This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft File: Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft (raw, json) Hash identifier: IBaHNj5Ew6ipJRCaBWRl0TIe2Ic9BPhY9CcMRf17tzU= Subject key identifier: C9:FD:CE:A4:FD:84:4C:8D:C7:E1:8F:62:64:84:70:6C:72:3A:B4:28 Authority key identifier: 3F:3B:F5:11:77:4B:6E:1D:70:6B:B2:72:7B:3D:31:25:77:5A:91:2F Certificate issuer: /CN=3f3bf511774b6e1d706bb2727b3d3125775a912f Certificate serial: 019BF463250D2F7693E5755FA69A8EDB4D99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft Manifest number: 139E Signing time: Sun 25 Jan 2026 09:01:36 +0000 Manifest this update: Sun 25 Jan 2026 09:01:36 +0000 Manifest next update: Mon 26 Jan 2026 09:01:36 +0000 Files and hashes: 1: Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl (hash: n3uM4aFY7AOiZQk4DkWgeLdEOGozBWQBIuaNKMUcPfQ=) 2: RNcEVKn_YGokJaou-FFvGOIS8ag.roa (hash: +QqLk1UMMwGnBKT5dxNl032oE64z8hg1X5YrO9LqWdo=) 3: jG9EgXRBLGvOBo4GIXCZVUuSt2A.roa (hash: ulV9PXQSp7gV/2hgy8hXiIjeElHgC51tTqI2j2NsiPw=) 4: ry7mAo1iVDE-vQJVtpiChZag52A.roa (hash: /gsQ2B1v3KhCgm7kkq8lHyOWScapaf0eIQ7WAnTVr3Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:63:25:0d:2f:76:93:e5:75:5f:a6:9a:8e:db:4d:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f3bf511774b6e1d706bb2727b3d3125775a912f Validity Not Before: Jan 25 09:01:36 2026 GMT Not After : Jan 26 09:01:36 2026 GMT Subject: CN=c9fdcea4fd844c8dc7e18f626484706c723ab428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:70:a5:b8:f4:dc:66:4d:34:67:21:fa:8c:99: c4:44:cf:97:e1:86:5e:4b:fa:c5:5a:0d:18:c4:d4: 66:5b:14:66:f7:83:df:ea:7c:e5:5c:d2:f4:3c:90: ac:de:8a:38:5c:fb:76:b4:96:5e:ba:91:52:49:88: 0e:75:1a:7c:4e:6f:7f:4d:86:3c:ba:38:e2:6f:3c: c6:ce:9f:c6:44:23:22:1e:5e:e4:4d:48:00:fd:dc: b3:e5:ba:bd:06:fa:8b:1d:d2:85:9f:9b:64:a3:7d: b7:cf:83:03:f9:3d:42:bf:fa:90:63:41:2d:3c:47: 1d:7e:cc:90:da:52:ef:60:4f:eb:9b:3e:0f:31:dc: fb:51:7d:e1:f9:2e:91:55:17:7b:93:51:b0:e2:4d: f6:d5:fa:a1:c1:bf:5f:4e:b9:6f:52:14:8f:0c:7e: 2d:23:a3:0a:8f:72:e5:d4:02:c7:43:e5:db:1b:f5: e1:14:83:e3:7b:98:02:f4:6b:5b:41:1c:d6:5e:99: 08:3c:7f:ea:96:4a:8d:3b:40:7a:c2:ed:1b:ce:8f: ee:46:6a:1a:82:1e:fe:5d:06:52:10:63:53:fc:f6: b1:4e:8d:b7:fe:c0:85:4a:a3:5f:d6:b5:05:e8:ae: 0a:e1:83:b5:11:7d:d2:d7:d1:d6:15:4f:67:11:3b: cc:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:FD:CE:A4:FD:84:4C:8D:C7:E1:8F:62:64:84:70:6C:72:3A:B4:28 X509v3 Authority Key Identifier: keyid:3F:3B:F5:11:77:4B:6E:1D:70:6B:B2:72:7B:3D:31:25:77:5A:91:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:3b:09:8c:69:41:eb:8a:a4:23:02:3e:08:24:ec:ea:75:bb: ae:18:c9:e5:da:45:f7:55:75:bc:27:62:97:fe:d3:f3:54:10: 8f:a5:1d:d3:37:d7:d5:da:70:67:1d:6f:d0:49:ab:ee:72:d6: 11:4d:9c:e9:e9:1b:e5:a8:de:f7:a4:8d:eb:20:c9:b8:c3:fa: 8b:ce:a0:5d:dc:ae:91:1e:d8:c6:ea:c9:fa:fa:47:40:dd:bb: b6:de:1c:7c:59:cd:c4:21:6c:52:70:71:50:ea:e1:a6:71:d4: 3d:03:8c:09:50:e9:76:b1:d0:0c:01:e4:e6:f0:42:5e:40:40: 97:4b:41:34:8a:77:22:44:75:cf:b9:ab:db:4c:de:30:1b:ca: b7:28:f0:fe:5e:d4:d9:3a:7d:7a:b2:1d:13:fa:1e:5f:2d:9e: 08:3f:9e:22:f3:ff:a1:21:79:a3:26:6a:31:77:36:d4:30:82: 3e:0c:d0:7c:11:5e:b4:bd:71:f7:e4:f6:1f:c5:b8:24:24:6c: c8:f4:56:e0:4e:b2:af:e8:d8:e7:0e:1d:00:0d:e5:88:fd:4b: d4:91:89:3e:64:5d:9a:63:98:d8:3a:4d:d4:11:87:16:c2:72: 67:1d:94:90:ac:3a:a4:fc:d0:45:5a:42:dc:2a:2a:f1:b7:4f: eb:fc:1a:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YyUNL3aT5XVfppqO202ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmM2JmNTExNzc0YjZlMWQ3MDZiYjI3MjdiM2QzMTI1Nzc1 YTkxMmYwHhcNMjYwMTI1MDkwMTM2WhcNMjYwMTI2MDkwMTM2WjAzMTEwLwYDVQQD EyhjOWZkY2VhNGZkODQ0YzhkYzdlMThmNjI2NDg0NzA2YzcyM2FiNDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHCluPTcZk00ZyH6jJnERM+X4YZe S/rFWg0YxNRmWxRm94Pf6nzlXNL0PJCs3oo4XPt2tJZeupFSSYgOdRp8Tm9/TYY8 ujjibzzGzp/GRCMiHl7kTUgA/dyz5bq9BvqLHdKFn5tko323z4MD+T1Cv/qQY0Et PEcdfsyQ2lLvYE/rmz4PMdz7UX3h+S6RVRd7k1Gw4k321fqhwb9fTrlvUhSPDH4t I6MKj3Ll1ALHQ+XbG/XhFIPje5gC9GtbQRzWXpkIPH/qlkqNO0B6wu0bzo/uRmoa gh7+XQZSEGNT/PaxTo23/sCFSqNf1rUF6K4K4YO1EX3S19HWFU9nETvMMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMn9zqT9hEyNx+GPYmSEcGxyOrQoMB8GA1UdIwQY MBaAFD879RF3S24dcGuycns9MSV3WpEvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHp2MUVYZExiaDF3YTdKeWV6MHhKWGRha1M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9mNTU3NTctNTk2NS00MjcwLWJlYWIt YTBkNmRiZmFjNmViLzEvUHp2MUVYZExiaDF3YTdKeWV6MHhKWGRha1M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9mNTU3NTctNTk2NS00MjcwLWJlYWItYTBkNmRiZmFjNmVi LzEvUHp2MUVYZExiaDF3YTdKeWV6MHhKWGRha1M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKTsJjGlB 64qkIwI+CCTs6nW7rhjJ5dpF91V1vCdil/7T81QQj6Ud0zfX1dpwZx1v0Emr7nLW EU2c6ekb5aje96SN6yDJuMP6i86gXdyukR7YxurJ+vpHQN27tt4cfFnNxCFsUnBx UOrhpnHUPQOMCVDpdrHQDAHk5vBCXkBAl0tBNIp3IkR1z7mr20zeMBvKtyjw/l7U 2Tp9erIdE/oeXy2eCD+eIvP/oSF5oyZqMXc21DCCPgzQfBFetL1x9+T2H8W4JCRs yPRW4E6yr+jY5w4dAA3liP1L1JGJPmRdmmOY2DpN1BGHFsJyZx2UkKw6pPzQRVpC 3Coq8bdP6/waTA== -----END CERTIFICATE-----Generated at Sun Jan 25 14:46:52 2026 by rpki-client