This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft File: pjvMbSX3R2-7PsM_bbw-nurZIhI.mft (raw, json) Hash identifier: R4gzrcXEuQqRMXzBxiK9Qo5c6we5MICKbZdYOjj6rMU= Subject key identifier: 2A:C7:30:86:E8:E6:FF:89:E6:2B:7C:A5:02:A9:DA:92:B0:4A:2F:A9 Authority key identifier: A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12 Certificate issuer: /CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212 Certificate serial: 019BF4632EFF63018DA1654E3F6C8B639250 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft Manifest number: 0B4D Signing time: Sun 25 Jan 2026 09:01:39 +0000 Manifest this update: Sun 25 Jan 2026 09:01:39 +0000 Manifest next update: Mon 26 Jan 2026 09:01:39 +0000 Files and hashes: 1: 0jPQz2jIHrU0FvHsrF-XRZUhtzs.roa (hash: W/W8DjgReH/V+5pe/5+3BKwvc8dz5PRxxtmAIvZ373s=) 2: 3h4R6YLSiEPNhWmPNTd7KLX1X3U.roa (hash: LjFP5plUCIY5Si52J4E1UiGHvt4F3YfbtrTK+AdpPww=) 3: AD3DllK0spDacTrZOzUoNjsaEXY.roa (hash: E0XWVs3lhPoRvEa16ZsuDhIGmQin6DlhoQyYSbyhShU=) 4: BM_HgvB1ieY5WUpFTxU63_9kGNo.roa (hash: iddaFlVd9smwAlHjBr7dZr+J/UTaU0dMdguVDg9n9Xg=) 5: HVCa9r5thWjsE4kAoaBRSlvTvK4.roa (hash: QayBo0rlXlFxr86ACWyOG/yDe9UFq1WxBL/y2YeNVL4=) 6: ONqPurqrHVMfwrJOahm-hLa_T5g.roa (hash: ZlEZvfK7OYrNuzavDM8lorWGQ5ktu+dv/s2X755rVok=) 7: RHDQQEmbcOrqTmjc99mQ-Eu0900.roa (hash: x+3xhE8Ho8gzcy+Ei5kfiLpvFaz62BymEv0joq6kEPs=) 8: ScPX6tqlw5o1ZcCYpkNMnCrj72U.roa (hash: OWPE9KkCxV1y82ynMwT7Wfz+7H4kVGPyxV8fArKWLm0=) 9: WdQ6he_P5F-cOEeRR1TiPU-zU-s.roa (hash: vQjmo6B5bhn28fdIrHICw7DprEul1mU/rEs6H7jrIrc=) 10: n6eR2WfCXImcpQbWii3OXMfT1io.roa (hash: 9i7i+fHrN+OULt3g7OjkSiNbFJDZzaQ5rh/6y0F1XFE=) 11: pjvMbSX3R2-7PsM_bbw-nurZIhI.crl (hash: IouQKRD5clRwH/OnVeW8JPqpAftqS01nL4+dfgId0Us=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:63:2e:ff:63:01:8d:a1:65:4e:3f:6c:8b:63:92:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212 Validity Not Before: Jan 25 09:01:39 2026 GMT Not After : Jan 26 09:01:39 2026 GMT Subject: CN=2ac73086e8e6ff89e62b7ca502a9da92b04a2fa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:87:8b:65:94:16:02:29:a0:46:66:40:c4:40: 25:aa:04:4f:2c:f5:0a:7f:aa:bb:7e:f2:7c:ac:4a: 17:79:76:9e:10:c3:e7:91:d8:56:c8:b6:c9:0e:a8: ee:dd:79:02:fa:6a:55:7b:ae:18:91:60:b7:0a:60: 57:bb:45:ff:96:d3:f4:3b:5e:ac:0f:8f:b3:67:f3: a3:34:cd:19:1f:4e:e0:0f:81:46:2b:e4:68:95:fc: 3f:fe:89:af:b0:c8:9a:e3:f9:1f:0e:81:1b:62:6b: 93:50:6d:55:a5:af:59:a5:df:b0:82:66:b7:6d:59: ba:97:31:ef:97:8e:c3:f9:8a:ab:6f:8d:c7:10:d3: df:78:4e:f2:64:fb:70:86:6c:af:ff:e1:9d:29:a6: db:5b:c4:cb:dc:d8:a5:e4:84:f3:95:f5:a7:f5:6b: c0:f0:37:1b:0a:59:a8:74:c0:5f:22:a9:00:bb:fd: 22:c6:2b:b1:db:01:ac:c1:dc:c8:d3:13:12:58:f9: bd:56:43:8f:bd:d3:05:66:38:df:1e:e1:82:9f:49: f4:d1:91:2c:c6:fd:7c:c0:26:2d:b6:e5:37:61:25: c1:9b:b2:f6:f6:ec:5b:ae:97:85:68:ba:e1:59:61: c1:e3:b6:48:e0:da:4b:45:83:eb:1e:74:d9:f7:6f: 3d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C7:30:86:E8:E6:FF:89:E6:2B:7C:A5:02:A9:DA:92:B0:4A:2F:A9 X509v3 Authority Key Identifier: keyid:A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:97:c4:d7:2b:31:98:b6:ba:b8:44:93:c9:39:97:07:ab:7d: e6:72:30:7f:c7:7d:27:c7:ed:76:47:b6:af:62:a0:af:04:75: 32:c7:67:f0:89:d3:81:da:11:13:ff:23:f1:2d:7b:3e:16:23: 04:1c:59:ad:f5:23:dd:cc:16:39:e4:f0:48:6c:62:81:69:c5: 51:7b:bc:79:70:a7:81:55:94:8b:4e:ed:d5:4f:a6:82:c9:e6: dd:21:f7:ca:e2:51:49:77:20:d9:89:0b:87:81:0c:4c:41:64: 1f:2b:90:32:b5:14:ba:b2:0b:49:e8:7a:aa:10:5b:55:8c:cf: 52:4c:ad:09:92:84:9b:be:31:9f:76:02:c7:af:dc:bd:4b:d9: bb:82:3d:bc:b2:e3:ac:de:a0:6c:d4:30:d4:a2:f8:6f:73:b0: 3a:4f:34:03:cd:4e:c2:12:3e:9d:8e:03:d2:ba:81:4a:07:22: e0:86:e2:e1:39:f6:a4:cd:39:f7:3b:a9:ec:2c:52:95:6d:a3: 49:f3:0f:cf:f6:7c:e4:4c:df:00:34:f1:fb:1a:96:65:68:51: 30:c7:cd:5f:77:79:8f:bd:5a:a9:56:8f:f3:56:c4:77:54:c4: 1f:e2:21:e5:bc:c7:e4:70:62:9e:75:fb:50:e2:23:f5:5a:64: 2c:3b:a1:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0Yy7/YwGNoWVOP2yLY5JQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2M2JjYzZkMjVmNzQ3NmZiYjNlYzMzZjZkYmMzZTllZWFk OTIyMTIwHhcNMjYwMTI1MDkwMTM5WhcNMjYwMTI2MDkwMTM5WjAzMTEwLwYDVQQD EygyYWM3MzA4NmU4ZTZmZjg5ZTYyYjdjYTUwMmE5ZGE5MmIwNGEyZmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IeLZZQWAimgRmZAxEAlqgRPLPUK f6q7fvJ8rEoXeXaeEMPnkdhWyLbJDqju3XkC+mpVe64YkWC3CmBXu0X/ltP0O16s D4+zZ/OjNM0ZH07gD4FGK+Rolfw//omvsMia4/kfDoEbYmuTUG1Vpa9Zpd+wgma3 bVm6lzHvl47D+Yqrb43HENPfeE7yZPtwhmyv/+GdKabbW8TL3Nil5ITzlfWn9WvA 8DcbClmodMBfIqkAu/0ixiux2wGswdzI0xMSWPm9VkOPvdMFZjjfHuGCn0n00ZEs xv18wCYttuU3YSXBm7L29uxbrpeFaLrhWWHB47ZI4NpLRYPrHnTZ9289wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCrHMIbo5v+J5it8pQKp2pKwSi+pMB8GA1UdIwQY MBaAFKY7zG0l90dvuz7DP228Pp7q2SISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQt NDkyNGZhMDAwYjdjLzEvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQtNDkyNGZhMDAwYjdj LzEvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfJfE1ysx mLa6uESTyTmXB6t95nIwf8d9J8ftdke2r2KgrwR1Msdn8InTgdoRE/8j8S17PhYj BBxZrfUj3cwWOeTwSGxigWnFUXu8eXCngVWUi07t1U+mgsnm3SH3yuJRSXcg2YkL h4EMTEFkHyuQMrUUurILSeh6qhBbVYzPUkytCZKEm74xn3YCx6/cvUvZu4I9vLLj rN6gbNQw1KL4b3OwOk80A81OwhI+nY4D0rqBSgci4Ibi4Tn2pM059zup7CxSlW2j SfMPz/Z85EzfADTx+xqWZWhRMMfNX3d5j71aqVaP81bEd1TEH+Ih5bzH5HBinnX7 UOIj9VpkLDuhFQ== -----END CERTIFICATE-----Generated at Sun Jan 25 20:07:40 2026 by rpki-client