This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft File: PvLDEpButnNhK6502i3RigNoJLE.mft (raw, json) Hash identifier: oahPiEIvloisbO6H9SmxIieYEssOZWSD5F65ZbNUbfU= Subject key identifier: 1D:3F:10:25:F1:CF:49:C6:26:BF:75:E0:7B:4A:F2:7B:37:9E:7D:41 Authority key identifier: 3E:F2:C3:12:90:6E:B6:73:61:2B:AE:74:DA:2D:D1:8A:03:68:24:B1 Certificate issuer: /CN=3ef2c312906eb673612bae74da2dd18a036824b1 Certificate serial: 019BFC1C45E66B943C6CED1D16744689B9B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft Manifest number: 0C6C Signing time: Mon 26 Jan 2026 21:01:09 +0000 Manifest this update: Mon 26 Jan 2026 21:01:09 +0000 Manifest next update: Tue 27 Jan 2026 21:01:09 +0000 Files and hashes: 1: GlmbggyWsqDmQgjMpt8vT6hyIY0.roa (hash: WG1xWz0sMWZNoi0xq7SQfwjVul3NBPCjw1VmqLI/Yb8=) 2: PvLDEpButnNhK6502i3RigNoJLE.crl (hash: fD1egVUJtwSCEJ2O7zfdEnCdhz3aqZJgUBLJ3+fVaNM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:1c:45:e6:6b:94:3c:6c:ed:1d:16:74:46:89:b9:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ef2c312906eb673612bae74da2dd18a036824b1 Validity Not Before: Jan 26 21:01:09 2026 GMT Not After : Jan 27 21:01:09 2026 GMT Subject: CN=1d3f1025f1cf49c626bf75e07b4af27b379e7d41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:dd:40:13:d8:25:fa:7c:1b:0a:30:d9:4c:be: 7f:c5:64:80:e0:8c:27:62:ab:62:4c:a6:c1:72:10: de:cd:3a:ae:7a:28:21:ba:f8:8d:06:f1:19:f4:02: 6f:99:d6:59:1b:ba:93:64:46:d6:7f:d0:4d:5d:50: 89:7d:29:d9:ce:bb:63:a8:9e:c7:13:de:47:6b:fe: 09:be:c0:bf:fe:fe:40:24:da:a0:8f:8b:c4:c8:90: 09:93:d7:44:e8:92:01:bb:24:7d:c9:13:14:64:fd: 63:d2:2c:82:7a:fb:eb:ab:b8:4c:6e:aa:9f:72:60: 8b:18:31:6f:cf:a0:a8:b5:5f:be:84:1a:3b:1c:db: 71:e9:02:26:cb:65:30:47:cb:c2:b2:43:79:c2:fb: e1:e2:56:ef:85:08:9f:fa:19:e3:05:d1:3b:ef:d9: ea:2f:5f:2a:fc:b5:5b:a3:ba:cc:e8:9c:28:d0:35: 97:ee:55:5e:38:a0:17:a8:93:c1:5a:7c:78:3c:99: 2c:ca:be:b6:f2:8f:da:eb:ba:9a:67:7d:a1:45:87: ea:5c:10:e3:30:c6:2c:2b:23:d2:e9:09:69:32:ed: 23:22:41:3e:24:e9:a4:8a:05:ef:e9:05:7a:9b:3c: b6:ec:64:88:c6:0f:5c:8c:35:eb:14:d4:00:98:fc: 8a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:3F:10:25:F1:CF:49:C6:26:BF:75:E0:7B:4A:F2:7B:37:9E:7D:41 X509v3 Authority Key Identifier: keyid:3E:F2:C3:12:90:6E:B6:73:61:2B:AE:74:DA:2D:D1:8A:03:68:24:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:b8:71:c8:6f:80:4b:9f:ab:9d:6d:6a:53:fa:40:72:d4:a7: 0e:01:69:9a:e4:73:98:bb:22:6e:32:5e:6b:65:97:f5:3d:2c: 2c:fb:61:00:a0:c9:b2:af:77:16:db:4c:4e:18:83:72:05:e3: fb:93:3a:2e:c4:60:6c:43:4d:40:c3:e9:42:be:79:58:4a:4c: ad:ea:6e:03:11:31:65:f2:a7:9a:95:f7:07:65:8d:76:78:2b: 60:99:0e:33:6f:59:b9:8a:32:1c:03:db:bc:0a:d7:0a:f0:71: 02:a8:1e:d7:d6:e1:3d:50:e1:dc:ae:c5:10:ba:f0:ed:7c:ba: 86:ce:d7:9d:7f:8b:3c:5e:9e:d0:f0:03:01:07:b7:db:c2:3e: 41:92:28:2e:08:41:67:9c:1c:8d:20:ae:09:18:cc:03:fa:ee: ac:20:dc:3a:af:0c:80:e2:18:c0:a3:d7:ee:a8:ed:38:69:6f: fe:64:0c:90:a7:e2:ae:60:fb:4e:93:bc:0e:e4:57:b6:4c:23: a1:89:de:46:e1:7d:f0:a0:a6:70:a3:6e:a0:82:c7:96:8c:33: a4:3e:8f:33:b2:49:93:2b:5d:66:04:85:0c:aa:55:27:93:51: b5:0b:8f:ba:12:0e:d0:c7:0b:04:39:cd:ad:89:d1:f7:ff:f0: 3f:7d:42:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8HEXma5Q8bO0dFnRGibmxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZjJjMzEyOTA2ZWI2NzM2MTJiYWU3NGRhMmRkMThhMDM2 ODI0YjEwHhcNMjYwMTI2MjEwMTA5WhcNMjYwMTI3MjEwMTA5WjAzMTEwLwYDVQQD EygxZDNmMTAyNWYxY2Y0OWM2MjZiZjc1ZTA3YjRhZjI3YjM3OWU3ZDQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyt1AE9gl+nwbCjDZTL5/xWSA4Iwn YqtiTKbBchDezTqueighuviNBvEZ9AJvmdZZG7qTZEbWf9BNXVCJfSnZzrtjqJ7H E95Ha/4JvsC//v5AJNqgj4vEyJAJk9dE6JIBuyR9yRMUZP1j0iyCevvrq7hMbqqf cmCLGDFvz6CotV++hBo7HNtx6QImy2UwR8vCskN5wvvh4lbvhQif+hnjBdE779nq L18q/LVbo7rM6Jwo0DWX7lVeOKAXqJPBWnx4PJksyr628o/a67qaZ32hRYfqXBDj MMYsKyPS6QlpMu0jIkE+JOmkigXv6QV6mzy27GSIxg9cjDXrFNQAmPyKVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB0/ECXxz0nGJr914HtK8ns3nn1BMB8GA1UdIwQY MBaAFD7ywxKQbrZzYSuudNot0YoDaCSxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHZMREVwQnV0bk5oSzY1MDJpM1JpZ05vSkxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC83ODgyZTMtZGU4Zi00NzUxLTliNmYt YzlmZmJlOWI5NGQzLzEvUHZMREVwQnV0bk5oSzY1MDJpM1JpZ05vSkxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC83ODgyZTMtZGU4Zi00NzUxLTliNmYtYzlmZmJlOWI5NGQz LzEvUHZMREVwQnV0bk5oSzY1MDJpM1JpZ05vSkxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqbhxyG+A S5+rnW1qU/pActSnDgFpmuRzmLsibjJea2WX9T0sLPthAKDJsq93FttMThiDcgXj +5M6LsRgbENNQMPpQr55WEpMrepuAxExZfKnmpX3B2WNdngrYJkOM29ZuYoyHAPb vArXCvBxAqge19bhPVDh3K7FELrw7Xy6hs7XnX+LPF6e0PADAQe328I+QZIoLghB Z5wcjSCuCRjMA/rurCDcOq8MgOIYwKPX7qjtOGlv/mQMkKfirmD7TpO8DuRXtkwj oYneRuF98KCmcKNuoILHlowzpD6PM7JJkytdZgSFDKpVJ5NRtQuPuhIO0McLBDnN rYnR9//wP31CuA== -----END CERTIFICATE-----Generated at Tue Jan 27 05:36:40 2026 by rpki-client