This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft File: PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft (raw, json) Hash identifier: 0eFUFp35ZUlYz9zJKlf7kNnKilMR5VwHgaov1eGC6fM= Subject key identifier: FB:40:16:3C:DC:04:21:79:5F:65:58:E5:74:A4:AE:EE:1C:7A:99:9B Authority key identifier: 3D:0B:E4:AE:38:73:55:54:CD:11:81:0A:9C:7D:20:30:19:04:01:98 Certificate issuer: /CN=3d0be4ae38735554cd11810a9c7d203019040198 Certificate serial: 019C1CB9740E255E2EEAA5C652DA1B9CA210 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQvkrjhzVVTNEYEKnH0gMBkEAZg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft Manifest number: 01E0 Signing time: Mon 02 Feb 2026 05:00:41 +0000 Manifest this update: Mon 02 Feb 2026 05:00:41 +0000 Manifest next update: Tue 03 Feb 2026 05:00:41 +0000 Files and hashes: 1: PQvkrjhzVVTNEYEKnH0gMBkEAZg.crl (hash: bsHhq+M9HqkQOtDEwiEoO9DZh00BnKKNSU+PiSzL7ZI=) 2: zT9KHUtxtSzxzIWfNIbM_5YrNkg.asa (hash: eQArodPkL9GT9btZe2O+IRGyIxJmz7mwSCT2keKt/1g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft rsync://rpki.ripe.net/repository/DEFAULT/PQvkrjhzVVTNEYEKnH0gMBkEAZg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1c:b9:74:0e:25:5e:2e:ea:a5:c6:52:da:1b:9c:a2:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d0be4ae38735554cd11810a9c7d203019040198 Validity Not Before: Feb 2 05:00:41 2026 GMT Not After : Feb 3 05:00:41 2026 GMT Subject: CN=fb40163cdc0421795f6558e574a4aeee1c7a999b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:27:0a:7b:c9:26:e2:0e:84:4a:03:6e:12:2b: 1b:a5:39:36:30:13:52:d8:c3:d1:ce:92:95:0d:44: 04:36:38:31:ea:71:1e:8b:f6:fc:e9:e3:2b:43:b0: f4:2c:a8:e1:e4:15:90:5a:5a:d8:18:3a:df:6f:0a: 36:ae:66:24:4e:e9:91:ca:8d:8f:f7:a6:d8:76:8d: ab:00:77:08:10:07:50:4e:71:67:8b:8a:f1:58:e4: 9a:c5:69:7c:87:29:23:80:d0:a4:1c:60:68:18:6b: d7:1e:c4:74:25:a0:02:02:ed:2e:7c:d0:d6:ec:d8: e0:11:9d:a5:eb:a3:01:1c:57:5d:bc:0d:77:5f:08: 46:b5:f1:32:e8:d9:6d:ec:28:79:09:0c:58:85:ab: 15:f9:fe:89:a2:ca:43:79:a1:cd:25:af:a0:d5:63: 2e:1c:10:9b:12:36:fc:1c:fa:cc:f0:81:92:57:16: 02:8b:65:c4:7d:d7:19:aa:db:f6:6e:0c:e7:f7:5b: 09:15:52:c0:48:7b:7d:af:8a:14:45:15:70:43:56: 15:3a:86:79:f0:6f:7e:38:c0:ef:2f:4c:ce:d6:12: 75:d5:e6:2a:06:bc:ab:92:1f:95:e0:c2:21:8c:26: 91:e4:83:0d:3d:d5:a1:84:7e:2d:63:4d:f4:b5:bd: 89:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:40:16:3C:DC:04:21:79:5F:65:58:E5:74:A4:AE:EE:1C:7A:99:9B X509v3 Authority Key Identifier: keyid:3D:0B:E4:AE:38:73:55:54:CD:11:81:0A:9C:7D:20:30:19:04:01:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQvkrjhzVVTNEYEKnH0gMBkEAZg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:0a:0d:81:fa:5f:87:fb:41:54:4c:bd:3e:9b:bf:14:0a:2b: 31:53:24:af:22:d0:63:23:7a:88:68:23:4a:62:f1:d3:1a:3f: b3:09:24:bf:05:4d:cf:58:10:19:9b:8f:b1:df:96:6e:61:79: 5f:fe:58:bc:a8:03:b3:78:3d:68:45:6f:b7:27:03:b8:a4:b2: 93:c2:aa:33:f7:5c:ec:09:25:41:46:78:88:74:e2:5e:67:89: 24:ee:b3:58:a2:05:bd:58:f0:0b:c6:dc:0d:cd:5e:e9:fb:ba: 60:43:1f:6e:b7:2c:13:be:30:6e:e7:6c:20:26:a3:22:47:0c: 56:be:4d:68:4b:77:ad:9e:7f:34:03:bf:62:48:ac:7b:b2:fb: 0a:38:c0:7c:a4:90:01:e3:a7:6c:30:75:a7:41:3c:d3:07:06: c6:3d:96:db:3b:15:a9:ad:3b:e2:ed:43:f7:ff:fa:86:3d:ea: a9:1b:fe:8e:95:e7:0c:af:f2:28:8a:d8:bf:ba:b6:b4:4c:02: 9c:07:96:b9:d4:4d:b2:d5:d8:97:c9:48:3d:5c:f7:27:79:11: 4b:db:f1:44:7f:70:a9:d2:b5:f1:56:2d:ff:8b:c2:9b:20:3d: 7d:84:1b:07:72:aa:0c:cf:a3:58:3d:19:d2:65:f1:45:07:a8: dd:65:7c:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwcuXQOJV4u6qXGUtobnKIQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkMGJlNGFlMzg3MzU1NTRjZDExODEwYTljN2QyMDMwMTkw NDAxOTgwHhcNMjYwMjAyMDUwMDQxWhcNMjYwMjAzMDUwMDQxWjAzMTEwLwYDVQQD EyhmYjQwMTYzY2RjMDQyMTc5NWY2NTU4ZTU3NGE0YWVlZTFjN2E5OTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ycKe8km4g6ESgNuEisbpTk2MBNS 2MPRzpKVDUQENjgx6nEei/b86eMrQ7D0LKjh5BWQWlrYGDrfbwo2rmYkTumRyo2P 96bYdo2rAHcIEAdQTnFni4rxWOSaxWl8hykjgNCkHGBoGGvXHsR0JaACAu0ufNDW 7NjgEZ2l66MBHFddvA13XwhGtfEy6Nlt7Ch5CQxYhasV+f6JospDeaHNJa+g1WMu HBCbEjb8HPrM8IGSVxYCi2XEfdcZqtv2bgzn91sJFVLASHt9r4oURRVwQ1YVOoZ5 8G9+OMDvL0zO1hJ11eYqBryrkh+V4MIhjCaR5IMNPdWhhH4tY030tb2JXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPtAFjzcBCF5X2VY5XSkru4cepmbMB8GA1UdIwQY MBaAFD0L5K44c1VUzRGBCpx9IDAZBAGYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFF2a3JqaHpWVlRORVlFS25IMGdNQmtFQVpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kNDA0YTAtNzgwZC00M2M4LWI3MjEt ZmQyZWI1NDk3YjVjLzEvUFF2a3JqaHpWVlRORVlFS25IMGdNQmtFQVpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kNDA0YTAtNzgwZC00M2M4LWI3MjEtZmQyZWI1NDk3YjVj LzEvUFF2a3JqaHpWVlRORVlFS25IMGdNQmtFQVpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnwoNgfpf h/tBVEy9Ppu/FAorMVMkryLQYyN6iGgjSmLx0xo/swkkvwVNz1gQGZuPsd+WbmF5 X/5YvKgDs3g9aEVvtycDuKSyk8KqM/dc7AklQUZ4iHTiXmeJJO6zWKIFvVjwC8bc Dc1e6fu6YEMfbrcsE74wbudsICajIkcMVr5NaEt3rZ5/NAO/Ykise7L7CjjAfKSQ AeOnbDB1p0E80wcGxj2W2zsVqa074u1D9//6hj3qqRv+jpXnDK/yKIrYv7q2tEwC nAeWudRNstXYl8lIPVz3J3kRS9vxRH9wqdK18VYt/4vCmyA9fYQbB3KqDM+jWD0Z 0mXxRQeo3WV8/A== -----END CERTIFICATE-----Generated at Mon Feb 2 08:16:10 2026 by rpki-client