This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft File: pJxODPXI27tqZ88dovMfQWJ0n90.mft (raw, json) Hash identifier: vSpTVMQQht1zYwFR7p7nO5PSMS6dnHitrKH26yo11pk= Subject key identifier: 70:DB:D5:E9:1E:35:26:17:48:98:0D:85:02:8E:0F:01:F1:8E:BC:82 Authority key identifier: A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD Certificate issuer: /CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd Certificate serial: 019BF72CF647B6399F6D8810D992A937CCCA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft Manifest number: 1801 Signing time: Sun 25 Jan 2026 22:01:17 +0000 Manifest this update: Sun 25 Jan 2026 22:01:17 +0000 Manifest next update: Mon 26 Jan 2026 22:01:17 +0000 Files and hashes: 1: pJxODPXI27tqZ88dovMfQWJ0n90.crl (hash: R9oLNLmo0BjN6toqajU/JiQcywgy7505kHA5ZM2DZ2o=) 2: r1BhnEtrGRHSnduVeLfXI1g7D8E.roa (hash: rXhnnWAjarg7mZ42xlNMXXH5o5Am7aLxQUdcs4vzEJg=) 3: zS0wzQLKSW80VXv0ZOoMSI3tvJ0.roa (hash: 2I/sSelw5VmBQuf5YaJq9EbH4rTmj1lcBC5rreXqiWE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.crl rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:f6:47:b6:39:9f:6d:88:10:d9:92:a9:37:cc:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd Validity Not Before: Jan 25 22:01:17 2026 GMT Not After : Jan 26 22:01:17 2026 GMT Subject: CN=70dbd5e91e35261748980d85028e0f01f18ebc82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ee:0c:77:29:b6:68:f3:56:64:d4:25:16:51: f4:51:36:8d:75:53:19:fd:d2:55:a7:98:01:66:bd: 16:fa:2a:99:81:a6:0d:1f:7c:27:10:dd:1d:f8:5d: 82:0c:74:06:4b:e8:1b:93:33:7d:75:96:bc:e5:29: 12:c8:37:5c:84:0e:b8:9b:7e:0b:cc:6c:41:31:fd: f0:fe:14:7e:e0:51:df:43:57:d7:d2:b4:da:33:ae: 0b:d9:ce:fd:fb:67:ab:fa:10:0b:0f:1d:2b:64:9f: 0c:52:49:60:87:bf:83:70:9c:4f:c6:ad:2d:69:92: 7e:ab:3f:fb:43:39:c4:d5:34:8f:19:72:63:ef:bd: 2f:d1:f1:42:a7:aa:1b:29:44:b6:66:40:b4:15:82: 7a:9a:e4:73:37:e1:11:7d:4b:e4:22:9f:5b:bb:0c: 59:62:6f:65:1c:2c:d3:ff:84:1e:88:88:74:8b:83: 36:08:7e:3f:fd:3c:bc:ff:73:08:5d:8e:57:e0:be: 8a:d9:cd:40:ec:fd:75:7d:0d:a2:ba:fa:1e:4c:e4: c5:64:53:a8:9f:1b:49:58:fb:c6:03:d2:9a:1e:07: d4:c8:88:07:3e:fe:4c:fa:99:96:f1:49:57:da:12: 80:ef:90:08:43:01:76:a6:be:f2:c8:eb:0a:6b:e4: e1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:DB:D5:E9:1E:35:26:17:48:98:0D:85:02:8E:0F:01:F1:8E:BC:82 X509v3 Authority Key Identifier: keyid:A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:0f:1d:ba:e4:b3:30:26:b0:db:a0:19:b9:3c:fb:7c:42:01: e1:72:31:f9:fc:cf:22:1b:f6:63:03:16:cd:85:63:30:2a:a7: 85:8d:bc:79:56:c3:e8:76:ab:e5:28:b9:50:db:52:76:ff:68: a4:01:20:e9:44:8d:6e:c7:f4:c8:72:2c:88:1e:a1:9f:1f:d6: 28:c2:62:12:9e:b8:81:65:3e:6a:93:01:0c:e0:b0:64:3e:16: fa:fb:07:e2:17:37:5a:43:71:0a:a3:03:e9:f1:08:4e:ee:3f: 46:aa:69:e0:af:b3:17:cb:2a:41:90:ae:56:d2:3e:70:83:6a: da:73:1d:fa:0d:b1:fc:f4:6d:32:6c:87:fb:04:f4:8c:22:ae: 66:e9:78:9f:93:d1:35:65:44:18:a2:09:d4:ed:00:cd:c7:e9: 30:f9:ac:ce:c7:20:69:49:01:36:ec:ea:29:3f:93:59:c2:67: 9b:f0:aa:f5:3b:4a:8f:a0:b7:49:1e:6b:b0:a1:47:3c:1c:84: f0:2d:be:99:e0:64:61:02:0a:f7:f7:eb:10:1a:3b:c4:8c:ba: fc:c9:87:2e:32:b8:2a:44:65:b5:39:1e:d0:03:39:38:17:3e: b2:30:0f:47:f4:a1:b0:85:b6:36:fc:a3:8b:88:8d:43:c9:39: a7:b4:fe:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LPZHtjmfbYgQ2ZKpN8zKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0OWM0ZTBjZjVjOGRiYmI2YTY3Y2YxZGEyZjMxZjQxNjI3 NDlmZGQwHhcNMjYwMTI1MjIwMTE3WhcNMjYwMTI2MjIwMTE3WjAzMTEwLwYDVQQD Eyg3MGRiZDVlOTFlMzUyNjE3NDg5ODBkODUwMjhlMGYwMWYxOGViYzgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4e4Mdym2aPNWZNQlFlH0UTaNdVMZ /dJVp5gBZr0W+iqZgaYNH3wnEN0d+F2CDHQGS+gbkzN9dZa85SkSyDdchA64m34L zGxBMf3w/hR+4FHfQ1fX0rTaM64L2c79+2er+hALDx0rZJ8MUklgh7+DcJxPxq0t aZJ+qz/7QznE1TSPGXJj770v0fFCp6obKUS2ZkC0FYJ6muRzN+ERfUvkIp9buwxZ Ym9lHCzT/4QeiIh0i4M2CH4//Ty8/3MIXY5X4L6K2c1A7P11fQ2iuvoeTOTFZFOo nxtJWPvGA9KaHgfUyIgHPv5M+pmW8UlX2hKA75AIQwF2pr7yyOsKa+ThQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHDb1ekeNSYXSJgNhQKODwHxjryCMB8GA1UdIwQY MBaAFKScTgz1yNu7amfPHaLzH0FidJ/dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEp4T0RQWEkyN3RxWjg4ZG92TWZRV0owbjkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC85ZTE5YzYtZGVmZC00NTVmLTkwYTMt ODhlZDhkNzcxN2E0LzEvcEp4T0RQWEkyN3RxWjg4ZG92TWZRV0owbjkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC85ZTE5YzYtZGVmZC00NTVmLTkwYTMtODhlZDhkNzcxN2E0 LzEvcEp4T0RQWEkyN3RxWjg4ZG92TWZRV0owbjkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmQ8duuSz MCaw26AZuTz7fEIB4XIx+fzPIhv2YwMWzYVjMCqnhY28eVbD6Har5Si5UNtSdv9o pAEg6USNbsf0yHIsiB6hnx/WKMJiEp64gWU+apMBDOCwZD4W+vsH4hc3WkNxCqMD 6fEITu4/Rqpp4K+zF8sqQZCuVtI+cINq2nMd+g2x/PRtMmyH+wT0jCKuZul4n5PR NWVEGKIJ1O0AzcfpMPmszscgaUkBNuzqKT+TWcJnm/Cq9TtKj6C3SR5rsKFHPByE 8C2+meBkYQIK9/frEBo7xIy6/MmHLjK4KkRltTke0AM5OBc+sjAPR/ShsIW2Nvyj i4iNQ8k5p7T+Ww== -----END CERTIFICATE-----Generated at Sun Jan 25 23:55:46 2026 by rpki-client