This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft File: PT-Hu394dKp-Fc_sm79qrjyc4zo.mft (raw, json) Hash identifier: hC+JVSMwwbXK8RFvqwjGh38e4+WRMMEWY51ccZVfWeI= Subject key identifier: 25:B6:9B:2E:BD:9F:68:48:F4:61:C2:F3:9A:E7:EF:5E:30:95:8F:0B Authority key identifier: 3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A Certificate issuer: /CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a Certificate serial: 019BD7343087ECD9D181452920B3EA25A82D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft Manifest number: 115A Signing time: Mon 19 Jan 2026 17:01:20 +0000 Manifest this update: Mon 19 Jan 2026 17:01:20 +0000 Manifest next update: Tue 20 Jan 2026 17:01:20 +0000 Files and hashes: 1: 03e_nKrMH4A4-r2jcWSKOro4hEs.roa (hash: DxycIoEklj35A1jvEiLRJ53FKAfEe2yJnQzuZq37gCQ=) 2: 5c-yJTh5qV_umaLR8gDO8QwCy9Y.roa (hash: jonWwn1zIDBZ/vrTcGpWTsw/eo5gVMGyObXA0g7CkyA=) 3: D4w1402cKEkHHCPC0Qrp-ROm6yo.roa (hash: EMcXFEgTqCUtUEK47llV6gmt5p0zphRz9x+4xZgTdwU=) 4: PT-Hu394dKp-Fc_sm79qrjyc4zo.crl (hash: cybnbWEy/wUQetO2n+yd0tf+PgjfWZXRNbXAmpmTwdE=) 5: VkvT6baU95xG8FSlVbrDxq01-m0.roa (hash: wuSqKSYOAMUCrbWLjcaG0f0YLG5d5+8uKukQepwPM10=) 6: Zy9ArgNtGZeoSvcBNVhQm83CAtY.roa (hash: 2tInoyGIeDu4rQu0+WHE69OTAAXptyalAWcz50Rg2Q8=) 7: abaPwP2Q_8OSCHTWIlI0CKnEXZM.roa (hash: dryzgauXbdm4FHRf2Q1oRz+2w9ySHDpr4lqY5orU7Z0=) 8: l0yUF1IRmtUQWgAm0m-qwhJJad8.roa (hash: zejsAU9sJFQnGEhJNTn/fy3BN2ZirT1vXiw3WbJzNvE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d7:34:30:87:ec:d9:d1:81:45:29:20:b3:ea:25:a8:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a Validity Not Before: Jan 19 17:01:20 2026 GMT Not After : Jan 20 17:01:20 2026 GMT Subject: CN=25b69b2ebd9f6848f461c2f39ae7ef5e30958f0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:bb:2e:81:a6:ea:ac:3e:2c:1a:d9:12:01:78: de:7d:8d:7e:4c:96:4e:74:74:51:e2:53:a9:ba:0d: c0:db:ab:32:46:d0:99:9f:2b:8a:20:27:94:2d:85: c5:9a:dd:9a:7e:bb:b0:e7:c5:4a:08:1c:b1:55:8b: 14:42:a8:75:e8:04:1e:b2:dd:9b:0d:36:31:39:a4: 85:52:6a:cd:d7:38:78:2f:41:de:17:f3:99:97:78: bc:f1:50:5f:b2:1a:32:8c:df:c5:56:45:65:c1:38: ea:f4:e0:27:52:71:62:13:5c:3f:87:8f:bb:3b:65: 44:76:90:67:86:8a:12:71:4b:24:32:0f:3e:00:e8: bd:8a:d0:5d:0e:bb:a3:3c:6f:6b:53:9a:b0:95:b0: 21:78:c3:82:92:81:01:ad:23:7f:ba:6b:61:92:fa: f0:df:20:2d:f3:93:58:3f:22:f4:99:13:df:18:9a: 9f:8c:e5:83:15:21:86:d6:bf:71:ff:4c:af:af:d0: 37:21:8b:1a:a0:b4:b4:54:97:3d:ec:0a:b0:01:cd: 76:79:37:55:83:52:6b:36:35:56:2b:b6:c2:10:c7: 34:e8:b3:88:23:a9:44:ba:c9:3d:71:79:30:a4:3e: b5:95:e9:9a:38:e2:1c:47:2b:57:41:2b:28:d1:76: 6d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:B6:9B:2E:BD:9F:68:48:F4:61:C2:F3:9A:E7:EF:5E:30:95:8F:0B X509v3 Authority Key Identifier: keyid:3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:fe:08:54:ad:9d:3d:0d:16:20:d2:af:e1:c8:89:2f:ba:22: 00:99:80:a5:9e:ff:ae:a8:63:57:a8:7a:8c:f7:f3:0f:75:5a: d3:73:6f:9b:d7:09:ba:b8:0d:92:ed:1d:06:09:de:6c:e0:7c: 1a:1a:d3:23:0b:e7:a3:de:b1:73:1b:61:e5:34:6e:62:52:d1: 78:9d:7c:ee:5f:bc:a1:27:f8:66:81:05:88:eb:55:4d:f0:8a: 34:82:b5:bf:32:de:5e:a7:97:7f:f7:18:14:03:c9:c7:8f:c8: 70:79:b4:f8:5e:98:45:54:56:7b:26:75:f8:b0:90:c1:ff:a6: d4:81:d5:db:f3:8f:2b:c5:0f:68:a3:c4:f9:90:72:07:f3:cd: 40:d8:28:0b:40:37:b1:6c:dd:97:5f:3a:1a:36:f4:b5:ec:a0: 03:2a:0d:39:d4:57:ef:66:82:e9:12:28:c3:e5:2c:9f:d3:55: 7b:10:e2:a2:d7:81:90:ad:58:b1:b7:2d:7d:d0:00:60:a4:dd: ea:59:69:cd:90:6b:f5:b0:8f:ed:8c:f5:50:51:bf:33:0b:5a: c4:0c:3f:1d:e3:08:6b:eb:f7:61:6c:90:59:02:e7:b7:e3:b9: 25:da:de:08:41:d2:70:66:dc:bc:3c:2b:62:12:18:cd:e9:e3: 9d:69:c1:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvXNDCH7NnRgUUpILPqJagtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkM2Y4N2JiN2Y3ODc0YWE3ZTE1Y2ZlYzliYmY2YWFlM2M5 Y2UzM2EwHhcNMjYwMTE5MTcwMTIwWhcNMjYwMTIwMTcwMTIwWjAzMTEwLwYDVQQD EygyNWI2OWIyZWJkOWY2ODQ4ZjQ2MWMyZjM5YWU3ZWY1ZTMwOTU4ZjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7rsugabqrD4sGtkSAXjefY1+TJZO dHRR4lOpug3A26syRtCZnyuKICeULYXFmt2afruw58VKCByxVYsUQqh16AQest2b DTYxOaSFUmrN1zh4L0HeF/OZl3i88VBfshoyjN/FVkVlwTjq9OAnUnFiE1w/h4+7 O2VEdpBnhooScUskMg8+AOi9itBdDrujPG9rU5qwlbAheMOCkoEBrSN/umthkvrw 3yAt85NYPyL0mRPfGJqfjOWDFSGG1r9x/0yvr9A3IYsaoLS0VJc97AqwAc12eTdV g1JrNjVWK7bCEMc06LOII6lEusk9cXkwpD61lemaOOIcRytXQSso0XZtywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCW2my69n2hI9GHC85rn714wlY8LMB8GA1UdIwQY MBaAFD0/h7t/eHSqfhXP7Ju/aq48nOM6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFQtSHUzOTRkS3AtRmNfc203OXFyanljNHpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83MTAxNWEtMTFiZS00NzFlLTk1OTIt NjJiZTUzNDI1Njc2LzEvUFQtSHUzOTRkS3AtRmNfc203OXFyanljNHpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC83MTAxNWEtMTFiZS00NzFlLTk1OTItNjJiZTUzNDI1Njc2 LzEvUFQtSHUzOTRkS3AtRmNfc203OXFyanljNHpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe/4IVK2d PQ0WINKv4ciJL7oiAJmApZ7/rqhjV6h6jPfzD3Va03Nvm9cJurgNku0dBgnebOB8 GhrTIwvno96xcxth5TRuYlLReJ187l+8oSf4ZoEFiOtVTfCKNIK1vzLeXqeXf/cY FAPJx4/IcHm0+F6YRVRWeyZ1+LCQwf+m1IHV2/OPK8UPaKPE+ZByB/PNQNgoC0A3 sWzdl186Gjb0teygAyoNOdRX72aC6RIow+Usn9NVexDioteBkK1YsbctfdAAYKTd 6llpzZBr9bCP7Yz1UFG/MwtaxAw/HeMIa+v3YWyQWQLnt+O5JdreCEHScGbcvDwr YhIYzenjnWnBIg== -----END CERTIFICATE-----Generated at Tue Jan 20 03:02:02 2026 by rpki-client