This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft File: pvE9aAzkgFkb-LN93KD66zu-dE4.mft (raw, json) Hash identifier: zBqaA6ekfFF4svVs/x7HM9tfRJG37LPfnZx2qXRDBEY= Subject key identifier: 51:AA:A7:61:DC:AF:45:6D:C1:2F:53:0A:C6:45:49:00:54:36:AB:6C Authority key identifier: A6:F1:3D:68:0C:E4:80:59:1B:F8:B3:7D:DC:A0:FA:EB:3B:BE:74:4E Certificate issuer: /CN=a6f13d680ce480591bf8b37ddca0faeb3bbe744e Certificate serial: 019BFA9BB4A031877741F18EB854B7CE8C82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pvE9aAzkgFkb-LN93KD66zu-dE4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft Manifest number: 17F1 Signing time: Mon 26 Jan 2026 14:01:06 +0000 Manifest this update: Mon 26 Jan 2026 14:01:06 +0000 Manifest next update: Tue 27 Jan 2026 14:01:06 +0000 Files and hashes: 1: TIY8spYuz89Qegyi3StS0IPa_iQ.roa (hash: wCtJzewPBMHhIEbN1jjOYehN3mb3xuj07QlMDoDL3UA=) 2: pvE9aAzkgFkb-LN93KD66zu-dE4.crl (hash: mz9YMC0Z0meSc5n6KVujhPB7+a/vvaHOSU3tZxvPGSc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft rsync://rpki.ripe.net/repository/DEFAULT/pvE9aAzkgFkb-LN93KD66zu-dE4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:9b:b4:a0:31:87:77:41:f1:8e:b8:54:b7:ce:8c:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6f13d680ce480591bf8b37ddca0faeb3bbe744e Validity Not Before: Jan 26 14:01:06 2026 GMT Not After : Jan 27 14:01:06 2026 GMT Subject: CN=51aaa761dcaf456dc12f530ac64549005436ab6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fb:8e:b2:d5:35:0f:30:97:e9:38:53:c1:16: ca:e7:c3:71:b9:9d:24:59:85:cb:62:88:e3:f1:e8: f8:dc:ba:29:52:5a:78:43:8c:5c:e7:08:b4:28:7f: 40:1f:24:24:ad:df:11:59:68:0f:4d:cf:30:1d:ff: 63:52:11:e0:ec:e8:45:06:a5:8b:52:a6:b5:21:a3: 9d:e6:c0:11:d1:e8:be:5e:b7:96:33:00:27:26:21: 49:8e:ac:01:47:c9:2d:62:a3:64:15:2b:53:96:bb: a2:c2:31:1a:03:f0:d4:01:26:12:46:77:40:c6:38: 46:80:35:a9:6a:46:a1:e4:06:4b:80:dd:12:51:8b: 73:06:c3:b2:14:61:01:56:8e:e1:6a:5e:fa:61:e2: 3b:e7:72:67:c8:ab:a7:5d:20:7a:46:e6:9a:c6:b3: b3:db:51:0c:a0:a7:c5:c3:eb:ef:bb:be:fa:64:9a: c8:91:bf:87:f6:99:d3:e0:5f:44:22:5f:6b:f5:49: 9e:a7:95:1a:22:02:cb:e9:91:a1:ff:47:11:be:bf: 24:99:98:0e:83:70:b5:a3:36:51:3a:13:95:a5:cd: 30:0b:21:79:de:8e:60:09:49:14:99:31:77:af:43: c6:aa:20:df:ef:82:ce:42:63:ef:8f:34:ce:92:0a: 59:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:AA:A7:61:DC:AF:45:6D:C1:2F:53:0A:C6:45:49:00:54:36:AB:6C X509v3 Authority Key Identifier: keyid:A6:F1:3D:68:0C:E4:80:59:1B:F8:B3:7D:DC:A0:FA:EB:3B:BE:74:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pvE9aAzkgFkb-LN93KD66zu-dE4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:1c:03:c1:19:3c:83:46:41:60:48:fb:75:f7:36:02:a9:d7: 21:64:b6:d1:58:8b:15:cc:8b:af:07:c7:b8:f8:12:e7:a0:41: 5b:31:30:26:09:fa:36:70:81:6b:30:4f:9a:cc:32:9a:8d:8b: 38:a7:16:78:33:ba:5f:29:2c:c7:69:2e:ac:fa:d9:85:fb:a7: 8d:c9:0b:c2:3e:26:7e:70:ae:1d:21:9a:62:ac:1d:0d:8b:53: 73:08:30:4d:b1:24:d7:57:c8:d1:80:25:7e:1d:39:df:a7:d4: 64:24:8c:6a:ae:55:6c:41:f2:11:eb:af:ba:71:95:9c:e6:34: a2:73:75:c5:23:02:03:f1:70:ed:2b:f2:a9:91:e5:72:b0:88: cd:a4:ac:cb:3a:06:e7:90:cf:88:ab:da:84:39:f2:65:8a:b4: c0:af:8b:0c:15:94:4c:e7:ef:4d:d0:7e:02:00:61:39:a7:d8: 58:5b:fa:01:ec:e2:1a:5b:2e:51:bb:79:4c:da:2e:15:64:c7: 1a:ed:0b:ad:24:92:5b:00:6d:c5:19:22:df:2b:61:b1:4c:29: 62:86:f0:9a:a3:e6:0a:99:72:46:c5:d6:16:af:d7:d0:73:b7: 19:fd:54:47:d6:12:01:85:0e:b1:f6:3a:ca:0c:60:dd:d6:34: ec:69:1d:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6m7SgMYd3QfGOuFS3zoyCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2ZjEzZDY4MGNlNDgwNTkxYmY4YjM3ZGRjYTBmYWViM2Ji ZTc0NGUwHhcNMjYwMTI2MTQwMTA2WhcNMjYwMTI3MTQwMTA2WjAzMTEwLwYDVQQD Eyg1MWFhYTc2MWRjYWY0NTZkYzEyZjUzMGFjNjQ1NDkwMDU0MzZhYjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPuOstU1DzCX6ThTwRbK58NxuZ0k WYXLYojj8ej43LopUlp4Q4xc5wi0KH9AHyQkrd8RWWgPTc8wHf9jUhHg7OhFBqWL Uqa1IaOd5sAR0ei+XreWMwAnJiFJjqwBR8ktYqNkFStTlruiwjEaA/DUASYSRndA xjhGgDWpakah5AZLgN0SUYtzBsOyFGEBVo7hal76YeI753JnyKunXSB6RuaaxrOz 21EMoKfFw+vvu776ZJrIkb+H9pnT4F9EIl9r9Umep5UaIgLL6ZGh/0cRvr8kmZgO g3C1ozZROhOVpc0wCyF53o5gCUkUmTF3r0PGqiDf74LOQmPvjzTOkgpZuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFGqp2Hcr0VtwS9TCsZFSQBUNqtsMB8GA1UdIwQY MBaAFKbxPWgM5IBZG/izfdyg+us7vnROMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHZFOWFBemtnRmtiLUxOOTNLRDY2enUtZEU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ZDFiMDItYjBmOS00ZTBlLWE0NTct MzBiZGI0OGRhNTIxLzEvcHZFOWFBemtnRmtiLUxOOTNLRDY2enUtZEU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ZDFiMDItYjBmOS00ZTBlLWE0NTctMzBiZGI0OGRhNTIx LzEvcHZFOWFBemtnRmtiLUxOOTNLRDY2enUtZEU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYRwDwRk8 g0ZBYEj7dfc2AqnXIWS20ViLFcyLrwfHuPgS56BBWzEwJgn6NnCBazBPmswymo2L OKcWeDO6Xyksx2kurPrZhfunjckLwj4mfnCuHSGaYqwdDYtTcwgwTbEk11fI0YAl fh0536fUZCSMaq5VbEHyEeuvunGVnOY0onN1xSMCA/Fw7SvyqZHlcrCIzaSsyzoG 55DPiKvahDnyZYq0wK+LDBWUTOfvTdB+AgBhOafYWFv6AeziGlsuUbt5TNouFWTH Gu0LrSSSWwBtxRki3ythsUwpYobwmqPmCplyRsXWFq/X0HO3Gf1UR9YSAYUOsfY6 ygxg3dY07GkdMw== -----END CERTIFICATE-----Generated at Tue Jan 27 00:29:40 2026 by rpki-client