This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft File: Pme6gge4HBtHJjsf3o95uZWXA30.mft (raw, json) Hash identifier: a3awnJbmA5XHGNi8FvDsDPem/YN23G3Fc/XaS3KuhN0= Subject key identifier: 8C:E0:BC:92:52:48:E5:E7:A7:09:D7:01:06:45:D8:CB:75:19:B4:AC Authority key identifier: 3E:67:BA:82:07:B8:1C:1B:47:26:3B:1F:DE:8F:79:B9:95:97:03:7D Certificate issuer: /CN=3e67ba8207b81c1b47263b1fde8f79b99597037d Certificate serial: 019BF5E34544B5840D1950E914EFA9E32CB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pme6gge4HBtHJjsf3o95uZWXA30.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft Manifest number: 177A Signing time: Sun 25 Jan 2026 16:01:10 +0000 Manifest this update: Sun 25 Jan 2026 16:01:10 +0000 Manifest next update: Mon 26 Jan 2026 16:01:10 +0000 Files and hashes: 1: DJdqiSENKGFZJ1k4CQJ0qhVj-NU.roa (hash: JPyYKilJIGfMtwMBvPqVfl8PNsFxqskM2FqefiGjuEU=) 2: Pme6gge4HBtHJjsf3o95uZWXA30.crl (hash: Cu5uu5MxaY8rRpYVaLa7c+VxjYPkC/Btw6Em3OKY/eU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.crl rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft rsync://rpki.ripe.net/repository/DEFAULT/Pme6gge4HBtHJjsf3o95uZWXA30.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:45:44:b5:84:0d:19:50:e9:14:ef:a9:e3:2c:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e67ba8207b81c1b47263b1fde8f79b99597037d Validity Not Before: Jan 25 16:01:10 2026 GMT Not After : Jan 26 16:01:10 2026 GMT Subject: CN=8ce0bc925248e5e7a709d7010645d8cb7519b4ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ff:ee:f8:70:6e:e6:89:dc:4d:30:89:6a:95: f9:2c:ef:6e:2f:cc:f1:c3:35:63:e7:54:f0:fb:f3: 7d:4b:d8:2b:2e:dc:7d:14:d9:a0:1f:e6:f5:a7:7e: 2c:1f:df:bc:1c:31:ee:25:d5:6d:d8:20:13:da:16: 33:24:92:88:35:ff:32:9c:a6:ea:44:63:12:f4:bc: ef:fd:7a:68:9e:80:a9:ee:c0:12:4f:84:16:94:c4: 0a:08:b7:b3:00:6c:18:45:39:a7:66:75:e2:16:58: af:8c:67:23:c2:6c:f1:b0:e5:78:e9:8b:cc:cc:f4: ce:2b:fa:bb:2c:fd:60:89:da:1e:e9:8f:93:10:42: 09:54:62:ea:9c:5d:18:de:2b:dd:86:d3:ec:fc:23: eb:d6:75:e0:e6:5b:41:9b:2c:3d:56:66:1b:ef:c4: 43:ac:d9:d8:65:60:cb:eb:b8:d0:f6:2c:65:87:96: b2:07:c6:b6:39:20:ae:af:ab:85:22:6b:99:2d:3c: cf:c6:21:8c:46:fc:05:40:d6:32:28:92:b0:df:ad: 4c:9f:d7:2b:4b:24:f3:86:8b:84:66:5d:4b:2f:fd: 54:15:37:21:5b:4a:1f:d7:71:39:cb:58:83:ae:98: d2:53:e1:3d:31:1d:19:e8:b3:23:92:6c:97:d0:0e: 65:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E0:BC:92:52:48:E5:E7:A7:09:D7:01:06:45:D8:CB:75:19:B4:AC X509v3 Authority Key Identifier: keyid:3E:67:BA:82:07:B8:1C:1B:47:26:3B:1F:DE:8F:79:B9:95:97:03:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pme6gge4HBtHJjsf3o95uZWXA30.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:3b:cd:5f:f6:77:8c:90:6b:c1:67:aa:3b:73:b9:c5:95:ec: b8:c3:39:bb:4f:b6:0e:51:d9:ff:9b:f2:19:ce:9e:5d:ee:0b: d0:a9:78:67:2b:e6:51:88:3c:31:a2:85:28:e2:89:ff:5e:92: 30:f7:66:72:9f:8b:f5:d8:86:e6:a9:6c:71:c5:9f:81:51:89: e8:ff:69:dd:2a:99:37:93:e4:45:36:5a:c0:56:6c:c6:82:7b: 70:12:9d:ea:1f:02:1a:55:59:cc:6b:6b:90:6c:b5:f9:70:a9: c1:e7:de:e8:35:65:88:fe:75:5e:7b:84:cf:50:b0:86:81:07: f6:57:c8:8b:91:89:bd:b4:4e:e7:82:32:1e:fb:b0:fb:5b:27: 9a:74:3b:35:e9:20:fd:c9:9f:f5:33:6b:da:e4:d0:f1:16:ad: 8b:79:8c:1b:1f:6e:fc:21:3e:93:f5:b9:d4:5f:bd:b6:29:2b: 63:62:93:58:a7:3b:e1:f1:24:f6:78:2c:1d:e9:65:7e:64:84: 78:6d:e3:e1:2e:fe:53:da:e7:25:7d:35:57:bc:be:b2:5a:3b: 04:50:f8:31:1e:7a:8b:f1:0f:6a:38:6c:28:3c:43:05:ba:9b: 05:9a:61:16:61:f2:bc:02:ac:2f:51:3d:28:48:79:85:fa:89: a8:6a:13:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv140VEtYQNGVDpFO+p4yy5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjdiYTgyMDdiODFjMWI0NzI2M2IxZmRlOGY3OWI5OTU5 NzAzN2QwHhcNMjYwMTI1MTYwMTEwWhcNMjYwMTI2MTYwMTEwWjAzMTEwLwYDVQQD Eyg4Y2UwYmM5MjUyNDhlNWU3YTcwOWQ3MDEwNjQ1ZDhjYjc1MTliNGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwf/u+HBu5oncTTCJapX5LO9uL8zx wzVj51Tw+/N9S9grLtx9FNmgH+b1p34sH9+8HDHuJdVt2CAT2hYzJJKINf8ynKbq RGMS9Lzv/XponoCp7sAST4QWlMQKCLezAGwYRTmnZnXiFlivjGcjwmzxsOV46YvM zPTOK/q7LP1gidoe6Y+TEEIJVGLqnF0Y3ivdhtPs/CPr1nXg5ltBmyw9VmYb78RD rNnYZWDL67jQ9ixlh5ayB8a2OSCur6uFImuZLTzPxiGMRvwFQNYyKJKw361Mn9cr SyTzhouEZl1LL/1UFTchW0of13E5y1iDrpjSU+E9MR0Z6LMjkmyX0A5lgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIzgvJJSSOXnpwnXAQZF2Mt1GbSsMB8GA1UdIwQY MBaAFD5nuoIHuBwbRyY7H96PebmVlwN9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1lNmdnZTRIQnRISmpzZjNvOTV1WldYQTMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9hMDIxMzYtZGI5Yi00YmVmLWFlMTIt NGMyNWZjYmRlZGQxLzEvUG1lNmdnZTRIQnRISmpzZjNvOTV1WldYQTMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9hMDIxMzYtZGI5Yi00YmVmLWFlMTItNGMyNWZjYmRlZGQx LzEvUG1lNmdnZTRIQnRISmpzZjNvOTV1WldYQTMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjTvNX/Z3 jJBrwWeqO3O5xZXsuMM5u0+2DlHZ/5vyGc6eXe4L0Kl4ZyvmUYg8MaKFKOKJ/16S MPdmcp+L9diG5qlsccWfgVGJ6P9p3SqZN5PkRTZawFZsxoJ7cBKd6h8CGlVZzGtr kGy1+XCpwefe6DVliP51XnuEz1CwhoEH9lfIi5GJvbRO54IyHvuw+1snmnQ7Nekg /cmf9TNr2uTQ8Rati3mMGx9u/CE+k/W51F+9tikrY2KTWKc74fEk9ngsHellfmSE eG3j4S7+U9rnJX01V7y+slo7BFD4MR56i/EPajhsKDxDBbqbBZphFmHyvAKsL1E9 KEh5hfqJqGoTnA== -----END CERTIFICATE-----Generated at Sun Jan 25 21:10:52 2026 by rpki-client