This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft File: PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft (raw, json) Hash identifier: QcTzNGtYwFIE3hLcMcrQo2ZE9HclaQijpafg18cnOug= Subject key identifier: 98:C5:BE:CE:24:54:32:12:B5:80:4D:0C:6E:60:CD:D4:DA:16:B7:CE Authority key identifier: 3D:B0:49:DA:5E:12:06:4E:CF:E1:39:E1:20:BE:EF:6F:17:8B:FD:F3 Certificate issuer: /CN=3db049da5e12064ecfe139e120beef6f178bfdf3 Certificate serial: 019BFB76F312535C10CBA23CFC4DF7237203 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft Manifest number: 0322 Signing time: Mon 26 Jan 2026 18:00:35 +0000 Manifest this update: Mon 26 Jan 2026 18:00:35 +0000 Manifest next update: Tue 27 Jan 2026 18:00:35 +0000 Files and hashes: 1: PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl (hash: w88HhHevh4XQnZYmLxlyocA2vs9ln9zpzyzj15idYfM=) 2: UUAHI_7SIhKcVzW9olEU3hr90P4.roa (hash: 1Mr7LwrS72G42+UhnAG6LuOalIKM9llRzMme5qGk16o=) 3: X0orZvAnpH23wTY0Q4gXoTzt8KI.roa (hash: VF40dmzH/cRgFMsp6KEMnD9BlOVNc71M0tqY5JA5SJU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:76:f3:12:53:5c:10:cb:a2:3c:fc:4d:f7:23:72:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3db049da5e12064ecfe139e120beef6f178bfdf3 Validity Not Before: Jan 26 18:00:35 2026 GMT Not After : Jan 27 18:00:35 2026 GMT Subject: CN=98c5bece24543212b5804d0c6e60cdd4da16b7ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:49:48:87:f0:a7:35:5e:91:c4:3b:88:ad:90: 98:bb:d1:9a:1f:34:a2:52:d8:d9:b3:ee:d8:01:b6: 05:a4:ce:ec:c3:36:fd:9b:c2:17:6a:aa:4a:f3:c8: f0:6e:6a:a3:bb:72:86:17:8c:0d:7a:35:f2:cc:9b: 0d:ac:5e:71:89:20:20:99:cc:e3:fc:36:aa:5b:8b: 25:66:86:71:2d:58:76:5f:14:f9:f0:4d:d6:13:fe: 30:e6:02:a6:87:ec:96:e2:90:3c:6c:c3:ec:da:f0: d5:be:82:ce:de:00:42:2a:7d:9e:3c:1b:20:66:85: 8e:6d:02:32:c6:f0:2f:a1:bf:b9:79:32:59:af:b1: 66:bb:1c:46:6a:94:d0:b9:ca:6d:a7:07:af:02:28: f3:11:36:31:61:d8:5f:ce:fc:59:fe:f2:ec:40:d6: 27:c6:c8:91:3f:7a:ef:2d:9c:1b:d4:82:d3:ef:c3: 32:6d:61:2b:16:4d:b7:88:d0:e6:39:42:39:6d:7f: d0:ba:3b:bf:f8:c3:bc:01:24:44:4c:e7:c4:14:0c: 5f:c4:7b:52:3c:a6:20:de:98:c6:6a:b8:b0:12:0c: 8b:93:13:29:f5:a9:ea:cd:9a:ec:a8:b1:8c:29:8a: 7f:c0:87:c6:8d:fb:69:37:c6:4b:de:34:b2:98:0b: dd:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:C5:BE:CE:24:54:32:12:B5:80:4D:0C:6E:60:CD:D4:DA:16:B7:CE X509v3 Authority Key Identifier: keyid:3D:B0:49:DA:5E:12:06:4E:CF:E1:39:E1:20:BE:EF:6F:17:8B:FD:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:40:4e:6e:bb:fa:32:99:79:f6:9e:25:67:70:4f:75:26:b8: 86:cb:33:2e:aa:12:77:8d:6e:19:67:6a:75:6d:7a:4e:82:23: 39:89:0a:a5:5e:1d:a5:6a:74:96:57:d0:78:b2:66:3a:7b:c8: 79:77:be:30:ca:8f:02:94:01:02:dc:f1:e6:89:14:15:a3:74: 99:a7:98:5b:7e:8e:20:9a:44:01:d3:04:87:bb:49:1d:e3:b7: 52:e4:29:27:f4:77:7a:9c:bf:cc:7b:5d:29:c4:0f:62:0d:48: 69:10:e7:4d:23:af:a4:5d:b3:ff:e2:c3:19:a4:a1:8f:25:63: a4:7b:33:d8:b1:70:7d:c0:f4:3f:fe:b7:c3:4b:17:6a:e3:07: fa:0c:9b:bf:1d:79:4e:72:f9:21:e8:32:50:20:e1:2d:15:ec: 61:7f:bb:5e:c9:d3:a7:02:be:d7:98:bc:8d:bc:10:4e:f6:87: 5c:93:31:e7:3d:5f:81:56:a3:24:57:ca:0b:b7:b6:af:ee:80: ea:9c:9f:99:df:45:8e:9e:3a:58:a5:3b:c4:8f:d7:c8:cd:04: ff:57:19:9c:55:a2:29:ee:03:89:53:c1:1d:6d:e5:c5:35:38: 5d:3a:d5:38:97:ef:a7:82:a1:30:bd:b3:5c:dd:e0:d6:6d:2a: dd:49:7a:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7dvMSU1wQy6I8/E33I3IDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkYjA0OWRhNWUxMjA2NGVjZmUxMzllMTIwYmVlZjZmMTc4 YmZkZjMwHhcNMjYwMTI2MTgwMDM1WhcNMjYwMTI3MTgwMDM1WjAzMTEwLwYDVQQD Eyg5OGM1YmVjZTI0NTQzMjEyYjU4MDRkMGM2ZTYwY2RkNGRhMTZiN2NlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ElIh/CnNV6RxDuIrZCYu9GaHzSi UtjZs+7YAbYFpM7swzb9m8IXaqpK88jwbmqju3KGF4wNejXyzJsNrF5xiSAgmczj /DaqW4slZoZxLVh2XxT58E3WE/4w5gKmh+yW4pA8bMPs2vDVvoLO3gBCKn2ePBsg ZoWObQIyxvAvob+5eTJZr7FmuxxGapTQucptpwevAijzETYxYdhfzvxZ/vLsQNYn xsiRP3rvLZwb1ILT78MybWErFk23iNDmOUI5bX/Quju/+MO8ASRETOfEFAxfxHtS PKYg3pjGariwEgyLkxMp9anqzZrsqLGMKYp/wIfGjftpN8ZL3jSymAvdbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJjFvs4kVDIStYBNDG5gzdTaFrfOMB8GA1UdIwQY MBaAFD2wSdpeEgZOz+E54SC+728Xi/3zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGJCSjJsNFNCazdQNFRuaElMN3ZieGVMX2ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy81YmM1MTctYzFmNi00ZTRmLWI1Yzct OGU1N2JhZDVjNTI3LzEvUGJCSjJsNFNCazdQNFRuaElMN3ZieGVMX2ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy81YmM1MTctYzFmNi00ZTRmLWI1YzctOGU1N2JhZDVjNTI3 LzEvUGJCSjJsNFNCazdQNFRuaElMN3ZieGVMX2ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAukBObrv6 Mpl59p4lZ3BPdSa4hsszLqoSd41uGWdqdW16ToIjOYkKpV4dpWp0llfQeLJmOnvI eXe+MMqPApQBAtzx5okUFaN0maeYW36OIJpEAdMEh7tJHeO3UuQpJ/R3epy/zHtd KcQPYg1IaRDnTSOvpF2z/+LDGaShjyVjpHsz2LFwfcD0P/63w0sXauMH+gybvx15 TnL5IegyUCDhLRXsYX+7XsnTpwK+15i8jbwQTvaHXJMx5z1fgVajJFfKC7e2r+6A 6pyfmd9Fjp46WKU7xI/XyM0E/1cZnFWiKe4DiVPBHW3lxTU4XTrVOJfvp4KhML2z XN3g1m0q3Ul6Uw== -----END CERTIFICATE-----Generated at Tue Jan 27 01:33:40 2026 by rpki-client