This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft File: PNJOCMV2B8rrzBnIVS6uLpNeguU.mft (raw, json) Hash identifier: 6Hia2Uus9aD290A0WuGxrSzAl1+nA7855MBnOVLRnSg= Subject key identifier: C6:42:BC:C0:AC:66:A5:FB:7D:1C:8C:43:9D:75:7F:F8:19:84:CC:0E Authority key identifier: 3C:D2:4E:08:C5:76:07:CA:EB:CC:19:C8:55:2E:AE:2E:93:5E:82:E5 Certificate issuer: /CN=3cd24e08c57607caebcc19c8552eae2e935e82e5 Certificate serial: 019C13495258CC90FC704B4E946B90F2FA44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNJOCMV2B8rrzBnIVS6uLpNeguU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft Manifest number: 0318 Signing time: Sat 31 Jan 2026 09:01:38 +0000 Manifest this update: Sat 31 Jan 2026 09:01:38 +0000 Manifest next update: Sun 01 Feb 2026 09:01:38 +0000 Files and hashes: 1: PNJOCMV2B8rrzBnIVS6uLpNeguU.crl (hash: grk0wAuuM3H8ON63ky3Cx0FEZ3fTy3yJy5ow1nS7g3I=) 2: b06IK2jnqaGT2Aa6wapV_ItJbLk.roa (hash: evhqnMI6fxBMtq2kvZ+VYu5aDa3S4q8vrEyodEWm170=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft rsync://rpki.ripe.net/repository/DEFAULT/PNJOCMV2B8rrzBnIVS6uLpNeguU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 01 Feb 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:13:49:52:58:cc:90:fc:70:4b:4e:94:6b:90:f2:fa:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cd24e08c57607caebcc19c8552eae2e935e82e5 Validity Not Before: Jan 31 09:01:38 2026 GMT Not After : Feb 1 09:01:38 2026 GMT Subject: CN=c642bcc0ac66a5fb7d1c8c439d757ff81984cc0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:65:43:8c:70:06:dd:0a:4e:4d:8d:52:9b:ad: 3b:ad:c8:31:25:58:43:bf:12:e5:5e:31:f6:79:29: d0:25:af:35:25:43:4f:f5:fc:96:b8:18:5c:78:14: 20:a5:d7:ce:3c:2e:2b:97:54:c3:89:07:ec:32:88: 9a:02:8e:1e:46:d8:e7:7a:1c:39:da:1f:5a:44:bb: 9c:84:88:fb:bf:bd:54:05:f7:29:56:65:52:96:92: 94:62:0b:98:6a:3f:ec:a4:5d:4a:ba:11:92:59:1c: 94:fc:ad:d5:07:fb:27:a8:12:cb:12:af:e6:f3:47: a6:c1:f4:25:c2:60:38:46:78:13:72:f2:28:a1:e9: 59:36:62:f7:ec:4d:7b:92:6e:94:27:7f:05:03:e0: 04:f8:ff:ff:1e:7a:91:d5:fe:ed:e0:f6:12:fe:69: d0:67:66:b5:a7:30:79:ef:f1:c8:f1:ed:7c:6f:11: be:d0:7a:de:79:16:47:91:4a:96:84:fa:e2:d0:16: 3e:00:8e:79:18:38:da:96:42:6b:62:fa:de:dd:c0: e5:87:56:94:df:a8:83:f7:f3:9b:c0:5e:ff:2b:3a: 13:37:37:37:fc:8f:79:48:df:f4:16:f9:f4:ad:0e: a8:a8:13:48:5a:3e:3c:c9:b0:9b:6f:2f:00:19:47: 73:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:42:BC:C0:AC:66:A5:FB:7D:1C:8C:43:9D:75:7F:F8:19:84:CC:0E X509v3 Authority Key Identifier: keyid:3C:D2:4E:08:C5:76:07:CA:EB:CC:19:C8:55:2E:AE:2E:93:5E:82:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNJOCMV2B8rrzBnIVS6uLpNeguU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:3a:2a:85:3c:b6:01:fb:bd:dc:d7:69:af:6a:21:22:e8:d6: 7e:37:87:fa:99:b9:30:b3:a4:a1:19:f1:bc:50:c0:de:1c:40: 04:85:3a:fa:5c:74:ee:98:b3:d2:6b:af:2f:25:bf:49:be:bc: 28:7b:db:71:5f:55:76:69:c0:d9:c4:14:12:12:90:77:29:5e: bb:38:e2:f3:65:37:4c:d8:88:f5:ab:14:82:e6:5e:12:90:33: 77:ad:ed:78:8c:12:17:a0:b4:e1:50:15:64:7f:4d:42:1f:37: 7c:a8:5c:49:bd:d0:c5:af:f0:c4:7e:ad:06:b3:12:73:c4:68: 6c:66:e3:ad:bc:a8:4b:c9:68:ff:16:58:6d:7c:10:a5:34:91: 74:53:e5:11:f9:f8:e8:29:00:ec:a9:f8:9a:4a:ce:7e:5b:7e: 8a:ed:bc:74:3e:d9:6d:cc:b1:02:30:e4:5c:09:c8:db:ef:5c: d7:7a:3d:ef:44:86:fb:34:1e:9b:77:ab:30:0e:53:38:76:07: 4d:17:e5:cb:bf:c5:5c:78:04:38:21:81:43:a4:d9:7c:3a:73: a6:77:78:d9:59:ef:8f:6a:ca:5c:02:5c:3c:40:98:3b:8e:75: fc:e0:45:a5:81:81:6b:4f:23:e2:d2:35:04:b4:96:14:13:55: d5:07:4a:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwTSVJYzJD8cEtOlGuQ8vpEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjZDI0ZTA4YzU3NjA3Y2FlYmNjMTljODU1MmVhZTJlOTM1 ZTgyZTUwHhcNMjYwMTMxMDkwMTM4WhcNMjYwMjAxMDkwMTM4WjAzMTEwLwYDVQQD EyhjNjQyYmNjMGFjNjZhNWZiN2QxYzhjNDM5ZDc1N2ZmODE5ODRjYzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWVDjHAG3QpOTY1Sm607rcgxJVhD vxLlXjH2eSnQJa81JUNP9fyWuBhceBQgpdfOPC4rl1TDiQfsMoiaAo4eRtjnehw5 2h9aRLuchIj7v71UBfcpVmVSlpKUYguYaj/spF1KuhGSWRyU/K3VB/snqBLLEq/m 80emwfQlwmA4RngTcvIooelZNmL37E17km6UJ38FA+AE+P//HnqR1f7t4PYS/mnQ Z2a1pzB57/HI8e18bxG+0HreeRZHkUqWhPri0BY+AI55GDjalkJrYvre3cDlh1aU 36iD9/ObwF7/KzoTNzc3/I95SN/0Fvn0rQ6oqBNIWj48ybCbby8AGUdzaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMZCvMCsZqX7fRyMQ511f/gZhMwOMB8GA1UdIwQY MBaAFDzSTgjFdgfK68wZyFUuri6TXoLlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUE5KT0NNVjJCOHJyekJuSVZTNnVMcE5lZ3VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8wODRmNzUtZDAwZS00M2M1LWJjYTgt MzZmZDcyM2EzODBhLzEvUE5KT0NNVjJCOHJyekJuSVZTNnVMcE5lZ3VVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy8wODRmNzUtZDAwZS00M2M1LWJjYTgtMzZmZDcyM2EzODBh LzEvUE5KT0NNVjJCOHJyekJuSVZTNnVMcE5lZ3VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADjoqhTy2 Afu93Ndpr2ohIujWfjeH+pm5MLOkoRnxvFDA3hxABIU6+lx07piz0muvLyW/Sb68 KHvbcV9VdmnA2cQUEhKQdyleuzji82U3TNiI9asUguZeEpAzd63teIwSF6C04VAV ZH9NQh83fKhcSb3Qxa/wxH6tBrMSc8RobGbjrbyoS8lo/xZYbXwQpTSRdFPlEfn4 6CkA7Kn4mkrOflt+iu28dD7ZbcyxAjDkXAnI2+9c13o970SG+zQem3erMA5TOHYH TRfly7/FXHgEOCGBQ6TZfDpzpnd42Vnvj2rKXAJcPECYO451/OBFpYGBa08j4tI1 BLSWFBNV1QdKnw== -----END CERTIFICATE-----Generated at Sat Jan 31 16:44:31 2026 by rpki-client