This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft File: paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft (raw, json) Hash identifier: gZRk7HKxrqg59SIsdoQr2V5AQvC5I7jZXoWfyqKpX20= Subject key identifier: A7:5A:D5:13:E6:E3:F3:4E:B0:97:44:8C:B1:BF:7F:BA:4C:67:35:89 Authority key identifier: A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D Certificate issuer: /CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d Certificate serial: 019BA5A301A0946A24831BB944B6DCF454F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft Manifest number: 17C2 Signing time: Sat 10 Jan 2026 02:01:21 +0000 Manifest this update: Sat 10 Jan 2026 02:01:21 +0000 Manifest next update: Sun 11 Jan 2026 02:01:21 +0000 Files and hashes: 1: 0GdrGUzc31VNEgX3ISoJ_m5myHk.roa (hash: vBZ4lfIUKdkANOUf/RGKH/Q46oCYunKaIUyZMS4D7Fs=) 2: paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl (hash: qTm4t/WqxKuFrxRgNpzwOn2Vo1iYD5fmX70tPWhxDV0=) 3: se02O1EFOfuuml44wMiZgyO2KII.roa (hash: AlrbaCebugsyoGXAmf3G02yP2NNj5y/a7F97bME+Kxw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 23:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a5:a3:01:a0:94:6a:24:83:1b:b9:44:b6:dc:f4:54:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d Validity Not Before: Jan 10 02:01:21 2026 GMT Not After : Jan 11 02:01:21 2026 GMT Subject: CN=a75ad513e6e3f34eb097448cb1bf7fba4c673589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:aa:df:a3:86:32:18:72:3d:78:b9:5b:ef:5b: 90:d6:2a:12:71:a8:0e:c6:b3:d3:44:28:37:da:04: bf:d7:e3:58:5e:57:03:32:f4:16:43:cc:a6:a3:00: 3a:9f:7d:cf:65:23:c1:5d:c6:a5:4d:3c:d3:6e:12: d7:ef:db:6a:14:6e:83:0f:b1:3d:2c:bc:b3:01:fb: a6:8a:9e:cf:6d:49:52:59:4c:b4:5b:16:6b:d4:f7: 16:5f:03:5d:7e:d6:6e:f3:12:c8:19:70:4c:7e:7b: 90:a2:30:68:fb:56:12:9f:84:b7:78:f3:cf:1b:c8: 4b:97:56:21:b2:50:e8:08:70:6c:b0:35:ee:7f:e8: 73:e1:44:da:b7:16:d7:24:85:92:e8:4b:07:82:78: b8:ed:37:cb:24:b7:5a:d8:7b:09:4b:1b:bc:71:39: cf:a0:f4:2c:bb:62:6d:1d:7e:58:4d:2a:73:61:ce: 76:e6:5a:5a:b0:25:d3:d7:50:79:24:3b:62:12:4c: 38:2b:1c:7b:dd:9b:bb:dd:ff:78:8c:05:e6:b1:79: 74:8c:a5:43:52:b7:76:ea:2a:36:f3:74:33:28:66: 81:d5:18:89:43:e3:f0:06:3f:16:e8:5b:f6:5e:c9: 3d:da:f7:48:50:a8:3f:6f:62:df:95:b6:52:fb:65: 85:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:5A:D5:13:E6:E3:F3:4E:B0:97:44:8C:B1:BF:7F:BA:4C:67:35:89 X509v3 Authority Key Identifier: keyid:A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:2e:bf:39:05:4e:49:01:1f:4a:08:1c:fc:c7:c6:51:17:69: f6:8b:08:19:9e:05:32:83:dd:b2:ee:66:84:e8:77:38:27:97: d3:ea:d4:61:3a:db:99:10:46:10:e1:f5:a7:10:92:63:6a:4f: c1:b8:6f:54:5b:d8:58:9e:96:90:c5:c6:79:42:9c:68:93:76: ff:92:19:18:03:91:a8:87:27:80:e0:e8:e9:50:37:2d:a3:38: 87:ae:96:f3:de:04:be:64:5c:fe:78:ef:df:03:a5:94:fe:e4: 89:1a:1e:b9:22:4d:8c:f5:ff:0c:73:a7:03:77:4c:2c:92:fc: e0:a5:26:c6:ec:0f:0a:94:bf:1b:92:47:b1:bb:c1:10:26:b4: 0e:94:9f:18:4e:ea:93:a6:f9:9d:c2:5b:3f:1c:00:b2:e1:fd: 63:de:95:38:a1:6e:b1:38:dc:40:1e:95:23:b0:e0:bd:5b:93: 3b:08:b6:35:00:e6:1c:86:4d:0a:cf:46:71:0d:23:57:e0:28: 2a:55:d2:d5:78:a7:29:dd:84:c5:12:d0:b8:22:e5:13:89:28: 50:d1:8d:73:2e:36:1d:f6:e3:86:db:d5:80:50:9e:e9:b3:d4: 52:9d:7e:33:51:a0:a4:70:3f:e0:ce:e9:9a:fb:6d:06:e7:3c: c3:03:3a:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZulowGglGokgxu5RLbc9FTxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YTQyZDI2MGQ1ZWNkYzJmYTJiMGI1ZGJmNjAzYjkwZDcx NTQ0NGQwHhcNMjYwMTEwMDIwMTIxWhcNMjYwMTExMDIwMTIxWjAzMTEwLwYDVQQD EyhhNzVhZDUxM2U2ZTNmMzRlYjA5NzQ0OGNiMWJmN2ZiYTRjNjczNTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+qrfo4YyGHI9eLlb71uQ1ioScagO xrPTRCg32gS/1+NYXlcDMvQWQ8ymowA6n33PZSPBXcalTTzTbhLX79tqFG6DD7E9 LLyzAfumip7PbUlSWUy0WxZr1PcWXwNdftZu8xLIGXBMfnuQojBo+1YSn4S3ePPP G8hLl1YhslDoCHBssDXuf+hz4UTatxbXJIWS6EsHgni47TfLJLda2HsJSxu8cTnP oPQsu2JtHX5YTSpzYc525lpasCXT11B5JDtiEkw4Kxx73Zu73f94jAXmsXl0jKVD Urd26io283QzKGaB1RiJQ+PwBj8W6Fv2Xsk92vdIUKg/b2LflbZS+2WFnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKda1RPm4/NOsJdEjLG/f7pMZzWJMB8GA1UdIwQY MBaAFKWkLSYNXs3C+isLXb9gO5DXFURNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGFRdEpnMWV6Y0w2S3d0ZHYyQTdrTmNWUkUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9jMzkyZDctMGE5OS00MWM5LWEyY2Qt ZjBkMmI5NDNjYjUzLzEvcGFRdEpnMWV6Y0w2S3d0ZHYyQTdrTmNWUkUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9jMzkyZDctMGE5OS00MWM5LWEyY2QtZjBkMmI5NDNjYjUz LzEvcGFRdEpnMWV6Y0w2S3d0ZHYyQTdrTmNWUkUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAii6/OQVO SQEfSggc/MfGURdp9osIGZ4FMoPdsu5mhOh3OCeX0+rUYTrbmRBGEOH1pxCSY2pP wbhvVFvYWJ6WkMXGeUKcaJN2/5IZGAORqIcngODo6VA3LaM4h66W894EvmRc/njv 3wOllP7kiRoeuSJNjPX/DHOnA3dMLJL84KUmxuwPCpS/G5JHsbvBECa0DpSfGE7q k6b5ncJbPxwAsuH9Y96VOKFusTjcQB6VI7DgvVuTOwi2NQDmHIZNCs9GcQ0jV+Ao KlXS1XinKd2ExRLQuCLlE4koUNGNcy42HfbjhtvVgFCe6bPUUp1+M1GgpHA/4M7p mvttBuc8wwM6LQ== -----END CERTIFICATE-----Generated at Sat Jan 10 08:25:52 2026 by rpki-client