This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft File: PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft (raw, json) Hash identifier: RaeFqgjl6LnqTrcp9ADgeuPKgLor2W5dXm6uREbj/TE= Subject key identifier: 92:49:AB:9C:4E:30:9E:1D:49:60:8E:08:CD:1A:91:4A:07:EC:D3:20 Authority key identifier: 3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8 Certificate issuer: /CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8 Certificate serial: 019BFA2E7EC4B078837F43E6F0072EB07C74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft Manifest number: 1229 Signing time: Mon 26 Jan 2026 12:01:49 +0000 Manifest this update: Mon 26 Jan 2026 12:01:49 +0000 Manifest next update: Tue 27 Jan 2026 12:01:49 +0000 Files and hashes: 1: PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl (hash: YZWj9hOy/5UJfn0XSk8JQup+VAzTgm5UqOZL18DkNJg=) 2: gL9EqHQMs4bG4oMIFAFssgsZoOA.roa (hash: 3prBqAaTJvJVtGOfAi6JZ5inmYJTvI1RJCOwmGXICQ4=) 3: v2V88seM-Nwzh5wj9f_9IQhYFX0.roa (hash: XYFFs6E41zM0dNU5XXPXTg3Z5qY8tv1UZybspVMB9NU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2e:7e:c4:b0:78:83:7f:43:e6:f0:07:2e:b0:7c:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8 Validity Not Before: Jan 26 12:01:49 2026 GMT Not After : Jan 27 12:01:49 2026 GMT Subject: CN=9249ab9c4e309e1d49608e08cd1a914a07ecd320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:9b:f4:3c:2c:85:9d:8f:ff:25:3c:e1:0f:72: e0:b2:43:ea:2d:ed:ac:51:10:bc:e5:68:3a:16:d7: 5f:c3:4b:f5:4d:0d:99:f7:eb:03:7f:4c:d7:c8:ce: 7d:08:d9:21:54:4f:69:6c:98:b1:ee:27:67:73:83: 3b:fc:8f:05:3d:e9:2e:f8:d1:51:6e:e6:30:a2:51: f9:e9:d0:a8:d9:cf:0f:8d:01:8b:f3:8f:ba:56:6c: a2:3b:76:cb:65:61:a4:07:0b:d7:43:58:f6:92:12: 66:9e:0a:f7:e9:1d:e6:11:28:4c:05:f5:10:06:2b: a7:be:d9:f8:9c:8c:75:3d:1c:5e:c1:96:c8:d1:51: 4e:3e:8d:e3:e4:e2:7b:4a:4f:49:cd:80:6b:80:55: fb:58:ef:52:9c:d0:17:7d:94:0c:cb:bc:b5:27:25: 7e:d7:2c:80:91:e6:d6:aa:ed:a9:69:5d:58:ff:64: 44:56:ba:eb:cb:de:58:44:91:e9:87:fc:ec:9d:a5: 07:23:d2:12:47:77:28:0d:00:e8:d0:5f:68:cf:e5: 01:e7:ef:51:af:05:11:47:a1:e9:72:46:bc:0d:c7: 1a:1c:ad:74:dd:98:d9:76:13:09:47:0d:ed:0b:61: d5:fb:ce:63:36:35:58:50:b2:2b:5d:94:6c:63:b5: cd:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:49:AB:9C:4E:30:9E:1D:49:60:8E:08:CD:1A:91:4A:07:EC:D3:20 X509v3 Authority Key Identifier: keyid:3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:98:a8:62:c0:6d:31:48:1f:47:50:72:7b:cf:63:2f:70:c1: 63:b6:4f:ce:58:76:97:66:2a:a3:22:5c:0a:10:fe:0b:25:be: 05:80:dc:15:28:9a:8d:9b:e0:49:f1:84:21:91:82:97:2b:97: cb:98:a0:96:3c:e3:00:0f:6c:a5:a8:44:d2:bd:f9:cc:ec:f7: 83:7f:4c:52:d5:df:c9:d7:b0:f4:1d:ab:b2:bd:cd:c5:eb:fc: 0a:6f:57:92:2c:39:d0:fa:8f:0b:3b:a2:42:a8:9b:82:5f:8e: c5:49:eb:57:12:f3:24:f7:a1:a3:95:df:14:ce:5b:1c:4f:ed: e8:b4:a6:53:f6:a6:eb:fe:08:21:66:ee:18:6a:ce:cb:1e:1f: 8e:6f:41:b1:4a:b2:0d:9a:18:d0:b9:05:fa:42:fe:83:d7:83: be:e6:ef:21:83:75:fc:16:d9:98:4c:81:c8:39:e9:91:96:2c: 69:5e:ee:0a:7a:a7:2c:2f:d4:68:02:64:63:ed:94:51:1c:76: ad:07:f1:93:7e:b5:6d:9f:47:61:cb:fa:78:7f:5e:c8:f7:97: a9:a6:a8:ac:f7:c0:26:e8:a1:ec:61:81:0a:1a:89:b3:48:9f: e4:02:de:98:c3:37:6a:4e:02:02:6b:37:3b:71:c6:4d:4a:77: 72:b3:8b:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6Ln7EsHiDf0Pm8AcusHx0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkZmEyOTM2OGM4YmU2OWM4ZWRkNWFhMTkzNTU3ZmNiYTJh NTdlYzgwHhcNMjYwMTI2MTIwMTQ5WhcNMjYwMTI3MTIwMTQ5WjAzMTEwLwYDVQQD Eyg5MjQ5YWI5YzRlMzA5ZTFkNDk2MDhlMDhjZDFhOTE0YTA3ZWNkMzIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Jv0PCyFnY//JTzhD3LgskPqLe2s URC85Wg6Ftdfw0v1TQ2Z9+sDf0zXyM59CNkhVE9pbJix7idnc4M7/I8FPeku+NFR buYwolH56dCo2c8PjQGL84+6VmyiO3bLZWGkBwvXQ1j2khJmngr36R3mEShMBfUQ Biunvtn4nIx1PRxewZbI0VFOPo3j5OJ7Sk9JzYBrgFX7WO9SnNAXfZQMy7y1JyV+ 1yyAkebWqu2paV1Y/2REVrrry95YRJHph/zsnaUHI9ISR3coDQDo0F9oz+UB5+9R rwURR6Hpcka8DccaHK103ZjZdhMJRw3tC2HV+85jNjVYULIrXZRsY7XN5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJJJq5xOMJ4dSWCOCM0akUoH7NMgMB8GA1UdIwQY MBaAFD36KTaMi+acjt1aoZNVf8uipX7IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGZvcE5veUw1cHlPM1ZxaGsxVl95NktsZnNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8yZDRmN2YtMTZlNy00ZmU2LWExODkt YmQ1OGQwMDIxYTA5LzEvUGZvcE5veUw1cHlPM1ZxaGsxVl95NktsZnNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My8yZDRmN2YtMTZlNy00ZmU2LWExODktYmQ1OGQwMDIxYTA5 LzEvUGZvcE5veUw1cHlPM1ZxaGsxVl95NktsZnNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZJioYsBt MUgfR1Bye89jL3DBY7ZPzlh2l2YqoyJcChD+CyW+BYDcFSiajZvgSfGEIZGClyuX y5igljzjAA9spahE0r35zOz3g39MUtXfydew9B2rsr3Nxev8Cm9Xkiw50PqPCzui Qqibgl+OxUnrVxLzJPeho5XfFM5bHE/t6LSmU/am6/4IIWbuGGrOyx4fjm9BsUqy DZoY0LkF+kL+g9eDvubvIYN1/BbZmEyByDnpkZYsaV7uCnqnLC/UaAJkY+2UURx2 rQfxk361bZ9HYcv6eH9eyPeXqaaorPfAJuih7GGBChqJs0if5ALemMM3ak4CAms3 O3HGTUp3crOLVg== -----END CERTIFICATE-----Generated at Mon Jan 26 19:10:55 2026 by rpki-client