This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft File: PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft (raw, json) Hash identifier: Ipcmrrbnf6s4rdIwwHip95NEVTI5IHfYA+Ls4Ly01FI= Subject key identifier: 35:C9:62:A0:FB:3A:CB:8F:B7:F8:1D:AF:3F:98:B8:2C:31:B7:D6:7E Authority key identifier: 3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4 Certificate issuer: /CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4 Certificate serial: 019BF5079E677C4F29DBDB6977B0DF4103AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft Manifest number: 1184 Signing time: Sun 25 Jan 2026 12:01:15 +0000 Manifest this update: Sun 25 Jan 2026 12:01:15 +0000 Manifest next update: Mon 26 Jan 2026 12:01:15 +0000 Files and hashes: 1: PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl (hash: BdwSCu0t2lfqfZhucKyb/lLdZIjeHwVWpG0KgujbNAo=) 2: Rc1JKlzBWJzMspxz5Sz8_wKGjSQ.roa (hash: YXV2SDD7Lq/HvpspFTkxAD7KLYHXbsXZfXUiY1m7rzI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:9e:67:7c:4f:29:db:db:69:77:b0:df:41:03:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4 Validity Not Before: Jan 25 12:01:15 2026 GMT Not After : Jan 26 12:01:15 2026 GMT Subject: CN=35c962a0fb3acb8fb7f81daf3f98b82c31b7d67e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:ba:c6:5e:4a:a2:b8:d9:3b:45:13:63:fe:1f: 16:aa:73:8a:8f:66:1c:4d:4d:ac:68:4f:63:b8:7f: 18:33:d7:89:a1:89:6c:33:ba:8b:b1:a5:8c:3f:14: 62:ce:41:2d:0c:20:c3:62:ed:2c:32:9e:36:9f:9a: 7b:95:ea:4d:ec:b7:2c:f5:53:7e:0e:c6:27:3e:a2: b7:a4:cf:a8:b7:82:66:ff:01:ac:80:b6:5b:19:f8: 84:fc:ff:d5:be:63:d9:ec:5d:bc:da:cd:98:a1:87: ce:fe:31:e8:af:b3:c7:ee:40:29:c7:dc:ee:3a:8a: 6a:55:6c:6b:73:3d:b3:c2:f0:7d:21:b2:5b:84:77: 2c:0b:cb:a9:57:7a:a3:50:8c:1e:11:3a:9b:54:4a: fe:24:f5:90:f4:f2:38:9a:63:98:06:9b:f2:da:ac: 7b:20:5f:ff:2a:3b:38:3a:90:ac:8e:34:1d:55:dc: 02:26:16:2c:0b:0b:47:4e:ad:a3:61:3f:f3:e5:c4: ad:8f:c9:c0:e9:95:ad:1b:f2:6e:d3:6d:d5:93:05: 14:55:27:c3:16:40:10:63:65:6c:a1:ec:2f:00:27: 31:0d:47:ed:48:4b:3d:9c:c5:1d:4e:9d:2f:45:ac: 32:62:7a:96:b4:f0:3b:4d:f2:01:b8:76:86:67:68: 2b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C9:62:A0:FB:3A:CB:8F:B7:F8:1D:AF:3F:98:B8:2C:31:B7:D6:7E X509v3 Authority Key Identifier: keyid:3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:75:ab:af:a5:a1:d4:25:34:e0:f9:e9:97:c0:94:df:bf:95: 3c:68:cd:a5:2a:8b:f9:54:3e:73:ac:d1:10:69:43:b8:35:f8: fd:b5:6a:cc:3f:9c:3c:cb:60:dd:3d:df:e2:06:ba:15:df:8c: b0:79:ac:f1:63:ea:e8:86:c2:b0:54:56:fc:a9:4a:84:96:73: 40:62:a4:77:22:38:9a:03:59:69:2c:87:54:68:28:4e:59:f7: 4f:de:00:cd:0c:65:c6:90:41:cd:2b:71:4c:30:e9:cf:98:86: 73:c9:6f:d3:61:0a:ca:5c:44:6c:2d:ad:89:fe:da:c9:0a:54: a6:cb:6f:b4:2e:e0:5c:9f:7b:46:af:6f:82:eb:39:97:fc:66: ea:94:22:d4:8b:64:77:6e:55:0b:c1:5f:a3:c0:f1:80:b2:ee: 2e:6d:ca:fd:fb:36:05:d2:22:a2:4e:72:16:0d:78:01:9f:85: 89:70:b4:e1:74:61:f7:c1:1f:1c:e6:cf:f7:9f:a1:47:85:17: a2:9e:ae:0d:f2:0e:b5:b5:24:b4:87:ef:3c:f3:5c:70:b6:77: db:d1:76:c7:8d:f1:fa:6f:8f:ef:ce:c7:ad:5a:c5:88:b3:e0: 5d:8d:20:45:6c:9a:5f:6f:49:0c:bf:43:4b:93:f4:ff:8e:83: 7c:77:35:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B55nfE8p29tpd7DfQQOrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYTU1NDA5OGM3YTg4YWEzNDI2NGI5MmQ4YmYyMjU3ZWMw YmNkYTQwHhcNMjYwMTI1MTIwMTE1WhcNMjYwMTI2MTIwMTE1WjAzMTEwLwYDVQQD EygzNWM5NjJhMGZiM2FjYjhmYjdmODFkYWYzZjk4YjgyYzMxYjdkNjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9LrGXkqiuNk7RRNj/h8WqnOKj2Yc TU2saE9juH8YM9eJoYlsM7qLsaWMPxRizkEtDCDDYu0sMp42n5p7lepN7Lcs9VN+ DsYnPqK3pM+ot4Jm/wGsgLZbGfiE/P/VvmPZ7F282s2YoYfO/jHor7PH7kApx9zu OopqVWxrcz2zwvB9IbJbhHcsC8upV3qjUIweETqbVEr+JPWQ9PI4mmOYBpvy2qx7 IF//Kjs4OpCsjjQdVdwCJhYsCwtHTq2jYT/z5cStj8nA6ZWtG/Ju023VkwUUVSfD FkAQY2VsoewvACcxDUftSEs9nMUdTp0vRawyYnqWtPA7TfIBuHaGZ2gr0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDXJYqD7OsuPt/gdrz+YuCwxt9Z+MB8GA1UdIwQY MBaAFD6lVAmMeoiqNCZLkti/IlfsC82kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHFWVUNZeDZpS28wSmt1UzJMOGlWLXdMemFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy80NzY3Y2UtNDQ0OC00MzZiLWE5MTAt NjZkZTk4NjVkYmFjLzEvUHFWVUNZeDZpS28wSmt1UzJMOGlWLXdMemFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy80NzY3Y2UtNDQ0OC00MzZiLWE5MTAtNjZkZTk4NjVkYmFj LzEvUHFWVUNZeDZpS28wSmt1UzJMOGlWLXdMemFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXnWrr6Wh 1CU04Pnpl8CU37+VPGjNpSqL+VQ+c6zREGlDuDX4/bVqzD+cPMtg3T3f4ga6Fd+M sHms8WPq6IbCsFRW/KlKhJZzQGKkdyI4mgNZaSyHVGgoTln3T94AzQxlxpBBzStx TDDpz5iGc8lv02EKylxEbC2tif7ayQpUpstvtC7gXJ97Rq9vgus5l/xm6pQi1Itk d25VC8Ffo8DxgLLuLm3K/fs2BdIiok5yFg14AZ+FiXC04XRh98EfHObP95+hR4UX op6uDfIOtbUktIfvPPNccLZ329F2x43x+m+P787HrVrFiLPgXY0gRWyaX29JDL9D S5P0/46DfHc1uA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:56:48 2026 by rpki-client