This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft File: p2_PrZZq5-gXHPzibbP2V3bSb-g.mft (raw, json) Hash identifier: XHB3WRTRB7g/qLbHq69di3rYb4d0UkBbzxMKe5/6eWA= Subject key identifier: 84:07:0D:1A:DA:80:D7:A1:90:D0:36:68:9C:3F:1C:4D:1C:CA:5A:DD Authority key identifier: A7:6F:CF:AD:96:6A:E7:E8:17:1C:FC:E2:6D:B3:F6:57:76:D2:6F:E8 Certificate issuer: /CN=a76fcfad966ae7e8171cfce26db3f65776d26fe8 Certificate serial: 019BF3868F124C14C29E867AFB01C84BD7C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft Manifest number: 08D7 Signing time: Sun 25 Jan 2026 05:00:40 +0000 Manifest this update: Sun 25 Jan 2026 05:00:40 +0000 Manifest next update: Mon 26 Jan 2026 05:00:40 +0000 Files and hashes: 1: 9H2Cao4L9seLn80FxSiOGYvYmbE.roa (hash: 6fh3UPrvbfpSC3IgcyXg2AEmgPfBi1rjETuQ8TwnWs8=) 2: J616ho14DKGXrY52dTz4rECA6rg.roa (hash: Pr/K62ihwSA6YnMNqUbbcVQlKEbx5zr2tsgN3ot1lW4=) 3: JzRoxhNcR2kzwArFwmc0pS-ExCs.roa (hash: KJ1WUHpaALO4NgyLeM/jwu4bNeSWXf1o/mMEG/mPGY8=) 4: p2_PrZZq5-gXHPzibbP2V3bSb-g.crl (hash: 0BlZm//oQAmG0PSq1YwNVN0ea6Mvd8uDQzBGKFd1zxc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.crl rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:86:8f:12:4c:14:c2:9e:86:7a:fb:01:c8:4b:d7:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a76fcfad966ae7e8171cfce26db3f65776d26fe8 Validity Not Before: Jan 25 05:00:40 2026 GMT Not After : Jan 26 05:00:40 2026 GMT Subject: CN=84070d1ada80d7a190d036689c3f1c4d1cca5add Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e8:10:7e:ef:57:d0:74:18:b2:44:c0:39:e6: 15:36:d5:c9:99:1c:8e:16:11:6d:2b:32:3e:ce:a2: fa:d4:d2:48:df:ac:61:16:7b:73:10:dc:f3:f3:24: 45:56:ac:b2:30:fa:33:5a:2b:6a:90:4d:43:4c:33: 00:ff:88:ce:61:1a:4f:94:da:72:ff:5a:62:86:4c: f1:78:72:cd:45:67:98:d4:1a:ab:f0:bb:39:c7:73: c6:ce:f5:d1:7c:13:27:80:d6:a5:8d:c1:d7:25:f0: 78:e3:bf:ee:9d:be:6f:1b:e3:18:cb:cc:76:8a:db: 26:29:b7:d6:cc:cf:4e:a1:1e:06:82:35:43:da:55: e8:5e:f7:77:d5:b1:97:d2:82:2c:3e:cf:24:84:71: dc:5b:6e:71:a8:92:17:42:e2:f2:b2:72:d5:f4:f4: 1b:ea:34:2f:4d:8d:da:c8:ae:33:eb:04:8f:03:34: 6c:b9:f7:0a:8c:34:18:00:42:45:97:1e:c7:5b:69: b9:20:ce:bb:11:11:b1:a8:5f:2a:02:dd:f7:3d:2b: 51:71:a0:4a:67:fa:ce:5d:83:40:2d:04:de:0c:35: 65:6a:c4:63:94:c7:ad:0a:3a:70:3c:45:57:ef:b2: 99:6c:3d:ae:f8:ff:9a:b7:23:5c:6a:e6:0a:45:61: 1d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:07:0D:1A:DA:80:D7:A1:90:D0:36:68:9C:3F:1C:4D:1C:CA:5A:DD X509v3 Authority Key Identifier: keyid:A7:6F:CF:AD:96:6A:E7:E8:17:1C:FC:E2:6D:B3:F6:57:76:D2:6F:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:15:03:4e:2c:0e:0c:95:04:cb:b6:d4:45:32:3b:64:1a:93: b2:0a:dc:88:b8:59:1d:80:b4:58:05:4b:23:57:bd:e8:dd:93: 60:bc:33:6f:f0:e7:ab:e4:17:72:45:d4:f2:3e:79:ca:32:c1: 43:bf:9d:4c:cb:09:23:1f:dd:cb:d0:37:db:54:50:b9:e4:e3: 1f:5d:46:24:d4:c3:85:af:d8:39:a5:e1:b7:cf:62:b2:10:24: 0a:6b:e7:f5:fb:84:b0:e2:92:29:45:96:85:8f:b8:c3:8b:aa: 56:64:a1:1e:2e:d4:0a:bf:93:7d:6e:0e:47:7c:06:65:55:89: c1:b3:ea:f3:16:7d:2e:35:44:ff:54:f6:93:b9:6a:7a:17:64: 26:57:ff:dd:11:7e:56:24:07:5d:97:72:5d:2c:32:cc:a9:44: 37:73:ea:70:93:ff:9f:ba:23:13:43:6a:ed:04:55:93:c7:0c: cf:46:0f:9a:f5:60:22:17:96:66:cf:d2:31:66:34:b8:c7:b4: cb:30:04:d5:a6:d2:91:a9:8e:f9:d6:16:37:a3:ff:dd:29:ce: ad:fc:a0:85:ad:04:ad:11:e7:63:2e:27:eb:0b:e1:0b:41:30: a5:05:fe:2f:a6:db:2d:6e:8f:9a:c0:c7:39:e9:6a:2c:61:95: 10:5a:d8:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzho8STBTCnoZ6+wHIS9fBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NmZjZmFkOTY2YWU3ZTgxNzFjZmNlMjZkYjNmNjU3NzZk MjZmZTgwHhcNMjYwMTI1MDUwMDQwWhcNMjYwMTI2MDUwMDQwWjAzMTEwLwYDVQQD Eyg4NDA3MGQxYWRhODBkN2ExOTBkMDM2Njg5YzNmMWM0ZDFjY2E1YWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOgQfu9X0HQYskTAOeYVNtXJmRyO FhFtKzI+zqL61NJI36xhFntzENzz8yRFVqyyMPozWitqkE1DTDMA/4jOYRpPlNpy /1pihkzxeHLNRWeY1Bqr8Ls5x3PGzvXRfBMngNaljcHXJfB447/unb5vG+MYy8x2 itsmKbfWzM9OoR4GgjVD2lXoXvd31bGX0oIsPs8khHHcW25xqJIXQuLysnLV9PQb 6jQvTY3ayK4z6wSPAzRsufcKjDQYAEJFlx7HW2m5IM67ERGxqF8qAt33PStRcaBK Z/rOXYNALQTeDDVlasRjlMetCjpwPEVX77KZbD2u+P+atyNcauYKRWEdfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIQHDRragNehkNA2aJw/HE0cylrdMB8GA1UdIwQY MBaAFKdvz62WaufoFxz84m2z9ld20m/oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDJfUHJaWnE1LWdYSFB6aWJiUDJWM2JTYi1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9kYjg3NTItODRiMi00MzhhLTliYzEt YzU0MDFmNmQ5MWQxLzEvcDJfUHJaWnE1LWdYSFB6aWJiUDJWM2JTYi1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9kYjg3NTItODRiMi00MzhhLTliYzEtYzU0MDFmNmQ5MWQx LzEvcDJfUHJaWnE1LWdYSFB6aWJiUDJWM2JTYi1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuBUDTiwO DJUEy7bURTI7ZBqTsgrciLhZHYC0WAVLI1e96N2TYLwzb/Dnq+QXckXU8j55yjLB Q7+dTMsJIx/dy9A321RQueTjH11GJNTDha/YOaXht89ishAkCmvn9fuEsOKSKUWW hY+4w4uqVmShHi7UCr+TfW4OR3wGZVWJwbPq8xZ9LjVE/1T2k7lqehdkJlf/3RF+ ViQHXZdyXSwyzKlEN3PqcJP/n7ojE0Nq7QRVk8cMz0YPmvVgIheWZs/SMWY0uMe0 yzAE1abSkamO+dYWN6P/3SnOrfygha0ErRHnYy4n6wvhC0EwpQX+L6bbLW6PmsDH OelqLGGVEFrYuA== -----END CERTIFICATE-----Generated at Sun Jan 25 15:23:50 2026 by rpki-client