This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft File: PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft (raw, json) Hash identifier: qRCxOaxX3SBETVfX4AT/pe9wuUQSHj0Uzk/C/w58i6s= Subject key identifier: 3A:98:0A:D4:C8:A5:C8:0C:B8:D9:2D:A1:6E:72:5C:D1:1F:98:52:13 Authority key identifier: 3D:6A:BE:5C:48:AE:CE:BD:4A:23:7E:15:3C:36:84:F3:06:08:D4:44 Certificate issuer: /CN=3d6abe5c48aecebd4a237e153c3684f30608d444 Certificate serial: 019BF72CD2A22090BB610FE03DFEF499FDCC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWq-XEiuzr1KI34VPDaE8wYI1EQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft Manifest number: 05EE Signing time: Sun 25 Jan 2026 22:01:08 +0000 Manifest this update: Sun 25 Jan 2026 22:01:08 +0000 Manifest next update: Mon 26 Jan 2026 22:01:08 +0000 Files and hashes: 1: PWq-XEiuzr1KI34VPDaE8wYI1EQ.crl (hash: nSjN99WLUrKHMoH2Ts5TfiWdd41UledZInxBVVnTtFE=) 2: ymE5Pc8e6QWHOxlrawdscg3hba0.roa (hash: FR/m/K23gzt9WTvqKJ25/MJlgHD/0x10UFRx1gKHX48=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft rsync://rpki.ripe.net/repository/DEFAULT/PWq-XEiuzr1KI34VPDaE8wYI1EQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:d2:a2:20:90:bb:61:0f:e0:3d:fe:f4:99:fd:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d6abe5c48aecebd4a237e153c3684f30608d444 Validity Not Before: Jan 25 22:01:08 2026 GMT Not After : Jan 26 22:01:08 2026 GMT Subject: CN=3a980ad4c8a5c80cb8d92da16e725cd11f985213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4b:69:b2:ba:d3:e8:47:6a:83:18:a3:b5:bd: b0:cf:9d:30:ce:cf:47:fe:2d:3f:9b:3d:34:6b:3c: 81:34:54:18:2f:e7:d4:59:8d:fa:cf:ff:da:29:69: 80:50:66:b6:7b:85:3e:d3:91:ec:76:c3:99:3e:26: f2:5b:07:a9:a8:63:57:c0:75:03:c5:ea:f5:31:79: ac:13:ea:e3:86:ef:5d:41:a3:71:a4:d0:a2:18:dc: 76:74:e0:3b:f6:fb:99:a6:89:c4:b0:ad:a6:e7:d4: c1:47:e2:2b:05:aa:72:37:72:8e:ca:33:f2:3e:20: 8e:9b:1a:18:fd:c2:4d:6f:46:30:ea:e0:48:26:aa: d9:8d:79:3c:27:8b:52:78:39:cf:a4:3b:68:e3:18: da:40:94:6c:20:20:a6:76:3f:77:ac:e6:22:90:0e: 6c:3e:0e:e8:e6:0a:85:af:e0:4c:0d:34:59:69:da: be:e9:c7:10:6d:ff:ea:a1:72:97:c8:80:7f:bc:7a: f0:08:15:02:a3:f5:ad:3f:a6:ee:f7:1c:27:88:95: 61:7b:35:dd:e4:c7:8f:7b:85:d4:04:c2:b9:db:62: d3:c1:c1:0d:6a:5b:13:a8:67:b8:63:8f:25:d8:f6: df:8c:77:dd:19:ca:f5:46:fd:d0:3a:2d:58:aa:8b: 6a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:98:0A:D4:C8:A5:C8:0C:B8:D9:2D:A1:6E:72:5C:D1:1F:98:52:13 X509v3 Authority Key Identifier: keyid:3D:6A:BE:5C:48:AE:CE:BD:4A:23:7E:15:3C:36:84:F3:06:08:D4:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWq-XEiuzr1KI34VPDaE8wYI1EQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:d2:12:7a:fb:b8:67:10:33:83:07:98:1a:ae:9d:60:9f:65: 7f:54:f6:d9:06:48:b5:ad:80:3b:18:b4:5a:36:6f:44:df:2e: 8d:e2:3a:8e:c0:52:4c:78:0d:43:dc:55:51:15:17:d2:7d:5c: 9d:26:e0:b6:ab:17:ed:56:86:eb:cf:84:a2:4f:86:ca:22:7c: 7a:19:88:88:50:85:a0:e8:d5:7c:20:18:f9:9b:bc:12:ca:06: a8:ca:02:7f:ec:06:ec:70:9d:10:c8:05:05:39:6a:31:ec:33: 0c:e8:5d:5d:2a:2f:eb:ee:7c:12:4e:91:ea:7f:98:f5:1c:c6: 94:72:c2:b2:ec:c7:70:b4:9f:50:e2:7f:3f:13:a5:53:30:8d: 86:60:5b:24:2a:a5:6a:4e:f2:61:67:e9:de:9b:fa:64:e5:1b: 56:c5:6c:cb:8c:b9:88:43:f1:c7:d5:33:7b:c8:84:81:fb:6b: 3f:05:59:00:98:d7:7f:18:02:a7:67:a7:f9:93:99:f1:b8:75: dc:95:98:c5:e2:0b:13:29:f4:a3:95:19:92:36:bf:aa:49:7e: 20:10:03:71:77:bd:4e:b1:b3:14:89:10:26:41:42:06:15:aa: b2:95:c5:c8:ac:4e:ed:fa:27:32:4f:c0:e7:36:97:6b:be:18: 3c:96:2d:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LNKiIJC7YQ/gPf70mf3MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkNmFiZTVjNDhhZWNlYmQ0YTIzN2UxNTNjMzY4NGYzMDYw OGQ0NDQwHhcNMjYwMTI1MjIwMTA4WhcNMjYwMTI2MjIwMTA4WjAzMTEwLwYDVQQD EygzYTk4MGFkNGM4YTVjODBjYjhkOTJkYTE2ZTcyNWNkMTFmOTg1MjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0tpsrrT6Edqgxijtb2wz50wzs9H /i0/mz00azyBNFQYL+fUWY36z//aKWmAUGa2e4U+05HsdsOZPibyWwepqGNXwHUD xer1MXmsE+rjhu9dQaNxpNCiGNx2dOA79vuZponEsK2m59TBR+IrBapyN3KOyjPy PiCOmxoY/cJNb0Yw6uBIJqrZjXk8J4tSeDnPpDto4xjaQJRsICCmdj93rOYikA5s Pg7o5gqFr+BMDTRZadq+6ccQbf/qoXKXyIB/vHrwCBUCo/WtP6bu9xwniJVhezXd 5MePe4XUBMK522LTwcENalsTqGe4Y48l2PbfjHfdGcr1Rv3QOi1YqotqeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDqYCtTIpcgMuNktoW5yXNEfmFITMB8GA1UdIwQY MBaAFD1qvlxIrs69SiN+FTw2hPMGCNREMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFdxLVhFaXV6cjFLSTM0VlBEYUU4d1lJMUVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC81ZmI4MDMtNDMzMy00MTc1LTkwZGYt YWVjMTRlYTE3ZWJmLzEvUFdxLVhFaXV6cjFLSTM0VlBEYUU4d1lJMUVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC81ZmI4MDMtNDMzMy00MTc1LTkwZGYtYWVjMTRlYTE3ZWJm LzEvUFdxLVhFaXV6cjFLSTM0VlBEYUU4d1lJMUVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACdISevu4 ZxAzgweYGq6dYJ9lf1T22QZIta2AOxi0WjZvRN8ujeI6jsBSTHgNQ9xVURUX0n1c nSbgtqsX7VaG68+Eok+GyiJ8ehmIiFCFoOjVfCAY+Zu8EsoGqMoCf+wG7HCdEMgF BTlqMewzDOhdXSov6+58Ek6R6n+Y9RzGlHLCsuzHcLSfUOJ/PxOlUzCNhmBbJCql ak7yYWfp3pv6ZOUbVsVsy4y5iEPxx9Uze8iEgftrPwVZAJjXfxgCp2en+ZOZ8bh1 3JWYxeILEyn0o5UZkja/qkl+IBADcXe9TrGzFIkQJkFCBhWqspXFyKxO7fonMk/A 5zaXa74YPJYtSQ== -----END CERTIFICATE-----Generated at Mon Jan 26 05:39:03 2026 by rpki-client