This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft File: PxnYdtwluWxdxZi-Lb9uywZal18.mft (raw, json) Hash identifier: y9Fp0YcrdyZjy7exyKc8G8ORNycjBHkd+P+bqzfaWso= Subject key identifier: 25:10:76:45:AA:0E:C5:68:C6:46:DC:DB:3A:92:9C:02:91:AE:95:82 Authority key identifier: 3F:19:D8:76:DC:25:B9:6C:5D:C5:98:BE:2D:BF:6E:CB:06:5A:97:5F Certificate issuer: /CN=3f19d876dc25b96c5dc598be2dbf6ecb065a975f Certificate serial: 019BFB3FFFD0976AD32C11DDCE8FEB730591 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft Manifest number: 0618 Signing time: Mon 26 Jan 2026 17:00:33 +0000 Manifest this update: Mon 26 Jan 2026 17:00:33 +0000 Manifest next update: Tue 27 Jan 2026 17:00:33 +0000 Files and hashes: 1: Kjlpy0uZoHJkclrGbsxI7LzDTQ8.roa (hash: 0z6/PsejZa1lGmMq31n1RdPDmTfr5YeDjwNglhdjlQ8=) 2: PxnYdtwluWxdxZi-Lb9uywZal18.crl (hash: Li3tOuxGF4CG9fG7QCMPLak8fn22g7UN8M+hAxK39Fw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:3f:ff:d0:97:6a:d3:2c:11:dd:ce:8f:eb:73:05:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f19d876dc25b96c5dc598be2dbf6ecb065a975f Validity Not Before: Jan 26 17:00:33 2026 GMT Not After : Jan 27 17:00:33 2026 GMT Subject: CN=25107645aa0ec568c646dcdb3a929c0291ae9582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9e:d5:00:00:7d:1c:cc:8c:d2:27:01:75:77: ee:f0:c2:99:50:a3:f5:27:ce:38:85:2c:a0:fd:be: 80:01:4b:98:ff:86:82:0b:8a:c4:05:53:f3:36:28: 7e:87:ea:fb:a4:4d:69:12:1b:f3:40:b4:dd:ee:dd: 12:ae:95:34:16:1b:98:00:d5:8d:6e:62:5e:72:69: 42:a3:69:fb:10:77:78:14:03:19:f6:16:23:c5:70: c9:81:87:13:32:cb:5a:1a:6a:c4:45:fc:fa:fd:2c: 3c:1a:d5:d0:1f:5d:14:62:b2:33:2d:cc:bd:6a:c9: 10:3e:d2:63:86:e1:3f:7b:61:52:13:0b:b7:0a:0c: eb:c7:b7:91:cd:a2:bf:67:49:66:02:ec:e5:0d:5f: 56:d9:b2:2b:67:1f:28:56:72:29:d3:f3:47:e4:05: 4b:3b:32:97:a3:9d:d8:40:75:0b:d6:4f:bc:9d:64: e8:e2:2d:51:7c:94:e1:af:9f:7a:02:18:c8:00:86: bb:b6:3b:82:3b:21:a2:05:29:0a:04:94:68:16:cb: 11:09:64:07:f0:32:61:95:31:d7:15:7e:0c:06:34: 59:41:b4:6c:aa:bb:69:15:74:e7:5a:84:00:ea:ad: 4f:89:de:56:23:37:18:f6:17:d3:22:33:4a:5e:00: 82:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:10:76:45:AA:0E:C5:68:C6:46:DC:DB:3A:92:9C:02:91:AE:95:82 X509v3 Authority Key Identifier: keyid:3F:19:D8:76:DC:25:B9:6C:5D:C5:98:BE:2D:BF:6E:CB:06:5A:97:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:14:c0:40:fe:ff:98:33:46:f8:79:21:99:98:42:02:a5:6f: 59:20:7b:8c:de:fc:9f:5f:7e:ba:db:f6:ce:76:5a:cf:34:55: 81:70:17:2c:e8:ee:4c:ab:ac:52:71:05:77:74:9f:46:c5:a1: 2e:27:9e:e4:1c:c8:af:d7:2e:36:5b:fa:73:7b:76:e2:a7:0d: be:19:05:27:78:a1:61:fd:b2:89:54:17:8a:77:8c:da:be:32: 12:e6:3e:a5:73:fe:80:cc:cd:e4:9a:36:f8:60:12:62:ac:25: d6:f1:bf:78:78:0f:a3:41:34:e5:39:c8:c8:81:41:1b:bb:d5: d4:86:35:ca:3d:82:bc:c9:ad:1b:16:dd:61:9e:4c:d7:4f:bc: eb:b0:27:e3:54:5a:99:04:23:c8:6b:f9:71:61:54:8d:da:74: 44:6f:73:2e:66:ff:b5:9f:a6:a8:51:17:54:af:bf:71:7e:f7: 6a:05:e3:0c:ff:ee:29:8f:07:c7:9f:23:72:52:82:15:1e:4d: 46:f0:08:87:d7:7f:01:6c:dd:23:2d:2f:f1:d1:36:f3:04:a2: 20:28:4d:e9:b0:fb:6d:f0:4a:7b:ea:10:5d:b7:40:5d:42:b7: bc:51:c1:2c:a1:08:be:3c:00:22:55:49:b3:c5:f9:3d:72:8f: 65:8b:9f:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7P//Ql2rTLBHdzo/rcwWRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmMTlkODc2ZGMyNWI5NmM1ZGM1OThiZTJkYmY2ZWNiMDY1 YTk3NWYwHhcNMjYwMTI2MTcwMDMzWhcNMjYwMTI3MTcwMDMzWjAzMTEwLwYDVQQD EygyNTEwNzY0NWFhMGVjNTY4YzY0NmRjZGIzYTkyOWMwMjkxYWU5NTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt57VAAB9HMyM0icBdXfu8MKZUKP1 J844hSyg/b6AAUuY/4aCC4rEBVPzNih+h+r7pE1pEhvzQLTd7t0SrpU0FhuYANWN bmJecmlCo2n7EHd4FAMZ9hYjxXDJgYcTMstaGmrERfz6/Sw8GtXQH10UYrIzLcy9 askQPtJjhuE/e2FSEwu3Cgzrx7eRzaK/Z0lmAuzlDV9W2bIrZx8oVnIp0/NH5AVL OzKXo53YQHUL1k+8nWTo4i1RfJThr596AhjIAIa7tjuCOyGiBSkKBJRoFssRCWQH 8DJhlTHXFX4MBjRZQbRsqrtpFXTnWoQA6q1Pid5WIzcY9hfTIjNKXgCCtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCUQdkWqDsVoxkbc2zqSnAKRrpWCMB8GA1UdIwQY MBaAFD8Z2HbcJblsXcWYvi2/bssGWpdfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHhuWWR0d2x1V3hkeFppLUxiOXV5d1phbDE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yMjY0NTUtMTdhMC00NjNjLTg5NTkt MGZiMTM5MWI1NGViLzEvUHhuWWR0d2x1V3hkeFppLUxiOXV5d1phbDE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8yMjY0NTUtMTdhMC00NjNjLTg5NTktMGZiMTM5MWI1NGVi LzEvUHhuWWR0d2x1V3hkeFppLUxiOXV5d1phbDE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnBTAQP7/ mDNG+HkhmZhCAqVvWSB7jN78n19+utv2znZazzRVgXAXLOjuTKusUnEFd3SfRsWh Liee5BzIr9cuNlv6c3t24qcNvhkFJ3ihYf2yiVQXineM2r4yEuY+pXP+gMzN5Jo2 +GASYqwl1vG/eHgPo0E05TnIyIFBG7vV1IY1yj2CvMmtGxbdYZ5M10+867An41Ra mQQjyGv5cWFUjdp0RG9zLmb/tZ+mqFEXVK+/cX73agXjDP/uKY8Hx58jclKCFR5N RvAIh9d/AWzdIy0v8dE28wSiIChN6bD7bfBKe+oQXbdAXUK3vFHBLKEIvjwAIlVJ s8X5PXKPZYuf2A== -----END CERTIFICATE-----Generated at Tue Jan 27 01:18:57 2026 by rpki-client