This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.mft File: PryeUbqrPD5qtpn8tEPwB_VGw_s.mft (raw, json) Hash identifier: uDGMbe70jFWExxPJR/CfybT5W5JqH4ehagQVWWXfv0U= Subject key identifier: 0B:34:AB:B4:1B:D1:9B:5F:86:78:AB:E9:BA:E5:13:C1:FE:B2:03:8F Authority key identifier: 3E:BC:9E:51:BA:AB:3C:3E:6A:B6:99:FC:B4:43:F0:07:F5:46:C3:FB Certificate issuer: /CN=3ebc9e51baab3c3e6ab699fcb443f007f546c3fb Certificate serial: 019BF53E0CC979F7A16CB6ED19FF83C552EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PryeUbqrPD5qtpn8tEPwB_VGw_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.mft Manifest number: 17EB Signing time: Sun 25 Jan 2026 13:00:42 +0000 Manifest this update: Sun 25 Jan 2026 13:00:42 +0000 Manifest next update: Mon 26 Jan 2026 13:00:42 +0000 Files and hashes: 1: PryeUbqrPD5qtpn8tEPwB_VGw_s.crl (hash: uLi1TIY1D3tbfsKrKtINbm/mIMhB/Pb04LAme8GeJCQ=) 2: sCE1yodUvj9BdJNK5llFZ8BEDYY.roa (hash: 3/B6MniV1srlZK4xMEp39gTJz673XIWVDanm60XM8zU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.crl rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.mft rsync://rpki.ripe.net/repository/DEFAULT/PryeUbqrPD5qtpn8tEPwB_VGw_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:0c:c9:79:f7:a1:6c:b6:ed:19:ff:83:c5:52:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ebc9e51baab3c3e6ab699fcb443f007f546c3fb Validity Not Before: Jan 25 13:00:42 2026 GMT Not After : Jan 26 13:00:42 2026 GMT Subject: CN=0b34abb41bd19b5f8678abe9bae513c1feb2038f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:99:f5:82:5e:a5:97:49:ff:57:59:61:a3:a0: 0e:2d:c1:80:95:01:be:5a:8e:9d:b9:d9:84:22:d5: e5:80:a2:70:90:72:27:54:05:12:1f:86:35:6b:e6: ae:10:3d:ca:86:31:d5:72:4f:d2:dd:01:37:fd:15: e8:e4:47:90:9f:a9:74:5b:b8:6b:82:8c:c4:ca:f7: d7:3e:a7:3f:ad:5a:7b:2e:96:3a:09:e2:01:28:6f: 65:3e:ff:75:3c:37:e8:ed:92:81:5c:f2:e7:0d:64: 7c:73:0a:7c:1d:89:3b:ce:95:d1:c0:f5:1c:60:6a: f7:c8:0f:ee:83:fa:c5:2f:d4:16:42:d7:b4:c8:ae: e5:79:fe:22:5e:4d:29:70:d4:aa:54:b5:c2:cf:1d: a3:bd:9f:8b:26:27:e5:92:9d:61:cb:30:5b:60:a8: 90:d8:59:ee:62:e3:32:a6:55:34:eb:13:d0:b5:1c: 06:ee:ab:c3:9f:76:90:7f:b5:d1:e2:66:14:b8:b9: ae:81:d9:70:20:1b:7a:a8:e2:23:03:a2:df:7d:ca: 85:b3:a8:73:36:23:fc:ee:cd:1b:80:ff:51:bf:48: f8:34:1d:2c:ea:7d:11:2f:ab:4a:19:7f:b9:2d:8b: 57:ed:87:37:b5:10:7e:67:97:35:3e:79:5d:9f:39: 05:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:34:AB:B4:1B:D1:9B:5F:86:78:AB:E9:BA:E5:13:C1:FE:B2:03:8F X509v3 Authority Key Identifier: keyid:3E:BC:9E:51:BA:AB:3C:3E:6A:B6:99:FC:B4:43:F0:07:F5:46:C3:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PryeUbqrPD5qtpn8tEPwB_VGw_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:d3:fb:48:3f:0f:13:24:82:4c:ff:5a:05:14:cc:14:1c:e4: a9:b4:43:2a:44:c9:01:9a:0d:bb:be:5b:01:be:36:ee:d9:c0: 28:98:0d:50:31:72:6d:4d:bf:39:bc:5d:e0:9a:c9:e0:aa:4a: c7:22:88:45:31:1a:9e:50:68:2f:68:6d:58:0d:ac:0f:d0:a3: b3:f8:14:be:e2:40:14:a9:ce:b1:d2:0c:cc:d0:53:82:2f:c0: 79:a8:86:2a:cb:d3:fa:b7:3b:0d:3c:34:87:58:c0:ea:48:9e: 2f:05:f0:19:ac:02:34:5c:a9:cd:b3:9b:fb:d4:b7:10:0d:2b: 1d:5e:84:69:31:5a:18:3e:75:d8:51:50:b3:d3:f9:fe:e9:4e: cb:56:14:45:d2:bb:11:0e:eb:a0:ec:c2:ed:06:4b:57:28:87: a4:40:bf:1f:22:9e:5f:7f:a3:ec:97:84:28:97:cd:a6:e2:94: 67:2f:c6:2b:3c:df:46:5e:af:7c:3f:f8:a9:59:31:74:27:6a: fa:ee:75:58:92:23:7d:a3:69:a7:a2:89:15:aa:54:0b:60:5c: bd:7e:e5:65:32:cb:65:3d:1e:c5:63:70:00:eb:92:b0:c8:0c: 2f:4d:c3:87:2e:cd:e6:cc:31:c1:d3:8b:4e:52:1c:57:c0:02: c4:9d:7c:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PgzJefehbLbtGf+DxVLvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYmM5ZTUxYmFhYjNjM2U2YWI2OTlmY2I0NDNmMDA3ZjU0 NmMzZmIwHhcNMjYwMTI1MTMwMDQyWhcNMjYwMTI2MTMwMDQyWjAzMTEwLwYDVQQD EygwYjM0YWJiNDFiZDE5YjVmODY3OGFiZTliYWU1MTNjMWZlYjIwMzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJn1gl6ll0n/V1lho6AOLcGAlQG+ Wo6dudmEItXlgKJwkHInVAUSH4Y1a+auED3KhjHVck/S3QE3/RXo5EeQn6l0W7hr gozEyvfXPqc/rVp7LpY6CeIBKG9lPv91PDfo7ZKBXPLnDWR8cwp8HYk7zpXRwPUc YGr3yA/ug/rFL9QWQte0yK7lef4iXk0pcNSqVLXCzx2jvZ+LJiflkp1hyzBbYKiQ 2FnuYuMyplU06xPQtRwG7qvDn3aQf7XR4mYUuLmugdlwIBt6qOIjA6LffcqFs6hz NiP87s0bgP9Rv0j4NB0s6n0RL6tKGX+5LYtX7Yc3tRB+Z5c1PnldnzkF0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAs0q7Qb0Ztfhnir6brlE8H+sgOPMB8GA1UdIwQY MBaAFD68nlG6qzw+araZ/LRD8Af1RsP7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHJ5ZVVicXJQRDVxdHBuOHRFUHdCX1ZHd19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC81NGMxZDEtMzYzYi00NWJhLTg5Mjct OTY4OWZiZjZmNmVlLzEvUHJ5ZVVicXJQRDVxdHBuOHRFUHdCX1ZHd19zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC81NGMxZDEtMzYzYi00NWJhLTg5MjctOTY4OWZiZjZmNmVl LzEvUHJ5ZVVicXJQRDVxdHBuOHRFUHdCX1ZHd19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcdP7SD8P EySCTP9aBRTMFBzkqbRDKkTJAZoNu75bAb427tnAKJgNUDFybU2/Obxd4JrJ4KpK xyKIRTEanlBoL2htWA2sD9Cjs/gUvuJAFKnOsdIMzNBTgi/AeaiGKsvT+rc7DTw0 h1jA6kieLwXwGawCNFypzbOb+9S3EA0rHV6EaTFaGD512FFQs9P5/ulOy1YURdK7 EQ7roOzC7QZLVyiHpEC/HyKeX3+j7JeEKJfNpuKUZy/GKzzfRl6vfD/4qVkxdCdq +u51WJIjfaNpp6KJFapUC2BcvX7lZTLLZT0exWNwAOuSsMgML03Dhy7N5swxwdOL TlIcV8ACxJ18bw== -----END CERTIFICATE-----Generated at Sun Jan 25 18:34:15 2026 by rpki-client