This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft File: Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft (raw, json) Hash identifier: fbqlUw3nqtlvYOk2UhNx7Q1raP99ctFNfpaOE5A08J0= Subject key identifier: 57:5C:3C:BD:45:83:C7:15:E8:1A:55:7A:FC:93:B1:0E:E9:49:BA:BF Authority key identifier: 3D:EA:ED:ED:A1:05:D7:E9:12:9A:9B:0C:E5:6B:9B:FC:B9:C6:73:94 Certificate issuer: /CN=3deaededa105d7e9129a9b0ce56b9bfcb9c67394 Certificate serial: 019C420FC07BAA5E8D118BF002CCC94C4B95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pert7aEF1-kSmpsM5Wub_LnGc5Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft Manifest number: 10B8 Signing time: Mon 09 Feb 2026 11:00:54 +0000 Manifest this update: Mon 09 Feb 2026 11:00:54 +0000 Manifest next update: Tue 10 Feb 2026 11:00:54 +0000 Files and hashes: 1: Pert7aEF1-kSmpsM5Wub_LnGc5Q.crl (hash: /2FR5AMMHbt8C/Hs0rSq9OUBauXvp3eLgRaAg1smIwU=) 2: ovxLd3-R8YHUP-795BmS15YxMz4.roa (hash: ihtlHUZTymcC/9UwMeLjxx7SKoFJMvGJaK2E/0fEXh8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Pert7aEF1-kSmpsM5Wub_LnGc5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:c0:7b:aa:5e:8d:11:8b:f0:02:cc:c9:4c:4b:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3deaededa105d7e9129a9b0ce56b9bfcb9c67394 Validity Not Before: Feb 9 11:00:54 2026 GMT Not After : Feb 10 11:00:54 2026 GMT Subject: CN=575c3cbd4583c715e81a557afc93b10ee949babf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:53:ab:08:9f:36:26:42:c8:e8:54:59:c9:cd: ad:f7:4c:d4:a6:d9:f4:5d:fd:70:8d:4e:26:8a:7e: ca:c1:db:b1:fe:3e:bf:ab:43:50:d0:92:6e:81:d5: 81:94:a9:1d:0f:26:50:c1:ed:26:0a:b5:15:d2:ad: 65:82:ba:a9:32:91:a6:03:d0:26:ee:d6:08:e8:c4: ea:e6:3e:a8:db:8e:19:54:e4:31:b7:80:0e:80:eb: af:28:d2:b0:4c:61:e7:ae:31:d6:d8:a2:68:f2:4e: 2b:80:b1:b8:ec:2a:64:c5:96:e7:30:bf:a4:2e:bb: 36:8b:b7:c8:03:55:7b:e7:1a:f5:aa:24:5f:73:e0: e6:94:0c:b1:fb:ba:59:e1:6c:d9:22:4f:a8:c0:9f: f1:47:63:6f:bd:11:9b:74:8a:03:f8:9d:1d:d1:42: 4c:21:a1:f2:b4:b4:53:14:a0:0a:a4:c9:38:7b:22: 87:4e:8b:44:e3:6b:44:bf:84:da:0f:dc:60:3e:eb: 39:83:f1:18:e8:2b:26:6e:63:f6:cf:88:81:1b:7a: f7:94:9d:f3:25:cc:9f:0d:72:b0:61:a2:a7:f4:4e: b3:39:59:a4:f5:98:a5:da:ee:8a:a6:33:90:2c:96: 4a:2e:e9:9d:73:c8:94:30:75:81:46:f6:d0:1b:cf: be:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:5C:3C:BD:45:83:C7:15:E8:1A:55:7A:FC:93:B1:0E:E9:49:BA:BF X509v3 Authority Key Identifier: keyid:3D:EA:ED:ED:A1:05:D7:E9:12:9A:9B:0C:E5:6B:9B:FC:B9:C6:73:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pert7aEF1-kSmpsM5Wub_LnGc5Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:6b:b3:da:0b:f2:1f:b5:61:96:8d:56:5d:4b:4d:c1:d7:80: 4f:39:bf:6c:2c:a1:a8:57:0d:d4:5b:92:d2:07:d0:e5:d1:67: cb:a9:6b:ce:61:12:28:4b:a2:09:c3:9c:db:e4:87:b8:02:52: 19:d2:fa:c0:15:16:e7:83:ce:92:95:cd:d4:ba:c8:c7:5e:9a: 33:92:c9:90:f2:bd:25:ae:27:28:79:ad:21:99:cf:f2:21:99: 45:a0:3a:fe:be:12:21:7a:8e:8a:25:5c:69:de:60:b3:dc:df: 9d:95:13:f1:a1:a5:48:da:2c:db:13:34:72:04:37:6d:fc:c0: 87:61:cf:fe:23:50:02:5e:58:4b:d1:c1:88:42:da:21:9c:53: da:f5:d0:6d:91:17:eb:57:74:5b:9e:2e:c4:da:78:36:81:98: f6:a0:dd:2b:94:d5:90:39:2f:b5:32:9a:9e:a0:75:79:3e:f9: ab:56:b4:13:e4:86:54:8a:31:51:40:70:8e:0f:6c:55:ab:c3: d4:1f:92:69:31:76:45:9f:18:ba:50:4c:f2:29:5e:61:0c:1e: 27:7a:bc:32:38:68:7e:2c:21:40:b8:30:c6:65:52:f2:22:8f: d9:09:80:f7:a3:4a:13:5e:bd:a4:29:7a:2f:11:a0:f1:db:68: d3:34:05:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD8B7ql6NEYvwAszJTEuVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkZWFlZGVkYTEwNWQ3ZTkxMjlhOWIwY2U1NmI5YmZjYjlj NjczOTQwHhcNMjYwMjA5MTEwMDU0WhcNMjYwMjEwMTEwMDU0WjAzMTEwLwYDVQQD Eyg1NzVjM2NiZDQ1ODNjNzE1ZTgxYTU1N2FmYzkzYjEwZWU5NDliYWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1OrCJ82JkLI6FRZyc2t90zUptn0 Xf1wjU4min7Kwdux/j6/q0NQ0JJugdWBlKkdDyZQwe0mCrUV0q1lgrqpMpGmA9Am 7tYI6MTq5j6o244ZVOQxt4AOgOuvKNKwTGHnrjHW2KJo8k4rgLG47CpkxZbnML+k Lrs2i7fIA1V75xr1qiRfc+DmlAyx+7pZ4WzZIk+owJ/xR2NvvRGbdIoD+J0d0UJM IaHytLRTFKAKpMk4eyKHTotE42tEv4TaD9xgPus5g/EY6CsmbmP2z4iBG3r3lJ3z JcyfDXKwYaKn9E6zOVmk9Zil2u6KpjOQLJZKLumdc8iUMHWBRvbQG8++kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFdcPL1Fg8cV6BpVevyTsQ7pSbq/MB8GA1UdIwQY MBaAFD3q7e2hBdfpEpqbDOVrm/y5xnOUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGVydDdhRUYxLWtTbXBzTTVXdWJfTG5HYzVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9jYzRlYjMtNzY4YS00ZjkxLTg4MmMt MGRiMTA4NTBjNzk0LzEvUGVydDdhRUYxLWtTbXBzTTVXdWJfTG5HYzVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9jYzRlYjMtNzY4YS00ZjkxLTg4MmMtMGRiMTA4NTBjNzk0 LzEvUGVydDdhRUYxLWtTbXBzTTVXdWJfTG5HYzVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnmuz2gvy H7Vhlo1WXUtNwdeATzm/bCyhqFcN1FuS0gfQ5dFny6lrzmESKEuiCcOc2+SHuAJS GdL6wBUW54POkpXN1LrIx16aM5LJkPK9Ja4nKHmtIZnP8iGZRaA6/r4SIXqOiiVc ad5gs9zfnZUT8aGlSNos2xM0cgQ3bfzAh2HP/iNQAl5YS9HBiELaIZxT2vXQbZEX 61d0W54uxNp4NoGY9qDdK5TVkDkvtTKanqB1eT75q1a0E+SGVIoxUUBwjg9sVavD 1B+SaTF2RZ8YulBM8ileYQweJ3q8MjhofiwhQLgwxmVS8iKP2QmA96NKE169pCl6 LxGg8dto0zQFVA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:58 2026 by rpki-client