This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft File: PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft (raw, json) Hash identifier: 91YR7MbuoDcirvFprS6aSv8iLOIrrN25xWZhbFQNqHE= Subject key identifier: 3F:79:8B:90:F6:9C:D4:91:7B:5B:02:E2:AD:3A:D0:4C:B2:00:C4:9A Authority key identifier: 3E:E0:21:4C:60:9C:6C:D6:78:03:AC:7C:73:6E:F8:DA:51:7C:A5:9D Certificate issuer: /CN=3ee0214c609c6cd67803ac7c736ef8da517ca59d Certificate serial: 019BF5750CD977D279728392197200363C63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft Manifest number: 0261 Signing time: Sun 25 Jan 2026 14:00:47 +0000 Manifest this update: Sun 25 Jan 2026 14:00:47 +0000 Manifest next update: Mon 26 Jan 2026 14:00:47 +0000 Files and hashes: 1: 2P0Kjjt5-7UDTZhBwA-FFuDiDYM.roa (hash: e8dlsMoEY5OAzunOS6SXf0tgQsD9v9aE1pqpQ/DOvsk=) 2: PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl (hash: 7JCDYpRwp55OrsYQV5TCb5x0WMLCMU2US7L8MDdRGkc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:0c:d9:77:d2:79:72:83:92:19:72:00:36:3c:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ee0214c609c6cd67803ac7c736ef8da517ca59d Validity Not Before: Jan 25 14:00:47 2026 GMT Not After : Jan 26 14:00:47 2026 GMT Subject: CN=3f798b90f69cd4917b5b02e2ad3ad04cb200c49a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cd:54:ac:5d:06:01:67:61:30:1c:93:72:9c: a0:45:68:45:8a:53:97:85:24:8b:7e:63:13:6f:7d: 30:9b:29:da:36:a7:5c:97:23:e3:e5:79:af:b9:ff: 96:73:34:62:f4:cd:7d:87:c9:a3:6c:e6:2e:96:87: 79:a6:b7:80:1b:e6:14:eb:da:71:db:7b:29:30:c0: de:56:53:c9:89:4b:0f:80:2a:e0:c7:60:7d:f5:4f: 66:3a:8e:c6:5f:c1:4c:21:8b:76:50:7b:c0:6a:90: 59:fc:28:99:c3:cf:e1:12:97:49:19:20:ca:de:45: 3f:af:d4:ad:9b:db:de:5e:67:d3:d9:b9:f0:3b:95: c2:e2:e6:25:f4:34:94:f5:be:86:48:98:2a:d3:4b: ae:a1:34:b9:1b:be:73:e1:13:37:c4:9e:84:6c:e2: 21:6c:79:39:53:c6:04:48:dc:f5:e0:2b:fc:a2:2e: 29:c3:05:92:ba:1e:be:bd:0d:78:be:0a:08:0d:c8: d3:e1:b4:ee:0d:cd:5a:2b:d5:f5:75:37:17:35:8e: 2b:9e:6d:0e:76:0c:5a:0a:69:8f:1b:16:4b:9f:74: 45:6c:ca:37:99:f0:69:3f:c8:19:e7:4c:71:27:b0: 6d:c0:1f:e0:0d:61:d1:27:5d:73:71:f3:cb:c8:7e: 68:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:79:8B:90:F6:9C:D4:91:7B:5B:02:E2:AD:3A:D0:4C:B2:00:C4:9A X509v3 Authority Key Identifier: keyid:3E:E0:21:4C:60:9C:6C:D6:78:03:AC:7C:73:6E:F8:DA:51:7C:A5:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:f0:bd:69:0a:33:14:ef:12:d6:36:fd:36:96:c6:b8:a2:b0: 9a:d8:37:65:c1:51:48:ef:38:21:5f:a0:66:cd:e6:f1:7f:22: 25:ef:ce:f1:1a:3a:ad:da:c8:01:fe:93:60:1a:b1:ab:98:e8: 55:d4:bc:96:be:cb:13:83:4c:ed:33:7e:a2:21:1f:d6:24:3d: f0:25:ac:a9:e0:31:47:08:fd:81:f6:ad:46:86:42:34:ae:17: 91:aa:1e:b9:2b:30:7a:64:60:09:11:41:51:fb:63:2c:a9:a4: 68:02:ea:8d:ef:79:37:cf:67:d4:31:90:1a:c6:01:f3:df:51: 77:ea:32:9f:1f:39:5c:c6:7f:38:24:cd:81:39:19:52:65:c2: 3e:b5:d0:96:d0:c0:8a:cb:fe:8f:50:7d:bb:e3:91:15:3e:44: b7:ba:95:0b:ad:77:16:7f:59:f0:0d:9e:59:c2:87:67:87:b2: 97:89:34:ed:68:f1:83:a3:ff:4e:e4:66:83:08:7d:47:db:57: cf:f2:f8:01:ac:17:62:35:57:b9:b4:b9:04:03:ea:ca:b3:3f: e3:a4:d8:ff:d1:5c:f3:4f:a5:66:54:f5:8b:bf:d0:6e:3a:48: df:0f:2f:16:30:11:cc:e0:38:ef:92:81:bd:73:63:be:36:e5: 9d:da:22:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dQzZd9J5coOSGXIANjxjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZTAyMTRjNjA5YzZjZDY3ODAzYWM3YzczNmVmOGRhNTE3 Y2E1OWQwHhcNMjYwMTI1MTQwMDQ3WhcNMjYwMTI2MTQwMDQ3WjAzMTEwLwYDVQQD EygzZjc5OGI5MGY2OWNkNDkxN2I1YjAyZTJhZDNhZDA0Y2IyMDBjNDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0c1UrF0GAWdhMByTcpygRWhFilOX hSSLfmMTb30wmynaNqdclyPj5Xmvuf+WczRi9M19h8mjbOYulod5preAG+YU69px 23spMMDeVlPJiUsPgCrgx2B99U9mOo7GX8FMIYt2UHvAapBZ/CiZw8/hEpdJGSDK 3kU/r9Stm9veXmfT2bnwO5XC4uYl9DSU9b6GSJgq00uuoTS5G75z4RM3xJ6EbOIh bHk5U8YESNz14Cv8oi4pwwWSuh6+vQ14vgoIDcjT4bTuDc1aK9X1dTcXNY4rnm0O dgxaCmmPGxZLn3RFbMo3mfBpP8gZ50xxJ7BtwB/gDWHRJ11zcfPLyH5omwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD95i5D2nNSRe1sC4q060EyyAMSaMB8GA1UdIwQY MBaAFD7gIUxgnGzWeAOsfHNu+NpRfKWdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHVBaFRHQ2NiTlo0QTZ4OGMyNzQybEY4cFowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8yZTZlZTMtODE1OC00NThlLWEwYWMt YWU4MWVkYzZmYmQ3LzEvUHVBaFRHQ2NiTlo0QTZ4OGMyNzQybEY4cFowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS8yZTZlZTMtODE1OC00NThlLWEwYWMtYWU4MWVkYzZmYmQ3 LzEvUHVBaFRHQ2NiTlo0QTZ4OGMyNzQybEY4cFowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASvC9aQoz FO8S1jb9NpbGuKKwmtg3ZcFRSO84IV+gZs3m8X8iJe/O8Ro6rdrIAf6TYBqxq5jo VdS8lr7LE4NM7TN+oiEf1iQ98CWsqeAxRwj9gfatRoZCNK4XkaoeuSswemRgCRFB UftjLKmkaALqje95N89n1DGQGsYB899Rd+oynx85XMZ/OCTNgTkZUmXCPrXQltDA isv+j1B9u+ORFT5Et7qVC613Fn9Z8A2eWcKHZ4eyl4k07Wjxg6P/TuRmgwh9R9tX z/L4AawXYjVXubS5BAPqyrM/46TY/9Fc80+lZlT1i7/QbjpI3w8vFjARzOA475KB vXNjvjblndoiCw== -----END CERTIFICATE-----Generated at Mon Jan 26 00:44:57 2026 by rpki-client