This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft File: Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft (raw, json) Hash identifier: IdkohXjD1Sp4hLqRGffwEKATDQMs2DfQ9KYNbM8sAbk= Subject key identifier: 00:36:F3:2D:74:14:96:ED:07:C3:47:04:B8:DA:F2:6A:AD:A0:50:7E Authority key identifier: 3E:BF:AF:8A:1A:A3:BC:1F:F3:E3:E4:30:C6:7F:B7:A6:41:0A:3D:F7 Certificate issuer: /CN=3ebfaf8a1aa3bc1ff3e3e430c67fb7a6410a3df7 Certificate serial: 019BF80815096CDDF8BE188DC3FF935D2B34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft Manifest number: 06E8 Signing time: Mon 26 Jan 2026 02:00:37 +0000 Manifest this update: Mon 26 Jan 2026 02:00:37 +0000 Manifest next update: Tue 27 Jan 2026 02:00:37 +0000 Files and hashes: 1: 9MMTJC9bSYJjm0yH2SR40mWxLt4.roa (hash: 911epWb1C+HTij7xHBBtK6BFbTtOQmcCGUfZtk4CgN0=) 2: Pr-vihqjvB_z4-Qwxn-3pkEKPfc.crl (hash: FKexvE2NRvEOtXBY3jnPdwO7UHyxHomBL1u8IKDQQFQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft rsync://rpki.ripe.net/repository/DEFAULT/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:15:09:6c:dd:f8:be:18:8d:c3:ff:93:5d:2b:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ebfaf8a1aa3bc1ff3e3e430c67fb7a6410a3df7 Validity Not Before: Jan 26 02:00:37 2026 GMT Not After : Jan 27 02:00:37 2026 GMT Subject: CN=0036f32d741496ed07c34704b8daf26aada0507e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9b:bb:92:6c:dd:67:26:0a:27:3a:29:05:cf: 26:88:b5:e8:85:2e:13:9c:e9:65:33:5a:d2:3c:fa: 5d:92:03:ce:2b:3f:6d:09:78:bb:af:72:e5:bb:d9: 62:fe:db:29:9d:6d:09:0d:5e:48:38:72:99:64:e4: 3a:fd:95:df:a5:df:00:1e:5e:c8:13:9a:e5:f7:ea: d1:22:95:ee:a7:a2:e5:5f:58:04:96:33:02:40:77: d2:f1:3c:62:4c:f7:93:51:62:c9:b9:3b:27:6e:67: c9:17:97:d5:fe:a9:56:c0:4f:38:51:f7:7c:0e:82: b8:0c:32:4c:dd:0a:24:33:ab:bd:3d:11:3f:9f:ec: dc:1d:df:8e:83:44:0e:9f:7c:a9:13:61:ef:66:a6: 2a:ca:82:a2:02:ad:51:43:85:ec:fd:f1:f4:c6:dd: 2f:31:67:24:13:1b:0a:5a:e6:10:a9:4b:ff:66:0d: 96:f9:ca:b3:f7:04:42:79:99:12:84:9a:a9:d5:5d: a4:91:5c:1a:5e:c8:4b:8b:e8:ba:5e:31:1f:4b:42: a6:32:4d:e2:e0:57:08:e8:d7:83:91:7f:2f:32:5e: 32:95:8c:97:61:cb:f5:99:41:2a:d1:ac:3d:33:3f: 62:c0:55:92:09:1e:d2:61:e7:6f:d0:4a:70:46:e6: de:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:36:F3:2D:74:14:96:ED:07:C3:47:04:B8:DA:F2:6A:AD:A0:50:7E X509v3 Authority Key Identifier: keyid:3E:BF:AF:8A:1A:A3:BC:1F:F3:E3:E4:30:C6:7F:B7:A6:41:0A:3D:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:d9:25:76:b6:5d:d6:e6:88:2e:dd:14:44:11:ed:40:14:cf: d7:0f:46:81:dc:23:93:cd:e4:b7:47:35:e1:c5:38:58:a6:a2: 9a:53:1e:a5:dd:7e:e7:9e:e6:cf:eb:13:c1:15:6d:57:7e:83: 1e:ae:97:bf:89:37:f4:39:03:96:08:03:87:10:1b:6b:ec:8a: 8e:c4:a1:18:1d:1e:34:1c:f5:c5:20:39:22:c2:ff:7b:d0:46: c2:c2:c5:a1:3d:5a:10:4e:b5:5b:a5:6d:9b:b0:78:9b:49:63: ac:25:90:e3:da:83:e0:9f:41:b3:79:93:37:0e:1c:8a:a3:20: 45:a0:1f:3b:8b:9e:42:ee:c6:88:c0:c8:5e:f6:3c:87:cb:d9: 43:04:b1:05:81:5a:19:19:bd:56:8f:3a:03:7d:d2:21:1d:8f: 05:17:f5:ce:ca:38:6f:01:b1:1b:41:56:8b:d2:94:92:00:b7: 3e:c9:82:c9:49:b6:ab:1d:ba:91:a4:7d:a4:31:91:76:37:cd: 1b:7c:86:71:fd:5f:a8:0f:08:9c:f4:95:52:d2:e7:1c:0c:ab: 0d:13:db:97:3f:9f:35:e9:85:0b:3c:1b:53:da:b7:08:db:a8: 88:97:24:1b:c4:c7:fe:d3:1a:9d:95:a6:b1:4b:fb:dc:75:e6: 4a:f7:4e:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CBUJbN34vhiNw/+TXSs0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYmZhZjhhMWFhM2JjMWZmM2UzZTQzMGM2N2ZiN2E2NDEw YTNkZjcwHhcNMjYwMTI2MDIwMDM3WhcNMjYwMTI3MDIwMDM3WjAzMTEwLwYDVQQD EygwMDM2ZjMyZDc0MTQ5NmVkMDdjMzQ3MDRiOGRhZjI2YWFkYTA1MDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5u7kmzdZyYKJzopBc8miLXohS4T nOllM1rSPPpdkgPOKz9tCXi7r3Llu9li/tspnW0JDV5IOHKZZOQ6/ZXfpd8AHl7I E5rl9+rRIpXup6LlX1gEljMCQHfS8TxiTPeTUWLJuTsnbmfJF5fV/qlWwE84Ufd8 DoK4DDJM3QokM6u9PRE/n+zcHd+Og0QOn3ypE2HvZqYqyoKiAq1RQ4Xs/fH0xt0v MWckExsKWuYQqUv/Zg2W+cqz9wRCeZkShJqp1V2kkVwaXshLi+i6XjEfS0KmMk3i 4FcI6NeDkX8vMl4ylYyXYcv1mUEq0aw9Mz9iwFWSCR7SYedv0EpwRubeeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAA28y10FJbtB8NHBLja8mqtoFB+MB8GA1UdIwQY MBaAFD6/r4oao7wf8+PkMMZ/t6ZBCj33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHItdmlocWp2Ql96NC1Rd3huLTNwa0VLUGZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8yMThiMGUtNTRiNS00YWQwLTlhYTAt ZWZkMWEwOThiNDg1LzEvUHItdmlocWp2Ql96NC1Rd3huLTNwa0VLUGZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi8yMThiMGUtNTRiNS00YWQwLTlhYTAtZWZkMWEwOThiNDg1 LzEvUHItdmlocWp2Ql96NC1Rd3huLTNwa0VLUGZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUNkldrZd 1uaILt0URBHtQBTP1w9Ggdwjk83kt0c14cU4WKaimlMepd1+557mz+sTwRVtV36D Hq6Xv4k39DkDlggDhxAba+yKjsShGB0eNBz1xSA5IsL/e9BGwsLFoT1aEE61W6Vt m7B4m0ljrCWQ49qD4J9Bs3mTNw4ciqMgRaAfO4ueQu7GiMDIXvY8h8vZQwSxBYFa GRm9Vo86A33SIR2PBRf1zso4bwGxG0FWi9KUkgC3PsmCyUm2qx26kaR9pDGRdjfN G3yGcf1fqA8InPSVUtLnHAyrDRPblz+fNemFCzwbU9q3CNuoiJckG8TH/tManZWm sUv73HXmSvdONg== -----END CERTIFICATE-----Generated at Mon Jan 26 07:12:34 2026 by rpki-client