This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft File: PesQRGPpILRVQravGifVlQ6G6aA.mft (raw, json) Hash identifier: OIvEqMRtf5kELLRMCp51D/d9lczge3b3tM9rTRGLUaw= Subject key identifier: F5:AB:A3:2B:CD:48:4A:FC:A1:F4:63:B8:32:19:61:12:B3:37:EB:AA Authority key identifier: 3D:EB:10:44:63:E9:20:B4:55:42:B6:AF:1A:27:D5:95:0E:86:E9:A0 Certificate issuer: /CN=3deb104463e920b45542b6af1a27d5950e86e9a0 Certificate serial: 019BF6BF557F05424C8C4927D28D2BEC7B4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft Manifest number: 15BA Signing time: Sun 25 Jan 2026 20:01:32 +0000 Manifest this update: Sun 25 Jan 2026 20:01:32 +0000 Manifest next update: Mon 26 Jan 2026 20:01:32 +0000 Files and hashes: 1: 9JqUzmhn979MzWUxIBT2RPIOS8A.roa (hash: rkzdzZw7cy8e5NHHoY93mCGwkkZGsYaobB+ZGaI78YQ=) 2: K0vidJ7tM2mKOKZRaF9LzxYTcOY.roa (hash: j1Pyv97hL7TS1MOu3SXdm7zFyMsZ0tV3SkgI1mKBoHI=) 3: PesQRGPpILRVQravGifVlQ6G6aA.crl (hash: Zk3bZnGA1our5ktOn9pJGXO0ohaIqBRqUVzVtZ+qLsk=) 4: Vh01heQZwiiV-5U2YWUI9ETdNp0.roa (hash: NerAxUNFCszCX2X5F5Gpmh7sivfYufWqTOLrM/cv+gM=) 5: tMuTjVPYB4qy8Lzty-HvMfNIyHg.roa (hash: 2UYLL/RMvv9f6KttdupVfDP+HWvUuHhv7cOVMA+gdLU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.crl rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:55:7f:05:42:4c:8c:49:27:d2:8d:2b:ec:7b:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3deb104463e920b45542b6af1a27d5950e86e9a0 Validity Not Before: Jan 25 20:01:32 2026 GMT Not After : Jan 26 20:01:32 2026 GMT Subject: CN=f5aba32bcd484afca1f463b832196112b337ebaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:27:b9:5d:7d:27:9e:db:a0:9b:a1:55:33:71: de:b2:3f:f0:97:f7:64:10:3a:c6:a3:86:69:fb:4c: ba:a5:5a:13:74:1f:9a:3f:e5:48:b1:18:50:50:f1: b6:df:6b:5d:da:ed:62:51:d8:e1:ef:b7:4f:cf:85: b4:66:97:e1:42:df:b4:ea:8d:84:d5:7d:e0:44:2c: 28:69:5b:2a:06:fa:07:b2:62:45:8d:a7:8a:86:2b: 01:b5:e5:95:8c:fd:9e:cb:0d:dd:98:d0:12:09:57: bf:dd:66:90:18:19:ae:35:52:3c:5e:64:01:5e:16: 1f:e1:0f:c7:7c:7f:f2:e3:f0:da:16:98:b0:a6:5b: 99:b7:cb:9d:d1:51:2c:90:74:0f:e6:ff:ef:fb:1b: 4b:92:41:92:ac:28:44:7a:bf:ae:32:26:4b:f6:a9: 8f:10:53:4f:b1:1e:2d:f2:97:52:e0:6f:0b:eb:76: f8:f9:62:a7:84:74:16:0b:8c:f5:1c:9b:14:8d:90: e1:2f:fe:0e:94:ec:10:71:68:48:38:af:aa:9e:67: 93:5f:e9:05:58:4a:36:42:b3:e5:ee:74:7b:8a:18: 4d:e9:0c:4a:01:7f:32:82:cb:4c:9e:5b:bb:dd:25: 51:d4:71:c7:36:1e:20:2f:26:5e:50:e2:ad:2d:31: e2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:AB:A3:2B:CD:48:4A:FC:A1:F4:63:B8:32:19:61:12:B3:37:EB:AA X509v3 Authority Key Identifier: keyid:3D:EB:10:44:63:E9:20:B4:55:42:B6:AF:1A:27:D5:95:0E:86:E9:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:93:76:83:44:2c:16:05:b2:0e:ac:bc:88:fe:f0:4b:28:4d: 2c:8f:cc:d2:f3:18:83:fd:e8:b4:79:80:64:f2:99:5d:61:17: f3:76:27:73:38:c2:0e:2e:11:aa:ab:f5:fb:f7:fb:5a:42:72: d1:43:08:b2:a9:42:dc:f5:cd:d9:a2:8c:37:d7:36:3c:79:a9: 2b:a2:ea:98:fc:58:ba:87:cd:34:41:39:c0:90:e7:ed:a6:30: 2e:36:2b:28:11:38:bc:c2:ba:e8:34:ee:a0:95:de:08:08:c4: 3f:71:64:2a:3e:3f:dd:6c:f3:7b:26:db:69:7c:96:46:98:d5: 2a:6e:46:e3:65:42:78:de:1e:85:87:e5:d7:53:2c:0a:da:ef: 5d:d4:6a:b3:f6:6e:4b:a8:c6:bd:36:05:b1:c0:97:14:9b:50: 83:80:37:9e:f9:a3:0d:3e:92:78:d4:4c:7e:b6:6d:ac:cb:8e: ae:3c:30:c9:0b:89:89:34:bd:67:87:bd:2c:d6:c0:95:b2:ec: 10:4e:bc:39:66:14:f4:a3:a3:e1:a2:4d:5e:91:84:67:0e:8a: 7c:39:d5:c8:f1:b6:20:30:06:df:7e:a1:f8:fb:07:bb:e9:36: f5:86:91:ea:b8:9e:4f:b5:f5:c5:c2:d7:2e:74:12:84:33:b7: cb:81:13:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2v1V/BUJMjEkn0o0r7HtLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkZWIxMDQ0NjNlOTIwYjQ1NTQyYjZhZjFhMjdkNTk1MGU4 NmU5YTAwHhcNMjYwMTI1MjAwMTMyWhcNMjYwMTI2MjAwMTMyWjAzMTEwLwYDVQQD EyhmNWFiYTMyYmNkNDg0YWZjYTFmNDYzYjgzMjE5NjExMmIzMzdlYmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSe5XX0nntugm6FVM3Hesj/wl/dk EDrGo4Zp+0y6pVoTdB+aP+VIsRhQUPG232td2u1iUdjh77dPz4W0ZpfhQt+06o2E 1X3gRCwoaVsqBvoHsmJFjaeKhisBteWVjP2eyw3dmNASCVe/3WaQGBmuNVI8XmQB XhYf4Q/HfH/y4/DaFpiwpluZt8ud0VEskHQP5v/v+xtLkkGSrChEer+uMiZL9qmP EFNPsR4t8pdS4G8L63b4+WKnhHQWC4z1HJsUjZDhL/4OlOwQcWhIOK+qnmeTX+kF WEo2QrPl7nR7ihhN6QxKAX8ygstMnlu73SVR1HHHNh4gLyZeUOKtLTHiHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPWroyvNSEr8ofRjuDIZYRKzN+uqMB8GA1UdIwQY MBaAFD3rEERj6SC0VUK2rxon1ZUOhumgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGVzUVJHUHBJTFJWUXJhdkdpZlZsUTZHNmFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9jNjg2YjMtZTdhOS00ZjljLTg0MmMt MTE5ZDhiZjcxN2JiLzEvUGVzUVJHUHBJTFJWUXJhdkdpZlZsUTZHNmFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9jNjg2YjMtZTdhOS00ZjljLTg0MmMtMTE5ZDhiZjcxN2Ji LzEvUGVzUVJHUHBJTFJWUXJhdkdpZlZsUTZHNmFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM5N2g0Qs FgWyDqy8iP7wSyhNLI/M0vMYg/3otHmAZPKZXWEX83YnczjCDi4Rqqv1+/f7WkJy 0UMIsqlC3PXN2aKMN9c2PHmpK6LqmPxYuofNNEE5wJDn7aYwLjYrKBE4vMK66DTu oJXeCAjEP3FkKj4/3WzzeybbaXyWRpjVKm5G42VCeN4ehYfl11MsCtrvXdRqs/Zu S6jGvTYFscCXFJtQg4A3nvmjDT6SeNRMfrZtrMuOrjwwyQuJiTS9Z4e9LNbAlbLs EE68OWYU9KOj4aJNXpGEZw6KfDnVyPG2IDAG336h+PsHu+k29YaR6rieT7X1xcLX LnQShDO3y4ETLQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:34:44 2026 by rpki-client