This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft File: PD9FAh1us0CkKy5d0fv3IaGmbWE.mft (raw, json) Hash identifier: 9mbPlppW20+Q7pE5gKQHqRR1/K5Mgt+AJKUFGaSIQm4= Subject key identifier: 1A:59:F8:C7:C3:4B:91:9B:D0:55:DD:BF:7D:2A:46:FA:4F:4A:72:96 Authority key identifier: 3C:3F:45:02:1D:6E:B3:40:A4:2B:2E:5D:D1:FB:F7:21:A1:A6:6D:61 Certificate issuer: /CN=3c3f45021d6eb340a42b2e5dd1fbf721a1a66d61 Certificate serial: 019BFBAE22F5E2A9D2B5B6A3FDDC9E0CD1E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PD9FAh1us0CkKy5d0fv3IaGmbWE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft Manifest number: 0ED2 Signing time: Mon 26 Jan 2026 19:00:51 +0000 Manifest this update: Mon 26 Jan 2026 19:00:51 +0000 Manifest next update: Tue 27 Jan 2026 19:00:51 +0000 Files and hashes: 1: KuWWtknOGKLAtEUJQ2qfl_jNlmg.roa (hash: W5TqBGi3Id1AxwKzwqUslwR28wws2MIYj5VeG6wq05Q=) 2: PD9FAh1us0CkKy5d0fv3IaGmbWE.crl (hash: khVaNQXTdY1H5UmNWzHtE+wKEPxn79V/m9tXB4MGoVo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.crl rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft rsync://rpki.ripe.net/repository/DEFAULT/PD9FAh1us0CkKy5d0fv3IaGmbWE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 19:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:ae:22:f5:e2:a9:d2:b5:b6:a3:fd:dc:9e:0c:d1:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c3f45021d6eb340a42b2e5dd1fbf721a1a66d61 Validity Not Before: Jan 26 19:00:51 2026 GMT Not After : Jan 27 19:00:51 2026 GMT Subject: CN=1a59f8c7c34b919bd055ddbf7d2a46fa4f4a7296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3c:75:f5:98:f8:25:3a:ac:1d:3c:3a:a2:aa: 9b:4e:8a:91:b7:70:51:97:3b:ae:a7:db:a8:dd:78: f6:99:2b:d1:6c:ed:7b:1c:5b:a4:a0:cf:f5:7d:cb: 16:06:ca:3e:4a:c3:55:5c:36:f0:f5:e4:59:9d:9b: 3b:96:f6:c3:0d:16:9d:5a:e3:60:af:94:6f:36:9d: 1b:50:ac:a0:34:68:1f:f2:44:a6:2e:74:36:86:8c: f2:c0:b5:d4:b7:49:9a:86:85:64:d1:20:84:1e:6a: e4:9b:3e:45:c4:9e:f0:4f:c0:a4:6f:68:6a:6f:fc: 5e:06:6d:bb:55:2c:a8:7a:2b:31:94:bf:bd:c1:aa: 0b:cd:94:d8:6a:ff:c4:8e:16:e5:85:05:f1:ac:68: f0:11:b6:cf:18:40:7f:e8:2e:5a:51:49:09:be:ce: 75:90:3f:2a:e3:6a:6b:62:2b:75:e9:84:0e:09:c1: 63:f5:40:0b:fd:64:6e:82:eb:a9:01:6a:90:d8:d9: 6e:d3:65:ea:e4:d4:da:e2:67:b1:cb:5a:8d:25:df: a6:97:e7:f1:b4:6a:ad:cb:07:28:cd:89:c8:d4:3f: 83:d5:ff:1f:5b:33:e0:b9:5d:79:77:df:fb:07:fd: ab:06:ef:5e:85:57:7a:07:82:6b:6a:0c:73:e9:4e: f6:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:59:F8:C7:C3:4B:91:9B:D0:55:DD:BF:7D:2A:46:FA:4F:4A:72:96 X509v3 Authority Key Identifier: keyid:3C:3F:45:02:1D:6E:B3:40:A4:2B:2E:5D:D1:FB:F7:21:A1:A6:6D:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PD9FAh1us0CkKy5d0fv3IaGmbWE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:e2:12:eb:21:13:00:40:01:60:f4:6a:a2:c2:82:df:e9:46: 23:bd:b8:40:a0:7d:92:a1:be:e4:08:6e:a5:e2:91:b6:58:63: e4:93:cc:17:a4:a0:59:f3:6e:8a:7c:72:8b:40:fb:dc:be:86: 8e:3f:ae:37:e9:eb:9b:e5:07:ed:16:9c:5c:19:33:47:55:63: b9:af:6f:85:90:b1:5a:3f:54:a2:9a:86:43:b0:5e:cc:7f:ba: 74:2b:61:f8:62:9e:66:07:ff:63:a4:65:01:bd:4b:15:0f:5a: 47:76:8a:0e:f3:f2:e8:7d:3f:45:f2:40:73:32:bc:0b:27:ea: e4:2c:3a:69:d7:64:6c:bb:2b:4f:22:ed:0c:c4:d6:f3:85:82: 77:dc:29:36:5a:15:2c:18:c6:cf:6b:16:90:de:2b:3c:61:18: 5a:8d:b2:f1:ef:a7:de:ff:f0:ec:5a:b1:b0:fd:00:73:6c:55: e9:b1:2a:69:f6:e8:cf:9e:97:91:2f:1e:36:ce:83:e0:72:5e: 6b:b1:06:ef:a6:58:3a:1b:64:c4:07:2f:1b:4c:60:f2:e4:d4: e9:04:86:e8:a5:9b:f3:b5:7d:ef:51:4a:ad:6b:2f:b9:1c:96: 6e:5b:a7:0a:7a:f3:5a:24:7e:78:24:77:99:bf:20:5b:b6:ea: aa:81:9a:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7riL14qnStbaj/dyeDNHlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjM2Y0NTAyMWQ2ZWIzNDBhNDJiMmU1ZGQxZmJmNzIxYTFh NjZkNjEwHhcNMjYwMTI2MTkwMDUxWhcNMjYwMTI3MTkwMDUxWjAzMTEwLwYDVQQD EygxYTU5ZjhjN2MzNGI5MTliZDA1NWRkYmY3ZDJhNDZmYTRmNGE3Mjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDx19Zj4JTqsHTw6oqqbToqRt3BR lzuup9uo3Xj2mSvRbO17HFukoM/1fcsWBso+SsNVXDbw9eRZnZs7lvbDDRadWuNg r5RvNp0bUKygNGgf8kSmLnQ2hozywLXUt0mahoVk0SCEHmrkmz5FxJ7wT8Ckb2hq b/xeBm27VSyoeisxlL+9waoLzZTYav/EjhblhQXxrGjwEbbPGEB/6C5aUUkJvs51 kD8q42prYit16YQOCcFj9UAL/WRuguupAWqQ2Nlu02Xq5NTa4mexy1qNJd+ml+fx tGqtywcozYnI1D+D1f8fWzPguV15d9/7B/2rBu9ehVd6B4Jragxz6U72aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBpZ+MfDS5Gb0FXdv30qRvpPSnKWMB8GA1UdIwQY MBaAFDw/RQIdbrNApCsuXdH79yGhpm1hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEQ5RkFoMXVzMENrS3k1ZDBmdjNJYUdtYldFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8wNTI1N2UtMWU2Ny00MTU4LThhZGIt NDdkNmU0YmFlMmNmLzEvUEQ5RkFoMXVzMENrS3k1ZDBmdjNJYUdtYldFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My8wNTI1N2UtMWU2Ny00MTU4LThhZGItNDdkNmU0YmFlMmNm LzEvUEQ5RkFoMXVzMENrS3k1ZDBmdjNJYUdtYldFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATOIS6yET AEABYPRqosKC3+lGI724QKB9kqG+5AhupeKRtlhj5JPMF6SgWfNuinxyi0D73L6G jj+uN+nrm+UH7RacXBkzR1Vjua9vhZCxWj9UopqGQ7BezH+6dCth+GKeZgf/Y6Rl Ab1LFQ9aR3aKDvPy6H0/RfJAczK8Cyfq5Cw6addkbLsrTyLtDMTW84WCd9wpNloV LBjGz2sWkN4rPGEYWo2y8e+n3v/w7FqxsP0Ac2xV6bEqafboz56XkS8eNs6D4HJe a7EG76ZYOhtkxAcvG0xg8uTU6QSG6KWb87V971FKrWsvuRyWblunCnrzWiR+eCR3 mb8gW7bqqoGa1Q== -----END CERTIFICATE-----Generated at Tue Jan 27 02:12:17 2026 by rpki-client