This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft File: pENNZpHm4nwoLKo3r_kPK8VL8eM.mft (raw, json) Hash identifier: 7aMbeu8s+jYUv80Oc9qP/DSgjguMN6w6kfNnak/cl0k= Subject key identifier: EF:3E:60:CD:90:72:A4:18:76:DB:54:83:BD:0E:F1:41:2B:BC:B3:DB Authority key identifier: A4:43:4D:66:91:E6:E2:7C:28:2C:AA:37:AF:F9:0F:2B:C5:4B:F1:E3 Certificate issuer: /CN=a4434d6691e6e27c282caa37aff90f2bc54bf1e3 Certificate serial: 019BF619D862043C54C592581157D5284296 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 17:00:47 +0000 Manifest this update: Sun 25 Jan 2026 17:00:47 +0000 Manifest next update: Mon 26 Jan 2026 17:00:47 +0000 Files and hashes: 1: WUKnpOuz1YWNzQwgRmnwczp9pEw.roa (hash: 9HAvg6YD7fYg+2tQ0M/R9Qj0qw/VKBUMa2IgqLmrwqg=) 2: pENNZpHm4nwoLKo3r_kPK8VL8eM.crl (hash: uTZa4NACuMSB7zIbRVgkd4s+N/SXSRrxrdYgyk98U3c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.crl rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:d8:62:04:3c:54:c5:92:58:11:57:d5:28:42:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4434d6691e6e27c282caa37aff90f2bc54bf1e3 Validity Not Before: Jan 25 17:00:47 2026 GMT Not After : Jan 26 17:00:47 2026 GMT Subject: CN=ef3e60cd9072a41876db5483bd0ef1412bbcb3db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:13:c8:d1:f4:e2:56:21:c3:5c:0b:29:b4:07: 95:fb:6c:f9:b0:34:96:1a:ab:fc:af:25:f9:e2:9f: f2:bb:d5:f7:7e:eb:2d:1d:db:5a:63:12:e5:b7:9e: 60:33:1f:2e:c6:62:74:8e:b1:c9:4b:41:4d:d0:11: 34:f3:37:66:aa:20:2e:73:05:e3:89:6e:15:0d:3e: d6:25:a1:b7:74:56:9d:d0:97:45:b0:7f:da:c7:77: 82:a3:fe:c8:66:63:34:43:8f:50:b2:5c:5d:6d:34: 45:7b:a2:60:91:60:9d:2f:8a:21:4c:78:4a:7b:9a: e7:9b:71:48:26:a0:46:6c:6d:58:b9:e9:c0:c4:a1: fc:c5:83:d3:65:db:ca:73:2b:e5:c2:53:b6:1e:72: e1:21:d9:c3:22:e5:42:ce:0a:5b:98:d0:2e:e5:cb: a2:7c:2e:d6:87:26:97:99:40:75:0f:09:11:67:a3: 8e:f5:ae:0a:4b:0b:f7:55:c8:a1:00:af:23:2f:7a: 24:ca:d3:e5:06:ab:00:d3:55:47:a0:05:e0:89:a0: 1c:04:d9:b0:a6:9c:91:39:b5:49:10:8f:0b:48:26: 74:7e:9b:32:91:5e:ed:08:58:78:88:8f:89:3e:11: a4:dc:b5:83:4d:55:92:a0:2d:d2:7d:12:44:34:e7: 01:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:3E:60:CD:90:72:A4:18:76:DB:54:83:BD:0E:F1:41:2B:BC:B3:DB X509v3 Authority Key Identifier: keyid:A4:43:4D:66:91:E6:E2:7C:28:2C:AA:37:AF:F9:0F:2B:C5:4B:F1:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:6f:80:bf:30:3a:56:aa:4d:b6:4e:47:0e:36:bd:58:3e:92: 1d:f4:c5:c1:18:b0:82:09:47:bf:4b:57:1f:eb:31:e0:c6:88: 64:4c:c6:bb:40:f1:43:f8:59:2a:d8:4c:1a:6a:68:d8:c7:66: 5c:9a:a3:3c:17:75:a5:e2:93:e5:f4:6e:55:68:9e:7d:12:24: 47:ad:64:79:d4:83:cb:16:67:88:f3:26:d3:a9:66:8e:b6:37: 9c:d8:6b:59:bc:27:9a:8e:ec:b9:3c:3e:87:e3:6e:e5:9e:33: 0b:0c:f0:b6:dd:a4:3c:3d:48:1b:2a:5e:35:47:60:50:c7:54: 14:ee:36:83:69:7a:f0:36:85:7c:90:8c:54:a2:44:df:fe:74: c9:6f:76:c3:db:00:1e:c6:40:fb:7f:22:10:eb:03:a9:98:55: 59:7b:d4:19:0c:b0:a6:3d:7e:73:b7:17:47:f4:9d:83:47:10: 73:21:3d:15:29:57:78:7b:5c:50:71:1f:5b:d8:fa:51:1d:1f: 8a:a6:2f:ff:13:f2:d4:2c:c7:3d:84:62:38:8d:ae:eb:f1:7a: 61:b6:16:fa:29:43:65:17:f2:6a:1d:db:45:87:2c:21:98:e0: 98:ef:4b:2b:63:55:74:db:e1:20:89:05:b9:5b:5a:f2:83:cf: 27:16:51:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GdhiBDxUxZJYEVfVKEKWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0NDM0ZDY2OTFlNmUyN2MyODJjYWEzN2FmZjkwZjJiYzU0 YmYxZTMwHhcNMjYwMTI1MTcwMDQ3WhcNMjYwMTI2MTcwMDQ3WjAzMTEwLwYDVQQD EyhlZjNlNjBjZDkwNzJhNDE4NzZkYjU0ODNiZDBlZjE0MTJiYmNiM2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RPI0fTiViHDXAsptAeV+2z5sDSW Gqv8ryX54p/yu9X3fustHdtaYxLlt55gMx8uxmJ0jrHJS0FN0BE08zdmqiAucwXj iW4VDT7WJaG3dFad0JdFsH/ax3eCo/7IZmM0Q49QslxdbTRFe6JgkWCdL4ohTHhK e5rnm3FIJqBGbG1YuenAxKH8xYPTZdvKcyvlwlO2HnLhIdnDIuVCzgpbmNAu5cui fC7WhyaXmUB1DwkRZ6OO9a4KSwv3VcihAK8jL3okytPlBqsA01VHoAXgiaAcBNmw ppyRObVJEI8LSCZ0fpsykV7tCFh4iI+JPhGk3LWDTVWSoC3SfRJENOcBwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO8+YM2QcqQYdttUg70O8UErvLPbMB8GA1UdIwQY MBaAFKRDTWaR5uJ8KCyqN6/5DyvFS/HjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEVOTlpwSG00bndvTEtvM3Jfa1BLOFZMOGVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny80NWIyZDktZTg2MS00M2VmLWJjYzAt ZTk5NzVhMGJkZWE3LzEvcEVOTlpwSG00bndvTEtvM3Jfa1BLOFZMOGVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny80NWIyZDktZTg2MS00M2VmLWJjYzAtZTk5NzVhMGJkZWE3 LzEvcEVOTlpwSG00bndvTEtvM3Jfa1BLOFZMOGVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIm+AvzA6 VqpNtk5HDja9WD6SHfTFwRiwgglHv0tXH+sx4MaIZEzGu0DxQ/hZKthMGmpo2Mdm XJqjPBd1peKT5fRuVWiefRIkR61kedSDyxZniPMm06lmjrY3nNhrWbwnmo7suTw+ h+Nu5Z4zCwzwtt2kPD1IGypeNUdgUMdUFO42g2l68DaFfJCMVKJE3/50yW92w9sA HsZA+38iEOsDqZhVWXvUGQywpj1+c7cXR/Sdg0cQcyE9FSlXeHtcUHEfW9j6UR0f iqYv/xPy1CzHPYRiOI2u6/F6YbYW+ilDZRfyah3bRYcsIZjgmO9LK2NVdNvhIIkF uVta8oPPJxZR8g== -----END CERTIFICATE-----Generated at Sun Jan 25 20:26:31 2026 by rpki-client