This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft File: PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft (raw, json) Hash identifier: yVPMsQ0qTweMNF5mqSICWHixdGQ0yDUJXQoojjvhKQs= Subject key identifier: A6:29:F6:5A:C8:37:C0:6A:82:E0:74:2B:E6:63:E4:19:86:1F:14:29 Authority key identifier: 3D:0B:E4:AE:38:73:55:54:CD:11:81:0A:9C:7D:20:30:19:04:01:98 Certificate issuer: /CN=3d0be4ae38735554cd11810a9c7d203019040198 Certificate serial: 019BF808339DC73A9010B2B5BBC885FB155A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQvkrjhzVVTNEYEKnH0gMBkEAZg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft Manifest number: 01CD Signing time: Mon 26 Jan 2026 02:00:45 +0000 Manifest this update: Mon 26 Jan 2026 02:00:45 +0000 Manifest next update: Tue 27 Jan 2026 02:00:45 +0000 Files and hashes: 1: PQvkrjhzVVTNEYEKnH0gMBkEAZg.crl (hash: kE+6DBzjc00fbW4Z0aCC+AClCpD9eT43SAggeK7FaAU=) 2: zT9KHUtxtSzxzIWfNIbM_5YrNkg.asa (hash: eQArodPkL9GT9btZe2O+IRGyIxJmz7mwSCT2keKt/1g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft rsync://rpki.ripe.net/repository/DEFAULT/PQvkrjhzVVTNEYEKnH0gMBkEAZg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:33:9d:c7:3a:90:10:b2:b5:bb:c8:85:fb:15:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d0be4ae38735554cd11810a9c7d203019040198 Validity Not Before: Jan 26 02:00:45 2026 GMT Not After : Jan 27 02:00:45 2026 GMT Subject: CN=a629f65ac837c06a82e0742be663e419861f1429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ee:42:78:92:5f:6c:a3:4c:9b:07:cf:46:85: a7:d0:14:44:9c:3b:80:b8:da:29:0b:dc:2c:63:70: 6a:8f:42:f5:ea:eb:4c:27:9a:b5:7f:48:94:b3:5f: 24:be:c8:4a:31:51:76:81:6d:95:1c:8d:df:42:e0: 0b:97:ee:1d:3c:aa:2d:a9:96:dc:4f:67:03:1d:41: c6:1c:94:8a:5e:8c:59:89:62:09:64:8b:d2:d6:95: 93:a5:02:c9:b0:f7:d6:0e:8a:b3:88:32:69:78:d4: 78:a1:17:38:d0:68:8b:3c:bb:c5:0f:6b:71:ba:36: 23:70:c1:f7:f4:72:84:fa:33:ec:d5:f8:f9:1d:46: 2a:94:b4:8a:6b:f1:30:f1:af:a9:0c:f0:12:c8:e0: 1d:cf:f9:79:c0:92:d6:b1:7e:05:a5:e9:f0:31:5d: 50:aa:a6:b7:06:93:24:c8:d0:b4:b7:92:33:55:bd: b7:8e:51:c0:fd:68:08:2d:d5:31:d4:d2:ec:a0:e2: 22:a3:82:2d:f4:2e:db:4c:e4:d9:dc:25:4a:70:6a: d9:9d:9c:d4:35:50:70:8a:c8:20:38:66:14:70:47: ab:5c:be:de:39:ac:fd:fc:23:3a:c5:41:dd:57:45: d5:d2:f1:7f:21:60:5f:45:18:8a:11:a9:8e:09:70: 9e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:29:F6:5A:C8:37:C0:6A:82:E0:74:2B:E6:63:E4:19:86:1F:14:29 X509v3 Authority Key Identifier: keyid:3D:0B:E4:AE:38:73:55:54:CD:11:81:0A:9C:7D:20:30:19:04:01:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQvkrjhzVVTNEYEKnH0gMBkEAZg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:8f:7d:25:69:37:ce:2a:ec:29:7c:0d:f2:5c:9a:6e:8a:5e: e4:17:2e:9f:9c:65:2d:cb:c2:d8:3f:45:4a:6e:1a:de:31:0d: 4e:3f:1a:5a:e8:72:94:69:d5:87:e6:ef:cc:40:42:da:3c:22: 39:bc:72:03:31:d6:cb:54:12:8b:8a:ee:95:88:86:26:1d:4a: 6c:d1:91:7a:ca:a2:6e:ac:f8:72:6a:f8:9d:23:b3:bd:59:d3: 02:d0:9c:49:75:31:0f:9a:2d:78:86:a6:94:55:c2:2e:c8:69: d0:0e:d7:4a:23:8a:b6:e6:59:fa:6b:e8:d2:89:d9:f9:43:9a: 1e:ed:22:31:60:f7:45:3d:1f:f4:d5:a3:5b:4b:2d:1a:d6:da: c9:70:4c:bd:4c:5d:e4:1e:cd:30:f2:e4:5d:24:71:61:74:a2: ab:bd:42:f6:da:8f:a1:af:a1:3d:ab:73:e6:3b:61:25:31:54: fe:cf:24:da:25:f9:cd:44:96:b2:9d:22:ba:59:a8:cc:57:7d: db:28:0e:c5:e7:4e:0b:ba:90:f3:f0:a4:6c:b7:37:4c:bb:5e: 17:11:68:fc:5d:7b:c5:57:03:2d:10:60:5b:a5:2f:fb:b2:36: 38:df:30:47:07:6b:f7:ca:a3:4f:91:c0:61:34:14:46:d6:e2: cc:31:c3:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CDOdxzqQELK1u8iF+xVaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkMGJlNGFlMzg3MzU1NTRjZDExODEwYTljN2QyMDMwMTkw NDAxOTgwHhcNMjYwMTI2MDIwMDQ1WhcNMjYwMTI3MDIwMDQ1WjAzMTEwLwYDVQQD EyhhNjI5ZjY1YWM4MzdjMDZhODJlMDc0MmJlNjYzZTQxOTg2MWYxNDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+5CeJJfbKNMmwfPRoWn0BREnDuA uNopC9wsY3Bqj0L16utMJ5q1f0iUs18kvshKMVF2gW2VHI3fQuALl+4dPKotqZbc T2cDHUHGHJSKXoxZiWIJZIvS1pWTpQLJsPfWDoqziDJpeNR4oRc40GiLPLvFD2tx ujYjcMH39HKE+jPs1fj5HUYqlLSKa/Ew8a+pDPASyOAdz/l5wJLWsX4FpenwMV1Q qqa3BpMkyNC0t5IzVb23jlHA/WgILdUx1NLsoOIio4It9C7bTOTZ3CVKcGrZnZzU NVBwisggOGYUcEerXL7eOaz9/CM6xUHdV0XV0vF/IWBfRRiKEamOCXCe9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKYp9lrIN8BqguB0K+Zj5BmGHxQpMB8GA1UdIwQY MBaAFD0L5K44c1VUzRGBCpx9IDAZBAGYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFF2a3JqaHpWVlRORVlFS25IMGdNQmtFQVpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kNDA0YTAtNzgwZC00M2M4LWI3MjEt ZmQyZWI1NDk3YjVjLzEvUFF2a3JqaHpWVlRORVlFS25IMGdNQmtFQVpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kNDA0YTAtNzgwZC00M2M4LWI3MjEtZmQyZWI1NDk3YjVj LzEvUFF2a3JqaHpWVlRORVlFS25IMGdNQmtFQVpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAho99JWk3 zirsKXwN8lyabope5Bcun5xlLcvC2D9FSm4a3jENTj8aWuhylGnVh+bvzEBC2jwi ObxyAzHWy1QSi4rulYiGJh1KbNGResqibqz4cmr4nSOzvVnTAtCcSXUxD5oteIam lFXCLshp0A7XSiOKtuZZ+mvo0onZ+UOaHu0iMWD3RT0f9NWjW0stGtbayXBMvUxd 5B7NMPLkXSRxYXSiq71C9tqPoa+hPatz5jthJTFU/s8k2iX5zUSWsp0iulmozFd9 2ygOxedOC7qQ8/CkbLc3TLteFxFo/F17xVcDLRBgW6Uv+7I2ON8wRwdr98qjT5HA YTQURtbizDHDzQ== -----END CERTIFICATE-----Generated at Mon Jan 26 09:02:00 2026 by rpki-client