:bc:56:ab:c3:c9:bb:16:66:21:69: 23:2f:f7:00:a0:e4:74:ed:66:ee:8b:1a:a8:4b:f5:17:fa:d3: bc:cc:b1:64:04:9c:56:e8:0a:54:02:24:98:64:97:5a:ff:bd: 30:c7:8b:e7:ce:be:ff:93:2c:75:e3:d2:1d:b7:69:bc:64:d0: 23:6c:5a:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIlV6QwdaSTeqbuAw5tPlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkMTI5NzkyODY2YjE2MjEzYjU2YzViZmE2YmViYWM3YzYx OGIxNTAwHhcNMjYwMjA5MTYwMDQ5WhcNMjYwMjEwMTYwMDQ5WjAzMTEwLwYDVQQD EygwZTMxNWNlYjUyZWIxM2VkOTNiMDI0MTQxZmRlMDcxZjE2YzIyNTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApESzweFw7Mpffej3s7gTqy2YWnJW MWz7cnOA0Bnx15dAY4gOmd1/ZjBBFqIONjKhKpQALVMwW0ev+BwdMFfQxVEl6Fs4 8S2NAb4dbkls3zq7qokapYaWVKWRllQNzTe3EFfhZO2+ACmiZMDliVwEzn+ONzK8 1dXforPIBETlF/JyjeBo39AmdMQTpu0ZSPnPnu+Rzcjj3dBZtWVfHkXuML2oqlkL yPeuCl7Xivrro5Ke6kKzfNo/gzpKAJNI2Mv3CZW+7KWCBLtLN+SynxMzYdeH48te J05iM5qQfbIvUc1oJGuzwxx+h0kUE+n+2XESQ9UQdpNguBcXZt309qLm3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA4xXOtS6xPtk7AkFB/eBx8WwiUZMB8GA1UdIwQY MBaAFD0Sl5KGaxYhO1bFv6a+usfGGLFQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFJLWGtvWnJGaUU3VnNXX3ByNjZ4OFlZc1ZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC81NmU5ZDUtZmY0NS00NDY0LWIyYmIt NjEwYjllNzJhNmJlLzEvUFJLWGtvWnJGaUU3VnNXX3ByNjZ4OFlZc1ZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC81NmU5ZDUtZmY0NS00NDY0LWIyYmItNjEwYjllNzJhNmJl LzEvUFJLWGtvWnJGaUU3VnNXX3ByNjZ4OFlZc1ZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHBcJvUTq +CZgXIJ6gNRjm0pDbvwmmBgVeRuicyJxO415YNJxHndT5YU4Y9t1JWpGUXK1jU2O CD248dALgq8MzIkiYMfmqc8VieaFhYLdIQgq0CQ091Lv1yOeSfQpkHnfYRxusZ+2 jcL8IRmp0w10QnO6POysFMVcXedh4Jm4SKaEY9womP/mGRqfQ6DItX3GCVnO2oeF 8ZNGKk6Qm5WBlSYGueapWN+LmqU7uEpau8MLd4ReWUufi2/TJTq8VqvDybsWZiFp Iy/3AKDkdO1m7osaqEv1F/rTvMyxZAScVugKVAIkmGSXWv+9MMeL586+/5MsdePS HbdpvGTQI2xapw== -----END CERTIFICATE-----Generated at Tue Feb 10 01:41:33 2026 by rpki-client