This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
File: pgzudYLpdZvgFskxqzTZKF0vyLQ.mft (raw, json)
Hash identifier: fqLqvoRcYuc4p8COyEGNlmHmfrYQNt7JYR66T/HdXDw=
Subject key identifier: 89:CA:8A:47:EF:EE:59:22:86:96:FD:21:34:02:6E:58:A1:19:51:98
Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
Certificate issuer: /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Certificate serial: 019BD733A8679D1B977EF94A4EE420C3F5E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
Manifest number: 0213
Signing time: Mon 19 Jan 2026 17:00:45 +0000
Manifest this update: Mon 19 Jan 2026 17:00:45 +0000
Manifest next update: Tue 20 Jan 2026 17:00:45 +0000
Files and hashes: 1: 1-QpEsL_AtML3ScLvBXvkFT8qJ80.roa (hash: +pcA6aIuMEkhsfThQ01/KfIXIckOnFaz60ouEEzocyo=)
2: 3fS5dP7sG-xvFMbBP7UUi0eUUSk.roa (hash: pz2rG+hBKqBtyp01TUwFPW7c8W6AKlPJM3L7dBpBCVg=)
3: 5N096s-nFOH4_ZBqCouMJS-TbiU.roa (hash: Hh9HPS5FHpAUp4ixlEmsdD6a/vJqjzSz9yCpNR0cnOs=)
4: 9t9pVno2TX3q9AIdwXJLCYU34e4.roa (hash: /zZ7SZznSNB6a99s2QKcI1cVhN0Ul78igoVf1JwkrVM=)
5: AEmrEvTl5nZilDd5lyZaWGwH9Rk.roa (hash: PtBxNCrF8QX0P315dOs4ZmrXEvyhJt7cb+0UMIIHYW4=)
6: IdcY3v8c0CZDDmi3STdilJPAqYA.roa (hash: MtpvUlKM4NkKs2dwWGucxHDKfkZ77Tg0i1COdRQImog=)
7: WIxhLEYJGDRzvi2YQPkejSnZcyY.roa (hash: IQv8lDCReAIo1vSxymiyMrbwR8Ln0jB9PXL5wzjZ1uM=)
8: WJgNqH0Lz6yrLTwJwJhGPuLSIm8.roa (hash: a7Wll+kDTu8pwv4hn9ws5V2i8nVgewIeqZ+Vdb+Q5pY=)
9: WMJW8PYFLwejvXuXLZdPSAFJeBs.roa (hash: K12FYnuwBEd2xhuCex9yO/lOKeYGEYVxhKuR491paWw=)
10: XpjCQMf0z0asRx8m6HQ4jQq6RFg.roa (hash: 7XlSc07gOQZF0Z/C01cKSEvLGoVHil1OFtCK26yZIw0=)
11: YGgmrBWdNr2gr-PCb7IviufXu1s.roa (hash: XCRz3ie5NHXPDBJb939GkB0ydCGEbtQ+g5/MkaAJQ/w=)
12: cngSEETmst842JVqCMuJdzGT1YQ.roa (hash: +hcoS9Ai/ANXECo9DMi3KQohP9rUHNrlLQnH58O1SI0=)
13: demNlliFBXRCd4_BO7uGvr9OBWs.roa (hash: 3e0uS6Ngag4AQ8UkZJyAtJ3ajUAIc6mhDPE4a8UAS9c=)
14: ipupcdvp4LbD6D-C1ZVS4_JrtVM.roa (hash: 1kO7KglXg+mOXu0757cqWUOoHLIBVcVZE3NF8cCE/Wk=)
15: mEFHR3ZO54gTaeeTWU5lmspVd_s.roa (hash: 0w2qL/ViAbe9xLVH17D2YZ/NouaV1VQroh9IMJno9TE=)
16: pgzudYLpdZvgFskxqzTZKF0vyLQ.crl (hash: myDgnsrnIbq1tn15KAU89Th1Uhl5HjQAp9iDGeCX4N8=)
17: sLk-izSTWX7GM5E-kM2g-ymgESA.roa (hash: a3gJXW/HoyQtdrjVm/h5X6VgqIynZQ0Fud92Ay7J9lc=)
18: t2IZILmIlkrYmXptt2wUGw2uQwM.roa (hash: qFiwLdqK/Y7OvzgsKoQ4QT/arrjkDtpZ8/DZq9XFtzw=)
19: urAOvp2TYK27lU6tRDRA8PqsmXQ.roa (hash: 2PE5rDrGvCdMv6SRo280tO6Fe90nIsR7iSv5FWPItDg=)
20: wnofk64UVBKP93Op1kPJw8OAZVA.roa (hash: tsj9FpIfOqGKJfVIRwRR/8c5mdUoax0lYr1/5kPg6Rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 17:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:d7:33:a8:67:9d:1b:97:7e:f9:4a:4e:e4:20:c3:f5:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Validity
Not Before: Jan 19 17:00:45 2026 GMT
Not After : Jan 20 17:00:45 2026 GMT
Subject: CN=89ca8a47efee59228696fd2134026e58a1195198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7b:6a:35:ff:d3:41:6e:88:82:99:c9:b3:a9:
63:89:45:3d:d3:9b:01:f1:19:40:26:12:b4:38:3e:
21:84:43:27:c8:e5:b3:a9:32:9f:aa:51:6c:68:e7:
70:ec:f7:3c:e9:16:0f:ee:5b:c4:48:a8:5b:da:9a:
c2:a6:ef:5c:ad:9f:22:36:c0:fe:8b:4c:be:52:9e:
3a:ce:fc:2b:21:ba:e1:2a:c1:ae:b3:50:ad:74:d8:
41:31:0a:e0:9e:86:eb:f2:2f:35:a0:c3:c9:db:2c:
44:6b:e9:1c:80:96:aa:52:a9:ca:f2:80:ac:e8:c2:
36:4d:70:50:fb:92:d9:1e:71:29:7f:c2:f1:bd:17:
99:c3:02:6e:a4:58:a2:a5:0f:30:c0:5a:b5:1e:1c:
36:a5:52:b3:07:eb:f2:35:50:d6:f1:5f:d3:74:50:
3d:20:8a:f4:2c:fd:07:3d:3d:2f:45:ca:3d:85:2e:
33:37:22:00:d7:ff:f5:99:5b:da:38:09:1f:3c:ee:
5a:07:a6:5e:4f:49:a3:ee:b6:cd:30:dd:7f:3d:5e:
cc:c2:95:ce:47:7e:0e:fd:93:e9:fd:b8:a2:46:75:
fe:45:2d:c6:c8:e2:93:bf:d3:fa:40:16:e6:bf:e7:
9c:cb:41:6f:a6:d3:a7:92:e4:de:40:f5:05:35:75:
99:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:CA:8A:47:EF:EE:59:22:86:96:FD:21:34:02:6E:58:A1:19:51:98
X509v3 Authority Key Identifier:
keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:9b:31:b2:20:6c:02:62:16:00:64:bc:40:f2:94:34:93:a9:
02:8b:df:9d:dd:1e:9b:41:82:1d:16:e1:92:93:e1:4b:00:6d:
bd:5b:51:23:93:81:08:ea:c5:1f:26:b6:ce:19:b5:7a:8c:87:
3c:ce:2f:ee:6e:97:25:8e:22:fd:db:0a:50:4a:46:8f:45:b0:
66:b4:1d:ab:96:8f:f2:9d:a5:af:ae:dc:63:55:73:8b:2b:5f:
a9:e9:cd:4e:85:2b:01:5f:ff:c9:cb:0e:a9:20:b9:ce:94:a7:
03:02:21:c6:10:a9:12:7f:86:c8:d3:9c:bc:a3:14:0e:f5:26:
04:cc:ad:b0:b4:ab:06:70:9b:6f:04:00:98:28:f8:71:9e:40:
4e:64:a4:a9:1f:8a:73:34:14:bd:64:be:4a:ea:59:3b:d6:39:
93:bb:f0:21:8e:7b:e7:ad:ef:a6:d4:cd:27:cc:3d:34:53:9c:
da:d7:8f:b6:b6:d8:18:02:eb:cd:d6:a7:e9:9e:40:54:20:74:
f0:e6:74:c8:10:49:be:cf:3b:65:5d:8d:75:74:a8:db:df:20:
a2:61:71:b0:44:57:a8:54:07:76:37:77:82:a7:84:6e:99:5a:
99:a6:3e:9b:26:cc:74:d6:97:f5:f3:71:84:56:76:97:11:6e:
bf:14:6b:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvXM6hnnRuXfvlKTuQgw/XmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MGNlZTc1ODJlOTc1OWJlMDE2YzkzMWFiMzRkOTI4NWQy
ZmM4YjQwHhcNMjYwMTE5MTcwMDQ1WhcNMjYwMTIwMTcwMDQ1WjAzMTEwLwYDVQQD
Eyg4OWNhOGE0N2VmZWU1OTIyODY5NmZkMjEzNDAyNmU1OGExMTk1MTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ntqNf/TQW6IgpnJs6ljiUU905sB
8RlAJhK0OD4hhEMnyOWzqTKfqlFsaOdw7Pc86RYP7lvESKhb2prCpu9crZ8iNsD+
i0y+Up46zvwrIbrhKsGus1CtdNhBMQrgnobr8i81oMPJ2yxEa+kcgJaqUqnK8oCs
6MI2TXBQ+5LZHnEpf8LxvReZwwJupFiipQ8wwFq1Hhw2pVKzB+vyNVDW8V/TdFA9
IIr0LP0HPT0vRco9hS4zNyIA1//1mVvaOAkfPO5aB6ZeT0mj7rbNMN1/PV7MwpXO
R34O/ZPp/biiRnX+RS3GyOKTv9P6QBbmv+ecy0FvptOnkuTeQPUFNXWZSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFInKikfv7lkihpb9ITQCblihGVGYMB8GA1UdIwQY
MBaAFKYM7nWC6XWb4BbJMas02ShdL8i0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTct
ZDNiMzhjZTlkYzM0LzEvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTctZDNiMzhjZTlkYzM0
LzEvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALZsxsiBs
AmIWAGS8QPKUNJOpAovfnd0em0GCHRbhkpPhSwBtvVtRI5OBCOrFHya2zhm1eoyH
PM4v7m6XJY4i/dsKUEpGj0WwZrQdq5aP8p2lr67cY1VziytfqenNToUrAV//ycsO
qSC5zpSnAwIhxhCpEn+GyNOcvKMUDvUmBMytsLSrBnCbbwQAmCj4cZ5ATmSkqR+K
czQUvWS+SupZO9Y5k7vwIY57563vptTNJ8w9NFOc2tePtrbYGALrzdan6Z5AVCB0
8OZ0yBBJvs87ZV2NdXSo298gomFxsERXqFQHdjd3gqeEbplamaY+mybMdNaX9fNx
hFZ2lxFuvxRreQ==
-----END CERTIFICATE-----
Generated at Tue Jan 20 01:00:57 2026 by rpki-client