This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft File: pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft (raw, json) Hash identifier: 3lb7AJHrMUcKw4TH2MYC0x0+0ukTJJrbSuzXcmHWNy0= Subject key identifier: 52:1E:E2:49:D8:0C:F2:3F:12:0A:BF:FC:9A:E7:15:3B:F4:0D:67:D1 Authority key identifier: A6:0E:46:D6:3A:71:83:F7:0D:A4:92:F0:2B:80:98:C2:BF:FC:28:BE Certificate issuer: /CN=a60e46d63a7183f70da492f02b8098c2bffc28be Certificate serial: 019BFE4128D73D7F5C5A05446C718F95B042 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft Manifest number: 0E3A Signing time: Tue 27 Jan 2026 07:00:41 +0000 Manifest this update: Tue 27 Jan 2026 07:00:41 +0000 Manifest next update: Wed 28 Jan 2026 07:00:41 +0000 Files and hashes: 1: NyYE3UHHBaBD3ue76kpyUryE20o.roa (hash: FScu0FQsDxlcDVgtQ7BPeCNgRoM/ijvtnVWyLkhXy8k=) 2: PAX6Nj0vLW8qBLqlfqAOyETsCg8.roa (hash: DHoLARGZOB2XURSgRaiKkNOzlOwLsIfl2+CfGPfPwfU=) 3: pg5G1jpxg_cNpJLwK4CYwr_8KL4.crl (hash: LwDEm4ZmfFv+gw7Iskgn9xOoePwg9E/EepFi2kbFoNg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 07:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:41:28:d7:3d:7f:5c:5a:05:44:6c:71:8f:95:b0:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a60e46d63a7183f70da492f02b8098c2bffc28be Validity Not Before: Jan 27 07:00:41 2026 GMT Not After : Jan 28 07:00:41 2026 GMT Subject: CN=521ee249d80cf23f120abffc9ae7153bf40d67d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d7:d5:96:a6:5d:0e:89:10:51:c1:c8:17:40: 01:02:a7:68:8c:88:fb:97:7f:a9:cd:b0:c5:2a:5e: 4e:52:d5:49:db:22:a6:62:22:2e:7e:ba:c4:88:4c: 03:23:00:49:22:38:61:0c:31:4e:ed:9f:fd:fa:d3: 1a:bb:31:68:54:fa:b1:0b:a7:32:83:6c:0a:9c:0c: 96:b1:37:ab:1a:d2:55:b0:b7:1c:8b:b5:51:b3:24: c1:bd:e9:87:d7:7b:25:f8:23:86:26:5d:cd:0a:26: 08:e4:c4:fd:43:e1:e2:ee:3f:16:b8:59:4d:51:f4: fb:14:c8:77:85:46:0e:75:5e:76:ae:ba:50:ab:04: dc:74:e7:6b:09:9e:30:c0:19:17:4e:3f:13:6b:27: 40:a6:55:e6:b7:3b:98:15:02:5a:75:a4:05:e8:46: 10:b3:f4:bf:bf:2e:19:d5:22:26:82:b6:6a:9d:d7: d5:f1:5a:3c:08:fd:34:3c:0e:c9:ad:79:a1:7d:1c: ba:21:b2:67:2e:67:37:c8:16:7e:22:f8:2d:a2:48: b0:23:c4:9a:dd:99:69:b5:b3:f7:8e:98:9f:73:61: a2:db:ef:ec:6e:7e:ac:e3:48:4a:a0:3a:22:78:89: a8:3d:9a:3f:19:bc:8c:6d:05:0d:5d:22:47:21:52: c0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:1E:E2:49:D8:0C:F2:3F:12:0A:BF:FC:9A:E7:15:3B:F4:0D:67:D1 X509v3 Authority Key Identifier: keyid:A6:0E:46:D6:3A:71:83:F7:0D:A4:92:F0:2B:80:98:C2:BF:FC:28:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:62:6e:12:f5:a2:8c:15:51:7b:29:0e:b2:31:6f:02:92:1f: 27:9b:9f:df:99:a7:1f:e6:9f:6c:c9:68:31:53:fb:09:4f:3f: 01:fb:bf:35:8a:9f:e8:9c:eb:b7:46:e5:23:96:fa:96:3f:8c: 6f:d1:b0:eb:bc:67:fa:6f:b0:a5:64:7e:d1:c7:ec:c9:e9:b6: ce:6d:50:ab:08:fd:b8:69:83:85:7c:7b:2b:c9:a6:af:d6:1e: c3:12:d1:1e:f4:fa:d8:64:10:2e:93:6d:10:bc:40:51:81:68: 2e:39:bd:40:d5:09:59:e0:14:cd:74:f6:8d:ab:8c:9f:5d:20: 25:e5:a4:04:63:77:39:54:91:7c:68:58:48:64:7c:ae:ce:02: f0:69:45:1f:da:36:d1:fa:90:b7:b2:9a:02:66:20:26:43:dd: 84:74:08:52:96:26:39:b9:36:77:c9:9f:2a:b6:cb:e5:2a:7d: e1:db:cf:77:46:dd:a2:f9:f2:90:f5:02:f7:c4:98:b7:2a:a9: 4f:12:4e:15:64:cd:ed:5d:60:6f:d7:6c:c6:c2:60:71:fb:7b: 87:63:ba:b0:75:4d:d1:93:00:3a:f2:e4:f5:a3:fe:62:03:6f: 73:d1:cc:d9:fe:f4:21:7c:4f:6a:91:58:13:11:f3:87:3e:bd: 88:73:ba:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+QSjXPX9cWgVEbHGPlbBCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MGU0NmQ2M2E3MTgzZjcwZGE0OTJmMDJiODA5OGMyYmZm YzI4YmUwHhcNMjYwMTI3MDcwMDQxWhcNMjYwMTI4MDcwMDQxWjAzMTEwLwYDVQQD Eyg1MjFlZTI0OWQ4MGNmMjNmMTIwYWJmZmM5YWU3MTUzYmY0MGQ2N2QxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztfVlqZdDokQUcHIF0ABAqdojIj7 l3+pzbDFKl5OUtVJ2yKmYiIufrrEiEwDIwBJIjhhDDFO7Z/9+tMauzFoVPqxC6cy g2wKnAyWsTerGtJVsLcci7VRsyTBvemH13sl+COGJl3NCiYI5MT9Q+Hi7j8WuFlN UfT7FMh3hUYOdV52rrpQqwTcdOdrCZ4wwBkXTj8TaydAplXmtzuYFQJadaQF6EYQ s/S/vy4Z1SImgrZqndfV8Vo8CP00PA7JrXmhfRy6IbJnLmc3yBZ+IvgtokiwI8Sa 3ZlptbP3jpifc2Gi2+/sbn6s40hKoDoieImoPZo/GbyMbQUNXSJHIVLA2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFIe4knYDPI/Egq//JrnFTv0DWfRMB8GA1UdIwQY MBaAFKYORtY6cYP3DaSS8CuAmMK//Ci+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGc1RzFqcHhnX2NOcEpMd0s0Q1l3cl84S0w0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mMGNmYTctNjI1NC00YTgxLTk5NmMt M2I3ZWYyNWNmZTgzLzEvcGc1RzFqcHhnX2NOcEpMd0s0Q1l3cl84S0w0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9mMGNmYTctNjI1NC00YTgxLTk5NmMtM2I3ZWYyNWNmZTgz LzEvcGc1RzFqcHhnX2NOcEpMd0s0Q1l3cl84S0w0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr2JuEvWi jBVReykOsjFvApIfJ5uf35mnH+afbMloMVP7CU8/Afu/NYqf6Jzrt0blI5b6lj+M b9Gw67xn+m+wpWR+0cfsyem2zm1Qqwj9uGmDhXx7K8mmr9YewxLRHvT62GQQLpNt ELxAUYFoLjm9QNUJWeAUzXT2jauMn10gJeWkBGN3OVSRfGhYSGR8rs4C8GlFH9o2 0fqQt7KaAmYgJkPdhHQIUpYmObk2d8mfKrbL5Sp94dvPd0bdovnykPUC98SYtyqp TxJOFWTN7V1gb9dsxsJgcft7h2O6sHVN0ZMAOvLk9aP+YgNvc9HM2f70IXxPapFY ExHzhz69iHO62w== -----END CERTIFICATE-----Generated at Tue Jan 27 17:12:16 2026 by rpki-client