This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft File: pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft (raw, json) Hash identifier: Kgwjzsvio2ptXo/AM8q3+nSqiA4vF61qc5mvjkvTL8g= Subject key identifier: 4E:93:7B:09:28:90:A5:FD:98:7E:04:5B:36:C3:03:49:EB:67:DC:54 Authority key identifier: A4:AB:AF:1D:37:F0:A1:41:A8:14:CA:02:FC:01:E3:D9:62:1C:73:D9 Certificate issuer: /CN=a4abaf1d37f0a141a814ca02fc01e3d9621c73d9 Certificate serial: 019BF5AC71068D9D063BF8711C531BB238A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft Manifest number: 1779 Signing time: Sun 25 Jan 2026 15:01:17 +0000 Manifest this update: Sun 25 Jan 2026 15:01:17 +0000 Manifest next update: Mon 26 Jan 2026 15:01:17 +0000 Files and hashes: 1: RI1PUJj0Q_MD3P8uweukuXuYhlU.roa (hash: Udb4Yel6QV6x+EojTVD0SPU2vkANJh/DkSOzlaEFuOQ=) 2: pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl (hash: 2TwHHp6hKOCGvyBBv437QwaFKvsqbJ8G2CaVk9v5YLc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:71:06:8d:9d:06:3b:f8:71:1c:53:1b:b2:38:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4abaf1d37f0a141a814ca02fc01e3d9621c73d9 Validity Not Before: Jan 25 15:01:17 2026 GMT Not After : Jan 26 15:01:17 2026 GMT Subject: CN=4e937b092890a5fd987e045b36c30349eb67dc54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:23:b7:02:03:93:af:24:ba:3d:29:d2:0e:9b: ad:a7:b8:e6:a9:b8:d7:17:58:73:92:ac:1d:a6:33: 7d:d5:95:60:14:05:6f:08:f5:39:ee:09:13:b9:30: 78:a4:f9:e2:57:9a:8b:81:9e:dc:58:a6:0d:f1:ed: 75:19:69:ca:cb:33:c6:84:ea:e7:e6:d6:69:12:59: dc:d1:02:74:df:67:63:c4:af:24:26:eb:7f:a7:ca: eb:ab:70:74:63:39:6c:fe:d2:41:5f:bc:6d:e4:09: 87:1f:1b:ab:04:8e:cf:4e:e6:d7:c5:56:6e:6f:a2: 94:76:aa:9d:1e:71:ad:22:ba:d4:2c:f8:7e:9f:4f: e4:66:01:0e:a3:9b:02:f1:3a:d6:00:9e:e0:6d:c9: 18:5b:39:c6:ef:11:42:51:32:e9:b6:c9:e3:7b:95: 44:d2:f8:f7:d0:04:85:07:f5:18:d5:07:a5:4f:1e: b2:b6:4f:d4:56:76:5f:f4:68:94:2a:c4:d6:5b:98: 01:b6:f3:98:cd:b4:13:48:38:76:a8:af:22:53:a7: 8a:99:ac:39:89:fd:e7:50:7a:5c:c4:0d:87:67:78: d2:d6:8f:b6:8d:24:de:f9:da:a2:cc:63:e0:29:76: fa:f7:21:a1:1a:03:fc:41:06:5b:0c:ef:74:11:eb: d9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:93:7B:09:28:90:A5:FD:98:7E:04:5B:36:C3:03:49:EB:67:DC:54 X509v3 Authority Key Identifier: keyid:A4:AB:AF:1D:37:F0:A1:41:A8:14:CA:02:FC:01:E3:D9:62:1C:73:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:73:90:48:ec:9d:ef:cd:86:9c:3b:ea:ae:c0:2b:e1:12:aa: 18:41:85:e6:a3:00:45:13:56:01:34:cc:12:b5:bf:92:ee:f2: 15:e5:f0:78:0b:7a:3a:f0:0c:ec:ce:4b:3e:97:a7:f3:ff:d9: 6a:23:1b:18:7a:bb:d3:a9:e7:eb:06:27:8f:7e:bf:98:bd:38: 60:d5:d1:a2:0b:04:6b:fa:a9:87:15:a2:51:7f:a0:c8:5d:d9: ae:03:e4:26:8a:e3:b2:86:8d:6d:6e:07:ba:8b:1d:3e:9d:ca: 02:50:e3:08:23:af:bc:12:cf:8d:d1:a2:07:00:10:d7:71:ef: f2:89:66:36:e3:1f:a9:ec:bd:8b:92:7d:57:14:cd:83:24:4c: 09:cf:0d:de:21:fa:b2:1c:82:e6:4a:a4:c8:ac:bf:8e:42:e9: 44:7e:f2:27:c8:4c:01:40:ad:29:2a:55:16:93:49:a9:b2:e2: 57:b2:de:d5:a2:49:f7:11:f2:c9:56:74:b9:5f:59:ae:bb:d9: 85:fd:49:ea:54:96:6d:da:f3:f4:a0:8b:2a:b7:d8:12:48:44: aa:98:1a:1b:fe:97:f4:fe:19:6a:0a:ce:16:23:ee:80:f2:c4: cc:9c:f3:34:1c:2f:bf:27:cf:ba:b3:24:1a:3d:93:25:f5:4f: 67:ee:fd:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rHEGjZ0GO/hxHFMbsjinMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YWJhZjFkMzdmMGExNDFhODE0Y2EwMmZjMDFlM2Q5NjIx YzczZDkwHhcNMjYwMTI1MTUwMTE3WhcNMjYwMTI2MTUwMTE3WjAzMTEwLwYDVQQD Eyg0ZTkzN2IwOTI4OTBhNWZkOTg3ZTA0NWIzNmMzMDM0OWViNjdkYzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyO3AgOTryS6PSnSDputp7jmqbjX F1hzkqwdpjN91ZVgFAVvCPU57gkTuTB4pPniV5qLgZ7cWKYN8e11GWnKyzPGhOrn 5tZpElnc0QJ032djxK8kJut/p8rrq3B0Yzls/tJBX7xt5AmHHxurBI7PTubXxVZu b6KUdqqdHnGtIrrULPh+n0/kZgEOo5sC8TrWAJ7gbckYWznG7xFCUTLptsnje5VE 0vj30ASFB/UY1QelTx6ytk/UVnZf9GiUKsTWW5gBtvOYzbQTSDh2qK8iU6eKmaw5 if3nUHpcxA2HZ3jS1o+2jSTe+dqizGPgKXb69yGhGgP8QQZbDO90EevZOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE6TewkokKX9mH4EWzbDA0nrZ9xUMB8GA1UdIwQY MBaAFKSrrx038KFBqBTKAvwB49liHHPZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEt1dkhUZndvVUdvRk1vQ19BSGoyV0ljYzlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8xNTViZGMtYjU3NC00N2Y5LWIzNDgt OTNjZjY0Zjg4OTkwLzEvcEt1dkhUZndvVUdvRk1vQ19BSGoyV0ljYzlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS8xNTViZGMtYjU3NC00N2Y5LWIzNDgtOTNjZjY0Zjg4OTkw LzEvcEt1dkhUZndvVUdvRk1vQ19BSGoyV0ljYzlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYnOQSOyd 782GnDvqrsAr4RKqGEGF5qMARRNWATTMErW/ku7yFeXweAt6OvAM7M5LPpen8//Z aiMbGHq706nn6wYnj36/mL04YNXRogsEa/qphxWiUX+gyF3ZrgPkJorjsoaNbW4H uosdPp3KAlDjCCOvvBLPjdGiBwAQ13Hv8olmNuMfqey9i5J9VxTNgyRMCc8N3iH6 shyC5kqkyKy/jkLpRH7yJ8hMAUCtKSpVFpNJqbLiV7Le1aJJ9xHyyVZ0uV9ZrrvZ hf1J6lSWbdrz9KCLKrfYEkhEqpgaG/6X9P4ZagrOFiPugPLEzJzzNBwvvyfPurMk Gj2TJfVPZ+79rA== -----END CERTIFICATE-----Generated at Sun Jan 25 20:56:35 2026 by rpki-client