This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft File: PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft (raw, json) Hash identifier: aP3k31Nyay77nh5VXgSFOhgCj5iaz91vdMayLwYQ7Ik= Subject key identifier: 91:B4:68:66:F7:90:D9:BF:2B:84:19:9C:3F:5B:81:07:24:55:46:87 Authority key identifier: 3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35 Certificate issuer: /CN=3cc94ff479778651a605121f1ffe678196328f35 Certificate serial: 019BFEAF65DF323C8965D32C22E7D53D488C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft Manifest number: 17EE Signing time: Tue 27 Jan 2026 09:01:06 +0000 Manifest this update: Tue 27 Jan 2026 09:01:06 +0000 Manifest next update: Wed 28 Jan 2026 09:01:06 +0000 Files and hashes: 1: 5ApvAMni12n_Tl97hQfErFu1d6c.roa (hash: CMR/4LXkDxQdsem1khNHlRD0gmxgV2kLwB9hrxJKQb0=) 2: PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl (hash: tm5YWvQXY0sfgzjSwqOghyIMVP4PydkU9C2X6fAdgLs=) 3: XuBRU-qTaIe3iIMhEcyOCN_o1WE.roa (hash: aMfF2+emhhqGrwHfGQBas1ojIcyc28sSmp2XmBjy3No=) 4: kq8a46tLEeqaFqiTieRfOg3LWKo.roa (hash: qYlRFmIgG79GEajldFvoiEkS/VYV56G5bugYQU8ZN5o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:af:65:df:32:3c:89:65:d3:2c:22:e7:d5:3d:48:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cc94ff479778651a605121f1ffe678196328f35 Validity Not Before: Jan 27 09:01:06 2026 GMT Not After : Jan 28 09:01:06 2026 GMT Subject: CN=91b46866f790d9bf2b84199c3f5b810724554687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e3:dd:f4:ad:b1:0a:0c:f0:65:4b:b8:79:43: 1c:70:89:23:41:07:16:15:30:e5:ef:60:9a:b8:5a: 26:77:ae:ce:b2:b0:79:e7:2a:ea:e9:29:d8:25:0f: 09:86:fc:a5:22:70:98:37:2c:bc:01:19:c4:bc:40: c4:56:db:c4:21:7c:21:5f:7f:bb:2d:3f:8f:9f:39: 7f:cf:75:f0:15:c6:2a:75:12:1f:9b:74:09:82:f3: 75:e1:f5:0d:cc:c9:5e:78:c6:c1:b7:f0:6f:bd:85: 56:ad:77:ac:8b:af:07:d7:66:f0:70:37:a2:be:37: 29:7a:20:22:61:e7:07:d6:0b:f6:7a:98:6f:02:c7: 93:c8:cf:57:bc:43:95:73:77:03:fa:89:97:0b:69: a5:64:1a:1e:80:8d:84:ca:bb:79:0a:ef:d9:ba:99: be:75:7c:cd:4c:ab:5a:46:cc:7e:35:2d:a3:0a:5c: f2:05:b0:52:a6:4b:4c:64:c9:dc:ce:bd:6f:ce:90: 98:f9:e4:fc:88:7e:93:29:9f:36:91:1e:f2:21:98: 8a:39:40:cf:52:60:35:a3:e1:32:f6:3f:95:3c:4e: 0a:5e:22:4e:56:6f:a6:36:fd:a1:12:1c:c6:db:70: ed:0b:4a:54:3d:72:27:93:42:66:f6:35:83:87:c0: 5f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B4:68:66:F7:90:D9:BF:2B:84:19:9C:3F:5B:81:07:24:55:46:87 X509v3 Authority Key Identifier: keyid:3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:37:fe:00:ac:f1:20:59:e4:4a:4a:17:65:0b:67:0b:7f:4e: 03:0a:af:30:98:53:d0:33:57:dd:c7:40:a9:59:32:f5:b6:cc: cb:32:e4:dd:37:81:d9:ad:fe:5d:8c:f2:3c:57:11:16:a8:7e: f3:11:1d:8e:b1:26:1f:86:39:ae:b5:17:07:a3:7c:bc:e5:8e: 38:d4:7c:12:0b:d7:f5:49:be:f1:ed:98:df:25:26:c1:01:02: f0:10:fb:c6:9f:81:df:90:aa:de:b2:f1:a6:54:2a:0a:b3:f4: 16:42:6f:53:a2:5e:06:1b:18:07:16:a5:db:9d:6a:ca:ac:91: ab:16:07:be:f8:bf:1e:8c:de:c0:a0:f5:18:81:74:51:2b:f9: 6e:bd:0b:16:19:b5:ab:fb:92:20:af:b3:de:dc:7b:e0:5b:83: 47:f4:30:a3:93:2b:b0:6c:4e:53:a5:63:2f:e8:e9:4f:b2:a4: 9d:9f:a4:7d:f6:37:18:06:2b:8a:fc:07:c6:98:b4:86:9e:5c: 8c:b8:13:b1:e9:74:a6:70:f6:c3:a5:07:9c:51:b2:90:75:18: d7:d5:df:fd:5e:15:8c:0f:da:86:65:49:d3:0d:14:a1:55:31: f0:61:a3:16:33:91:a6:97:b7:2d:9f:9c:df:17:ae:7e:3e:50: 44:94:7c:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+r2XfMjyJZdMsIufVPUiMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjYzk0ZmY0Nzk3Nzg2NTFhNjA1MTIxZjFmZmU2NzgxOTYz MjhmMzUwHhcNMjYwMTI3MDkwMTA2WhcNMjYwMTI4MDkwMTA2WjAzMTEwLwYDVQQD Eyg5MWI0Njg2NmY3OTBkOWJmMmI4NDE5OWMzZjViODEwNzI0NTU0Njg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOPd9K2xCgzwZUu4eUMccIkjQQcW FTDl72CauFomd67OsrB55yrq6SnYJQ8JhvylInCYNyy8ARnEvEDEVtvEIXwhX3+7 LT+Pnzl/z3XwFcYqdRIfm3QJgvN14fUNzMleeMbBt/BvvYVWrXesi68H12bwcDei vjcpeiAiYecH1gv2ephvAseTyM9XvEOVc3cD+omXC2mlZBoegI2Eyrt5Cu/Zupm+ dXzNTKtaRsx+NS2jClzyBbBSpktMZMnczr1vzpCY+eT8iH6TKZ82kR7yIZiKOUDP UmA1o+Ey9j+VPE4KXiJOVm+mNv2hEhzG23DtC0pUPXInk0Jm9jWDh8BfTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJG0aGb3kNm/K4QZnD9bgQckVUaHMB8GA1UdIwQY MBaAFDzJT/R5d4ZRpgUSHx/+Z4GWMo81MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUE1sUDlIbDNobEdtQlJJZkhfNW5nWll5anpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8xZTYzYjYtMzk1Ni00ZDEyLWIxOWYt NWJlZjY0MjBhMDI4LzEvUE1sUDlIbDNobEdtQlJJZkhfNW5nWll5anpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni8xZTYzYjYtMzk1Ni00ZDEyLWIxOWYtNWJlZjY0MjBhMDI4 LzEvUE1sUDlIbDNobEdtQlJJZkhfNW5nWll5anpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhjf+AKzx IFnkSkoXZQtnC39OAwqvMJhT0DNX3cdAqVky9bbMyzLk3TeB2a3+XYzyPFcRFqh+ 8xEdjrEmH4Y5rrUXB6N8vOWOONR8EgvX9Um+8e2Y3yUmwQEC8BD7xp+B35Cq3rLx plQqCrP0FkJvU6JeBhsYBxal251qyqyRqxYHvvi/HozewKD1GIF0USv5br0LFhm1 q/uSIK+z3tx74FuDR/Qwo5MrsGxOU6VjL+jpT7KknZ+kffY3GAYrivwHxpi0hp5c jLgTsel0pnD2w6UHnFGykHUY19Xf/V4VjA/ahmVJ0w0UoVUx8GGjFjORppe3LZ+c 3xeufj5QRJR8EA== -----END CERTIFICATE-----Generated at Tue Jan 27 14:28:16 2026 by rpki-client