This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft File: PeSbGET-RCKvvhDN0oGcdEgnfmU.mft (raw, json) Hash identifier: S7r4E9M7q/kbhmliMAX3DKFSotIEiy49CymZ6Vg5WYA= Subject key identifier: 27:FC:28:C2:60:0D:EE:7F:59:BC:53:4E:A8:67:11:00:72:F0:DA:73 Authority key identifier: 3D:E4:9B:18:44:FE:44:22:AF:BE:10:CD:D2:81:9C:74:48:27:7E:65 Certificate issuer: /CN=3de49b1844fe4422afbe10cdd2819c7448277e65 Certificate serial: 019BD8100159EBB968F993C13922C0E4CE9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft Manifest number: 0B88 Signing time: Mon 19 Jan 2026 21:01:26 +0000 Manifest this update: Mon 19 Jan 2026 21:01:26 +0000 Manifest next update: Tue 20 Jan 2026 21:01:26 +0000 Files and hashes: 1: NIh5X-X78HnV8OD004txMFNbvjM.roa (hash: 94RoT+RPhL7upzRI0H0wJCdguwdTer9SXhjbnB7fpSY=) 2: PeSbGET-RCKvvhDN0oGcdEgnfmU.crl (hash: 3lf/FoYWtQvowTuHYaijfOR/SaPE34WcFi0yncb08J0=) 3: Tj-tszmPMOIdicR6OTt8f45Zya4.roa (hash: 38F17CYyilIBIc43xJOnaUQedazOErXtC4iNosY91dA=) 4: lFg7etq0z0bKQ1hcHnNof59N474.roa (hash: ur6JqNagspmUw5cjbkW9rFW1qoAf9GaSzlWdaC/M+ws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d8:10:01:59:eb:b9:68:f9:93:c1:39:22:c0:e4:ce:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3de49b1844fe4422afbe10cdd2819c7448277e65 Validity Not Before: Jan 19 21:01:26 2026 GMT Not After : Jan 20 21:01:26 2026 GMT Subject: CN=27fc28c2600dee7f59bc534ea867110072f0da73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:58:e8:73:28:12:34:1a:5c:41:16:e4:18:b1: 22:f7:08:e3:2f:4e:57:fb:ad:4a:1d:a0:64:f7:66: 25:22:22:19:a2:d5:c6:93:d8:ac:68:27:d1:9a:e7: 7e:c6:b9:39:c6:e5:05:eb:47:d5:10:69:41:c8:24: 5e:da:3c:17:0e:82:fa:8d:64:ec:14:73:3b:07:c8: cb:d1:4e:04:4c:7d:46:36:c5:cb:0f:2c:2d:20:8a: 9a:4b:d4:e1:96:54:3a:ee:9b:86:f5:97:92:0f:45: f9:e9:ed:cd:a0:e5:72:cb:44:11:f3:2a:8b:34:ae: db:12:4b:33:70:ab:3d:73:14:51:54:8a:ec:15:5e: bd:c2:1d:fa:96:be:0b:24:4c:86:4e:6d:ac:a1:21: dd:1b:ce:8e:fa:65:d9:b5:3f:3e:72:db:07:65:b4: d5:a6:f0:05:09:9d:8a:4c:d3:eb:ae:8b:79:87:36: d6:44:2a:50:1a:ac:e0:0b:19:94:6b:fd:8f:55:75: c6:c0:9f:12:d8:ff:31:a8:ff:36:7a:e4:41:e8:e7: 65:05:87:1d:4e:b0:ce:9e:0a:e5:61:d0:17:14:be: 15:48:50:4c:9e:2a:fd:b0:20:b9:6b:85:f5:f9:f0: a2:d8:3e:c4:26:60:bb:cf:2b:19:28:3e:4c:5f:78: 79:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:FC:28:C2:60:0D:EE:7F:59:BC:53:4E:A8:67:11:00:72:F0:DA:73 X509v3 Authority Key Identifier: keyid:3D:E4:9B:18:44:FE:44:22:AF:BE:10:CD:D2:81:9C:74:48:27:7E:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:b9:55:42:95:5f:83:df:34:45:fe:57:77:4e:ec:6d:3e:6c: 78:fd:d1:c0:1d:2d:19:83:07:58:69:a2:71:78:72:de:13:19: 1a:66:69:49:2b:3c:c7:d2:77:ee:86:41:0a:cd:9f:64:48:b0: 47:c9:34:f3:8d:ba:0c:20:c3:41:82:b3:63:02:05:84:25:32: b4:0f:22:5a:d4:f3:c1:b2:26:1d:e7:23:20:f9:4c:46:8d:c3: 05:3a:89:b2:e1:b4:c4:ae:90:70:0b:5b:ea:a6:12:dc:78:dc: 68:ab:af:2d:75:98:14:e3:ba:a8:21:36:1b:c0:be:b3:67:8d: ef:35:45:9f:66:dc:86:02:24:c5:87:00:62:9a:21:11:1c:c4: 1a:bc:36:dd:2a:7b:aa:c4:31:58:d0:75:88:ca:a7:f0:1b:c8: 46:3d:7a:29:3d:56:18:ed:6c:ad:44:61:49:8f:fd:76:90:a8: d0:4a:10:3d:e6:bc:09:49:a4:74:fd:39:1a:fe:26:7a:ad:d1: 7a:b5:7b:2d:3c:d1:f6:f2:56:42:90:2d:16:01:2a:86:bd:b1: 88:25:33:90:d3:69:1f:13:ef:4c:14:17:dd:06:b9:3a:cc:dc: 2e:98:20:0e:49:61:3a:e0:ca:1d:df:ea:bc:1b:06:32:ad:2b: f3:ff:ef:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvYEAFZ67lo+ZPBOSLA5M6fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkZTQ5YjE4NDRmZTQ0MjJhZmJlMTBjZGQyODE5Yzc0NDgy NzdlNjUwHhcNMjYwMTE5MjEwMTI2WhcNMjYwMTIwMjEwMTI2WjAzMTEwLwYDVQQD EygyN2ZjMjhjMjYwMGRlZTdmNTliYzUzNGVhODY3MTEwMDcyZjBkYTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFjocygSNBpcQRbkGLEi9wjjL05X +61KHaBk92YlIiIZotXGk9isaCfRmud+xrk5xuUF60fVEGlByCRe2jwXDoL6jWTs FHM7B8jL0U4ETH1GNsXLDywtIIqaS9ThllQ67puG9ZeSD0X56e3NoOVyy0QR8yqL NK7bEkszcKs9cxRRVIrsFV69wh36lr4LJEyGTm2soSHdG86O+mXZtT8+ctsHZbTV pvAFCZ2KTNPrrot5hzbWRCpQGqzgCxmUa/2PVXXGwJ8S2P8xqP82euRB6OdlBYcd TrDOngrlYdAXFL4VSFBMnir9sCC5a4X1+fCi2D7EJmC7zysZKD5MX3h5mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCf8KMJgDe5/WbxTTqhnEQBy8NpzMB8GA1UdIwQY MBaAFD3kmxhE/kQir74QzdKBnHRIJ35lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGVTYkdFVC1SQ0t2dmhETjBvR2NkRWduZm1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC84MWIxODgtMjU1ZC00OWM3LTlmOTgt MGFjOWI0ZDdlYWI3LzEvUGVTYkdFVC1SQ0t2dmhETjBvR2NkRWduZm1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC84MWIxODgtMjU1ZC00OWM3LTlmOTgtMGFjOWI0ZDdlYWI3 LzEvUGVTYkdFVC1SQ0t2dmhETjBvR2NkRWduZm1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnblVQpVf g980Rf5Xd07sbT5seP3RwB0tGYMHWGmicXhy3hMZGmZpSSs8x9J37oZBCs2fZEiw R8k08426DCDDQYKzYwIFhCUytA8iWtTzwbImHecjIPlMRo3DBTqJsuG0xK6QcAtb 6qYS3HjcaKuvLXWYFOO6qCE2G8C+s2eN7zVFn2bchgIkxYcAYpohERzEGrw23Sp7 qsQxWNB1iMqn8BvIRj16KT1WGO1srURhSY/9dpCo0EoQPea8CUmkdP05Gv4meq3R erV7LTzR9vJWQpAtFgEqhr2xiCUzkNNpHxPvTBQX3Qa5OszcLpggDklhOuDKHd/q vBsGMq0r8//vow== -----END CERTIFICATE-----Generated at Tue Jan 20 03:00:38 2026 by rpki-client