This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft File: PDULqC8_61ruKJOPvxsJweL9GbQ.mft (raw, json) Hash identifier: 21iGt6zf7Vte+Oicw18lFnTLdekBc9aNoNdsGSzMoAk= Subject key identifier: 86:5D:B6:DA:D6:67:16:0B:18:10:07:19:02:B8:E7:D8:6B:78:BF:BB Authority key identifier: 3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4 Certificate issuer: /CN=3c350ba82f3feb5aee28938fbf1b09c1e2fd19b4 Certificate serial: 019C09A123A5668160EDC45A07218BD1A003 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft Manifest number: 17F3 Signing time: Thu 29 Jan 2026 12:01:21 +0000 Manifest this update: Thu 29 Jan 2026 12:01:21 +0000 Manifest next update: Fri 30 Jan 2026 12:01:21 +0000 Files and hashes: 1: 3LaL7uXB-UYgWuSk1gGwpH4emtk.roa (hash: SZi8GiIOhAGOw0aZ9QVtTEgPlEhqv8CHu5L26uxGnTw=) 2: OKvF1jZUD1oQ8vjnPvKbRctzA_Y.roa (hash: TURUpo5c7V3B7eiBvFVs4P/z+qyI+1sdNbYu2NhorzE=) 3: Op5GYXPNrxg_HfwVEuFZeHOadM4.roa (hash: uIjeZZuq23pgTgw8/rbcHVuGWjLz/Rc1HlKQEVLAUp8=) 4: PDULqC8_61ruKJOPvxsJweL9GbQ.crl (hash: ZALXnNT8irhusiZlagRIJBqrjpudVBdv92hTnWnrc8g=) 5: kFJJEyTKADp1baTJnM1zkurd-AY.roa (hash: 6YWt+74Liha4YiPIKXVwr09uzTbyh63tPVdg3eh1Ecw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 11:23:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:09:a1:23:a5:66:81:60:ed:c4:5a:07:21:8b:d1:a0:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c350ba82f3feb5aee28938fbf1b09c1e2fd19b4 Validity Not Before: Jan 29 12:01:21 2026 GMT Not After : Jan 30 12:01:21 2026 GMT Subject: CN=865db6dad667160b1810071902b8e7d86b78bfbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:21:76:17:da:22:10:7a:e3:ee:00:21:92:4b: 1e:03:52:fc:78:f3:4a:00:62:d1:3a:f3:0f:64:90: c9:29:51:6e:ee:00:5b:8a:e8:36:fc:13:44:50:d2: cd:e9:c9:24:f3:18:ab:02:c0:87:95:c5:4e:81:1c: a2:a1:c7:af:04:33:8f:a7:bf:be:2d:ec:ba:a3:78: 1f:0d:6e:3e:83:d3:88:7b:d3:43:75:8e:a4:71:53: 2f:dd:9c:f4:62:99:a9:8b:78:10:e7:3d:cc:03:2b: 4b:15:ea:0d:ab:e3:fb:cf:f3:13:ba:8d:a9:76:2f: 69:35:2b:fd:cc:b1:af:05:6a:24:c7:45:4b:89:ef: 1f:e6:05:a3:37:f3:ce:99:f7:fc:d8:93:02:ad:f8: 78:62:bb:c2:d1:d0:06:a7:2f:f6:9f:c3:ab:ef:f7: 4d:ff:2b:f1:01:16:ca:b8:4d:6b:ee:49:9a:4a:66: fc:9e:e2:1a:3c:60:55:1d:0f:47:a4:6e:ab:81:70: ff:72:88:31:2e:42:df:3f:53:9b:95:92:ac:f4:e9: 1b:a9:12:71:11:e1:e5:50:b8:ea:a2:e0:24:80:ec: 68:49:f0:aa:ce:fd:80:5f:8a:d1:41:71:59:f7:2f: 17:56:e5:a9:1f:25:9b:2c:49:fd:10:b1:7b:18:a6: 3a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:5D:B6:DA:D6:67:16:0B:18:10:07:19:02:B8:E7:D8:6B:78:BF:BB X509v3 Authority Key Identifier: keyid:3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:d5:d7:b7:7c:71:a8:2e:27:a1:f8:da:ef:93:49:27:92:f8: a1:19:7e:b0:3d:51:bb:3d:76:12:7e:03:00:f6:1b:19:e5:ae: 49:28:38:68:e3:dd:8f:f7:8f:b5:01:d2:d9:09:03:b7:12:57: 86:2a:05:3a:89:71:87:16:30:40:94:30:e3:04:87:9a:dd:b1: 47:be:ed:4a:4e:11:d1:a1:36:74:69:2b:29:d7:7e:94:2e:53: 87:ed:ba:d1:99:39:de:39:e8:66:75:7c:2d:94:78:4b:35:90: 9f:f4:f0:fd:3d:eb:87:bf:a0:3c:ec:7c:e9:c6:d7:01:49:b9: e5:f4:c8:87:67:6e:ec:b6:66:ee:d3:c2:8b:4b:97:bb:c3:7e: 51:93:e7:a4:f8:b0:c6:aa:2b:f5:29:ff:4e:e2:74:3e:cd:24: 17:7f:d1:22:8a:37:f1:d8:55:1d:e6:f4:44:e2:0e:f1:53:7b: b1:f3:92:62:3e:d0:8b:26:9e:2e:21:57:5d:85:6d:f8:68:9b: f7:4a:74:a0:e1:c0:c4:ef:f8:72:df:5f:51:b8:ca:88:44:34: 03:41:f8:2a:8e:d6:7a:13:7a:aa:92:25:5a:55:c2:bf:8d:5a: a0:9d:88:44:8e:64:d7:40:6a:3a:9f:fd:e6:68:6f:91:c0:20: f0:02:48:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwJoSOlZoFg7cRaByGL0aADMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMzUwYmE4MmYzZmViNWFlZTI4OTM4ZmJmMWIwOWMxZTJm ZDE5YjQwHhcNMjYwMTI5MTIwMTIxWhcNMjYwMTMwMTIwMTIxWjAzMTEwLwYDVQQD Eyg4NjVkYjZkYWQ2NjcxNjBiMTgxMDA3MTkwMmI4ZTdkODZiNzhiZmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCF2F9oiEHrj7gAhkkseA1L8ePNK AGLROvMPZJDJKVFu7gBbiug2/BNEUNLN6ckk8xirAsCHlcVOgRyiocevBDOPp7++ Ley6o3gfDW4+g9OIe9NDdY6kcVMv3Zz0Ypmpi3gQ5z3MAytLFeoNq+P7z/MTuo2p di9pNSv9zLGvBWokx0VLie8f5gWjN/POmff82JMCrfh4YrvC0dAGpy/2n8Or7/dN /yvxARbKuE1r7kmaSmb8nuIaPGBVHQ9HpG6rgXD/cogxLkLfP1OblZKs9OkbqRJx EeHlULjqouAkgOxoSfCqzv2AX4rRQXFZ9y8XVuWpHyWbLEn9ELF7GKY6IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIZdttrWZxYLGBAHGQK459hreL+7MB8GA1UdIwQY MBaAFDw1C6gvP+ta7iiTj78bCcHi/Rm0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUERVTHFDOF82MXJ1S0pPUHZ4c0p3ZUw5R2JRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82NGQ3YTktY2FjMy00NTQ5LWE3YWEt NjFiNzkwMmVlMjA0LzEvUERVTHFDOF82MXJ1S0pPUHZ4c0p3ZUw5R2JRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS82NGQ3YTktY2FjMy00NTQ5LWE3YWEtNjFiNzkwMmVlMjA0 LzEvUERVTHFDOF82MXJ1S0pPUHZ4c0p3ZUw5R2JRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKdXXt3xx qC4nofja75NJJ5L4oRl+sD1Ruz12En4DAPYbGeWuSSg4aOPdj/ePtQHS2QkDtxJX hioFOolxhxYwQJQw4wSHmt2xR77tSk4R0aE2dGkrKdd+lC5Th+260Zk53jnoZnV8 LZR4SzWQn/Tw/T3rh7+gPOx86cbXAUm55fTIh2du7LZm7tPCi0uXu8N+UZPnpPiw xqor9Sn/TuJ0Ps0kF3/RIoo38dhVHeb0ROIO8VN7sfOSYj7QiyaeLiFXXYVt+Gib 90p0oOHAxO/4ct9fUbjKiEQ0A0H4Ko7WehN6qpIlWlXCv41aoJ2IRI5k10BqOp/9 5mhvkcAg8AJI8g== -----END CERTIFICATE-----Generated at Thu Jan 29 14:41:09 2026 by rpki-client