This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft File: PN4kcMhWOUlIej54dDxUTJnsimQ.mft (raw, json) Hash identifier: fQ4eIa8VaEfEUhB5OI1Pq8FTk8qJ3DHuBdTw1NcWUTg= Subject key identifier: 76:39:1E:7D:F6:5C:B9:49:59:BF:D4:96:FE:28:F3:3C:30:AB:7A:D0 Authority key identifier: 3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64 Certificate issuer: /CN=3cde2470c8563949487a3e78743c544c99ec8a64 Certificate serial: 019BF274823A6230E3C304BF801D053B6765 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft Manifest number: 0A69 Signing time: Sun 25 Jan 2026 00:01:20 +0000 Manifest this update: Sun 25 Jan 2026 00:01:20 +0000 Manifest next update: Mon 26 Jan 2026 00:01:20 +0000 Files and hashes: 1: 6dIzMwo0G6tAhuml4GfIJNjdjVQ.roa (hash: wpsN0tsYTVD9eZ1wIkFPmbb5yPxiazJ0MhFoB9FJQW4=) 2: DR9MoQCYtXaLoml4Dm1_5qJwPs4.roa (hash: nXlN3VKxLNyqdBBXWDPV2SzM6R5K4D1KJpMD50qdg/A=) 3: PN4kcMhWOUlIej54dDxUTJnsimQ.crl (hash: 2AZfm1S6cIjnIQk3BpSNy5rF7TDLsUCVkmUyYLs9VyE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.crl rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:74:82:3a:62:30:e3:c3:04:bf:80:1d:05:3b:67:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cde2470c8563949487a3e78743c544c99ec8a64 Validity Not Before: Jan 25 00:01:20 2026 GMT Not After : Jan 26 00:01:20 2026 GMT Subject: CN=76391e7df65cb94959bfd496fe28f33c30ab7ad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:03:09:4d:64:3b:34:04:5d:9e:d9:25:c3:55: 78:8d:04:bc:eb:83:80:fb:88:b9:db:f7:8b:21:7b: 5e:3a:c4:27:d2:04:37:02:6d:41:4f:e4:37:41:95: 7f:2b:f8:8a:49:29:42:e8:b0:c6:8b:77:e8:99:87: ef:a6:68:df:c6:ee:0f:6c:21:42:01:b6:28:fc:a2: 6b:b2:87:e4:63:29:64:c4:8c:a3:eb:5e:59:5c:0a: d0:f8:4f:51:a1:36:25:6b:33:a6:dd:df:a5:f5:34: ff:c2:4d:8c:33:b3:bb:e2:34:a5:db:7b:19:9d:70: d7:52:75:aa:b5:b4:9c:71:f8:0f:1f:3b:b0:4f:33: ac:a2:5a:c9:fa:67:0c:59:fa:23:3b:0a:95:9c:a0: a1:36:5e:72:d6:97:fd:85:28:55:5a:8f:5e:03:c3: 6f:a4:ec:9b:f7:eb:e8:d3:3e:5e:9e:4c:85:46:fd: da:1e:69:55:50:36:74:49:ff:83:8c:b3:a3:b3:d2: f7:b7:9d:69:19:ae:4e:68:41:a9:b8:32:c4:b7:b8: 7d:7e:42:00:74:87:d3:88:e6:4c:0d:95:ef:90:2d: 11:e4:34:2c:02:d8:d9:7f:e0:4a:a4:ee:80:67:10: 0a:06:e6:cc:93:ac:d1:0f:c5:8c:c7:36:a7:90:fe: 40:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:39:1E:7D:F6:5C:B9:49:59:BF:D4:96:FE:28:F3:3C:30:AB:7A:D0 X509v3 Authority Key Identifier: keyid:3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:eb:52:fe:53:48:51:db:d6:8f:b9:e6:c3:b7:9c:5c:a4:50: f6:a1:e4:97:53:27:6c:b4:3c:a9:09:e4:16:a8:12:56:a5:be: 04:8b:f7:38:63:63:99:11:4a:44:c1:11:0a:19:cd:2c:f9:50: 96:98:b8:a1:5d:be:a3:53:a5:f1:4d:ba:f7:97:31:e3:56:7e: 00:84:50:b9:45:fd:2a:ef:07:1e:90:91:55:27:78:77:4a:03: 1f:32:61:a3:1e:1f:7b:ab:d0:12:c6:5f:2e:c9:17:11:59:d2: 65:46:ce:ad:4c:d3:72:c3:2a:9f:14:b5:53:ee:cc:b4:6d:00: 54:9f:dd:81:8e:0a:b3:f1:ef:a9:be:f3:47:69:03:4b:9a:d2: 38:66:78:f6:97:8f:c6:7b:8f:ee:47:10:c2:9b:65:53:ea:74: b1:0b:89:da:28:8c:b1:c3:4a:a5:76:d2:21:7e:91:99:89:fd: 52:ed:9a:b9:97:a6:c2:05:0b:ab:79:d1:0c:ae:66:7a:b4:cf: e5:35:f0:fa:7a:4e:0d:ee:c6:76:fb:e4:e7:00:07:f3:0b:79: fe:a0:d3:32:cc:b6:bf:5d:66:05:e5:2d:e5:00:dd:0b:fa:e8: 23:08:74:c6:9c:96:44:8e:19:1b:46:e6:11:8b:84:ea:35:45: 79:a9:80:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvydII6YjDjwwS/gB0FO2dlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjZGUyNDcwYzg1NjM5NDk0ODdhM2U3ODc0M2M1NDRjOTll YzhhNjQwHhcNMjYwMTI1MDAwMTIwWhcNMjYwMTI2MDAwMTIwWjAzMTEwLwYDVQQD Eyg3NjM5MWU3ZGY2NWNiOTQ5NTliZmQ0OTZmZTI4ZjMzYzMwYWI3YWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwMJTWQ7NARdntklw1V4jQS864OA +4i52/eLIXteOsQn0gQ3Am1BT+Q3QZV/K/iKSSlC6LDGi3fomYfvpmjfxu4PbCFC AbYo/KJrsofkYylkxIyj615ZXArQ+E9RoTYlazOm3d+l9TT/wk2MM7O74jSl23sZ nXDXUnWqtbSccfgPHzuwTzOsolrJ+mcMWfojOwqVnKChNl5y1pf9hShVWo9eA8Nv pOyb9+vo0z5enkyFRv3aHmlVUDZ0Sf+DjLOjs9L3t51pGa5OaEGpuDLEt7h9fkIA dIfTiOZMDZXvkC0R5DQsAtjZf+BKpO6AZxAKBubMk6zRD8WMxzankP5A7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHY5Hn32XLlJWb/Ulv4o8zwwq3rQMB8GA1UdIwQY MBaAFDzeJHDIVjlJSHo+eHQ8VEyZ7IpkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUE40a2NNaFdPVWxJZWo1NGREeFVUSm5zaW1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9mYTc5Y2YtOGM0Yy00MDk0LWExZjUt NDQxNzFiMmY1OTllLzEvUE40a2NNaFdPVWxJZWo1NGREeFVUSm5zaW1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9mYTc5Y2YtOGM0Yy00MDk0LWExZjUtNDQxNzFiMmY1OTll LzEvUE40a2NNaFdPVWxJZWo1NGREeFVUSm5zaW1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmOtS/lNI UdvWj7nmw7ecXKRQ9qHkl1MnbLQ8qQnkFqgSVqW+BIv3OGNjmRFKRMERChnNLPlQ lpi4oV2+o1Ol8U2695cx41Z+AIRQuUX9Ku8HHpCRVSd4d0oDHzJhox4fe6vQEsZf LskXEVnSZUbOrUzTcsMqnxS1U+7MtG0AVJ/dgY4Ks/Hvqb7zR2kDS5rSOGZ49peP xnuP7kcQwptlU+p0sQuJ2iiMscNKpXbSIX6RmYn9Uu2auZemwgULq3nRDK5merTP 5TXw+npODe7Gdvvk5wAH8wt5/qDTMsy2v11mBeUt5QDdC/roIwh0xpyWRI4ZG0bm EYuE6jVFeamAig== -----END CERTIFICATE-----Generated at Sun Jan 25 11:06:12 2026 by rpki-client