This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.mft File: pCNxKB3-GQctEzndBIKyqvrVQs4.mft (raw, json) Hash identifier: bkmcofz9pqNf5NOWLrMgBhyqVslIBSe8o4JdQB320pc= Subject key identifier: AD:D4:34:50:9E:8B:A3:6D:82:9C:9A:26:8E:B1:54:64:1D:E4:3A:BD Authority key identifier: A4:23:71:28:1D:FE:19:07:2D:13:39:DD:04:82:B2:AA:FA:D5:42:CE Certificate issuer: /CN=a42371281dfe19072d1339dd0482b2aafad542ce Certificate serial: 019BF61A4A4941F417DACC90916BD620061E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCNxKB3-GQctEzndBIKyqvrVQs4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.mft Manifest number: 0AC3 Signing time: Sun 25 Jan 2026 17:01:16 +0000 Manifest this update: Sun 25 Jan 2026 17:01:16 +0000 Manifest next update: Mon 26 Jan 2026 17:01:16 +0000 Files and hashes: 1: 5-fSRldHA_TyCo0Af_n4H7VHHoo.roa (hash: n/VVjN3d2+A+fBj8+Kv149bG42PjdEV7GiSsjv6L+Uw=) 2: pCNxKB3-GQctEzndBIKyqvrVQs4.crl (hash: 3Rhmfp7lU69yM0zHz74KkFbQP2OK/2IlsKbaS06pR6U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.crl rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.mft rsync://rpki.ripe.net/repository/DEFAULT/pCNxKB3-GQctEzndBIKyqvrVQs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:1a:4a:49:41:f4:17:da:cc:90:91:6b:d6:20:06:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a42371281dfe19072d1339dd0482b2aafad542ce Validity Not Before: Jan 25 17:01:16 2026 GMT Not After : Jan 26 17:01:16 2026 GMT Subject: CN=add434509e8ba36d829c9a268eb154641de43abd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:eb:f7:ba:16:83:f6:7e:5e:78:80:7e:6c:95: c0:fb:8f:ab:95:8c:86:f9:76:04:ce:91:fe:2e:74: c1:4c:19:76:0d:77:37:22:df:e8:bf:6b:21:06:82: fb:50:3e:ca:0a:19:0b:23:c1:45:fa:52:57:d0:6b: b3:91:a4:eb:54:f5:71:c3:87:58:40:69:89:41:9f: 60:84:51:61:2e:29:02:82:4a:be:c2:4d:bd:6a:02: 1b:c6:50:8f:6d:73:50:af:b2:4f:8c:ca:e9:04:6b: ff:63:98:00:4e:4e:8a:35:f2:79:a0:55:9f:88:a4: ed:97:32:0d:c8:7e:9b:3f:af:1b:2e:59:bb:81:f2: 80:44:7a:6d:43:7a:8d:b6:d5:ea:87:34:29:76:5d: 7a:bc:54:d7:b2:ca:6f:0b:a8:b3:60:62:9b:f2:a3: 2e:37:d9:7a:ab:f2:9a:1a:39:c7:56:42:43:7a:35: b0:26:1f:4b:fa:29:47:2c:e6:f1:41:e0:50:6d:67: 97:b2:25:0a:93:fc:52:63:c8:f8:b0:71:2d:12:34: cb:24:a8:a0:1b:18:01:f4:06:47:f9:93:dd:4d:a7: f6:a0:21:f3:d1:92:ae:f3:5f:3e:c7:7f:ac:51:bc: 86:e2:14:e4:97:60:5b:7f:0c:bd:66:ea:01:77:13: f4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D4:34:50:9E:8B:A3:6D:82:9C:9A:26:8E:B1:54:64:1D:E4:3A:BD X509v3 Authority Key Identifier: keyid:A4:23:71:28:1D:FE:19:07:2D:13:39:DD:04:82:B2:AA:FA:D5:42:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCNxKB3-GQctEzndBIKyqvrVQs4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:e7:08:b4:61:8e:6b:d6:cb:21:13:9b:16:ba:d6:50:d6:6f: 43:1d:78:7b:94:70:7e:f1:3b:35:39:ba:7f:84:f7:3e:2d:cf: 67:82:82:55:bb:05:29:ce:94:7f:86:f1:2b:81:1a:57:b8:1c: 3a:17:42:d0:30:88:d5:c7:0a:66:b1:e2:1e:62:fe:78:f4:29: 5f:ef:e9:85:ff:f0:3e:ea:95:0e:f6:09:a1:84:de:b5:65:2a: 81:2f:81:ca:b2:33:20:32:4a:a4:b8:ab:bd:1c:99:1a:e2:85: ae:ae:48:d4:85:bf:04:26:73:45:b6:88:35:56:f8:3f:72:92: a3:da:67:91:35:c5:c9:62:06:e7:92:e5:cf:b7:32:2c:8e:c7: 9e:23:cd:21:d6:5c:14:f5:cf:08:6e:63:9b:1c:88:1e:05:e5: f6:a5:7b:a4:c2:5c:54:65:cf:5d:42:64:07:20:b0:39:b4:76: 4e:b9:24:0a:ed:a9:21:dd:46:d8:12:3f:b9:a6:39:d9:3d:86: ff:dd:a4:70:1c:f3:83:40:6d:c1:b6:ed:10:87:4f:3a:3f:88: 1b:8e:e6:5c:97:8d:84:99:8a:1e:d3:88:c6:81:44:37:7a:a5: d3:a4:ff:59:da:ab:e3:e1:6c:f4:a9:7b:8e:b5:2e:68:6e:7a: 07:ce:32:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GkpJQfQX2syQkWvWIAYeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MjM3MTI4MWRmZTE5MDcyZDEzMzlkZDA0ODJiMmFhZmFk NTQyY2UwHhcNMjYwMTI1MTcwMTE2WhcNMjYwMTI2MTcwMTE2WjAzMTEwLwYDVQQD EyhhZGQ0MzQ1MDllOGJhMzZkODI5YzlhMjY4ZWIxNTQ2NDFkZTQzYWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuv3uhaD9n5eeIB+bJXA+4+rlYyG +XYEzpH+LnTBTBl2DXc3It/ov2shBoL7UD7KChkLI8FF+lJX0GuzkaTrVPVxw4dY QGmJQZ9ghFFhLikCgkq+wk29agIbxlCPbXNQr7JPjMrpBGv/Y5gATk6KNfJ5oFWf iKTtlzINyH6bP68bLlm7gfKARHptQ3qNttXqhzQpdl16vFTXsspvC6izYGKb8qMu N9l6q/KaGjnHVkJDejWwJh9L+ilHLObxQeBQbWeXsiUKk/xSY8j4sHEtEjTLJKig GxgB9AZH+ZPdTaf2oCHz0ZKu818+x3+sUbyG4hTkl2Bbfwy9ZuoBdxP0dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK3UNFCei6NtgpyaJo6xVGQd5Dq9MB8GA1UdIwQY MBaAFKQjcSgd/hkHLRM53QSCsqr61ULOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcENOeEtCMy1HUWN0RXpuZEJJS3lxdnJWUXM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9hNDNhMDUtNjAzZi00NjA3LWJjNjgt OTkwNjBlMjQ1OGVjLzEvcENOeEtCMy1HUWN0RXpuZEJJS3lxdnJWUXM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9hNDNhMDUtNjAzZi00NjA3LWJjNjgtOTkwNjBlMjQ1OGVj LzEvcENOeEtCMy1HUWN0RXpuZEJJS3lxdnJWUXM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhOcItGGO a9bLIRObFrrWUNZvQx14e5RwfvE7NTm6f4T3Pi3PZ4KCVbsFKc6Uf4bxK4EaV7gc OhdC0DCI1ccKZrHiHmL+ePQpX+/phf/wPuqVDvYJoYTetWUqgS+ByrIzIDJKpLir vRyZGuKFrq5I1IW/BCZzRbaINVb4P3KSo9pnkTXFyWIG55Llz7cyLI7HniPNIdZc FPXPCG5jmxyIHgXl9qV7pMJcVGXPXUJkByCwObR2TrkkCu2pId1G2BI/uaY52T2G /92kcBzzg0BtwbbtEIdPOj+IG47mXJeNhJmKHtOIxoFEN3ql06T/Wdqr4+Fs9Kl7 jrUuaG56B84yfQ== -----END CERTIFICATE-----Generated at Mon Jan 26 01:32:44 2026 by rpki-client