This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft File: pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft (raw, json) Hash identifier: DCARTKyVxDqvt6GAxwascG+GMpUKA/TIUyxTc+/RV3o= Subject key identifier: 0A:58:6C:8B:05:C4:FC:2F:90:00:8F:9F:80:2E:F3:F5:C0:0F:1A:55 Authority key identifier: A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4 Certificate issuer: /CN=a499903dab85f6a59772b3edfd4bf0e491af57c4 Certificate serial: 019BFE0A555E71C370E0DD9389725F7F1F07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft Manifest number: 17F2 Signing time: Tue 27 Jan 2026 06:00:48 +0000 Manifest this update: Tue 27 Jan 2026 06:00:48 +0000 Manifest next update: Wed 28 Jan 2026 06:00:48 +0000 Files and hashes: 1: 6tyXfV2-VjQvcpv87Kt9vE6HFzw.roa (hash: A154uIVBWW18JX5P8xttoUSBJ4YcDPO4IGCdrwKK67Q=) 2: 7UycSOA2fNBupvFy-hFdJV1v7Io.roa (hash: 5kwOqNqNs3Py67MnZDjj6z2WyhVaijv3n26KPo38psM=) 3: EUznPNdi1RBuO_YCf9akt2u9WRY.roa (hash: LZ23fGDWAJm3pcS6NWs5vwLClCe20PqadqZJEm5+Myk=) 4: arHeDdPCjS_AVATAetTx45LL1Dk.roa (hash: wzrmHuwOdDJUETKg+nffMJxHljjlvyXkAo4P+Hrjp2w=) 5: gugoFb8q0SHtyIBkY0PLePdn0z4.roa (hash: PfJgvUjin+qon9RPc3E2cAaH5BLLpJd7HD9BJAEBX68=) 6: pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl (hash: IXTWWOMCuwttvwPJXpRKmiRWORNEohYB04n8Z3k3FDg=) 7: xoRDajz4eJy11O_J5fLAv4U4v9E.roa (hash: CkGw0sLJe5mjxRbSsZKMcGEgfVdDoPyOYU+L3J4izT4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 06:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:0a:55:5e:71:c3:70:e0:dd:93:89:72:5f:7f:1f:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a499903dab85f6a59772b3edfd4bf0e491af57c4 Validity Not Before: Jan 27 06:00:48 2026 GMT Not After : Jan 28 06:00:48 2026 GMT Subject: CN=0a586c8b05c4fc2f90008f9f802ef3f5c00f1a55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9d:de:55:31:41:e7:9e:f5:b5:ae:ae:d6:08: 2a:f8:97:3e:a4:a2:3f:87:1b:91:60:f8:9a:f4:97: 38:cb:04:02:4c:b4:20:f1:9a:9b:bc:84:d0:7d:12: e8:72:45:25:cb:1a:f0:a7:b0:d2:32:f2:3e:8a:52: 1c:0e:c1:b8:fd:32:47:30:b9:20:d5:57:98:02:f1: eb:7b:fe:fe:e7:d3:1e:87:52:f7:58:56:2d:25:aa: 64:7f:00:63:65:e5:5a:a5:3e:01:34:45:b3:e9:2a: 0e:35:d6:8d:85:09:98:93:32:85:1e:d3:5c:45:05: 97:c1:4c:d6:56:4d:79:e9:21:7a:fd:e9:4d:14:55: 6a:ce:6e:f9:9b:96:87:1e:ac:e8:79:85:c0:63:60: 69:79:18:8d:29:34:6f:30:73:8c:ce:6c:df:63:b4: b3:1f:13:0e:9a:ba:91:99:08:7c:ae:c8:76:d6:9f: 7e:99:15:d4:e7:66:4f:65:70:12:6b:02:ae:b0:04: b7:15:c6:2c:63:19:b1:ee:17:93:5f:16:d9:72:24: 40:1e:56:b9:02:19:64:48:60:35:c2:e2:a0:c9:fb: b6:7f:40:3c:a1:04:47:ae:e6:37:3c:37:d3:6e:ba: 59:8c:b8:fb:39:31:f5:79:08:92:68:dd:de:0b:28: 93:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:58:6C:8B:05:C4:FC:2F:90:00:8F:9F:80:2E:F3:F5:C0:0F:1A:55 X509v3 Authority Key Identifier: keyid:A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:12:93:b7:46:e4:35:cc:fc:1b:63:33:8c:d8:f6:51:50:a6: 67:5b:78:de:30:55:5d:82:fe:37:ac:d8:4f:15:f2:b8:aa:24: 45:f7:18:b5:45:69:96:84:78:cf:7e:fe:46:de:1a:74:ba:d0: b3:32:82:cd:83:d1:56:d8:51:fb:56:d8:8d:35:54:c6:8f:b9: 1e:a7:e4:f6:b8:50:cd:e7:f4:72:31:56:4b:7b:6a:6a:e6:22: 85:6d:b1:1c:0d:35:66:19:a1:27:2f:e7:8b:6d:32:64:13:c6: 8b:13:3d:ce:af:44:b2:7b:a9:ad:eb:0c:ee:80:f7:af:9f:6c: e8:6c:4c:60:a3:df:db:39:59:a7:b0:fb:49:d9:15:50:01:e3: d2:9a:2c:7d:bb:6b:04:86:7a:37:8b:e0:9c:e5:2a:48:2d:9f: 0d:e9:e4:c3:89:c2:f3:bb:35:15:79:57:f2:51:36:41:56:41: 58:d1:0e:10:0a:13:d7:e0:5e:77:0f:9d:66:bd:f7:b7:65:78: 68:0d:25:8d:bd:90:64:6f:27:0d:23:02:d7:86:7f:35:00:c3: e2:5e:25:f2:36:a1:39:86:3f:68:c0:fd:33:7f:50:c7:23:48: f5:c8:77:e7:4c:96:b8:4b:6b:e8:72:cc:04:e1:01:fc:35:b4: 88:08:26:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+ClVeccNw4N2TiXJffx8HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0OTk5MDNkYWI4NWY2YTU5NzcyYjNlZGZkNGJmMGU0OTFh ZjU3YzQwHhcNMjYwMTI3MDYwMDQ4WhcNMjYwMTI4MDYwMDQ4WjAzMTEwLwYDVQQD EygwYTU4NmM4YjA1YzRmYzJmOTAwMDhmOWY4MDJlZjNmNWMwMGYxYTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwp3eVTFB5571ta6u1ggq+Jc+pKI/ hxuRYPia9Jc4ywQCTLQg8ZqbvITQfRLockUlyxrwp7DSMvI+ilIcDsG4/TJHMLkg 1VeYAvHre/7+59Meh1L3WFYtJapkfwBjZeVapT4BNEWz6SoONdaNhQmYkzKFHtNc RQWXwUzWVk156SF6/elNFFVqzm75m5aHHqzoeYXAY2BpeRiNKTRvMHOMzmzfY7Sz HxMOmrqRmQh8rsh21p9+mRXU52ZPZXASawKusAS3FcYsYxmx7heTXxbZciRAHla5 AhlkSGA1wuKgyfu2f0A8oQRHruY3PDfTbrpZjLj7OTH1eQiSaN3eCyiTUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFApYbIsFxPwvkACPn4Au8/XADxpVMB8GA1UdIwQY MBaAFKSZkD2rhfall3Kz7f1L8OSRr1fEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEptUVBhdUY5cVdYY3JQdF9Vdnc1Skd2VjhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC84ZWRhOWEtZDEzYy00NDMwLThjZjQt NTdlYzEyZTg2NDFlLzEvcEptUVBhdUY5cVdYY3JQdF9Vdnc1Skd2VjhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC84ZWRhOWEtZDEzYy00NDMwLThjZjQtNTdlYzEyZTg2NDFl LzEvcEptUVBhdUY5cVdYY3JQdF9Vdnc1Skd2VjhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAShKTt0bk Ncz8G2MzjNj2UVCmZ1t43jBVXYL+N6zYTxXyuKokRfcYtUVploR4z37+Rt4adLrQ szKCzYPRVthR+1bYjTVUxo+5Hqfk9rhQzef0cjFWS3tqauYihW2xHA01ZhmhJy/n i20yZBPGixM9zq9EsnupresM7oD3r59s6GxMYKPf2zlZp7D7SdkVUAHj0posfbtr BIZ6N4vgnOUqSC2fDenkw4nC87s1FXlX8lE2QVZBWNEOEAoT1+Bedw+dZr33t2V4 aA0ljb2QZG8nDSMC14Z/NQDD4l4l8jahOYY/aMD9M39QxyNI9ch350yWuEtr6HLM BOEB/DW0iAgmzQ== -----END CERTIFICATE-----Generated at Tue Jan 27 13:05:25 2026 by rpki-client