This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft File: Pt7grog0cFCIgFBEvnXHQDsdx-I.mft (raw, json) Hash identifier: uWeNynYCVQrx7mkPGtnFmLfLYDLtPMnWTYMF+BwDeaU= Subject key identifier: AC:2A:B4:5B:41:A2:75:4A:97:3F:9E:E2:D7:96:29:8D:B6:76:3F:83 Authority key identifier: 3E:DE:E0:AE:88:34:70:50:88:80:50:44:BE:75:C7:40:3B:1D:C7:E2 Certificate issuer: /CN=3edee0ae8834705088805044be75c7403b1dc7e2 Certificate serial: 019BF6F5C698367E4B254908006A7F297A06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft Manifest number: 147E Signing time: Sun 25 Jan 2026 21:01:00 +0000 Manifest this update: Sun 25 Jan 2026 21:01:00 +0000 Manifest next update: Mon 26 Jan 2026 21:01:00 +0000 Files and hashes: 1: N0lWMYy9L6tUgt5C_ALrdVgjFpM.roa (hash: 3TxHIvizHgvT9zapL1jqZMumyRmsqmWLMCRlhTI/E5A=) 2: Pt7grog0cFCIgFBEvnXHQDsdx-I.crl (hash: PdVz+8VMEnpg4XS9RrBWYVFKy/pajQqFZyOVtV4nkFQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.crl rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:c6:98:36:7e:4b:25:49:08:00:6a:7f:29:7a:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3edee0ae8834705088805044be75c7403b1dc7e2 Validity Not Before: Jan 25 21:01:00 2026 GMT Not After : Jan 26 21:01:00 2026 GMT Subject: CN=ac2ab45b41a2754a973f9ee2d796298db6763f83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:97:5c:91:28:14:bf:09:7d:ab:56:da:79:e0: cd:81:bf:f3:1a:9d:6f:8b:8c:31:dc:a0:05:21:6a: 6d:aa:28:00:ab:fb:41:d2:99:0a:6e:4e:7a:b5:47: 9a:58:d2:13:c5:1b:ca:5d:22:ba:65:a0:84:23:c0: 17:29:b6:6d:3b:56:f1:c3:07:71:22:d4:38:86:9c: df:f8:30:2a:62:98:f4:05:cc:a3:df:e1:ee:c0:78: f6:be:97:a0:ad:0b:af:e6:d3:fd:30:62:d4:e1:fd: 05:c1:bb:99:7c:7e:d1:f8:0e:d2:62:5e:1c:4c:92: 45:70:3f:d2:b9:62:ba:2f:7e:e2:0f:82:03:56:b9: b6:9b:fc:c5:4a:95:a3:96:26:91:a8:e8:59:36:99: 9b:15:d3:a3:e5:f2:06:e7:f3:ed:fb:da:29:c5:45: 76:2f:bf:c3:51:85:98:cc:e2:a4:31:df:c1:ba:b1: 2a:6d:9a:61:25:57:c7:c9:08:05:00:c3:93:e5:ec: b9:ff:7e:5b:a2:ad:e0:a5:69:e5:d8:34:ab:c2:5c: cd:3e:a8:96:72:09:10:1f:87:70:19:05:96:86:eb: 24:24:a3:81:53:90:6a:fd:47:2d:0b:76:5a:e0:f7: 18:fd:73:7d:f0:e1:2c:c6:84:1c:89:0c:35:67:80: 6a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:2A:B4:5B:41:A2:75:4A:97:3F:9E:E2:D7:96:29:8D:B6:76:3F:83 X509v3 Authority Key Identifier: keyid:3E:DE:E0:AE:88:34:70:50:88:80:50:44:BE:75:C7:40:3B:1D:C7:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:e1:c3:39:2c:64:98:57:1f:24:5e:23:6a:cd:32:c1:38:eb: 43:bc:c9:ed:5b:52:f2:cc:f2:5e:5a:ff:66:0f:60:43:a8:94: 40:06:03:00:fb:e5:48:3d:2e:89:b1:e3:00:2c:ea:ec:55:bb: e2:4b:30:be:e6:29:e8:2e:e9:02:22:10:fc:6c:3e:fb:19:26: f6:c1:1c:a2:69:91:a0:16:b3:84:32:5d:80:27:40:33:fc:e5: fb:28:de:60:87:3b:fb:d2:05:55:1a:48:21:10:cf:17:54:c1: e2:95:63:33:dc:94:a2:df:f4:91:f7:b7:d6:22:7e:d9:57:e4: d6:6c:6c:c6:bd:0c:b1:f4:fa:68:5b:e4:d8:67:7f:fe:3a:d0: a6:88:50:aa:ef:23:96:f7:7e:89:54:0a:20:20:50:f4:f0:57: 13:59:54:5a:94:23:7d:ed:ed:62:fb:9d:68:f6:37:a0:59:e2: 0e:7b:29:ad:75:d1:ce:46:4e:fe:e3:15:d9:42:96:7c:3d:43: 79:7b:9d:29:e3:41:75:20:c4:3f:bb:18:8a:5c:ab:fb:9b:f1: 28:4c:ef:c0:ad:d6:2f:3f:cd:04:05:1a:ea:1f:2a:2d:a4:96: 1b:74:47:c1:bc:d1:aa:8b:80:b3:b5:e4:ec:4b:f1:a4:87:88: 03:1c:d4:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29caYNn5LJUkIAGp/KXoGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZGVlMGFlODgzNDcwNTA4ODgwNTA0NGJlNzVjNzQwM2Ix ZGM3ZTIwHhcNMjYwMTI1MjEwMTAwWhcNMjYwMTI2MjEwMTAwWjAzMTEwLwYDVQQD EyhhYzJhYjQ1YjQxYTI3NTRhOTczZjllZTJkNzk2Mjk4ZGI2NzYzZjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZdckSgUvwl9q1baeeDNgb/zGp1v i4wx3KAFIWptqigAq/tB0pkKbk56tUeaWNITxRvKXSK6ZaCEI8AXKbZtO1bxwwdx ItQ4hpzf+DAqYpj0Bcyj3+HuwHj2vpegrQuv5tP9MGLU4f0FwbuZfH7R+A7SYl4c TJJFcD/SuWK6L37iD4IDVrm2m/zFSpWjliaRqOhZNpmbFdOj5fIG5/Pt+9opxUV2 L7/DUYWYzOKkMd/BurEqbZphJVfHyQgFAMOT5ey5/35boq3gpWnl2DSrwlzNPqiW cgkQH4dwGQWWhuskJKOBU5Bq/UctC3Za4PcY/XN98OEsxoQciQw1Z4Bq9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKwqtFtBonVKlz+e4teWKY22dj+DMB8GA1UdIwQY MBaAFD7e4K6INHBQiIBQRL51x0A7HcfiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHQ3Z3JvZzBjRkNJZ0ZCRXZuWEhRRHNkeC1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny81MTRjZjQtMTI2Yi00Y2M1LWI0ZDUt NzlhYjQ4ZDgzYmFiLzEvUHQ3Z3JvZzBjRkNJZ0ZCRXZuWEhRRHNkeC1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny81MTRjZjQtMTI2Yi00Y2M1LWI0ZDUtNzlhYjQ4ZDgzYmFi LzEvUHQ3Z3JvZzBjRkNJZ0ZCRXZuWEhRRHNkeC1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQeHDOSxk mFcfJF4jas0ywTjrQ7zJ7VtS8szyXlr/Zg9gQ6iUQAYDAPvlSD0uibHjACzq7FW7 4kswvuYp6C7pAiIQ/Gw++xkm9sEcommRoBazhDJdgCdAM/zl+yjeYIc7+9IFVRpI IRDPF1TB4pVjM9yUot/0kfe31iJ+2Vfk1mxsxr0MsfT6aFvk2Gd//jrQpohQqu8j lvd+iVQKICBQ9PBXE1lUWpQjfe3tYvudaPY3oFniDnsprXXRzkZO/uMV2UKWfD1D eXudKeNBdSDEP7sYilyr+5vxKEzvwK3WLz/NBAUa6h8qLaSWG3RHwbzRqouAs7Xk 7EvxpIeIAxzUgQ== -----END CERTIFICATE-----Generated at Mon Jan 26 01:48:30 2026 by rpki-client