This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft File: pfanGhgNz4sjDEFPCfe3G66peBw.mft (raw, json) Hash identifier: S2CLy1u/4b1zeMuqKSZ/D58EKSaSBl/9foMaLt8JiXU= Subject key identifier: 54:2C:57:AD:9A:51:CF:C4:A0:7B:CF:E8:B6:BB:A2:63:79:4B:BD:58 Authority key identifier: A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C Certificate issuer: /CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c Certificate serial: 019C1C1518E0E4B13CC4E1F42545ACDAAFFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft Manifest number: 04C8 Signing time: Mon 02 Feb 2026 02:01:10 +0000 Manifest this update: Mon 02 Feb 2026 02:01:10 +0000 Manifest next update: Tue 03 Feb 2026 02:01:10 +0000 Files and hashes: 1: e753LkUtZdPOHhc1jXD6UBTKdAI.asa (hash: QxMQuuavAVTbwrJf2pty+8SMFCYB7PU0/p/Emd0Ybrg=) 2: l2imbiusoMKFDayNbJoOchhQjKo.roa (hash: YYelOZGI0tep3ojBK7JJq7+uS3WslSPQkey1gLDWKRs=) 3: pfanGhgNz4sjDEFPCfe3G66peBw.crl (hash: NbHYUbe6MZAZiOY5lUgtKJqgAeptYX0E4Sa1KgMSsIM=) 4: sqjDR9C3yuWgeDEW-u7FZq2GXwI.roa (hash: /0Ln3Zg2sTICpShIMihehk8+YHZcL9xlacfJl1AeuPs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1c:15:18:e0:e4:b1:3c:c4:e1:f4:25:45:ac:da:af:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c Validity Not Before: Feb 2 02:01:10 2026 GMT Not After : Feb 3 02:01:10 2026 GMT Subject: CN=542c57ad9a51cfc4a07bcfe8b6bba263794bbd58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ec:b0:6d:4f:26:20:cb:b5:f5:7e:b4:91:79: cc:30:0e:3d:1c:3f:e0:f4:4e:f2:ea:bc:8b:f1:2e: d0:1f:2e:88:c7:8f:91:53:c9:78:0c:1e:11:9f:e7: 73:06:be:08:68:9b:5f:4f:22:25:af:2f:75:05:39: 04:d1:a2:bd:75:5b:1d:43:1f:8b:31:f1:b0:0c:df: 65:bc:57:14:d1:cf:79:fd:3b:03:21:7a:26:a0:98: 65:a5:e3:d5:8e:0e:d8:ab:8d:50:9e:89:88:e1:31: c4:44:86:44:4b:ae:91:18:9c:0f:e5:55:c9:26:ce: 05:ee:ef:28:e3:bb:fc:ba:f1:2f:0b:8e:97:ab:10: 9a:32:f9:6d:87:d9:c4:6c:7e:4e:2d:1d:5a:f7:fc: df:5e:08:59:b8:94:43:ed:e6:51:0d:f6:29:d4:a1: e8:d0:53:5c:54:f8:17:e5:fd:d1:2f:6f:c7:bf:19: 3e:d1:52:19:44:bb:6c:cc:9a:bd:7c:94:4d:84:07: 87:c6:5a:a0:22:3d:ad:d4:cb:04:8a:97:52:d4:28: 61:57:53:8b:73:43:12:e6:c4:72:2c:94:39:d2:c8: ec:06:e3:d0:bb:99:30:40:3e:a2:90:5e:10:b1:eb: df:2b:c9:36:b3:42:f2:7b:7b:72:58:59:e9:dc:6d: 41:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:2C:57:AD:9A:51:CF:C4:A0:7B:CF:E8:B6:BB:A2:63:79:4B:BD:58 X509v3 Authority Key Identifier: keyid:A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:8c:2e:7e:11:19:b5:96:86:fb:ab:35:fa:ea:28:0a:c5:4e: 20:1b:b5:5f:d8:89:46:01:65:07:fa:d1:b7:98:36:f3:fd:bf: 2e:44:a2:d1:11:d3:11:5e:20:8e:18:85:41:56:28:ab:39:bd: 3c:b6:48:f4:76:1a:be:30:9c:ba:11:e9:a2:6d:ad:cc:f0:3f: 2a:5a:41:6d:be:ab:17:eb:d8:0b:cb:be:ef:2c:30:9a:5d:2c: 79:e8:6f:9e:09:09:85:76:57:51:f6:b3:3b:4d:0b:71:c9:88: 3a:48:f0:56:b2:13:bb:cd:46:ee:d3:fc:c9:cc:ec:0f:69:4a: fa:1b:51:6c:a3:ca:1b:1a:26:5b:bb:bc:be:9c:ae:7a:94:26: 2f:d8:c7:bc:b9:e4:bb:55:8e:b7:b7:50:de:2a:66:11:be:e4: cd:68:bf:c0:f0:a4:13:7a:8d:4d:77:b3:0a:3f:c3:ed:92:60: 35:85:07:fd:c6:6d:2f:4c:bb:f1:02:59:02:9b:a6:c5:85:78: 91:4b:76:c8:70:ba:80:1f:f0:2b:c5:e2:46:cf:0e:92:c0:09: 68:82:12:91:92:3b:18:8a:89:ee:e5:a0:e3:16:93:53:24:21: 1b:a5:c1:c3:bf:10:96:31:93:ea:00:19:00:84:66:1f:6f:f4: b5:e1:d4:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwcFRjg5LE8xOH0JUWs2q/+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1ZjZhNzFhMTgwZGNmOGIyMzBjNDE0ZjA5ZjdiNzFiYWVh OTc4MWMwHhcNMjYwMjAyMDIwMTEwWhcNMjYwMjAzMDIwMTEwWjAzMTEwLwYDVQQD Eyg1NDJjNTdhZDlhNTFjZmM0YTA3YmNmZThiNmJiYTI2Mzc5NGJiZDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+ywbU8mIMu19X60kXnMMA49HD/g 9E7y6ryL8S7QHy6Ix4+RU8l4DB4Rn+dzBr4IaJtfTyIlry91BTkE0aK9dVsdQx+L MfGwDN9lvFcU0c95/TsDIXomoJhlpePVjg7Yq41QnomI4THERIZES66RGJwP5VXJ Js4F7u8o47v8uvEvC46XqxCaMvlth9nEbH5OLR1a9/zfXghZuJRD7eZRDfYp1KHo 0FNcVPgX5f3RL2/Hvxk+0VIZRLtszJq9fJRNhAeHxlqgIj2t1MsEipdS1ChhV1OL c0MS5sRyLJQ50sjsBuPQu5kwQD6ikF4QsevfK8k2s0Lye3tyWFnp3G1B+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFQsV62aUc/EoHvP6La7omN5S71YMB8GA1UdIwQY MBaAFKX2pxoYDc+LIwxBTwn3txuuqXgcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGZhbkdoZ056NHNqREVGUENmZTNHNjZwZUJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iM2Y5MTItMzZkMS00MzY2LWFjM2Mt NjY2MDIzOGIwM2NlLzEvcGZhbkdoZ056NHNqREVGUENmZTNHNjZwZUJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9iM2Y5MTItMzZkMS00MzY2LWFjM2MtNjY2MDIzOGIwM2Nl LzEvcGZhbkdoZ056NHNqREVGUENmZTNHNjZwZUJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZYwufhEZ tZaG+6s1+uooCsVOIBu1X9iJRgFlB/rRt5g28/2/LkSi0RHTEV4gjhiFQVYoqzm9 PLZI9HYavjCcuhHpom2tzPA/KlpBbb6rF+vYC8u+7ywwml0seehvngkJhXZXUfaz O00LccmIOkjwVrITu81G7tP8yczsD2lK+htRbKPKGxomW7u8vpyuepQmL9jHvLnk u1WOt7dQ3ipmEb7kzWi/wPCkE3qNTXezCj/D7ZJgNYUH/cZtL0y78QJZApumxYV4 kUt2yHC6gB/wK8XiRs8OksAJaIISkZI7GIqJ7uWg4xaTUyQhG6XBw78QljGT6gAZ AIRmH2/0teHUeg== -----END CERTIFICATE-----Generated at Mon Feb 2 08:16:11 2026 by rpki-client