This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft File: PLHMl1whjxZoawhB7fwwnMp0ans.mft (raw, json) Hash identifier: RhmbilEcmR0CjKOj1hIN2AfF+R1WWdXlYqTYbGORm04= Subject key identifier: 48:74:79:E9:DB:E3:C4:BF:A0:24:92:50:66:FC:AA:49:DB:93:93:FF Authority key identifier: 3C:B1:CC:97:5C:21:8F:16:68:6B:08:41:ED:FC:30:9C:CA:74:6A:7B Certificate issuer: /CN=3cb1cc975c218f16686b0841edfc309cca746a7b Certificate serial: 019BFBAF1627C4C7581E83B7C79B53AAB91A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft Manifest number: 0447 Signing time: Mon 26 Jan 2026 19:01:54 +0000 Manifest this update: Mon 26 Jan 2026 19:01:54 +0000 Manifest next update: Tue 27 Jan 2026 19:01:54 +0000 Files and hashes: 1: PLHMl1whjxZoawhB7fwwnMp0ans.crl (hash: htmzw8gIfKOEGrFPVMO/SBOhp4mQFKZFS3ucVHpcUEQ=) 2: u4cgh7Nj-_luUR3bdBkEgf5SpHQ.roa (hash: Af7PsAxhlGeBEitHo4c+wU7iGd5LHt68jODuQoQrn3Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 19:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:af:16:27:c4:c7:58:1e:83:b7:c7:9b:53:aa:b9:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cb1cc975c218f16686b0841edfc309cca746a7b Validity Not Before: Jan 26 19:01:54 2026 GMT Not After : Jan 27 19:01:54 2026 GMT Subject: CN=487479e9dbe3c4bfa024925066fcaa49db9393ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a9:2e:8f:64:c2:1d:b5:80:cf:3e:7d:49:a6: 95:5d:2d:ae:c5:d4:67:e6:c2:92:51:30:83:57:3a: bf:f0:d4:db:ec:b9:46:74:bb:04:e4:c6:d0:ca:bd: 57:56:cd:1b:3a:10:fa:2d:88:61:46:5f:62:4d:d3: ec:8b:cb:30:3f:72:11:4f:e6:a3:8c:7d:e6:34:b3: 27:30:d0:23:a2:22:b9:af:5a:04:29:76:41:2c:5f: c6:8e:34:b1:a8:0e:11:5c:fb:10:69:75:f2:c3:7e: a0:ca:a0:7f:c3:68:cc:c0:c5:e3:cb:b9:e3:70:66: 26:20:b1:37:b3:51:b6:7c:56:7b:77:0c:93:09:ce: 90:9b:0f:7c:5e:28:d8:55:2b:04:80:71:93:56:36: 26:b3:51:ce:55:70:c0:dc:3c:53:6e:a3:3a:b0:8f: 3c:ec:71:40:72:ae:79:ad:53:45:3e:6e:a2:73:20: 6a:cc:0e:86:cc:7f:d4:c5:d9:8c:ac:7c:2a:fc:d4: 34:56:80:10:0d:70:8e:b6:4b:60:cd:2f:ae:b1:7a: dc:70:fb:77:b6:f0:86:e2:05:1e:4f:d7:ec:a6:bb: 20:7a:c5:a5:e6:00:18:70:e5:b4:89:63:1d:82:67: 31:da:94:26:05:01:5f:67:9a:9d:b2:c3:b6:12:d3: 7a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:74:79:E9:DB:E3:C4:BF:A0:24:92:50:66:FC:AA:49:DB:93:93:FF X509v3 Authority Key Identifier: keyid:3C:B1:CC:97:5C:21:8F:16:68:6B:08:41:ED:FC:30:9C:CA:74:6A:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:a7:e2:f5:70:90:a2:a5:af:7a:f6:4d:7e:9d:a2:1e:d5:1a: 51:6b:d3:94:83:03:a0:6d:aa:2a:94:3b:69:fb:1c:a8:ef:80: 46:12:27:aa:fc:0c:7e:86:b7:8e:5d:96:52:a2:6b:df:a2:d0: 19:a6:46:c2:d8:c0:ca:26:7e:71:2c:3b:f2:e0:3b:bc:c2:08: 0f:02:6c:6f:29:aa:d0:91:21:8c:03:18:36:36:1e:ad:63:ad: 4d:74:10:7c:9e:39:99:f3:e9:87:c5:6a:46:2d:fc:42:f6:a1: 27:14:bd:f5:b2:64:8b:ee:50:2f:07:d3:01:80:24:b6:09:47: 3e:dd:7a:7b:10:cc:91:fd:c8:0a:53:33:55:3f:c0:db:b8:82: cb:c1:40:26:a5:1f:47:1b:ea:4f:13:04:a7:48:b5:19:27:a4: e3:85:a8:c8:db:64:b1:fa:2d:f4:32:32:49:c8:d5:92:50:39: 0f:a6:46:04:ff:01:dd:b9:ab:0b:47:30:87:21:26:3f:c0:4c: 73:1c:68:63:4d:e1:21:b3:17:72:12:7d:46:d7:86:fd:df:1b: f9:09:c5:c1:75:7d:99:27:52:b6:58:86:fd:bf:86:3d:5d:dd: 4f:e0:18:2e:32:f5:3a:61:c4:6e:63:db:bf:a9:b2:47:4a:06: b7:3c:a5:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7rxYnxMdYHoO3x5tTqrkaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjYjFjYzk3NWMyMThmMTY2ODZiMDg0MWVkZmMzMDljY2E3 NDZhN2IwHhcNMjYwMTI2MTkwMTU0WhcNMjYwMTI3MTkwMTU0WjAzMTEwLwYDVQQD Eyg0ODc0NzllOWRiZTNjNGJmYTAyNDkyNTA2NmZjYWE0OWRiOTM5M2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqkuj2TCHbWAzz59SaaVXS2uxdRn 5sKSUTCDVzq/8NTb7LlGdLsE5MbQyr1XVs0bOhD6LYhhRl9iTdPsi8swP3IRT+aj jH3mNLMnMNAjoiK5r1oEKXZBLF/GjjSxqA4RXPsQaXXyw36gyqB/w2jMwMXjy7nj cGYmILE3s1G2fFZ7dwyTCc6Qmw98XijYVSsEgHGTVjYms1HOVXDA3DxTbqM6sI88 7HFAcq55rVNFPm6icyBqzA6GzH/UxdmMrHwq/NQ0VoAQDXCOtktgzS+usXrccPt3 tvCG4gUeT9fsprsgesWl5gAYcOW0iWMdgmcx2pQmBQFfZ5qdssO2EtN6CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEh0eenb48S/oCSSUGb8qknbk5P/MB8GA1UdIwQY MBaAFDyxzJdcIY8WaGsIQe38MJzKdGp7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUExITWwxd2hqeFpvYXdoQjdmd3duTXAwYW5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8yMzlhOGUtOTBkOC00M2JkLTkwZWQt M2UzNGQwMDczMmEzLzEvUExITWwxd2hqeFpvYXdoQjdmd3duTXAwYW5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8yMzlhOGUtOTBkOC00M2JkLTkwZWQtM2UzNGQwMDczMmEz LzEvUExITWwxd2hqeFpvYXdoQjdmd3duTXAwYW5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoafi9XCQ oqWvevZNfp2iHtUaUWvTlIMDoG2qKpQ7afscqO+ARhInqvwMfoa3jl2WUqJr36LQ GaZGwtjAyiZ+cSw78uA7vMIIDwJsbymq0JEhjAMYNjYerWOtTXQQfJ45mfPph8Vq Ri38QvahJxS99bJki+5QLwfTAYAktglHPt16exDMkf3IClMzVT/A27iCy8FAJqUf RxvqTxMEp0i1GSek44WoyNtksfot9DIyScjVklA5D6ZGBP8B3bmrC0cwhyEmP8BM cxxoY03hIbMXchJ9RteG/d8b+QnFwXV9mSdStliG/b+GPV3dT+AYLjL1OmHEbmPb v6myR0oGtzylbw== -----END CERTIFICATE-----Generated at Tue Jan 27 05:36:37 2026 by rpki-client