This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft File: pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft (raw, json) Hash identifier: FUcahy1OYi5hCmvq1fPUpTpeOa4PUXq8yqE6KTUevJE= Subject key identifier: 56:5C:E2:FA:AE:D0:75:13:E4:FF:3B:21:CB:D0:6A:0D:E5:64:B8:3B Authority key identifier: A4:AB:AF:1D:37:F0:A1:41:A8:14:CA:02:FC:01:E3:D9:62:1C:73:D9 Certificate issuer: /CN=a4abaf1d37f0a141a814ca02fc01e3d9621c73d9 Certificate serial: 019BD6C6869D5BEBE0BE4C0298D797C31349 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft Manifest number: 1769 Signing time: Mon 19 Jan 2026 15:01:33 +0000 Manifest this update: Mon 19 Jan 2026 15:01:33 +0000 Manifest next update: Tue 20 Jan 2026 15:01:33 +0000 Files and hashes: 1: RI1PUJj0Q_MD3P8uweukuXuYhlU.roa (hash: Udb4Yel6QV6x+EojTVD0SPU2vkANJh/DkSOzlaEFuOQ=) 2: pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl (hash: u4va7qaslR5AXarmn+ad8OiVpLT+qfV5cN1hjTxPitc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d6:c6:86:9d:5b:eb:e0:be:4c:02:98:d7:97:c3:13:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4abaf1d37f0a141a814ca02fc01e3d9621c73d9 Validity Not Before: Jan 19 15:01:33 2026 GMT Not After : Jan 20 15:01:33 2026 GMT Subject: CN=565ce2faaed07513e4ff3b21cbd06a0de564b83b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:4c:68:99:21:85:f7:35:8c:ba:4d:1b:63:4c: 6c:3f:71:c7:a0:be:17:e1:90:5d:3e:17:45:14:b1: b7:b6:8e:b1:23:c8:e0:c0:0f:c1:83:45:38:32:32: 33:3c:63:38:f7:89:85:b2:7b:b5:e4:41:52:e4:e0: 3d:2b:ec:2a:5d:2a:45:b0:71:9f:cf:89:a5:43:b3: b0:32:44:a6:28:61:34:ea:6a:83:5d:9a:c8:28:9d: 3f:2d:1f:81:84:dd:04:25:fa:75:8c:46:ed:13:ab: 19:06:39:45:f3:98:c0:72:0c:dc:d5:47:ee:c8:58: 8d:db:a0:03:76:c4:ef:df:f4:fa:0f:7f:35:d8:78: 63:99:97:7a:ec:6f:5d:38:52:27:ca:3d:fd:82:db: fb:35:19:52:6e:f4:2f:7c:78:a6:87:ee:97:35:ba: 66:c1:f6:ed:50:1f:9f:2f:82:17:98:3d:93:b2:c0: d6:99:ae:36:3f:bd:e7:05:70:9f:ba:16:de:44:e7: 83:67:fb:81:da:2c:2f:8c:b4:8a:28:c2:ce:9a:27: dc:34:fc:15:96:3e:12:8e:18:5a:21:0d:9a:5c:da: db:57:ea:ab:62:36:7d:89:81:c9:fe:8a:8c:9a:d4: 34:54:0f:a8:2c:46:f7:cb:25:05:ef:b4:2b:a1:e5: e6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:5C:E2:FA:AE:D0:75:13:E4:FF:3B:21:CB:D0:6A:0D:E5:64:B8:3B X509v3 Authority Key Identifier: keyid:A4:AB:AF:1D:37:F0:A1:41:A8:14:CA:02:FC:01:E3:D9:62:1C:73:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:c9:49:a6:01:e9:3a:7c:34:78:97:f3:f7:ee:ef:7a:85:b5: 79:d7:b1:12:93:c6:d4:f8:cd:ca:46:dc:93:34:d5:29:4d:f1: a4:49:78:f2:84:8c:58:38:e3:af:41:11:21:f2:8d:8d:b6:7d: 10:c8:d6:08:37:ca:ee:2b:cb:ab:02:42:cb:4c:6c:79:a3:8f: 71:de:2e:ed:ed:5b:49:51:a7:8d:89:4c:d6:a8:ff:9e:cb:a0: c2:01:eb:1e:62:ab:bd:a6:51:e5:52:9c:d7:3a:60:a1:b8:14: db:f7:c4:55:87:31:22:67:e4:c4:0f:cb:90:8e:be:cc:90:75: 1b:57:3d:e4:d6:60:e6:8d:d2:6f:f7:bc:33:76:b6:81:eb:c3: a1:59:21:ae:bc:4b:31:d3:fc:11:2f:3a:16:da:5e:1b:7e:2a: 76:57:67:d0:75:42:0b:76:45:e5:a9:8e:70:74:02:c7:c9:6d: f6:a0:32:20:4c:54:77:e8:af:74:26:d9:76:08:e8:b7:9f:1c: 25:25:dd:40:4a:64:1a:23:12:f4:bc:b5:68:4e:ea:c2:d3:b3: 5d:e8:35:b6:85:bb:d6:b8:1b:cd:b2:c4:d0:7a:aa:db:d6:99: e9:89:88:d2:3f:3a:df:04:4c:5d:77:e6:80:80:d6:0f:d8:cf: c4:cc:4d:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvWxoadW+vgvkwCmNeXwxNJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YWJhZjFkMzdmMGExNDFhODE0Y2EwMmZjMDFlM2Q5NjIx YzczZDkwHhcNMjYwMTE5MTUwMTMzWhcNMjYwMTIwMTUwMTMzWjAzMTEwLwYDVQQD Eyg1NjVjZTJmYWFlZDA3NTEzZTRmZjNiMjFjYmQwNmEwZGU1NjRiODNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6kxomSGF9zWMuk0bY0xsP3HHoL4X 4ZBdPhdFFLG3to6xI8jgwA/Bg0U4MjIzPGM494mFsnu15EFS5OA9K+wqXSpFsHGf z4mlQ7OwMkSmKGE06mqDXZrIKJ0/LR+BhN0EJfp1jEbtE6sZBjlF85jAcgzc1Ufu yFiN26ADdsTv3/T6D3812HhjmZd67G9dOFInyj39gtv7NRlSbvQvfHimh+6XNbpm wfbtUB+fL4IXmD2TssDWma42P73nBXCfuhbeROeDZ/uB2iwvjLSKKMLOmifcNPwV lj4SjhhaIQ2aXNrbV+qrYjZ9iYHJ/oqMmtQ0VA+oLEb3yyUF77QroeXm9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFZc4vqu0HUT5P87IcvQag3lZLg7MB8GA1UdIwQY MBaAFKSrrx038KFBqBTKAvwB49liHHPZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEt1dkhUZndvVUdvRk1vQ19BSGoyV0ljYzlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8xNTViZGMtYjU3NC00N2Y5LWIzNDgt OTNjZjY0Zjg4OTkwLzEvcEt1dkhUZndvVUdvRk1vQ19BSGoyV0ljYzlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS8xNTViZGMtYjU3NC00N2Y5LWIzNDgtOTNjZjY0Zjg4OTkw LzEvcEt1dkhUZndvVUdvRk1vQ19BSGoyV0ljYzlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe8lJpgHp Onw0eJfz9+7veoW1edexEpPG1PjNykbckzTVKU3xpEl48oSMWDjjr0ERIfKNjbZ9 EMjWCDfK7ivLqwJCy0xseaOPcd4u7e1bSVGnjYlM1qj/nsugwgHrHmKrvaZR5VKc 1zpgobgU2/fEVYcxImfkxA/LkI6+zJB1G1c95NZg5o3Sb/e8M3a2gevDoVkhrrxL MdP8ES86FtpeG34qdldn0HVCC3ZF5amOcHQCx8lt9qAyIExUd+ivdCbZdgjot58c JSXdQEpkGiMS9Ly1aE7qwtOzXeg1toW71rgbzbLE0Hqq29aZ6YmI0j863wRMXXfm gIDWD9jPxMxNPw== -----END CERTIFICATE-----Generated at Mon Jan 19 18:29:13 2026 by rpki-client