This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft File: PQG9lJxV7QfnAkLhUDPQqEdKnho.mft (raw, json) Hash identifier: GMuZiMF/foZ7dOaXLMeRwUJLF+QN3h2b/bP5wGA9coc= Subject key identifier: EE:2C:C3:F4:DC:95:1E:EA:E5:34:E5:B1:46:FF:28:C1:0A:07:16:49 Authority key identifier: 3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A Certificate issuer: /CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a Certificate serial: 019BFC531E67B7E2464C634A717C08F50415 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft Manifest number: 06CA Signing time: Mon 26 Jan 2026 22:01:04 +0000 Manifest this update: Mon 26 Jan 2026 22:01:04 +0000 Manifest next update: Tue 27 Jan 2026 22:01:04 +0000 Files and hashes: 1: PQG9lJxV7QfnAkLhUDPQqEdKnho.crl (hash: KqifEp+2NmIPuS16IFGrYGZbZQx/+TKqLWcqM3Dm27Q=) 2: q4Ty8nMMQ4uHQ_jd585KCsdADRE.roa (hash: mEEFLdBEQ2NqJsxoY/z4GLGz394s4HaBIKdAwtz8jWE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:53:1e:67:b7:e2:46:4c:63:4a:71:7c:08:f5:04:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a Validity Not Before: Jan 26 22:01:04 2026 GMT Not After : Jan 27 22:01:04 2026 GMT Subject: CN=ee2cc3f4dc951eeae534e5b146ff28c10a071649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:51:89:f5:85:ce:fe:c6:b9:40:3f:e6:5a:b7: 3d:ab:fe:81:8b:5d:61:a4:29:75:e9:75:a7:55:45: 1d:f2:cc:f1:3e:1e:4e:55:82:3c:c9:68:31:f0:b6: 4a:53:4c:16:aa:7b:26:d7:3d:06:c3:92:77:5d:8a: f0:a2:a4:97:7c:f0:3a:9b:cd:e2:7e:79:6f:bd:67: 6b:a5:3e:7f:fa:76:a0:bc:0a:07:dc:97:17:b8:16: 15:a2:20:c8:00:47:6d:7e:7c:1f:62:dd:2f:dd:ca: 99:bb:db:d3:9d:96:ad:0a:ea:73:dd:42:b3:83:18: 42:04:8a:0a:14:30:8a:f5:cf:ef:b8:16:cd:67:f3: 71:ce:43:24:2d:4b:2e:8a:b4:e8:f1:b8:59:c6:61: f2:08:98:28:57:d6:df:3c:9e:de:1b:43:4e:10:0b: 15:a4:2f:54:da:d6:99:1a:59:f7:02:59:b9:2d:e6: c4:5b:7c:07:2c:e6:fa:58:4d:37:b7:02:47:de:09: 3b:65:51:ca:6d:89:95:b2:e7:4a:d2:42:55:62:78: 5c:84:ea:d5:eb:bd:a1:b9:22:16:7f:32:a0:7e:69: 1c:c2:fb:c7:31:f9:a7:a3:25:49:22:4e:e9:82:c7: 5a:34:e1:a6:54:e4:8c:ee:a9:53:b6:04:93:05:b0: b5:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:2C:C3:F4:DC:95:1E:EA:E5:34:E5:B1:46:FF:28:C1:0A:07:16:49 X509v3 Authority Key Identifier: keyid:3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:4f:90:d0:5c:a9:19:b2:5a:5c:ba:32:d3:99:8d:7d:63:1b: 3b:f8:a8:6e:19:5d:bf:3d:7c:ef:fd:69:b3:56:db:e7:9b:46: 19:6b:6c:98:bf:c4:bd:28:89:57:ea:10:81:a2:29:8c:d7:5a: 63:80:cb:13:f6:45:55:6e:d4:1a:e9:5a:1d:91:c8:c7:d4:e1: 74:62:c8:cb:95:7a:61:a5:16:25:04:aa:53:99:bf:69:91:d1: 79:87:f6:2f:41:50:30:0d:d4:7a:10:53:df:a3:38:1a:11:28: 48:e9:bd:83:f2:bd:0f:f0:ea:7e:8e:94:c0:95:b0:3d:48:27: d5:fa:de:53:ff:66:94:8d:36:a2:2e:82:0d:64:8a:d5:8b:2e: 29:7a:c0:0c:45:61:89:db:48:bc:d2:22:90:7e:b6:76:e7:2c: 03:64:d0:80:d5:a2:62:75:dd:8e:93:78:d1:70:8d:7e:93:8e: 77:ed:50:f0:6b:6b:35:78:79:ab:0a:ea:29:26:d2:33:63:37: 71:fa:30:85:67:5c:be:e6:55:6f:a5:81:4f:de:02:fb:b1:78: 82:5f:cc:6f:04:62:02:9c:03:86:d2:dd:a4:70:95:23:8a:88: 70:f4:e3:0f:e6:50:1a:d7:dc:1f:53:ea:70:9c:f2:4f:b9:a7: 43:e2:b7:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8Ux5nt+JGTGNKcXwI9QQVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkMDFiZDk0OWM1NWVkMDdlNzAyNDJlMTUwMzNkMGE4NDc0 YTllMWEwHhcNMjYwMTI2MjIwMTA0WhcNMjYwMTI3MjIwMTA0WjAzMTEwLwYDVQQD EyhlZTJjYzNmNGRjOTUxZWVhZTUzNGU1YjE0NmZmMjhjMTBhMDcxNjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41GJ9YXO/sa5QD/mWrc9q/6Bi11h pCl16XWnVUUd8szxPh5OVYI8yWgx8LZKU0wWqnsm1z0Gw5J3XYrwoqSXfPA6m83i fnlvvWdrpT5/+nagvAoH3JcXuBYVoiDIAEdtfnwfYt0v3cqZu9vTnZatCupz3UKz gxhCBIoKFDCK9c/vuBbNZ/NxzkMkLUsuirTo8bhZxmHyCJgoV9bfPJ7eG0NOEAsV pC9U2taZGln3Alm5LebEW3wHLOb6WE03twJH3gk7ZVHKbYmVsudK0kJVYnhchOrV 672huSIWfzKgfmkcwvvHMfmnoyVJIk7pgsdaNOGmVOSM7qlTtgSTBbC1iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO4sw/TclR7q5TTlsUb/KMEKBxZJMB8GA1UdIwQY MBaAFD0BvZScVe0H5wJC4VAz0KhHSp4aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFFHOWxKeFY3UWZuQWtMaFVEUFFxRWRLbmhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jMTUwMDMtZWQ1My00MmQzLWFmMDkt ZTRlMGI1NTVhZDU5LzEvUFFHOWxKeFY3UWZuQWtMaFVEUFFxRWRLbmhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9jMTUwMDMtZWQ1My00MmQzLWFmMDktZTRlMGI1NTVhZDU5 LzEvUFFHOWxKeFY3UWZuQWtMaFVEUFFxRWRLbmhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQE+Q0Fyp GbJaXLoy05mNfWMbO/iobhldvz187/1ps1bb55tGGWtsmL/EvSiJV+oQgaIpjNda Y4DLE/ZFVW7UGulaHZHIx9ThdGLIy5V6YaUWJQSqU5m/aZHReYf2L0FQMA3UehBT 36M4GhEoSOm9g/K9D/Dqfo6UwJWwPUgn1freU/9mlI02oi6CDWSK1YsuKXrADEVh idtIvNIikH62ducsA2TQgNWiYnXdjpN40XCNfpOOd+1Q8GtrNXh5qwrqKSbSM2M3 cfowhWdcvuZVb6WBT94C+7F4gl/MbwRiApwDhtLdpHCVI4qIcPTjD+ZQGtfcH1Pq cJzyT7mnQ+K3rQ== -----END CERTIFICATE-----Generated at Tue Jan 27 06:06:46 2026 by rpki-client