This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft File: PwKJr_qvCA4lJxjj9Eidop2fpVo.mft (raw, json) Hash identifier: yNcE/I9Ee2oV2w7A+MFhCpd1wmq39vb6eIXFoSi2+to= Subject key identifier: 74:CD:69:2A:2A:8F:AA:34:A8:1B:10:ED:A2:0D:8B:28:AB:F3:06:23 Authority key identifier: 3F:02:89:AF:FA:AF:08:0E:25:27:18:E3:F4:48:9D:A2:9D:9F:A5:5A Certificate issuer: /CN=3f0289affaaf080e252718e3f4489da29d9fa55a Certificate serial: 019BF350B3CD4CAB5CBA48E3232D22A97744 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 04:01:50 +0000 Manifest this update: Sun 25 Jan 2026 04:01:50 +0000 Manifest next update: Mon 26 Jan 2026 04:01:50 +0000 Files and hashes: 1: PwKJr_qvCA4lJxjj9Eidop2fpVo.crl (hash: h5xZli222fqx5L1Y3DZF+HKKxR1NMyUHMRDmPmJF4J8=) 2: epbrSMH-SUdz881xHjrFWBLUM0I.roa (hash: DemzvWRRUYGCK/bGtJiqPfkLK7W/2Q2RB2aeNbl55xw=) 3: fxKKOFmvR7tWz8KnpWFVu5Gljsc.roa (hash: n8tLo/IEZsMPbxqYthr4yxthEmDMzlRhSAVZKwtGCLw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.crl rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:50:b3:cd:4c:ab:5c:ba:48:e3:23:2d:22:a9:77:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f0289affaaf080e252718e3f4489da29d9fa55a Validity Not Before: Jan 25 04:01:50 2026 GMT Not After : Jan 26 04:01:50 2026 GMT Subject: CN=74cd692a2a8faa34a81b10eda20d8b28abf30623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6f:ec:5e:12:0b:09:7f:98:d0:53:bf:ab:1e: ac:df:aa:a8:36:14:fd:fc:94:fe:71:96:e7:db:3f: d5:70:33:e2:c7:bc:4a:42:5d:1e:88:d3:12:bf:8b: 76:81:4b:54:3e:06:46:16:d8:e7:b1:b5:18:75:d9: 8c:8d:f9:99:6f:13:4c:c0:cb:e9:e7:f5:28:2e:73: d6:15:08:8e:bf:13:a3:14:28:d9:28:72:93:09:d0: bd:43:dd:b9:9c:1b:13:78:32:30:48:9d:07:58:c7: b1:fb:f2:9a:01:59:e0:9b:06:38:d7:64:df:ed:d8: 5b:7e:7a:cd:7b:e5:25:a3:9b:a4:c2:13:a3:bf:bd: e4:07:23:a0:98:20:64:75:8f:58:bd:fd:dc:26:07: d0:9e:7c:ac:7b:e1:67:ac:b0:8f:02:b8:dd:6c:f0: e0:e3:6f:56:29:a1:5e:af:97:80:21:07:3f:95:83: 87:dc:ff:67:45:1e:a5:28:ce:0c:97:55:94:62:4d: 1d:6b:e2:40:7d:a4:b7:4b:d7:d9:90:a8:fd:0f:54: 37:84:4d:9f:9d:cf:c5:8f:f9:fb:27:53:a0:e7:e8: 17:99:2f:f6:fb:b0:60:f4:6b:60:46:94:5c:ce:f1: 54:3f:d2:c7:f3:7d:92:fa:36:2a:c1:ae:b6:ac:fb: 22:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:CD:69:2A:2A:8F:AA:34:A8:1B:10:ED:A2:0D:8B:28:AB:F3:06:23 X509v3 Authority Key Identifier: keyid:3F:02:89:AF:FA:AF:08:0E:25:27:18:E3:F4:48:9D:A2:9D:9F:A5:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:63:26:a7:e8:a7:3e:d1:57:4d:19:32:95:db:9f:fc:67:81: 89:c3:3d:36:51:19:a2:f5:2f:de:ff:96:a1:7f:6e:6a:8a:f9: 94:15:87:90:07:c0:60:59:a4:2f:7e:f9:67:84:59:1a:c7:6e: 7f:8c:56:8a:b6:db:bb:b9:5e:d2:0e:12:99:de:c9:14:ed:7c: 65:5d:3d:39:a4:e7:b7:bf:6c:40:6e:dd:f5:ea:8c:c6:c3:0d: aa:3e:28:74:11:3a:2b:c4:45:1a:c7:4d:66:64:0b:ee:d1:6c: 42:9d:79:d4:3a:54:d2:c9:3f:b3:ce:00:f9:25:75:9c:d2:d6: 57:31:33:83:34:42:a6:c8:48:86:99:e9:ee:c6:4c:24:28:f7: 16:7a:87:ba:8e:d7:23:c4:4a:ad:ef:f7:9d:9b:84:f0:7e:08: 69:52:b3:0c:a3:8b:d0:85:37:7a:84:8b:07:b8:3e:de:07:e1: 48:62:f8:57:65:c3:77:1a:39:18:e0:54:41:45:a4:34:b0:b4: a5:6c:c8:77:5e:b9:2e:ab:6d:52:f0:fd:f3:b4:e6:1c:47:7e: ca:e5:18:07:e2:2b:1d:1e:3d:34:29:74:36:e7:b3:98:d4:0c: 75:7f:9c:fc:12:ee:70:9e:1d:11:81:d3:8d:7e:3d:a8:e4:3d: 84:ad:fa:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzULPNTKtcukjjIy0iqXdEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmMDI4OWFmZmFhZjA4MGUyNTI3MThlM2Y0NDg5ZGEyOWQ5 ZmE1NWEwHhcNMjYwMTI1MDQwMTUwWhcNMjYwMTI2MDQwMTUwWjAzMTEwLwYDVQQD Eyg3NGNkNjkyYTJhOGZhYTM0YTgxYjEwZWRhMjBkOGIyOGFiZjMwNjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxm/sXhILCX+Y0FO/qx6s36qoNhT9 /JT+cZbn2z/VcDPix7xKQl0eiNMSv4t2gUtUPgZGFtjnsbUYddmMjfmZbxNMwMvp 5/UoLnPWFQiOvxOjFCjZKHKTCdC9Q925nBsTeDIwSJ0HWMex+/KaAVngmwY412Tf 7dhbfnrNe+Ulo5ukwhOjv73kByOgmCBkdY9Yvf3cJgfQnnyse+FnrLCPArjdbPDg 429WKaFer5eAIQc/lYOH3P9nRR6lKM4Ml1WUYk0da+JAfaS3S9fZkKj9D1Q3hE2f nc/Fj/n7J1Og5+gXmS/2+7Bg9GtgRpRczvFUP9LH832S+jYqwa62rPsi9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHTNaSoqj6o0qBsQ7aINiyir8wYjMB8GA1UdIwQY MBaAFD8Cia/6rwgOJScY4/RInaKdn6VaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHdLSnJfcXZDQTRsSnhqajlFaWRvcDJmcFZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85ZmNjY2YtZTdhYS00YzQ0LTk1OTAt MWNmMGZlYWFhM2VhLzEvUHdLSnJfcXZDQTRsSnhqajlFaWRvcDJmcFZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni85ZmNjY2YtZTdhYS00YzQ0LTk1OTAtMWNmMGZlYWFhM2Vh LzEvUHdLSnJfcXZDQTRsSnhqajlFaWRvcDJmcFZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv2Mmp+in PtFXTRkylduf/GeBicM9NlEZovUv3v+WoX9uaor5lBWHkAfAYFmkL375Z4RZGsdu f4xWirbbu7le0g4Smd7JFO18ZV09OaTnt79sQG7d9eqMxsMNqj4odBE6K8RFGsdN ZmQL7tFsQp151DpU0sk/s84A+SV1nNLWVzEzgzRCpshIhpnp7sZMJCj3FnqHuo7X I8RKre/3nZuE8H4IaVKzDKOL0IU3eoSLB7g+3gfhSGL4V2XDdxo5GOBUQUWkNLC0 pWzId165LqttUvD987TmHEd+yuUYB+IrHR49NCl0NuezmNQMdX+c/BLucJ4dEYHT jX49qOQ9hK36sw== -----END CERTIFICATE-----Generated at Sun Jan 25 10:41:48 2026 by rpki-client