This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft File: PcOGJxwOCo0B-xkNaNhf92TRatQ.mft (raw, json) Hash identifier: wwaPxfGpl0WDEb/FAu0m7QZyLj5eaAuQYJx/jAgA1O0= Subject key identifier: E3:8F:D8:1C:80:54:21:0A:D0:45:3D:69:01:97:82:D6:B8:9F:F2:D9 Authority key identifier: 3D:C3:86:27:1C:0E:0A:8D:01:FB:19:0D:68:D8:5F:F7:64:D1:6A:D4 Certificate issuer: /CN=3dc386271c0e0a8d01fb190d68d85ff764d16ad4 Certificate serial: 019C43903FC1C0244A36FE952F07C4E1B80C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcOGJxwOCo0B-xkNaNhf92TRatQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft Manifest number: 05ED Signing time: Mon 09 Feb 2026 18:00:52 +0000 Manifest this update: Mon 09 Feb 2026 18:00:52 +0000 Manifest next update: Tue 10 Feb 2026 18:00:52 +0000 Files and hashes: 1: 6Nl-yKrSE7jmZ8LWgcVcWgQlgFg.roa (hash: /v6LQ7GwS5mzr12Ho4pwZqcEQ6oaSt3ITA8fvgcD220=) 2: PcOGJxwOCo0B-xkNaNhf92TRatQ.crl (hash: Rgy76nCGgHv8uFBJkKxY8dHdE8FeT/WlPnMHiHdrt2Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft rsync://rpki.ripe.net/repository/DEFAULT/PcOGJxwOCo0B-xkNaNhf92TRatQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:3f:c1:c0:24:4a:36:fe:95:2f:07:c4:e1:b8:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3dc386271c0e0a8d01fb190d68d85ff764d16ad4 Validity Not Before: Feb 9 18:00:52 2026 GMT Not After : Feb 10 18:00:52 2026 GMT Subject: CN=e38fd81c8054210ad0453d69019782d6b89ff2d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ae:fb:87:d6:b3:ac:ac:24:a5:95:91:28:3f: 32:d6:6e:e7:49:03:ea:d0:bf:1b:ad:00:09:d4:7a: d9:ca:71:c0:ef:6b:32:9f:a7:da:21:eb:6f:41:d5: 46:1a:a6:89:99:4d:36:4c:e4:d8:8e:c7:2e:5a:ff: 26:57:0b:13:e9:1f:9b:f7:47:90:72:26:79:7b:0d: 9c:9f:b7:7b:5c:3a:71:5e:87:d0:a5:c2:10:22:7e: 54:2e:2b:aa:85:88:de:55:33:bf:dd:1c:0e:08:1f: 01:45:80:86:3f:81:f6:3e:97:79:69:a1:a1:cb:58: 0f:a1:b9:80:f8:d8:86:7a:3c:34:fe:fa:c2:05:19: 5b:50:56:39:fe:ed:e1:fe:93:2e:f0:3c:ad:01:0d: fd:6a:6b:44:05:77:96:82:04:7f:16:e8:71:d2:d3: 2d:9e:e0:e2:8a:58:b8:3e:36:6b:23:65:c9:bc:30: 7f:e8:a9:e6:2c:8e:db:a1:6d:90:0f:b7:00:1d:cd: 44:16:a4:a0:cc:59:81:bb:38:65:3c:2a:fe:3a:6d: a3:bd:5c:92:1b:f7:84:c8:11:b5:42:6e:b2:71:c2: 11:7c:3e:b5:4f:75:0d:e5:e4:72:f8:db:f4:8d:0f: 16:7d:05:a4:3b:9b:de:15:d2:ce:62:3c:9e:f8:3d: ad:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:8F:D8:1C:80:54:21:0A:D0:45:3D:69:01:97:82:D6:B8:9F:F2:D9 X509v3 Authority Key Identifier: keyid:3D:C3:86:27:1C:0E:0A:8D:01:FB:19:0D:68:D8:5F:F7:64:D1:6A:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcOGJxwOCo0B-xkNaNhf92TRatQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:0c:d3:80:7b:4a:1f:6f:f0:c5:bd:41:9d:ec:cc:1b:40:82: d6:0c:29:53:14:61:3d:53:df:0f:70:63:a4:f6:f1:27:9b:86: fa:cd:41:3d:98:54:37:59:df:bd:46:31:99:16:28:54:53:99: 3a:00:93:86:73:ad:fa:4e:ed:76:99:ec:15:72:73:be:0d:8b: 41:a0:15:53:f1:bd:a2:37:ed:b5:89:18:6a:81:c5:55:13:ab: 9a:e0:3b:d2:22:e4:b3:95:6f:d0:ff:a2:9c:db:c5:11:ea:b1: 45:61:3c:ac:4c:8d:f5:70:46:75:4f:cb:1b:29:7f:1a:d1:a3: 49:06:21:24:ae:ee:b3:c0:9c:e3:89:f5:a4:1d:de:7e:ac:79: d3:39:c1:2c:68:f7:0f:8d:65:79:db:f5:2a:4b:e0:07:7f:fc: 5f:96:53:6e:b0:5b:b3:dc:1e:87:5f:38:28:10:f9:bd:a4:54: 9b:b3:d3:55:3a:e1:c9:a1:d8:a9:1b:c9:08:10:65:65:0d:6c: 72:f0:e6:9f:5e:50:a7:8c:20:b4:13:f4:96:d0:c4:a7:62:5f: b3:32:0c:fc:1f:3d:87:59:76:17:06:b9:b9:ab:f6:bc:c5:9d: 44:29:d0:97:0c:2f:59:78:af:d2:e1:22:5c:d2:c6:9f:3b:7c: 9e:c2:81:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkD/BwCRKNv6VLwfE4bgMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkYzM4NjI3MWMwZTBhOGQwMWZiMTkwZDY4ZDg1ZmY3NjRk MTZhZDQwHhcNMjYwMjA5MTgwMDUyWhcNMjYwMjEwMTgwMDUyWjAzMTEwLwYDVQQD EyhlMzhmZDgxYzgwNTQyMTBhZDA0NTNkNjkwMTk3ODJkNmI4OWZmMmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuK77h9azrKwkpZWRKD8y1m7nSQPq 0L8brQAJ1HrZynHA72syn6faIetvQdVGGqaJmU02TOTYjscuWv8mVwsT6R+b90eQ ciZ5ew2cn7d7XDpxXofQpcIQIn5ULiuqhYjeVTO/3RwOCB8BRYCGP4H2Ppd5aaGh y1gPobmA+NiGejw0/vrCBRlbUFY5/u3h/pMu8DytAQ39amtEBXeWggR/Fuhx0tMt nuDiili4PjZrI2XJvDB/6KnmLI7boW2QD7cAHc1EFqSgzFmBuzhlPCr+Om2jvVyS G/eEyBG1Qm6yccIRfD61T3UN5eRy+Nv0jQ8WfQWkO5veFdLOYjye+D2tQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOOP2ByAVCEK0EU9aQGXgta4n/LZMB8GA1UdIwQY MBaAFD3DhiccDgqNAfsZDWjYX/dk0WrUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGNPR0p4d09DbzBCLXhrTmFOaGY5MlRSYXRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9mMjY0YmItZWZkZC00NDk3LWJjMTAt ZGRmZWYzYzZhZDllLzEvUGNPR0p4d09DbzBCLXhrTmFOaGY5MlRSYXRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9mMjY0YmItZWZkZC00NDk3LWJjMTAtZGRmZWYzYzZhZDll LzEvUGNPR0p4d09DbzBCLXhrTmFOaGY5MlRSYXRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaAzTgHtK H2/wxb1BnezMG0CC1gwpUxRhPVPfD3BjpPbxJ5uG+s1BPZhUN1nfvUYxmRYoVFOZ OgCThnOt+k7tdpnsFXJzvg2LQaAVU/G9ojfttYkYaoHFVROrmuA70iLks5Vv0P+i nNvFEeqxRWE8rEyN9XBGdU/LGyl/GtGjSQYhJK7us8Cc44n1pB3efqx50znBLGj3 D41ledv1KkvgB3/8X5ZTbrBbs9weh184KBD5vaRUm7PTVTrhyaHYqRvJCBBlZQ1s cvDmn15Qp4wgtBP0ltDEp2JfszIM/B89h1l2Fwa5uav2vMWdRCnQlwwvWXiv0uEi XNLGnzt8nsKBYg== -----END CERTIFICATE-----Generated at Tue Feb 10 03:13:23 2026 by rpki-client