This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft File: pk-mS7PC3keIMGMSxlLedJ7JNRc.mft (raw, json) Hash identifier: 3s0KzUxUkRnNXkiFu6GhdtdRltZqYCxWGXuM80kJEoY= Subject key identifier: CB:C6:4A:AD:5B:9D:C9:58:B8:73:2D:9F:E3:57:D5:CD:BB:8B:0A:C2 Authority key identifier: A6:4F:A6:4B:B3:C2:DE:47:88:30:63:12:C6:52:DE:74:9E:C9:35:17 Certificate issuer: /CN=a64fa64bb3c2de4788306312c652de749ec93517 Certificate serial: 019BF72D3F1634F6943F13ECD621697D7671 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft Manifest number: 1128 Signing time: Sun 25 Jan 2026 22:01:36 +0000 Manifest this update: Sun 25 Jan 2026 22:01:36 +0000 Manifest next update: Mon 26 Jan 2026 22:01:36 +0000 Files and hashes: 1: 4EuRKSkKUxM9egQ_E38-x94Ksco.roa (hash: UdHRPePKPZnpsN+r8FKLka1rl4iNea1vYZ/8ObiBtN8=) 2: pk-mS7PC3keIMGMSxlLedJ7JNRc.crl (hash: PcBw87JmLCodSFm0w6d+Pj2Etjbaxqlwmp1QCa4zs8U=) 3: uSrOFSvXR20Q351nD4JkzhtP9Jg.roa (hash: zNRVIwb0Zu2pt4iTFPkNvmx3jb4tIN903+fojvNSsc0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.crl rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:3f:16:34:f6:94:3f:13:ec:d6:21:69:7d:76:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a64fa64bb3c2de4788306312c652de749ec93517 Validity Not Before: Jan 25 22:01:36 2026 GMT Not After : Jan 26 22:01:36 2026 GMT Subject: CN=cbc64aad5b9dc958b8732d9fe357d5cdbb8b0ac2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cc:6f:4f:a2:71:0c:90:8a:8f:f0:fe:7b:3a: ba:cc:8b:f6:61:33:3f:b4:45:e9:ff:85:67:91:79: 0f:62:67:c3:bf:17:6a:a5:79:cf:e7:b9:2a:20:4d: dc:e4:57:c0:e0:33:2c:8d:8f:8b:97:fd:d4:2b:42: c3:78:0b:ad:00:4a:b0:dc:f3:a2:ae:8b:be:c0:2e: 0d:6d:20:d7:a7:41:83:41:76:b9:64:8b:74:c7:91: 1f:b6:0b:98:24:3e:ed:b2:29:eb:4f:12:a9:70:26: cb:a4:d9:67:0d:10:cc:77:7d:65:c7:2c:02:e9:4f: da:e4:51:8e:cb:4f:a6:f9:0f:cd:5c:db:4d:d3:43: c8:29:0f:72:ac:58:fb:b1:71:fa:1d:69:4c:be:28: c1:34:5f:c5:6c:d5:0f:15:7c:d9:13:63:39:e6:25: 86:eb:41:59:25:54:2e:39:62:b3:9c:56:a2:49:ab: ad:c2:9e:76:b2:30:12:1a:b0:d9:58:97:1d:92:a6: e3:84:92:9b:e9:63:e8:11:b2:c6:31:b9:1f:df:09: f8:e1:f2:c4:06:b6:20:d4:ef:b6:d4:01:63:95:1f: 67:61:b1:d8:af:91:d4:b4:cc:d6:12:a0:1f:ef:90: c8:90:1d:ae:fd:61:a2:ad:a0:c5:41:7b:e0:55:25: 1c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:C6:4A:AD:5B:9D:C9:58:B8:73:2D:9F:E3:57:D5:CD:BB:8B:0A:C2 X509v3 Authority Key Identifier: keyid:A6:4F:A6:4B:B3:C2:DE:47:88:30:63:12:C6:52:DE:74:9E:C9:35:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:3f:3d:db:fe:a5:02:d3:4e:72:5f:85:57:37:95:90:48:3f: e3:b5:dd:a3:9a:13:55:8b:3c:26:01:6e:d5:3e:c0:47:1f:1e: e2:78:85:11:e3:a3:48:5d:3d:ed:ff:50:28:1c:3c:f7:87:1c: e6:42:93:5d:62:aa:d9:51:97:4b:48:8d:08:e8:31:05:2e:47: c6:b3:ad:dc:35:14:e5:97:43:a6:38:49:bf:dd:cd:c7:bf:8f: 7b:0f:47:d0:c4:8d:d4:00:27:b8:8a:41:85:89:a9:58:ab:a0: e3:0b:16:86:46:64:36:da:ab:d7:6e:00:25:50:77:8a:4b:c2: bf:fb:5d:94:83:59:15:82:5b:ef:36:52:aa:df:23:85:de:7d: da:6f:85:1f:93:eb:f7:e8:48:0b:66:cf:df:75:1e:c5:af:45: 88:48:8f:b8:ec:69:c2:57:45:52:14:01:cf:fd:da:d7:2b:92: d6:87:82:c5:8f:0d:55:35:11:e8:95:47:2a:cf:d2:b7:16:fa: e6:d3:88:2f:22:30:b2:a5:9f:f6:01:f1:41:b2:c9:c1:65:b7: e2:ad:48:e3:2f:36:27:6c:01:ca:f4:08:1e:3d:fe:22:11:a7: 52:79:98:87:b0:71:bc:2c:b2:79:0b:f2:f4:5c:a3:8f:4b:a5: b2:24:f3:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LT8WNPaUPxPs1iFpfXZxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2NGZhNjRiYjNjMmRlNDc4ODMwNjMxMmM2NTJkZTc0OWVj OTM1MTcwHhcNMjYwMTI1MjIwMTM2WhcNMjYwMTI2MjIwMTM2WjAzMTEwLwYDVQQD EyhjYmM2NGFhZDViOWRjOTU4Yjg3MzJkOWZlMzU3ZDVjZGJiOGIwYWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusxvT6JxDJCKj/D+ezq6zIv2YTM/ tEXp/4VnkXkPYmfDvxdqpXnP57kqIE3c5FfA4DMsjY+Ll/3UK0LDeAutAEqw3POi rou+wC4NbSDXp0GDQXa5ZIt0x5EftguYJD7tsinrTxKpcCbLpNlnDRDMd31lxywC 6U/a5FGOy0+m+Q/NXNtN00PIKQ9yrFj7sXH6HWlMvijBNF/FbNUPFXzZE2M55iWG 60FZJVQuOWKznFaiSautwp52sjASGrDZWJcdkqbjhJKb6WPoEbLGMbkf3wn44fLE BrYg1O+21AFjlR9nYbHYr5HUtMzWEqAf75DIkB2u/WGiraDFQXvgVSUcmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMvGSq1bnclYuHMtn+NX1c27iwrCMB8GA1UdIwQY MBaAFKZPpkuzwt5HiDBjEsZS3nSeyTUXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGstbVM3UEMza2VJTUdNU3hsTGVkSjdKTlJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80MjdkYjItYzYxMy00ZTg0LWIzOGMt OTA1NjliYzZjYTU0LzEvcGstbVM3UEMza2VJTUdNU3hsTGVkSjdKTlJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS80MjdkYjItYzYxMy00ZTg0LWIzOGMtOTA1NjliYzZjYTU0 LzEvcGstbVM3UEMza2VJTUdNU3hsTGVkSjdKTlJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcD892/6l AtNOcl+FVzeVkEg/47Xdo5oTVYs8JgFu1T7ARx8e4niFEeOjSF097f9QKBw894cc 5kKTXWKq2VGXS0iNCOgxBS5HxrOt3DUU5ZdDpjhJv93Nx7+Pew9H0MSN1AAnuIpB hYmpWKug4wsWhkZkNtqr124AJVB3ikvCv/tdlINZFYJb7zZSqt8jhd592m+FH5Pr 9+hIC2bP33Uexa9FiEiPuOxpwldFUhQBz/3a1yuS1oeCxY8NVTUR6JVHKs/Stxb6 5tOILyIwsqWf9gHxQbLJwWW34q1I4y82J2wByvQIHj3+IhGnUnmYh7BxvCyyeQvy 9Fyjj0ulsiTzqQ== -----END CERTIFICATE-----Generated at Mon Jan 26 06:23:46 2026 by rpki-client