This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft File: P-SE99D_9CD2t3E6k83LDFEAcmc.mft (raw, json) Hash identifier: tZ73WdtLjeTXkMmf4iEC89WVs+YfdeaaOFOYOBtSzbc= Subject key identifier: BA:C3:99:26:2A:B3:09:3D:18:4F:15:50:A3:28:6A:73:DF:C9:A3:D9 Authority key identifier: 3F:E4:84:F7:D0:FF:F4:20:F6:B7:71:3A:93:CD:CB:0C:51:00:72:67 Certificate issuer: /CN=3fe484f7d0fff420f6b7713a93cdcb0c51007267 Certificate serial: 019BFC898D5688D6B47C2CACC22952636D0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft Manifest number: 07D3 Signing time: Mon 26 Jan 2026 23:00:31 +0000 Manifest this update: Mon 26 Jan 2026 23:00:31 +0000 Manifest next update: Tue 27 Jan 2026 23:00:31 +0000 Files and hashes: 1: G6M-x4OPkaCwa6o3lpZvCUj6baM.roa (hash: HszMLQTA7YEJiAV1V8sk6igED0ExhrXDxWonrhXatYo=) 2: P-SE99D_9CD2t3E6k83LDFEAcmc.crl (hash: u7O9OWaQT/9/HWa1aHPAkYWEZyY/q/3E0SVt0+rXS1c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:89:8d:56:88:d6:b4:7c:2c:ac:c2:29:52:63:6d:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fe484f7d0fff420f6b7713a93cdcb0c51007267 Validity Not Before: Jan 26 23:00:31 2026 GMT Not After : Jan 27 23:00:31 2026 GMT Subject: CN=bac399262ab3093d184f1550a3286a73dfc9a3d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:8d:a2:02:a0:6a:9a:a4:1c:1e:8d:ab:c8:d3: d7:c8:03:0f:67:9c:85:c5:9c:dc:1b:b1:8a:cd:f9: f2:f1:cf:89:db:93:54:c8:62:3d:57:f0:44:8b:36: ff:4e:f9:31:ec:64:3d:fd:50:3e:de:cd:69:f2:90: 40:64:2c:7d:16:e7:66:a2:8f:41:8e:8e:4f:23:88: 93:bf:9a:89:7a:66:f8:a7:a7:14:90:a2:df:03:04: d4:3a:21:aa:c8:0e:23:bd:69:1d:8b:72:14:e9:4b: f9:e3:e7:b1:f8:ce:03:8e:40:42:4a:af:80:05:ec: 64:a5:2e:d2:94:2f:fc:eb:10:bc:4a:97:ef:85:60: 03:96:1a:eb:1c:de:2c:83:c7:6b:97:71:93:cd:72: 9c:d5:f8:fb:a1:29:24:0a:55:34:5a:2d:72:d3:49: 7d:2f:a8:ca:78:6f:7a:8a:6c:10:2f:5d:14:7a:32: 4a:af:99:6a:af:f5:2f:f6:f1:7c:51:f1:f1:55:cf: ab:9f:24:ee:fe:d4:6f:10:74:c1:49:ed:39:49:69: 15:f9:42:51:e4:c7:d1:40:24:9c:7f:e0:5b:9f:86: 2b:d3:95:57:32:b7:47:9a:5a:98:dc:80:4d:e4:d3: d9:c3:f5:71:5f:57:38:60:05:a0:c7:25:e5:28:f6: 76:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:C3:99:26:2A:B3:09:3D:18:4F:15:50:A3:28:6A:73:DF:C9:A3:D9 X509v3 Authority Key Identifier: keyid:3F:E4:84:F7:D0:FF:F4:20:F6:B7:71:3A:93:CD:CB:0C:51:00:72:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:dd:b9:35:57:b0:e1:4e:54:73:77:8d:b0:f6:74:76:96:5d: 41:92:25:71:5c:96:25:85:19:ed:e7:ec:ac:09:a2:f9:e4:44: 77:16:18:9e:59:99:c8:c1:40:44:9c:40:7a:bf:dd:1a:37:65: 94:17:7f:7d:31:9c:13:ad:a3:6e:e4:b2:37:91:45:ee:c2:39: 26:88:9f:3d:57:99:57:3c:0a:2a:2e:a4:3d:32:fe:07:72:e9: bb:d3:67:d2:94:bb:91:f7:75:7f:d2:4a:3d:7c:ed:a2:f9:2e: 37:21:00:5e:3c:83:26:d9:89:1a:ea:c0:59:5a:ca:da:3e:97: 8d:3e:04:e5:65:06:58:4b:03:76:9b:39:c1:ec:6f:70:10:34: f6:7e:7a:1f:d8:61:85:fd:96:c4:b2:b0:75:f7:f7:46:c7:be: a9:32:f7:e3:5c:bc:bd:4d:d5:e8:f6:5b:05:36:2c:7d:6b:4a: 8f:ed:eb:21:3b:15:fc:b4:af:45:3c:8e:a2:78:0f:71:fd:5f: 98:1b:9e:23:8c:7f:ed:94:a1:78:ca:7a:5e:76:b3:33:ee:17: 48:4c:c2:95:8b:0e:62:4a:03:1f:c2:d8:ab:aa:1c:f4:a8:81: 78:da:86:26:2f:63:99:ec:d1:da:02:70:22:20:01:20:88:1f: 0c:99:ef:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8iY1WiNa0fCyswilSY20OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZTQ4NGY3ZDBmZmY0MjBmNmI3NzEzYTkzY2RjYjBjNTEw MDcyNjcwHhcNMjYwMTI2MjMwMDMxWhcNMjYwMTI3MjMwMDMxWjAzMTEwLwYDVQQD EyhiYWMzOTkyNjJhYjMwOTNkMTg0ZjE1NTBhMzI4NmE3M2RmYzlhM2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Y2iAqBqmqQcHo2ryNPXyAMPZ5yF xZzcG7GKzfny8c+J25NUyGI9V/BEizb/Tvkx7GQ9/VA+3s1p8pBAZCx9Fudmoo9B jo5PI4iTv5qJemb4p6cUkKLfAwTUOiGqyA4jvWkdi3IU6Uv54+ex+M4DjkBCSq+A BexkpS7SlC/86xC8SpfvhWADlhrrHN4sg8drl3GTzXKc1fj7oSkkClU0Wi1y00l9 L6jKeG96imwQL10UejJKr5lqr/Uv9vF8UfHxVc+rnyTu/tRvEHTBSe05SWkV+UJR 5MfRQCScf+Bbn4Yr05VXMrdHmlqY3IBN5NPZw/VxX1c4YAWgxyXlKPZ2YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLrDmSYqswk9GE8VUKMoanPfyaPZMB8GA1UdIwQY MBaAFD/khPfQ//Qg9rdxOpPNywxRAHJnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUC1TRTk5RF85Q0QydDNFNms4M0xERkVBY21jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8xYjcxMGItZDJmMS00ZTE1LWFhM2Mt OTMyNjA2OTNhZGQ1LzEvUC1TRTk5RF85Q0QydDNFNms4M0xERkVBY21jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8xYjcxMGItZDJmMS00ZTE1LWFhM2MtOTMyNjA2OTNhZGQ1 LzEvUC1TRTk5RF85Q0QydDNFNms4M0xERkVBY21jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKd25NVew 4U5Uc3eNsPZ0dpZdQZIlcVyWJYUZ7efsrAmi+eREdxYYnlmZyMFARJxAer/dGjdl lBd/fTGcE62jbuSyN5FF7sI5JoifPVeZVzwKKi6kPTL+B3Lpu9Nn0pS7kfd1f9JK PXztovkuNyEAXjyDJtmJGurAWVrK2j6XjT4E5WUGWEsDdps5wexvcBA09n56H9hh hf2WxLKwdff3Rse+qTL341y8vU3V6PZbBTYsfWtKj+3rITsV/LSvRTyOongPcf1f mBueI4x/7ZSheMp6XnazM+4XSEzClYsOYkoDH8LYq6oc9KiBeNqGJi9jmezR2gJw IiABIIgfDJnvxQ== -----END CERTIFICATE-----Generated at Tue Jan 27 06:06:30 2026 by rpki-client