This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft File: PnXUne0gVmynRcKPgM_ZqS9LfUc.mft (raw, json) Hash identifier: CxCfoiwnDCaHYnC2CE2T1EGHuJYQNtQbBVvbDoSf6K0= Subject key identifier: BA:06:66:10:33:99:DA:42:50:F3:DA:3B:8C:51:F1:31:EE:1E:D2:12 Authority key identifier: 3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47 Certificate issuer: /CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47 Certificate serial: 019BF5E2FDA0C73EAF181796C4A5E91C4803 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft Manifest number: 17EB Signing time: Sun 25 Jan 2026 16:00:52 +0000 Manifest this update: Sun 25 Jan 2026 16:00:52 +0000 Manifest next update: Mon 26 Jan 2026 16:00:52 +0000 Files and hashes: 1: DaMOJU-jBrrr4RoMTTYusmitb4Y.roa (hash: JaWn7XzXCxX7Vb9+fDuk+/iiSPUdUFQByfCjt0a4ezU=) 2: Gzc5BxD8yLe_aSYEhdH7qxC53Bk.roa (hash: K0PmYBi2jbuDcvq/ABfyge5LDH1NQzitSjirHjoyzGI=) 3: PnXUne0gVmynRcKPgM_ZqS9LfUc.crl (hash: gdp8ixZ4GRUkhMG/nbKuxV5OFph4CSAqNeYRyMdFAr8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e2:fd:a0:c7:3e:af:18:17:96:c4:a5:e9:1c:48:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47 Validity Not Before: Jan 25 16:00:52 2026 GMT Not After : Jan 26 16:00:52 2026 GMT Subject: CN=ba0666103399da4250f3da3b8c51f131ee1ed212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:51:7c:41:22:f9:4a:f4:2c:0b:b4:e6:1b:45: 23:bc:70:ed:51:04:83:4f:a1:da:b1:01:d2:8a:b8: dc:62:59:45:bb:49:2e:fa:35:c5:e4:c6:eb:ad:dc: be:76:bb:b6:e6:89:c9:de:a6:43:2e:f3:17:a4:3a: eb:7f:33:1d:65:c2:d9:03:b1:7b:56:35:62:3b:b8: 6f:14:f4:70:bc:09:97:93:c5:e1:db:72:51:4d:13: 73:c2:bc:53:8b:50:5d:2a:3e:f0:0a:5f:27:42:ee: aa:27:9b:e4:73:d3:d2:c0:c4:81:44:c4:f4:d5:ad: 6f:6d:07:a1:c1:21:31:d3:9c:03:e8:ed:ea:99:11: c0:a6:9d:c6:f4:30:d5:28:43:d1:3d:04:99:1d:28: d5:c0:5d:2a:65:30:4e:a2:59:a0:17:a7:6e:ce:ce: 51:20:cb:ab:27:2d:13:c1:9f:a2:3a:7e:f6:be:58: 99:64:a5:7e:a5:5f:30:1a:6c:e5:82:19:3b:c0:af: b4:47:a2:f7:0e:d2:00:10:34:b3:f6:6b:66:c6:7c: 6f:a1:cb:f5:c6:08:be:26:89:07:12:42:ce:2d:d1: 10:b3:7b:e1:92:38:7f:09:c4:b9:96:d6:a2:dd:70: 89:9b:27:bf:35:3b:84:10:bd:1c:aa:3a:17:92:5b: e6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:06:66:10:33:99:DA:42:50:F3:DA:3B:8C:51:F1:31:EE:1E:D2:12 X509v3 Authority Key Identifier: keyid:3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e6:a3:2e:ed:ef:80:99:f2:8a:0c:38:ce:76:3d:ab:7c:b8:eb: a9:1a:9f:a3:67:70:ca:d7:fc:16:fe:a2:f6:fe:86:a6:8e:f2: bf:8e:2f:2e:40:1c:27:47:e7:a9:00:fd:fd:b7:8a:7f:01:cd: ae:14:a7:ee:52:5f:a9:2b:87:d5:62:9e:c7:23:62:18:36:b1: 68:ff:1c:9e:ea:d7:18:1b:49:d2:46:6e:1b:35:52:8d:b0:6c: 6b:ee:ee:7c:5f:54:99:7f:43:40:2f:4e:1b:a3:1d:92:06:17: 2e:9e:df:e8:3f:39:8d:5c:3c:89:ed:99:59:1d:4e:d2:2c:01: a7:a6:9d:db:2a:f5:2d:21:b9:58:b4:f5:fd:cb:71:ed:4c:56: 91:7d:fa:19:39:30:20:aa:48:f4:62:cb:1e:d3:e2:90:6f:c7: a8:a0:fa:01:d3:54:ea:95:45:67:61:1a:67:d1:48:81:4a:e4: fa:16:14:db:1c:6e:92:1c:a2:09:42:0e:8f:4d:53:2f:32:22: 40:c4:ca:45:52:3b:58:8c:8e:18:a5:84:f2:84:0d:81:ec:53: 43:74:8d:bb:ec:84:7a:67:d5:91:47:4a:46:b0:e3:78:4c:b9: 1b:b3:bd:71:ec:ae:91:75:e7:48:ca:ec:01:0d:c3:55:46:b2: 4e:4c:1f:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv14v2gxz6vGBeWxKXpHEgDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNzVkNDlkZWQyMDU2NmNhNzQ1YzI4ZjgwY2ZkOWE5MmY0 YjdkNDcwHhcNMjYwMTI1MTYwMDUyWhcNMjYwMTI2MTYwMDUyWjAzMTEwLwYDVQQD EyhiYTA2NjYxMDMzOTlkYTQyNTBmM2RhM2I4YzUxZjEzMWVlMWVkMjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1F8QSL5SvQsC7TmG0UjvHDtUQSD T6HasQHSirjcYllFu0ku+jXF5Mbrrdy+dru25onJ3qZDLvMXpDrrfzMdZcLZA7F7 VjViO7hvFPRwvAmXk8Xh23JRTRNzwrxTi1BdKj7wCl8nQu6qJ5vkc9PSwMSBRMT0 1a1vbQehwSEx05wD6O3qmRHApp3G9DDVKEPRPQSZHSjVwF0qZTBOolmgF6duzs5R IMurJy0TwZ+iOn72vliZZKV+pV8wGmzlghk7wK+0R6L3DtIAEDSz9mtmxnxvocv1 xgi+JokHEkLOLdEQs3vhkjh/CcS5ltai3XCJmye/NTuEEL0cqjoXklvmSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLoGZhAzmdpCUPPaO4xR8THuHtISMB8GA1UdIwQY MBaAFD511J3tIFZsp0XCj4DP2akvS31HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG5YVW5lMGdWbXluUmNLUGdNX1pxUzlMZlVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8xYzE1YTItZDBlYy00YzNhLTg2Y2Qt ODM2Mzg0NzVkOGFiLzEvUG5YVW5lMGdWbXluUmNLUGdNX1pxUzlMZlVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8xYzE1YTItZDBlYy00YzNhLTg2Y2QtODM2Mzg0NzVkOGFi LzEvUG5YVW5lMGdWbXluUmNLUGdNX1pxUzlMZlVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5qMu7e+A mfKKDDjOdj2rfLjrqRqfo2dwytf8Fv6i9v6Gpo7yv44vLkAcJ0fnqQD9/beKfwHN rhSn7lJfqSuH1WKexyNiGDaxaP8cnurXGBtJ0kZuGzVSjbBsa+7ufF9UmX9DQC9O G6MdkgYXLp7f6D85jVw8ie2ZWR1O0iwBp6ad2yr1LSG5WLT1/ctx7UxWkX36GTkw IKpI9GLLHtPikG/HqKD6AdNU6pVFZ2EaZ9FIgUrk+hYU2xxukhyiCUIOj01TLzIi QMTKRVI7WIyOGKWE8oQNgexTQ3SNu+yEemfVkUdKRrDjeEy5G7O9ceyukXXnSMrs AQ3DVUayTkwfUA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:33:35 2026 by rpki-client