This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft File: PnXUne0gVmynRcKPgM_ZqS9LfUc.mft (raw, json) Hash identifier: 1qGhnvPbOw0NBlLFpZCTAQ9UY/8HDNODn4t/ceAIiHU= Subject key identifier: FA:75:32:5B:71:0F:EC:2C:B2:9D:D9:D0:1C:E3:F2:E2:12:E1:0B:AD Authority key identifier: 3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47 Certificate issuer: /CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47 Certificate serial: 019BFBADE7A1C307694C3BF91ECD5B96A461 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft Manifest number: 17EE Signing time: Mon 26 Jan 2026 19:00:36 +0000 Manifest this update: Mon 26 Jan 2026 19:00:36 +0000 Manifest next update: Tue 27 Jan 2026 19:00:36 +0000 Files and hashes: 1: DaMOJU-jBrrr4RoMTTYusmitb4Y.roa (hash: JaWn7XzXCxX7Vb9+fDuk+/iiSPUdUFQByfCjt0a4ezU=) 2: Gzc5BxD8yLe_aSYEhdH7qxC53Bk.roa (hash: K0PmYBi2jbuDcvq/ABfyge5LDH1NQzitSjirHjoyzGI=) 3: PnXUne0gVmynRcKPgM_ZqS9LfUc.crl (hash: /h46vXZjuAfBQDy7wbvLOENq79gxrrpVBheFwBD64ss=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:ad:e7:a1:c3:07:69:4c:3b:f9:1e:cd:5b:96:a4:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47 Validity Not Before: Jan 26 19:00:36 2026 GMT Not After : Jan 27 19:00:36 2026 GMT Subject: CN=fa75325b710fec2cb29dd9d01ce3f2e212e10bad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ec:ee:8b:62:15:99:65:39:d6:b9:5c:6a:c2: 35:38:9b:99:b3:b0:22:bc:39:26:3c:8e:c9:46:b4: 86:6e:ea:04:4b:ad:d9:42:17:28:46:4e:1c:24:4e: fd:c4:2b:c5:5c:63:e8:99:77:b8:26:06:01:df:21: 91:b6:8e:2c:37:1f:36:e6:71:60:48:89:98:e1:4a: c1:0d:a9:80:5f:99:25:8c:8e:61:f4:79:51:bc:c3: 38:b6:83:9a:43:65:25:f3:9b:9f:28:49:b8:80:a4: e4:50:c1:c5:1f:54:bf:66:99:5e:c6:ee:80:fd:45: f5:8a:18:36:b2:19:8e:a8:35:70:5a:8e:8f:01:6d: 7e:e2:ba:79:70:33:00:74:ff:12:f8:4a:0c:e9:f6: 00:35:ab:7b:77:e8:73:aa:d6:52:de:88:34:56:aa: c4:4f:f0:ee:6d:fd:7f:49:23:c5:b1:fc:ca:02:32: 34:11:c0:01:5d:d2:19:7b:11:7f:90:6a:f4:a6:33: d7:36:52:5f:d2:02:73:a5:f7:b8:d9:56:a8:6e:60: 7e:98:c7:68:19:4f:29:2a:f1:5f:4d:f4:70:5d:31: c2:b6:da:cb:a1:30:31:ce:1e:58:78:0e:c7:ca:b8: 67:e3:c7:85:20:39:f4:22:38:c6:89:42:c9:dd:03: 51:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:75:32:5B:71:0F:EC:2C:B2:9D:D9:D0:1C:E3:F2:E2:12:E1:0B:AD X509v3 Authority Key Identifier: keyid:3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:f0:4c:a4:63:f9:a6:6f:49:e5:bf:b2:e4:3b:98:ad:b7:d9: f3:2f:67:59:fc:8a:ff:ab:98:0a:3a:55:d9:8e:19:7c:44:63: 7e:af:5b:97:42:22:ef:c0:fc:ef:b9:31:74:2b:77:79:5a:bf: 14:5e:c9:b4:09:d9:ad:51:32:22:e1:16:5e:e0:43:8e:c9:15: df:00:96:cc:f6:09:82:84:3b:1a:a7:35:60:05:ae:12:86:dd: 1d:71:f0:89:ba:c5:3e:69:50:ee:40:0b:19:6e:8d:ad:b0:1b: 1b:2b:b5:c4:f8:34:e7:30:61:aa:9a:8b:12:ac:9f:8b:ed:7e: 18:2c:85:28:3b:e5:ee:81:9f:de:c2:24:97:97:2a:88:36:ca: 6f:90:bd:06:4d:0d:00:c8:9e:0c:33:dd:56:ca:62:a6:f6:64: e6:8e:51:fa:34:80:72:1e:e9:ab:23:b4:d3:9b:f4:5e:35:c8: d9:6a:e5:0d:30:8d:f4:17:2d:bb:e5:30:1b:1d:0c:7c:74:33: a7:67:b5:23:30:ed:87:4f:06:45:b6:be:84:5d:8d:9c:ce:ca: d8:7f:37:ea:57:67:61:41:eb:97:25:96:4b:57:61:6b:0a:4e: 87:f1:02:db:69:6c:a0:81:2b:bc:27:2c:c0:88:ca:ba:df:8c: 3b:2c:97:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7reehwwdpTDv5Hs1blqRhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNzVkNDlkZWQyMDU2NmNhNzQ1YzI4ZjgwY2ZkOWE5MmY0 YjdkNDcwHhcNMjYwMTI2MTkwMDM2WhcNMjYwMTI3MTkwMDM2WjAzMTEwLwYDVQQD EyhmYTc1MzI1YjcxMGZlYzJjYjI5ZGQ5ZDAxY2UzZjJlMjEyZTEwYmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOzui2IVmWU51rlcasI1OJuZs7Ai vDkmPI7JRrSGbuoES63ZQhcoRk4cJE79xCvFXGPomXe4JgYB3yGRto4sNx825nFg SImY4UrBDamAX5kljI5h9HlRvMM4toOaQ2Ul85ufKEm4gKTkUMHFH1S/Zplexu6A /UX1ihg2shmOqDVwWo6PAW1+4rp5cDMAdP8S+EoM6fYANat7d+hzqtZS3og0VqrE T/Dubf1/SSPFsfzKAjI0EcABXdIZexF/kGr0pjPXNlJf0gJzpfe42VaobmB+mMdo GU8pKvFfTfRwXTHCttrLoTAxzh5YeA7Hyrhn48eFIDn0IjjGiULJ3QNRwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPp1MltxD+wssp3Z0Bzj8uIS4QutMB8GA1UdIwQY MBaAFD511J3tIFZsp0XCj4DP2akvS31HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG5YVW5lMGdWbXluUmNLUGdNX1pxUzlMZlVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8xYzE1YTItZDBlYy00YzNhLTg2Y2Qt ODM2Mzg0NzVkOGFiLzEvUG5YVW5lMGdWbXluUmNLUGdNX1pxUzlMZlVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8xYzE1YTItZDBlYy00YzNhLTg2Y2QtODM2Mzg0NzVkOGFi LzEvUG5YVW5lMGdWbXluUmNLUGdNX1pxUzlMZlVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZPBMpGP5 pm9J5b+y5DuYrbfZ8y9nWfyK/6uYCjpV2Y4ZfERjfq9bl0Ii78D877kxdCt3eVq/ FF7JtAnZrVEyIuEWXuBDjskV3wCWzPYJgoQ7Gqc1YAWuEobdHXHwibrFPmlQ7kAL GW6NrbAbGyu1xPg05zBhqpqLEqyfi+1+GCyFKDvl7oGf3sIkl5cqiDbKb5C9Bk0N AMieDDPdVspipvZk5o5R+jSAch7pqyO005v0XjXI2WrlDTCN9Bctu+UwGx0MfHQz p2e1IzDth08GRba+hF2NnM7K2H836ldnYUHrlyWWS1dhawpOh/EC22lsoIErvCcs wIjKut+MOyyXFw== -----END CERTIFICATE-----Generated at Tue Jan 27 00:10:03 2026 by rpki-client