This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft File: pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft (raw, json) Hash identifier: knX6d/ucT2AHCIRE8a5dHoPNIYE0mC6v6XXop44AwV0= Subject key identifier: 98:75:D2:9B:6D:7E:7A:82:4A:99:1A:EB:F6:D0:BE:A6:C9:05:48:32 Authority key identifier: A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4 Certificate issuer: /CN=a647893fb5b348e68a66d55a28f278cbf3931df4 Certificate serial: 019BF4D0BF1A176D7342B5038B024D7499EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft Manifest number: 0BDB Signing time: Sun 25 Jan 2026 11:01:19 +0000 Manifest this update: Sun 25 Jan 2026 11:01:19 +0000 Manifest next update: Mon 26 Jan 2026 11:01:19 +0000 Files and hashes: 1: jbAqNXtEEA5VMmJmYWIDy0wpLeE.roa (hash: heA9ElftnVcEx/Z56cUQXfy2JpdBhi/Gw5ToPa737lc=) 2: pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl (hash: HUleBu3XV5Mz9lj3JodMTN1GkOS7A/WqPbs5/RvnzAU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:bf:1a:17:6d:73:42:b5:03:8b:02:4d:74:99:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a647893fb5b348e68a66d55a28f278cbf3931df4 Validity Not Before: Jan 25 11:01:19 2026 GMT Not After : Jan 26 11:01:19 2026 GMT Subject: CN=9875d29b6d7e7a824a991aebf6d0bea6c9054832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:59:13:f0:ff:8c:1b:22:77:ea:34:cc:e9:cc: c9:e6:e2:93:b0:d5:2c:cf:bb:e8:cd:51:67:75:f1: 56:10:a3:8d:e7:8a:eb:fc:33:e1:f2:9c:e8:67:99: 8d:bc:f8:12:18:b3:f8:38:e3:89:b0:f3:b4:7e:fe: 19:d6:89:3b:80:65:06:80:4b:b9:81:70:6a:60:e7: e7:ce:b8:6a:c4:22:41:39:5c:c9:40:2b:66:2d:7c: ac:74:c8:f2:fe:d5:a4:d9:d7:5b:58:55:60:7b:f6: a9:d3:a1:62:f5:af:d5:13:2f:b1:09:15:84:cf:c8: 99:25:4a:2c:0a:b7:91:6a:ce:79:db:52:13:b9:ab: 33:80:6e:b0:c5:25:48:50:9e:8f:aa:fd:9e:14:bf: 06:80:21:74:0a:ed:c5:ea:b9:a3:4e:44:14:05:19: a5:1d:69:6d:ed:6a:fb:1d:ac:49:5f:cc:1d:07:ea: 9e:08:d5:60:15:f6:74:c8:05:36:e4:f4:10:9b:6b: af:ea:b8:c3:1c:1f:46:72:ff:2f:4a:cb:5a:8f:d8: d2:e2:f0:a5:da:3d:29:9f:03:3a:f2:be:49:68:6f: 18:09:98:e0:29:f3:c3:95:0c:68:76:80:a2:95:19: e9:ed:db:8e:9d:d7:a2:24:3d:18:9c:9b:4f:df:23: 0c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:75:D2:9B:6D:7E:7A:82:4A:99:1A:EB:F6:D0:BE:A6:C9:05:48:32 X509v3 Authority Key Identifier: keyid:A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:1a:08:6a:ec:19:f2:30:bf:86:6e:ae:e8:be:8b:08:20:02: 2b:86:77:93:91:fa:e0:cb:b4:eb:f1:29:3b:9a:66:f3:b4:59: 42:2b:35:01:b7:d2:d5:c9:ff:07:6a:05:68:b2:18:47:57:80: a8:9b:b7:b9:b6:54:0e:c7:f7:f1:e1:e0:e1:d1:6b:45:e7:93: 8b:6a:4a:2e:51:85:13:b9:8f:28:62:83:6a:23:34:8e:e8:84: 2c:86:b0:19:d0:f7:0e:0c:1c:75:78:09:c9:cc:93:ec:6d:a2: 83:b8:69:39:96:3a:b8:7b:a7:ce:96:a3:d2:82:9f:31:31:f5: 67:0f:f5:ca:b0:45:34:41:9b:32:1b:78:1f:67:4e:8c:49:de: 4e:8d:c2:ab:b9:7b:39:8c:70:c4:0d:cb:d3:bd:1b:b5:b1:e6: bd:c4:78:24:2a:04:34:9b:b8:d0:0b:16:94:75:f3:9a:1e:37: 1c:fa:d9:f8:c9:a7:69:dc:13:99:51:63:62:a2:15:ba:b4:c6: 2c:83:9d:9b:ee:a8:d7:a0:9c:6e:ff:51:e0:1c:da:a5:df:00: 77:9c:30:e9:b9:5e:32:3a:99:fb:10:28:89:7a:35:57:24:d2: da:9e:88:f0:de:3a:b7:d4:eb:54:68:74:f6:ea:d6:18:dd:56: fe:27:68:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00L8aF21zQrUDiwJNdJnsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2NDc4OTNmYjViMzQ4ZTY4YTY2ZDU1YTI4ZjI3OGNiZjM5 MzFkZjQwHhcNMjYwMTI1MTEwMTE5WhcNMjYwMTI2MTEwMTE5WjAzMTEwLwYDVQQD Eyg5ODc1ZDI5YjZkN2U3YTgyNGE5OTFhZWJmNmQwYmVhNmM5MDU0ODMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulkT8P+MGyJ36jTM6czJ5uKTsNUs z7vozVFndfFWEKON54rr/DPh8pzoZ5mNvPgSGLP4OOOJsPO0fv4Z1ok7gGUGgEu5 gXBqYOfnzrhqxCJBOVzJQCtmLXysdMjy/tWk2ddbWFVge/ap06Fi9a/VEy+xCRWE z8iZJUosCreRas5521ITuaszgG6wxSVIUJ6Pqv2eFL8GgCF0Cu3F6rmjTkQUBRml HWlt7Wr7HaxJX8wdB+qeCNVgFfZ0yAU25PQQm2uv6rjDHB9Gcv8vSstaj9jS4vCl 2j0pnwM68r5JaG8YCZjgKfPDlQxodoCilRnp7duOndeiJD0YnJtP3yMMUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJh10pttfnqCSpka6/bQvqbJBUgyMB8GA1UdIwQY MBaAFKZHiT+1s0jmimbVWijyeMvzkx30MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGtlSlA3V3pTT2FLWnRWYUtQSjR5X09USGZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9kYThjYjEtMWJmYy00M2ZkLWEwZDIt ZDYyNDQ5NmRkY2M4LzEvcGtlSlA3V3pTT2FLWnRWYUtQSjR5X09USGZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9kYThjYjEtMWJmYy00M2ZkLWEwZDItZDYyNDQ5NmRkY2M4 LzEvcGtlSlA3V3pTT2FLWnRWYUtQSjR5X09USGZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKRoIauwZ 8jC/hm6u6L6LCCACK4Z3k5H64Mu06/EpO5pm87RZQis1AbfS1cn/B2oFaLIYR1eA qJu3ubZUDsf38eHg4dFrReeTi2pKLlGFE7mPKGKDaiM0juiELIawGdD3DgwcdXgJ ycyT7G2ig7hpOZY6uHunzpaj0oKfMTH1Zw/1yrBFNEGbMht4H2dOjEneTo3Cq7l7 OYxwxA3L070btbHmvcR4JCoENJu40AsWlHXzmh43HPrZ+MmnadwTmVFjYqIVurTG LIOdm+6o16Ccbv9R4Bzapd8Ad5ww6bleMjqZ+xAoiXo1VyTS2p6I8N46t9TrVGh0 9urWGN1W/idoQw== -----END CERTIFICATE-----Generated at Sun Jan 25 13:52:26 2026 by rpki-client