This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft File: PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft (raw, json) Hash identifier: KPiTYq8vh8QctxpeEGxnw4Vz6Vzy/I+5vqiohIJTbp8= Subject key identifier: 84:6B:06:6E:6B:D0:D9:BE:FC:BD:5A:62:50:7E:0C:50:84:59:AE:33 Authority key identifier: 3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3 Certificate issuer: /CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3 Certificate serial: 019C1EDF267BD323F753873EE7964487CA4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft Manifest number: 09B4 Signing time: Mon 02 Feb 2026 15:01:06 +0000 Manifest this update: Mon 02 Feb 2026 15:01:06 +0000 Manifest next update: Tue 03 Feb 2026 15:01:06 +0000 Files and hashes: 1: PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl (hash: sezBKua0j2awBzWiykDYeiiP3yPUATmTrh8GfA2BOic=) 2: Rc7RzqAPPUCBuDvI3EccxhXQFx0.roa (hash: NZZ300KypQkIx5yRquXaIhhH8xlduscfQaOkKsQw9Kc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1e:df:26:7b:d3:23:f7:53:87:3e:e7:96:44:87:ca:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3 Validity Not Before: Feb 2 15:01:06 2026 GMT Not After : Feb 3 15:01:06 2026 GMT Subject: CN=846b066e6bd0d9befcbd5a62507e0c508459ae33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:26:e0:97:4f:b5:07:d4:2c:b9:dd:ad:18:a4: 89:f2:6e:2f:7c:0f:d1:4c:a8:e1:a1:72:06:f4:7f: 1d:12:e0:6e:7a:13:38:f9:92:e5:ca:eb:19:58:07: c3:48:06:75:33:eb:a1:aa:12:69:9c:f7:59:db:14: bf:00:e8:92:04:ae:16:84:fe:e5:65:a4:a5:da:8c: 5a:4b:f2:84:45:71:3c:9e:3d:e7:9d:5f:f4:a6:71: c8:9f:c4:90:df:bb:7e:07:b0:e4:a8:1c:8e:ea:a3: e7:35:db:9e:c6:9b:9c:2e:33:03:a2:5f:bf:1e:56: b6:c6:dc:a7:36:c2:1a:a5:77:72:5c:26:c7:c8:35: 04:46:00:e7:08:f1:ff:5d:18:b4:98:ae:c9:53:a2: 9e:74:08:7a:46:b4:e1:1a:4e:5e:33:32:36:7e:88: 39:ba:c2:ef:5d:f2:3e:b6:f3:b8:f0:72:a9:b0:2f: d8:e3:25:11:49:75:44:4c:d1:1c:49:32:9b:e7:11: 8d:68:00:0f:cc:36:ac:ab:ef:c3:c8:5e:d2:21:50: c8:0f:4b:2c:cb:4f:5c:91:0d:33:85:86:31:4f:5c: 42:98:1a:d4:d2:32:fe:d9:c1:e8:bb:f3:67:96:e7: 4c:3f:23:e3:24:b9:dd:cf:a5:38:6c:46:3a:0d:c1: 20:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:6B:06:6E:6B:D0:D9:BE:FC:BD:5A:62:50:7E:0C:50:84:59:AE:33 X509v3 Authority Key Identifier: keyid:3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:fa:03:75:b5:f8:29:05:51:f6:56:23:b6:c8:94:a9:1c:a0: 6b:82:d2:86:c3:06:fe:e4:ff:e9:fe:6b:bb:33:01:2a:d1:b7: 60:92:03:df:73:ec:59:db:26:5b:c8:f5:be:a7:c1:44:fe:f8: 86:ed:6a:9e:50:b7:20:e0:73:2d:73:f8:0c:c9:bd:92:16:6a: a5:20:ac:34:92:88:c7:9e:e0:f2:ea:bb:cd:73:c8:ac:65:0b: cf:a2:b8:02:e5:31:b2:7d:c5:17:8a:5f:f8:a2:a1:83:18:08: 75:be:cf:b6:38:ca:58:b9:d0:b9:1c:98:09:91:9d:f5:9e:2b: b1:eb:e8:0f:be:f4:58:c4:0d:67:46:cd:a4:08:23:d8:bf:fa: 8a:bf:ab:09:48:27:ec:e9:24:4e:03:4d:57:86:31:b9:b2:a0: 6a:01:6d:b2:42:01:73:dd:8a:93:27:a8:e5:83:a8:e9:3a:0f: 1a:49:15:2d:99:84:78:8b:33:2e:76:14:1e:25:ef:72:9f:46: 2b:76:50:1f:b8:d2:90:33:a1:26:81:d8:10:10:5f:6a:bf:bb: 9e:b4:e6:25:91:4c:af:cb:3a:24:9c:e1:14:a7:71:21:df:4a: 68:90:56:3e:b1:3f:ba:f7:39:10:b8:26:4c:69:94:47:6f:76: 6f:af:92:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwe3yZ70yP3U4c+55ZEh8pOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNDMyNzdiN2NhNzlkMGU5ZTA3ZmM0YTRiMzE4MDQxZGY0 MTVjYjMwHhcNMjYwMjAyMTUwMTA2WhcNMjYwMjAzMTUwMTA2WjAzMTEwLwYDVQQD Eyg4NDZiMDY2ZTZiZDBkOWJlZmNiZDVhNjI1MDdlMGM1MDg0NTlhZTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqybgl0+1B9Qsud2tGKSJ8m4vfA/R TKjhoXIG9H8dEuBuehM4+ZLlyusZWAfDSAZ1M+uhqhJpnPdZ2xS/AOiSBK4WhP7l ZaSl2oxaS/KERXE8nj3nnV/0pnHIn8SQ37t+B7DkqByO6qPnNduexpucLjMDol+/ Hla2xtynNsIapXdyXCbHyDUERgDnCPH/XRi0mK7JU6KedAh6RrThGk5eMzI2fog5 usLvXfI+tvO48HKpsC/Y4yURSXVETNEcSTKb5xGNaAAPzDasq+/DyF7SIVDID0ss y09ckQ0zhYYxT1xCmBrU0jL+2cHou/NnludMPyPjJLndz6U4bEY6DcEgIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIRrBm5r0Nm+/L1aYlB+DFCEWa4zMB8GA1UdIwQY MBaAFD5DJ3t8p50Ongf8SksxgEHfQVyzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGtNbmUzeW5uUTZlQl94S1N6R0FRZDlCWExNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yMjE5NDUtYTc0ZS00Nzc1LWFlYTUt M2NmMmE0NjIyZmJjLzEvUGtNbmUzeW5uUTZlQl94S1N6R0FRZDlCWExNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8yMjE5NDUtYTc0ZS00Nzc1LWFlYTUtM2NmMmE0NjIyZmJj LzEvUGtNbmUzeW5uUTZlQl94S1N6R0FRZDlCWExNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWvoDdbX4 KQVR9lYjtsiUqRyga4LShsMG/uT/6f5ruzMBKtG3YJID33PsWdsmW8j1vqfBRP74 hu1qnlC3IOBzLXP4DMm9khZqpSCsNJKIx57g8uq7zXPIrGULz6K4AuUxsn3FF4pf +KKhgxgIdb7PtjjKWLnQuRyYCZGd9Z4rsevoD770WMQNZ0bNpAgj2L/6ir+rCUgn 7OkkTgNNV4YxubKgagFtskIBc92Kkyeo5YOo6ToPGkkVLZmEeIszLnYUHiXvcp9G K3ZQH7jSkDOhJoHYEBBfar+7nrTmJZFMr8s6JJzhFKdxId9KaJBWPrE/uvc5ELgm TGmUR292b6+Scw== -----END CERTIFICATE-----Generated at Mon Feb 2 17:16:27 2026 by rpki-client