This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft File: pcY3PqsZz0PdL0MRE5g4PuK60DA.mft (raw, json) Hash identifier: 5GQvWpc6Gyer9XVMMNiCoKGdP5otHVVUGXz7vSjjIsk= Subject key identifier: 49:5F:86:BC:68:EA:84:5E:26:A4:DB:CB:64:5F:B7:DD:54:EF:70:46 Authority key identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30 Certificate issuer: /CN=a5c6373eab19cf43dd2f43111398383ee2bad030 Certificate serial: 019BDE122EBC14919F55FB6EF178B2452D42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft Manifest number: 1298 Signing time: Wed 21 Jan 2026 01:01:31 +0000 Manifest this update: Wed 21 Jan 2026 01:01:31 +0000 Manifest next update: Thu 22 Jan 2026 01:01:31 +0000 Files and hashes: 1: 3TWQKB1cnPa0egTpgv4hHONnk6g.roa (hash: 7Md6IbzdaA19dddiYJSTqvYDtis8EUY+mCYILklb6m4=) 2: ExTCIeQK6Vb8OCwCNuc_-quqRmI.roa (hash: yAl2sJH2YaylYmZhqm6jDAUkF463bPlFn5SJl2V0nqk=) 3: JzElV8rMB35_r5yROjAIe1YSEGk.roa (hash: prxCAC9aS1jR/lGKgImoCaF1puXWY2FG75jnwkB+CC4=) 4: U6ayks1P5BRjFFhc1UxRq5VC3jI.roa (hash: nvEU1lFde+SY+X4ElX6UspKi9KkL8IPg/Z79T8X9J68=) 5: VXazB19Is6W_OKKCp0AvNqbD-rM.roa (hash: IwIknG6od+Fc8/mQwvVulKrK8qXdxe2y0/Y0Cy93yB0=) 6: pcY3PqsZz0PdL0MRE5g4PuK60DA.crl (hash: nkc8qXCjRLin4VSuoA8Vz2MXJBTLrReBNIbir4sjVT0=) 7: xC-EAU29A34DWs98hyrYzhXpyZ8.roa (hash: jAQevc7Xb/Yzwsa/p7bJP+rHW+tHRc2iSYt5PmCJM2M=) 8: xiRiEOWddXme3nTY0cPZtUg6ADU.roa (hash: gYS4wLSjO292ggFXgtLrb2tXsY0mWqq4tWIaaZhXMCY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:de:12:2e:bc:14:91:9f:55:fb:6e:f1:78:b2:45:2d:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5c6373eab19cf43dd2f43111398383ee2bad030 Validity Not Before: Jan 21 01:01:31 2026 GMT Not After : Jan 22 01:01:31 2026 GMT Subject: CN=495f86bc68ea845e26a4dbcb645fb7dd54ef7046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:86:0a:f7:74:16:30:7e:db:49:76:31:d6:f0: 21:e4:8f:c0:39:c3:e9:b0:cb:b8:3f:5e:e4:ff:16: 13:35:48:2f:a0:0e:8d:c3:3d:7f:e2:e7:45:67:47: 96:a6:bf:17:ef:53:8c:fc:ca:9e:29:37:db:ce:5a: e9:49:57:bb:72:8e:f7:3f:5c:33:91:27:13:ff:b1: 3b:4a:19:b2:9f:cf:0e:d8:1e:78:8b:e2:20:51:c1: 66:9e:70:cc:06:b8:bc:02:70:9a:fa:0d:12:01:c9: eb:4e:a5:de:07:ac:1f:05:a4:12:9e:38:fa:b8:09: ca:2d:a9:f7:ff:dd:bb:93:0a:6d:0e:0e:04:69:b3: 2f:3c:d3:3e:35:5c:e0:ff:04:ba:b2:33:84:a6:7c: ed:65:12:b7:d3:db:4d:9e:6d:c6:8d:08:f4:a2:cd: 38:f8:c1:7b:54:70:49:c8:44:f7:d2:95:6e:db:ae: 54:3d:59:05:b5:41:91:9f:16:65:64:a8:fc:58:88: 06:eb:5c:00:fd:88:33:a0:ee:bc:89:96:84:75:79: 9c:e8:7b:90:56:5a:62:77:12:86:05:d9:17:cb:4c: e9:5c:69:3a:ce:6a:13:86:13:d7:a0:09:fb:c6:8d: 1a:e7:a5:22:84:f3:b6:b7:9f:b7:a3:27:d1:ef:47: 1f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:5F:86:BC:68:EA:84:5E:26:A4:DB:CB:64:5F:B7:DD:54:EF:70:46 X509v3 Authority Key Identifier: keyid:A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:c9:e5:94:03:5b:c0:37:99:22:c7:32:3f:1d:a2:92:87:11: 9f:32:79:79:63:33:71:fd:fd:65:13:50:84:ab:cd:3a:7f:71: e2:57:7b:14:87:38:56:a9:dd:6d:59:70:2e:af:8d:e8:ae:17: bd:fa:8a:25:90:6f:84:d1:88:38:f3:8a:c8:34:d9:38:e8:4a: 85:12:33:c4:b4:8a:61:28:72:7a:7b:20:15:0d:de:3c:9d:a7: d9:9e:80:51:dd:de:2f:6f:9c:76:24:e9:b8:8b:b5:7f:e7:72: 17:d8:0f:75:94:13:a2:d6:23:76:26:60:0b:33:10:ec:02:cd: 34:89:97:92:9c:48:c1:21:3e:ca:ce:a4:61:d5:ca:8a:5a:d6: 55:07:8f:6b:9d:94:69:24:97:cf:99:ac:64:4e:87:03:91:24: 51:a8:5e:00:7e:09:eb:c4:4e:0e:d2:ea:d3:a0:e7:a8:72:13: fd:07:4d:51:3a:8c:a8:54:88:a2:02:42:0a:93:32:64:50:9b: 89:4d:83:d3:24:5b:d8:3a:5f:29:8b:92:4a:d7:f2:02:d2:e6: 36:e1:88:44:b0:ac:b8:a2:44:85:7d:d3:3d:4b:86:f7:5d:3b: 62:d8:47:23:4d:25:26:49:f3:79:0f:23:e9:9e:c2:6a:6e:cf: 73:37:bd:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZveEi68FJGfVftu8XiyRS1CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YzYzNzNlYWIxOWNmNDNkZDJmNDMxMTEzOTgzODNlZTJi YWQwMzAwHhcNMjYwMTIxMDEwMTMxWhcNMjYwMTIyMDEwMTMxWjAzMTEwLwYDVQQD Eyg0OTVmODZiYzY4ZWE4NDVlMjZhNGRiY2I2NDVmYjdkZDU0ZWY3MDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4YK93QWMH7bSXYx1vAh5I/AOcPp sMu4P17k/xYTNUgvoA6Nwz1/4udFZ0eWpr8X71OM/MqeKTfbzlrpSVe7co73P1wz kScT/7E7Shmyn88O2B54i+IgUcFmnnDMBri8AnCa+g0SAcnrTqXeB6wfBaQSnjj6 uAnKLan3/927kwptDg4EabMvPNM+NVzg/wS6sjOEpnztZRK309tNnm3GjQj0os04 +MF7VHBJyET30pVu265UPVkFtUGRnxZlZKj8WIgG61wA/YgzoO68iZaEdXmc6HuQ VlpidxKGBdkXy0zpXGk6zmoThhPXoAn7xo0a56UihPO2t5+3oyfR70cf2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFElfhrxo6oReJqTby2Rft91U73BGMB8GA1UdIwQY MBaAFKXGNz6rGc9D3S9DEROYOD7iutAwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGNZM1Bxc1p6MFBkTDBNUkU1ZzRQdUs2MERBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9mMGY1ZTMtNjA1MC00ZTJkLWE0ZWEt YTRlYTBhNjNmNzY2LzEvcGNZM1Bxc1p6MFBkTDBNUkU1ZzRQdUs2MERBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9mMGY1ZTMtNjA1MC00ZTJkLWE0ZWEtYTRlYTBhNjNmNzY2 LzEvcGNZM1Bxc1p6MFBkTDBNUkU1ZzRQdUs2MERBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATcnllANb wDeZIscyPx2ikocRnzJ5eWMzcf39ZRNQhKvNOn9x4ld7FIc4VqndbVlwLq+N6K4X vfqKJZBvhNGIOPOKyDTZOOhKhRIzxLSKYShyensgFQ3ePJ2n2Z6AUd3eL2+cdiTp uIu1f+dyF9gPdZQTotYjdiZgCzMQ7ALNNImXkpxIwSE+ys6kYdXKilrWVQePa52U aSSXz5msZE6HA5EkUaheAH4J68RODtLq06DnqHIT/QdNUTqMqFSIogJCCpMyZFCb iU2D0yRb2DpfKYuSStfyAtLmNuGIRLCsuKJEhX3TPUuG9107YthHI00lJknzeQ8j 6Z7Cam7Pcze9YA== -----END CERTIFICATE-----Generated at Wed Jan 21 08:58:03 2026 by rpki-client