This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft File: pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft (raw, json) Hash identifier: jXFLy7Ghbjppknrwa0z3xjbklnh8WP55o5hwZEO0++A= Subject key identifier: 91:86:5F:4D:FC:40:B0:86:F2:33:13:E8:9B:09:80:B1:99:6E:60:16 Authority key identifier: A6:0E:46:D6:3A:71:83:F7:0D:A4:92:F0:2B:80:98:C2:BF:FC:28:BE Certificate issuer: /CN=a60e46d63a7183f70da492f02b8098c2bffc28be Certificate serial: 019BF499695AD50379DB0272404C97677E34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft Manifest number: 0E35 Signing time: Sun 25 Jan 2026 10:00:53 +0000 Manifest this update: Sun 25 Jan 2026 10:00:53 +0000 Manifest next update: Mon 26 Jan 2026 10:00:53 +0000 Files and hashes: 1: NyYE3UHHBaBD3ue76kpyUryE20o.roa (hash: FScu0FQsDxlcDVgtQ7BPeCNgRoM/ijvtnVWyLkhXy8k=) 2: PAX6Nj0vLW8qBLqlfqAOyETsCg8.roa (hash: DHoLARGZOB2XURSgRaiKkNOzlOwLsIfl2+CfGPfPwfU=) 3: pg5G1jpxg_cNpJLwK4CYwr_8KL4.crl (hash: MTb5V0Yl7No1Or52dk9VrNOgFdTXYLuzuEaiMqV2u6A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:99:69:5a:d5:03:79:db:02:72:40:4c:97:67:7e:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a60e46d63a7183f70da492f02b8098c2bffc28be Validity Not Before: Jan 25 10:00:53 2026 GMT Not After : Jan 26 10:00:53 2026 GMT Subject: CN=91865f4dfc40b086f23313e89b0980b1996e6016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:c8:21:81:e1:a6:a1:77:e2:08:3c:af:bf:1c: 29:86:96:b5:0f:f0:93:98:62:63:38:fd:8d:7d:96: 67:be:4b:2b:f6:b9:0d:02:41:9f:32:15:4c:7e:34: e5:d7:1b:cb:0d:ac:cd:a8:a1:08:1b:0b:59:e4:fd: b4:54:06:36:f5:f7:ff:23:5c:e4:fb:97:df:53:86: 32:0c:af:7d:3a:b9:90:80:13:91:ad:ec:fa:5e:14: 3e:e1:a0:72:69:5c:36:34:58:4f:23:1f:b0:36:16: 5f:dd:1d:27:16:00:4c:b2:f4:9c:0a:ad:ab:ef:dd: 4c:82:2b:7a:8a:b2:56:c7:64:ee:ee:34:f9:00:3b: 8f:5e:42:08:04:50:82:f4:61:25:07:07:08:88:a9: cf:11:b1:21:6a:35:79:3d:f1:f0:08:a0:da:e3:f4: 5f:e6:61:a0:7b:bb:e7:8e:cc:be:81:2e:69:ad:de: a9:aa:1a:16:8f:f5:28:37:c9:f8:1a:07:a8:78:ca: b1:f4:da:7e:b5:c0:6c:b4:88:8e:58:6e:49:ce:71: 27:61:de:0f:20:8b:1f:a6:69:96:ca:09:53:9d:c5: d5:0f:cf:e0:74:97:d0:55:d6:11:18:c6:a0:13:56: 4c:9a:9e:52:1b:a7:c8:18:03:61:4b:e4:4b:3f:30: 5a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:86:5F:4D:FC:40:B0:86:F2:33:13:E8:9B:09:80:B1:99:6E:60:16 X509v3 Authority Key Identifier: keyid:A6:0E:46:D6:3A:71:83:F7:0D:A4:92:F0:2B:80:98:C2:BF:FC:28:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:c1:c4:7d:26:27:c1:e8:03:fb:9d:86:20:67:eb:11:d2:83: 99:22:d5:65:ed:5a:3a:03:17:71:76:de:fb:cd:90:57:a3:f6: 1e:97:6a:83:57:fa:4b:50:5f:c8:b9:51:cd:68:5b:28:b5:5d: 9e:37:2a:fa:35:c1:af:94:2c:90:f9:16:b8:19:d7:54:df:6a: 7e:7a:47:f5:ef:60:00:8d:19:10:3d:fd:14:44:f4:b3:7e:0d: 3c:62:84:77:1a:73:31:1c:a1:32:5b:62:99:f0:48:fd:ca:d2: 95:03:4c:e0:96:00:58:bb:83:c5:2c:0b:8a:4b:36:84:c0:d4: cc:b5:1b:f9:78:ee:0a:40:32:3e:ef:5b:b8:6b:95:b8:0f:27: d5:bc:82:b8:8a:22:fe:bb:c5:95:1c:98:11:ed:59:78:7c:52: ee:35:fc:7b:fe:57:8c:2e:4a:d3:38:3b:46:1a:1e:cb:f8:3c: 7b:7a:58:26:c2:6b:0d:fd:fb:cb:b2:89:ae:d8:c3:be:2a:0e: 76:79:67:2e:4d:5d:16:53:60:69:a6:e4:3c:ef:7b:1c:d6:ca: 8d:cf:fc:2c:32:63:eb:95:e2:77:fe:39:6a:b5:08:88:87:f8: 31:89:7d:f6:bd:80:da:d6:56:07:a8:d4:3e:ea:e4:7b:fc:da: 0b:6f:3f:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0mWla1QN52wJyQEyXZ340MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MGU0NmQ2M2E3MTgzZjcwZGE0OTJmMDJiODA5OGMyYmZm YzI4YmUwHhcNMjYwMTI1MTAwMDUzWhcNMjYwMTI2MTAwMDUzWjAzMTEwLwYDVQQD Eyg5MTg2NWY0ZGZjNDBiMDg2ZjIzMzEzZTg5YjA5ODBiMTk5NmU2MDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MghgeGmoXfiCDyvvxwphpa1D/CT mGJjOP2NfZZnvksr9rkNAkGfMhVMfjTl1xvLDazNqKEIGwtZ5P20VAY29ff/I1zk +5ffU4YyDK99OrmQgBORrez6XhQ+4aByaVw2NFhPIx+wNhZf3R0nFgBMsvScCq2r 791Mgit6irJWx2Tu7jT5ADuPXkIIBFCC9GElBwcIiKnPEbEhajV5PfHwCKDa4/Rf 5mGge7vnjsy+gS5prd6pqhoWj/UoN8n4GgeoeMqx9Np+tcBstIiOWG5JznEnYd4P IIsfpmmWyglTncXVD8/gdJfQVdYRGMagE1ZMmp5SG6fIGANhS+RLPzBaeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJGGX038QLCG8jMT6JsJgLGZbmAWMB8GA1UdIwQY MBaAFKYORtY6cYP3DaSS8CuAmMK//Ci+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGc1RzFqcHhnX2NOcEpMd0s0Q1l3cl84S0w0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mMGNmYTctNjI1NC00YTgxLTk5NmMt M2I3ZWYyNWNmZTgzLzEvcGc1RzFqcHhnX2NOcEpMd0s0Q1l3cl84S0w0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9mMGNmYTctNjI1NC00YTgxLTk5NmMtM2I3ZWYyNWNmZTgz LzEvcGc1RzFqcHhnX2NOcEpMd0s0Q1l3cl84S0w0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAcHEfSYn wegD+52GIGfrEdKDmSLVZe1aOgMXcXbe+82QV6P2Hpdqg1f6S1BfyLlRzWhbKLVd njcq+jXBr5QskPkWuBnXVN9qfnpH9e9gAI0ZED39FET0s34NPGKEdxpzMRyhMlti mfBI/crSlQNM4JYAWLuDxSwLiks2hMDUzLUb+XjuCkAyPu9buGuVuA8n1byCuIoi /rvFlRyYEe1ZeHxS7jX8e/5XjC5K0zg7Rhoey/g8e3pYJsJrDf37y7KJrtjDvioO dnlnLk1dFlNgaabkPO97HNbKjc/8LDJj65Xid/45arUIiIf4MYl99r2A2tZWB6jU Purke/zaC28/Cw== -----END CERTIFICATE-----Generated at Sun Jan 25 19:15:28 2026 by rpki-client