This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft File: PBJHYkowBcb89mErrJnKsExgEmo.mft (raw, json) Hash identifier: bNBScA+0uHGKO+jq+3yXLzL4f2EAxakqRcW89kr2cFc= Subject key identifier: 03:DC:EB:D1:15:BE:5D:C5:20:2D:3E:42:E1:9E:94:74:83:69:62:AB Authority key identifier: 3C:12:47:62:4A:30:05:C6:FC:F6:61:2B:AC:99:CA:B0:4C:60:12:6A Certificate issuer: /CN=3c1247624a3005c6fcf6612bac99cab04c60126a Certificate serial: 019C0E901685B09344464DE802461DA5410C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBJHYkowBcb89mErrJnKsExgEmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft Manifest number: 88 Signing time: Fri 30 Jan 2026 11:00:49 +0000 Manifest this update: Fri 30 Jan 2026 11:00:49 +0000 Manifest next update: Sat 31 Jan 2026 11:00:49 +0000 Files and hashes: 1: PBJHYkowBcb89mErrJnKsExgEmo.crl (hash: ld20y7UeM7i/10HzEeAI6bITA42V3f3BO+bE5oLZTVo=) 2: xBTFrNqE5n1a31XsQMAD6sbQOYM.roa (hash: zRWJGHJjyWJeaAgeQYSPsfHjC7tcss/AD8IKE1T7RF4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft rsync://rpki.ripe.net/repository/DEFAULT/PBJHYkowBcb89mErrJnKsExgEmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 11:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0e:90:16:85:b0:93:44:46:4d:e8:02:46:1d:a5:41:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c1247624a3005c6fcf6612bac99cab04c60126a Validity Not Before: Jan 30 11:00:49 2026 GMT Not After : Jan 31 11:00:49 2026 GMT Subject: CN=03dcebd115be5dc5202d3e42e19e9474836962ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6c:a5:a4:e3:99:88:06:37:51:49:73:97:93: ea:6b:6f:38:86:33:bc:a5:eb:ce:94:ac:71:a5:a6: 5e:0d:45:fe:d6:9a:44:1d:eb:00:72:93:b1:ed:84: 12:80:90:4d:68:60:67:0a:99:ea:ae:35:04:da:46: c8:c7:e2:6b:a9:a9:f6:b1:43:6f:73:28:b9:a6:d2: ea:05:b3:f6:a5:fe:97:31:a9:5f:84:c8:85:68:89: b3:4e:5f:eb:14:9a:09:28:0d:d2:53:ee:10:cd:7e: 82:06:35:0e:58:48:5f:45:0c:55:5c:3d:2e:20:f4: b3:63:5c:27:aa:9a:49:28:c4:33:df:1d:72:f6:34: d8:eb:aa:72:f8:59:f6:ce:4b:50:84:14:a4:40:c3: 9d:13:c4:13:83:82:f2:3a:dc:49:20:55:e0:16:90: 2d:62:f1:e4:c5:b6:f4:80:b1:f4:2e:2f:9f:fd:e4: 1f:44:7b:77:53:4f:d7:31:76:09:eb:d6:ed:96:d2: ac:25:10:87:7c:84:fe:58:78:f6:a8:b6:fd:19:eb: 43:1b:39:40:17:ea:bd:3a:06:98:c9:1b:d3:36:dd: dd:a4:2f:aa:a7:36:db:13:60:77:19:38:7c:5e:dc: cc:ae:1c:e0:e5:a7:85:98:54:20:b2:4b:a6:d8:b9: 08:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:DC:EB:D1:15:BE:5D:C5:20:2D:3E:42:E1:9E:94:74:83:69:62:AB X509v3 Authority Key Identifier: keyid:3C:12:47:62:4A:30:05:C6:FC:F6:61:2B:AC:99:CA:B0:4C:60:12:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBJHYkowBcb89mErrJnKsExgEmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:19:70:4d:80:d3:21:35:a4:36:e6:bb:b2:08:e2:f5:d3:7a: 00:c6:51:43:e4:51:92:7b:56:2c:bc:80:44:47:d7:cb:15:c8: 2a:4c:52:80:f6:b9:d1:2c:69:45:0c:90:8e:9c:9e:9b:66:1e: 08:8a:71:6f:c2:cf:ec:f6:bd:15:d0:4f:d2:72:f4:9f:87:69: 36:4d:6e:57:c7:85:69:eb:cb:99:03:25:10:40:6f:68:5a:30: 73:3f:58:30:4f:92:b1:f5:24:58:d9:9c:e7:96:66:f1:b3:07: 35:b7:d0:22:b4:9f:c4:0d:65:4b:da:84:86:4b:b8:37:b7:e9: c3:1f:08:fb:56:b1:bd:df:fc:14:f8:6d:23:a1:e6:66:12:e8: 67:19:46:fd:df:b3:f3:b2:c4:d4:26:5d:96:1b:d7:1c:86:8f: c1:f1:42:98:06:12:fb:bf:55:ba:06:4e:ab:05:75:b8:d5:b8: 63:18:06:53:42:23:d8:2a:06:ad:ca:e8:94:52:0e:64:1e:32: d1:36:92:91:2f:d7:7e:dc:28:b9:87:0d:a8:a6:6d:ac:7e:4e: 33:18:7b:35:06:cf:2e:49:8a:ce:c9:1b:16:3d:6b:28:d0:b9: d7:92:66:e5:fe:b9:9b:1b:c6:f2:54:bd:53:d7:cd:9e:66:60: 2c:3f:80:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwOkBaFsJNERk3oAkYdpUEMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMTI0NzYyNGEzMDA1YzZmY2Y2NjEyYmFjOTljYWIwNGM2 MDEyNmEwHhcNMjYwMTMwMTEwMDQ5WhcNMjYwMTMxMTEwMDQ5WjAzMTEwLwYDVQQD EygwM2RjZWJkMTE1YmU1ZGM1MjAyZDNlNDJlMTllOTQ3NDgzNjk2MmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWylpOOZiAY3UUlzl5Pqa284hjO8 pevOlKxxpaZeDUX+1ppEHesAcpOx7YQSgJBNaGBnCpnqrjUE2kbIx+Jrqan2sUNv cyi5ptLqBbP2pf6XMalfhMiFaImzTl/rFJoJKA3SU+4QzX6CBjUOWEhfRQxVXD0u IPSzY1wnqppJKMQz3x1y9jTY66py+Fn2zktQhBSkQMOdE8QTg4LyOtxJIFXgFpAt YvHkxbb0gLH0Li+f/eQfRHt3U0/XMXYJ69btltKsJRCHfIT+WHj2qLb9GetDGzlA F+q9OgaYyRvTNt3dpC+qpzbbE2B3GTh8XtzMrhzg5aeFmFQgskum2LkINwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAPc69EVvl3FIC0+QuGelHSDaWKrMB8GA1UdIwQY MBaAFDwSR2JKMAXG/PZhK6yZyrBMYBJqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEJKSFlrb3dCY2I4OW1FcnJKbktzRXhnRW1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8wMzYzZjAtZWMwZC00OGE2LTljZWIt ZThiZDJkYmE5N2FiLzEvUEJKSFlrb3dCY2I4OW1FcnJKbktzRXhnRW1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8wMzYzZjAtZWMwZC00OGE2LTljZWItZThiZDJkYmE5N2Fi LzEvUEJKSFlrb3dCY2I4OW1FcnJKbktzRXhnRW1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhxlwTYDT ITWkNua7sgji9dN6AMZRQ+RRkntWLLyAREfXyxXIKkxSgPa50SxpRQyQjpyem2Ye CIpxb8LP7Pa9FdBP0nL0n4dpNk1uV8eFaevLmQMlEEBvaFowcz9YME+SsfUkWNmc 55Zm8bMHNbfQIrSfxA1lS9qEhku4N7fpwx8I+1axvd/8FPhtI6HmZhLoZxlG/d+z 87LE1CZdlhvXHIaPwfFCmAYS+79VugZOqwV1uNW4YxgGU0Ij2CoGrcrolFIOZB4y 0TaSkS/XftwouYcNqKZtrH5OMxh7NQbPLkmKzskbFj1rKNC515Jm5f65mxvG8lS9 U9fNnmZgLD+A/g== -----END CERTIFICATE-----Generated at Fri Jan 30 20:11:17 2026 by rpki-client