This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft File: PT-Hu394dKp-Fc_sm79qrjyc4zo.mft (raw, json) Hash identifier: 1DHqeNzNwxRVCw/6YNNt6ibVZVhOPcZX/1uIvMZpHcI= Subject key identifier: D7:69:07:E0:BD:99:26:93:29:CF:7B:19:BB:B9:DD:D5:66:29:BC:95 Authority key identifier: 3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A Certificate issuer: /CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a Certificate serial: 019BF23DC6CB1FFE4FC0677EEAA6278EAEC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft Manifest number: 1168 Signing time: Sat 24 Jan 2026 23:01:33 +0000 Manifest this update: Sat 24 Jan 2026 23:01:33 +0000 Manifest next update: Sun 25 Jan 2026 23:01:33 +0000 Files and hashes: 1: 03e_nKrMH4A4-r2jcWSKOro4hEs.roa (hash: DxycIoEklj35A1jvEiLRJ53FKAfEe2yJnQzuZq37gCQ=) 2: 5c-yJTh5qV_umaLR8gDO8QwCy9Y.roa (hash: jonWwn1zIDBZ/vrTcGpWTsw/eo5gVMGyObXA0g7CkyA=) 3: D4w1402cKEkHHCPC0Qrp-ROm6yo.roa (hash: EMcXFEgTqCUtUEK47llV6gmt5p0zphRz9x+4xZgTdwU=) 4: PT-Hu394dKp-Fc_sm79qrjyc4zo.crl (hash: NLSEkzVM131NAGJFAM/EGRCBYU0n7umDOmqopCoJYxo=) 5: VkvT6baU95xG8FSlVbrDxq01-m0.roa (hash: wuSqKSYOAMUCrbWLjcaG0f0YLG5d5+8uKukQepwPM10=) 6: Zy9ArgNtGZeoSvcBNVhQm83CAtY.roa (hash: 2tInoyGIeDu4rQu0+WHE69OTAAXptyalAWcz50Rg2Q8=) 7: abaPwP2Q_8OSCHTWIlI0CKnEXZM.roa (hash: dryzgauXbdm4FHRf2Q1oRz+2w9ySHDpr4lqY5orU7Z0=) 8: l0yUF1IRmtUQWgAm0m-qwhJJad8.roa (hash: zejsAU9sJFQnGEhJNTn/fy3BN2ZirT1vXiw3WbJzNvE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:3d:c6:cb:1f:fe:4f:c0:67:7e:ea:a6:27:8e:ae:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a Validity Not Before: Jan 24 23:01:33 2026 GMT Not After : Jan 25 23:01:33 2026 GMT Subject: CN=d76907e0bd99269329cf7b19bbb9ddd56629bc95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8e:fc:66:7f:67:1d:7b:28:05:52:18:00:e9: 3a:1e:36:a2:bc:f2:8d:0c:ab:be:d1:d4:12:ce:c6: 0e:72:95:54:d7:11:55:ec:10:76:52:dc:a2:f0:ef: bc:b7:d7:e6:c5:2e:16:e0:da:9b:55:2b:7a:32:3e: 9d:bf:e7:cd:9d:57:b2:2a:ee:4b:6c:7d:f0:fb:71: 3e:1c:c0:25:96:1f:cd:81:f0:ea:2e:79:38:d3:66: 67:30:81:bc:d7:e3:2d:bb:2e:df:7a:3f:8e:7a:b9: 31:f4:1f:00:02:53:b1:3a:92:39:c7:2d:39:4b:d6: 05:c0:73:83:b6:e0:17:76:0c:de:7b:58:cf:1c:e7: 88:a5:81:32:d5:03:2d:c4:af:b0:c2:09:d0:fb:c1: f2:60:9f:04:9f:a7:0e:6c:a2:de:0e:20:00:4b:4d: 6e:e9:f1:98:96:7c:87:a5:cd:e4:86:5e:d0:88:89: 0b:a5:b4:59:30:e7:07:4c:ec:42:76:2a:2c:02:b6: 72:a3:9d:70:d4:51:3b:27:2f:38:71:5e:94:ea:ff: b1:bc:b8:05:e0:fc:5c:9d:68:b2:91:39:b9:e6:9d: 66:2c:77:db:15:eb:aa:61:0a:c5:81:cd:61:56:a2: 33:77:84:08:85:6d:15:18:ad:31:64:2d:ac:04:51: a0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:69:07:E0:BD:99:26:93:29:CF:7B:19:BB:B9:DD:D5:66:29:BC:95 X509v3 Authority Key Identifier: keyid:3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:37:ec:fa:46:68:97:0c:b9:58:66:0f:bc:ae:04:75:a4:96: aa:2b:66:1c:83:37:db:40:75:61:61:6e:5c:3f:52:1e:f2:58: 0c:63:17:43:46:7b:35:fa:2d:b7:b8:32:65:99:10:80:8e:5d: 40:ca:fe:e1:bf:74:d5:6c:94:b4:13:98:be:9d:8c:f4:83:2e: 35:83:5f:7c:d8:48:8f:86:e3:8c:c5:5f:26:41:f4:b5:a6:13: 64:03:f5:d5:2b:06:50:00:af:af:e5:5b:2e:de:b7:cd:08:6e: 8b:45:d3:53:7d:3f:c0:e7:e4:c2:94:79:80:21:f7:0b:03:2e: 6e:dc:17:a1:ae:83:b5:5a:eb:bf:58:2c:04:a6:16:8b:49:32: 31:8e:cd:82:6c:5b:b9:c2:ad:f9:3d:f9:50:aa:09:7b:cf:76: 7c:4e:4e:32:cf:f3:72:21:f8:85:dd:3c:30:7d:9d:93:a2:7d: 8e:11:2b:24:a7:89:fc:05:54:3f:9a:60:74:9f:08:d1:0e:e1: ee:7b:57:de:dd:c4:c0:61:f7:7b:33:63:71:7d:92:d0:46:95: 08:81:2d:71:cb:cf:fc:3a:cf:fb:70:8b:09:b2:94:6b:7c:82: f5:d0:95:93:80:05:99:17:7f:8e:05:7d:0c:85:66:37:15:5a: f3:cf:6b:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvyPcbLH/5PwGd+6qYnjq7CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkM2Y4N2JiN2Y3ODc0YWE3ZTE1Y2ZlYzliYmY2YWFlM2M5 Y2UzM2EwHhcNMjYwMTI0MjMwMTMzWhcNMjYwMTI1MjMwMTMzWjAzMTEwLwYDVQQD EyhkNzY5MDdlMGJkOTkyNjkzMjljZjdiMTliYmI5ZGRkNTY2MjliYzk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxY78Zn9nHXsoBVIYAOk6HjaivPKN DKu+0dQSzsYOcpVU1xFV7BB2Utyi8O+8t9fmxS4W4NqbVSt6Mj6dv+fNnVeyKu5L bH3w+3E+HMAllh/NgfDqLnk402ZnMIG81+Mtuy7fej+Oerkx9B8AAlOxOpI5xy05 S9YFwHODtuAXdgzee1jPHOeIpYEy1QMtxK+wwgnQ+8HyYJ8En6cObKLeDiAAS01u 6fGYlnyHpc3khl7QiIkLpbRZMOcHTOxCdiosArZyo51w1FE7Jy84cV6U6v+xvLgF 4PxcnWiykTm55p1mLHfbFeuqYQrFgc1hVqIzd4QIhW0VGK0xZC2sBFGg2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNdpB+C9mSaTKc97Gbu53dVmKbyVMB8GA1UdIwQY MBaAFD0/h7t/eHSqfhXP7Ju/aq48nOM6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFQtSHUzOTRkS3AtRmNfc203OXFyanljNHpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83MTAxNWEtMTFiZS00NzFlLTk1OTIt NjJiZTUzNDI1Njc2LzEvUFQtSHUzOTRkS3AtRmNfc203OXFyanljNHpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC83MTAxNWEtMTFiZS00NzFlLTk1OTItNjJiZTUzNDI1Njc2 LzEvUFQtSHUzOTRkS3AtRmNfc203OXFyanljNHpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlzfs+kZo lwy5WGYPvK4EdaSWqitmHIM320B1YWFuXD9SHvJYDGMXQ0Z7Nfott7gyZZkQgI5d QMr+4b901WyUtBOYvp2M9IMuNYNffNhIj4bjjMVfJkH0taYTZAP11SsGUACvr+Vb Lt63zQhui0XTU30/wOfkwpR5gCH3CwMubtwXoa6DtVrrv1gsBKYWi0kyMY7Ngmxb ucKt+T35UKoJe892fE5OMs/zciH4hd08MH2dk6J9jhErJKeJ/AVUP5pgdJ8I0Q7h 7ntX3t3EwGH3ezNjcX2S0EaVCIEtccvP/DrP+3CLCbKUa3yC9dCVk4AFmRd/jgV9 DIVmNxVa889rIg== -----END CERTIFICATE-----Generated at Sun Jan 25 10:00:52 2026 by rpki-client