This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft File: PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft (raw, json) Hash identifier: 2ZGm2f+s9/3i9PqeRIEPjIssqYxg8bvd3pBBxHcUtvM= Subject key identifier: 10:8E:80:60:D6:F2:98:9B:69:92:8E:97:19:0C:48:78:98:59:DC:E3 Authority key identifier: 3E:19:04:83:48:D7:EC:B9:F1:19:10:80:55:5B:F4:45:8A:1A:54:E7 Certificate issuer: /CN=3e19048348d7ecb9f1191080555bf4458a1a54e7 Certificate serial: 019BF4624A9C1626FAB5B54EC7588E0334CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PhkEg0jX7LnxGRCAVVv0RYoaVOc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 09:00:40 +0000 Manifest this update: Sun 25 Jan 2026 09:00:40 +0000 Manifest next update: Mon 26 Jan 2026 09:00:40 +0000 Files and hashes: 1: PhkEg0jX7LnxGRCAVVv0RYoaVOc.crl (hash: XKIzHbNbj1nNkwO6QfGSRaZuA7vLvrfe4n/otEhGmFo=) 2: TAErp0MM5r1w7tsbSJAC4z0-eRw.roa (hash: 5ACRC91wVrH0LaYTctg5PRrelZg/lYtE/E2ynyD9EV8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.crl rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft rsync://rpki.ripe.net/repository/DEFAULT/PhkEg0jX7LnxGRCAVVv0RYoaVOc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:4a:9c:16:26:fa:b5:b5:4e:c7:58:8e:03:34:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e19048348d7ecb9f1191080555bf4458a1a54e7 Validity Not Before: Jan 25 09:00:40 2026 GMT Not After : Jan 26 09:00:40 2026 GMT Subject: CN=108e8060d6f2989b69928e97190c48789859dce3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9f:b9:4e:3b:b2:f6:6e:22:79:9f:99:c0:d0: f2:d4:41:2b:2c:c1:06:ea:c0:d1:39:48:80:46:c3: 88:d0:74:86:01:55:1a:60:22:54:d9:7b:d2:3a:68: f4:bf:49:c4:54:44:a3:b9:1e:8f:b0:2e:24:8f:1b: fd:46:55:9b:6c:27:cc:78:b7:d3:86:e5:4d:fa:20: 54:1f:3e:ca:79:e5:dd:01:c6:34:e1:86:4a:b6:b1: ff:c1:e4:8c:69:8e:35:25:72:fa:3d:07:10:f9:9a: 57:74:64:eb:fd:92:f0:f7:d4:58:3a:12:c3:1e:da: f0:6c:bc:c1:73:c3:13:2a:ca:f8:34:cd:d1:c9:88: 86:67:8c:5f:a4:60:46:cd:0b:5b:b8:87:dc:73:d6: 58:f4:57:be:2a:77:c1:6a:ed:7e:ec:63:89:58:3a: 51:e0:d7:8e:6b:62:3a:8d:cc:a4:28:2f:23:dc:6a: f5:7b:3b:62:cc:db:a4:f8:e5:79:1e:0b:65:86:e6: c7:8e:5c:47:da:46:06:00:3d:bd:f8:2e:75:08:a3: 43:7c:24:22:c1:af:6e:6b:0d:b8:63:3d:20:2d:c6: 7c:8a:9c:a2:62:25:9f:c8:58:9e:9f:1a:6e:83:c8: 09:4d:c5:a3:b6:ec:bf:16:88:6c:99:a7:b8:7c:88: d8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:8E:80:60:D6:F2:98:9B:69:92:8E:97:19:0C:48:78:98:59:DC:E3 X509v3 Authority Key Identifier: keyid:3E:19:04:83:48:D7:EC:B9:F1:19:10:80:55:5B:F4:45:8A:1A:54:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PhkEg0jX7LnxGRCAVVv0RYoaVOc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:53:e2:c5:84:3d:83:09:89:6f:9b:ae:0a:b8:f0:3a:3b:b9: 4f:83:14:96:4f:bc:d6:25:09:59:05:90:cd:03:3d:a6:85:86: 15:8f:4f:eb:e0:c5:0f:4b:e5:c6:fb:f8:9c:82:f1:50:7e:22: be:da:dd:0b:b3:d1:47:ec:b6:77:12:72:1b:09:41:3e:29:97: ff:31:7a:f6:2e:de:2e:73:af:79:f5:4f:6d:29:47:42:2f:07: d1:88:07:9a:19:84:64:8c:86:fd:8f:83:7f:4a:4a:84:ae:94: 3a:45:af:79:33:cc:b1:b4:1b:36:4b:4f:c2:1c:4b:84:1e:2a: c3:ae:28:05:f3:23:9f:af:b7:15:9e:a9:4a:54:f7:e8:b2:71: 18:d6:68:a7:73:db:c6:2d:fe:b7:a5:a4:57:b7:fa:03:8c:56: 80:ed:99:fa:65:66:79:09:ba:54:eb:ed:72:f5:fa:d6:7b:0c: e7:51:b5:cb:e0:10:3b:a8:76:6d:22:69:5b:a7:61:df:6e:cc: 93:11:e3:3b:b7:54:1e:9e:96:60:1d:6b:36:40:68:9d:3e:0b: c3:db:cd:c7:76:c4:51:da:b6:a6:84:7d:51:4c:e2:62:ec:64: 2f:d5:2c:b4:9e:8f:e1:d4:8c:28:e7:2b:62:5b:eb:e6:8f:f8: ba:0c:c1:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YkqcFib6tbVOx1iOAzTPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMTkwNDgzNDhkN2VjYjlmMTE5MTA4MDU1NWJmNDQ1OGEx YTU0ZTcwHhcNMjYwMTI1MDkwMDQwWhcNMjYwMTI2MDkwMDQwWjAzMTEwLwYDVQQD EygxMDhlODA2MGQ2ZjI5ODliNjk5MjhlOTcxOTBjNDg3ODk4NTlkY2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZ+5Tjuy9m4ieZ+ZwNDy1EErLMEG 6sDROUiARsOI0HSGAVUaYCJU2XvSOmj0v0nEVESjuR6PsC4kjxv9RlWbbCfMeLfT huVN+iBUHz7KeeXdAcY04YZKtrH/weSMaY41JXL6PQcQ+ZpXdGTr/ZLw99RYOhLD HtrwbLzBc8MTKsr4NM3RyYiGZ4xfpGBGzQtbuIfcc9ZY9Fe+KnfBau1+7GOJWDpR 4NeOa2I6jcykKC8j3Gr1eztizNuk+OV5HgtlhubHjlxH2kYGAD29+C51CKNDfCQi wa9uaw24Yz0gLcZ8ipyiYiWfyFienxpug8gJTcWjtuy/Fohsmae4fIjYFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBCOgGDW8pibaZKOlxkMSHiYWdzjMB8GA1UdIwQY MBaAFD4ZBINI1+y58RkQgFVb9EWKGlTnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGhrRWcwalg3TG54R1JDQVZWdjBSWW9hVk9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9hZjI2MmMtZTJjZC00ODQxLTg1MGYt MDJmMzVhZDg3N2YzLzEvUGhrRWcwalg3TG54R1JDQVZWdjBSWW9hVk9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9hZjI2MmMtZTJjZC00ODQxLTg1MGYtMDJmMzVhZDg3N2Yz LzEvUGhrRWcwalg3TG54R1JDQVZWdjBSWW9hVk9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP1PixYQ9 gwmJb5uuCrjwOju5T4MUlk+81iUJWQWQzQM9poWGFY9P6+DFD0vlxvv4nILxUH4i vtrdC7PRR+y2dxJyGwlBPimX/zF69i7eLnOvefVPbSlHQi8H0YgHmhmEZIyG/Y+D f0pKhK6UOkWveTPMsbQbNktPwhxLhB4qw64oBfMjn6+3FZ6pSlT36LJxGNZop3Pb xi3+t6WkV7f6A4xWgO2Z+mVmeQm6VOvtcvX61nsM51G1y+AQO6h2bSJpW6dh327M kxHjO7dUHp6WYB1rNkBonT4Lw9vNx3bEUdq2poR9UUziYuxkL9UstJ6P4dSMKOcr Ylvr5o/4ugzBwA== -----END CERTIFICATE-----Generated at Sun Jan 25 16:45:05 2026 by rpki-client