This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft File: PE0_sETrHAoRvgYCrO74jl9dLd8.mft (raw, json) Hash identifier: hquUGAZPfJsufoEhDkAta8vBhi5w9Q8iGwN2soyZjOY= Subject key identifier: 5A:9D:73:B3:1B:2B:25:7E:97:87:5E:6A:BD:8D:95:93:A6:9E:A2:1D Authority key identifier: 3C:4D:3F:B0:44:EB:1C:0A:11:BE:06:02:AC:EE:F8:8E:5F:5D:2D:DF Certificate issuer: /CN=3c4d3fb044eb1c0a11be0602aceef88e5f5d2ddf Certificate serial: 019BD8465E5CFEB055F61F816E1BA835F23F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft Manifest number: 1298 Signing time: Mon 19 Jan 2026 22:00:48 +0000 Manifest this update: Mon 19 Jan 2026 22:00:48 +0000 Manifest next update: Tue 20 Jan 2026 22:00:48 +0000 Files and hashes: 1: 1-HOgfqgF1c2biBD-AElNfVIIn-8.roa (hash: rquQp1RP8UWH3zSrtD5UitItXmlFwyR6n5PUoIakQfM=) 2: 3En9ZxdA_9Y7YbhdHSy_ozRVcts.roa (hash: PrZc7gBh863UgF6RDKYSJvpsQyp10e+OlGmMtcslKPQ=) 3: E1V1b19ox-LvuRijY9UoK0y3Irs.roa (hash: xEI2Rqw0cuhBI9GdkvhH+W/MRGZrUkysKcXYuHoCxrU=) 4: PE0_sETrHAoRvgYCrO74jl9dLd8.crl (hash: XHVcOSD9q5L7UeIPi55qTwFALSNojTzvPGDPFq4zB6o=) 5: cIdg71qg6R6Cf1UwQuGnxjPwBGI.roa (hash: jMe0CR6Aea2kIdpRXkGxQhJEmosKzZ2QbxS6+Je/390=) 6: y6k3BxxnUy9kVc1135zJn5vDqY4.roa (hash: pFYM4YXhU3j9qQDJy3JbLgytoWaat/MbTIVTE6xML44=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.crl rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d8:46:5e:5c:fe:b0:55:f6:1f:81:6e:1b:a8:35:f2:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4d3fb044eb1c0a11be0602aceef88e5f5d2ddf Validity Not Before: Jan 19 22:00:48 2026 GMT Not After : Jan 20 22:00:48 2026 GMT Subject: CN=5a9d73b31b2b257e97875e6abd8d9593a69ea21d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6e:8f:63:56:76:b3:87:da:09:93:0e:82:d0: 01:bc:2a:fc:0b:1c:9f:a4:53:66:c1:10:4e:3b:22: 43:a1:9e:4e:81:7b:a1:f0:ac:24:06:9f:a1:36:10: 8d:55:05:d7:b7:d6:10:89:f3:79:a1:53:27:55:23: 56:1f:d1:a6:c2:29:55:8c:c0:62:91:ef:e4:e0:c2: eb:9d:03:c9:1a:00:35:7e:0d:3c:72:12:6a:d0:12: 80:cc:fc:34:f5:27:d6:ea:d5:91:bc:3e:57:ca:cf: 17:53:e1:68:78:86:82:15:0e:ca:88:3d:de:2f:55: d1:46:79:63:6d:f4:bd:94:bf:57:26:c2:5a:76:f9: 69:38:ca:63:54:7b:ba:08:dc:c9:d3:2e:30:97:71: 8b:6d:eb:07:f0:e2:d9:3f:1d:b3:d3:67:9b:63:8f: 35:b7:96:1d:bc:f4:d5:4d:2d:2b:bb:45:1c:d9:ee: 60:d3:ef:4d:cd:6b:68:90:11:68:2a:84:d3:3f:97: 49:42:2a:6e:11:42:80:92:eb:b3:6e:06:31:ef:5b: 39:28:78:14:6a:06:e4:13:53:39:32:94:63:84:26: 53:95:4f:8f:7f:10:7a:d8:57:c8:cb:48:75:3d:5e: 8b:d8:ab:cc:79:fa:d1:ed:24:7a:ef:1a:e5:29:10: 7b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:9D:73:B3:1B:2B:25:7E:97:87:5E:6A:BD:8D:95:93:A6:9E:A2:1D X509v3 Authority Key Identifier: keyid:3C:4D:3F:B0:44:EB:1C:0A:11:BE:06:02:AC:EE:F8:8E:5F:5D:2D:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:08:b9:c7:2c:13:59:5b:69:3d:22:8c:93:2b:5a:c8:f5:9f: 7d:00:bc:ca:60:80:18:32:b9:69:6a:56:a6:fb:2b:6a:44:a0: 28:99:8a:97:48:c0:11:b4:57:ad:06:71:12:25:62:d5:5d:59: 19:fb:d8:b9:9a:cd:7c:c4:e9:4d:a7:ae:d4:ea:a4:19:2b:9e: b1:82:00:b1:ac:2e:0b:f7:ff:c6:05:fa:ca:3f:08:5d:90:4b: 5e:04:19:42:6b:7b:32:82:57:11:f3:7b:d1:6e:55:0d:07:c6: ba:e4:22:88:69:29:4d:07:be:29:c7:b4:d5:56:8c:8e:2b:28: f9:40:42:39:54:67:a0:90:7b:6c:43:40:56:a8:63:db:a3:db: ab:eb:01:e1:5c:8b:22:71:09:05:5c:b2:8f:f1:3a:3d:74:de: 4d:b7:6b:3d:4d:fe:1c:3f:95:9b:65:8f:1b:4b:ec:a2:68:5d: e1:6d:39:d3:3e:fb:a6:a4:4f:23:aa:8d:64:c8:73:b4:1c:41: 0c:86:c8:ce:4f:0e:e0:5d:33:b0:c8:7d:fb:3d:aa:34:c9:68: b7:0a:e1:51:c3:58:28:61:44:a5:ca:ac:6c:a4:68:3d:4a:d5: 9a:b2:5f:36:14:02:38:7b:5a:c6:e6:dd:02:e2:42:bc:05:8c: a3:02:ac:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvYRl5c/rBV9h+BbhuoNfI/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjNGQzZmIwNDRlYjFjMGExMWJlMDYwMmFjZWVmODhlNWY1 ZDJkZGYwHhcNMjYwMTE5MjIwMDQ4WhcNMjYwMTIwMjIwMDQ4WjAzMTEwLwYDVQQD Eyg1YTlkNzNiMzFiMmIyNTdlOTc4NzVlNmFiZDhkOTU5M2E2OWVhMjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtm6PY1Z2s4faCZMOgtABvCr8Cxyf pFNmwRBOOyJDoZ5OgXuh8KwkBp+hNhCNVQXXt9YQifN5oVMnVSNWH9GmwilVjMBi ke/k4MLrnQPJGgA1fg08chJq0BKAzPw09SfW6tWRvD5Xys8XU+FoeIaCFQ7KiD3e L1XRRnljbfS9lL9XJsJadvlpOMpjVHu6CNzJ0y4wl3GLbesH8OLZPx2z02ebY481 t5YdvPTVTS0ru0Uc2e5g0+9NzWtokBFoKoTTP5dJQipuEUKAkuuzbgYx71s5KHgU agbkE1M5MpRjhCZTlU+PfxB62FfIy0h1PV6L2KvMefrR7SR67xrlKRB78QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFqdc7MbKyV+l4dear2NlZOmnqIdMB8GA1UdIwQY MBaAFDxNP7BE6xwKEb4GAqzu+I5fXS3fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEUwX3NFVHJIQW9SdmdZQ3JPNzRqbDlkTGQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS83NmUwN2MtOGEzMi00ODlkLTkxZDEt YjE4NGUzZjRiNTBlLzEvUEUwX3NFVHJIQW9SdmdZQ3JPNzRqbDlkTGQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS83NmUwN2MtOGEzMi00ODlkLTkxZDEtYjE4NGUzZjRiNTBl LzEvUEUwX3NFVHJIQW9SdmdZQ3JPNzRqbDlkTGQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmgi5xywT WVtpPSKMkytayPWffQC8ymCAGDK5aWpWpvsrakSgKJmKl0jAEbRXrQZxEiVi1V1Z GfvYuZrNfMTpTaeu1OqkGSuesYIAsawuC/f/xgX6yj8IXZBLXgQZQmt7MoJXEfN7 0W5VDQfGuuQiiGkpTQe+Kce01VaMjiso+UBCOVRnoJB7bENAVqhj26Pbq+sB4VyL InEJBVyyj/E6PXTeTbdrPU3+HD+Vm2WPG0vsomhd4W050z77pqRPI6qNZMhztBxB DIbIzk8O4F0zsMh9+z2qNMlotwrhUcNYKGFEpcqsbKRoPUrVmrJfNhQCOHtaxubd AuJCvAWMowKsYQ== -----END CERTIFICATE-----Generated at Tue Jan 20 03:00:45 2026 by rpki-client