This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft File: pJKfzWHcadzPvgHV_wA1tBrJUmA.mft (raw, json) Hash identifier: jno1yzezD+XnNrAEmQik6n0RFweWwInc14iqbjdXOA4= Subject key identifier: 44:D6:2E:9C:26:03:2F:BC:30:13:78:64:35:84:EC:30:70:38:4E:09 Authority key identifier: A4:92:9F:CD:61:DC:69:DC:CF:BE:01:D5:FF:00:35:B4:1A:C9:52:60 Certificate issuer: /CN=a4929fcd61dc69dccfbe01d5ff0035b41ac95260 Certificate serial: 019BF50731ABA595E3454CF0A2FF7E4577A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft Manifest number: 10FD Signing time: Sun 25 Jan 2026 12:00:47 +0000 Manifest this update: Sun 25 Jan 2026 12:00:47 +0000 Manifest next update: Mon 26 Jan 2026 12:00:47 +0000 Files and hashes: 1: nS0y39FHd_KBicbFUGi66q7vdag.roa (hash: Z3Fr6bAjwL99ER5kh2Zqj12sGL3oFe9ZTzwUUnAJ/DY=) 2: pJKfzWHcadzPvgHV_wA1tBrJUmA.crl (hash: cC7CavTvd6dqtUzs+3+0NN6qk6Q6MSHDBfMG43op7Fg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft rsync://rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:31:ab:a5:95:e3:45:4c:f0:a2:ff:7e:45:77:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4929fcd61dc69dccfbe01d5ff0035b41ac95260 Validity Not Before: Jan 25 12:00:47 2026 GMT Not After : Jan 26 12:00:47 2026 GMT Subject: CN=44d62e9c26032fbc301378643584ec3070384e09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c2:23:78:c9:17:2e:36:79:00:8d:b1:b1:88: 9a:f7:e8:56:8c:c8:3b:43:76:70:78:68:df:e4:0a: 4a:78:ac:ce:6d:82:99:db:04:58:64:ca:01:d8:a8: 65:40:60:ff:c2:7b:0d:79:61:05:e5:43:56:81:7f: 98:39:ac:55:0a:b5:ed:a1:58:0e:96:d3:04:b7:e8: 4e:f0:00:54:b1:1f:2b:2d:2b:5e:39:64:b4:8e:8d: 45:86:a1:a2:cc:d0:f7:07:59:6b:c0:73:d5:cd:e2: 77:14:5d:2e:72:ca:9a:19:1b:4c:b8:c6:48:9e:6c: 2b:72:e8:cf:3c:70:7c:15:d5:0d:cd:22:22:6d:ff: a6:26:9c:70:66:ec:8f:c8:6c:ec:7a:cd:35:21:83: 10:89:6c:38:93:ae:61:0a:b3:40:94:f2:80:1f:07: 8b:47:7b:2c:0e:9c:d6:85:1d:c6:89:43:40:10:5b: 69:bf:a3:89:17:f3:4d:b6:37:d9:dd:e7:e7:9d:51: 48:a2:e7:b7:15:f3:62:f1:4e:13:90:74:d3:9f:39: 6d:50:80:38:2f:a5:35:d9:8c:51:9e:0d:b6:6b:a9: 20:fb:4b:cb:71:57:11:d6:1f:d4:47:b0:4a:ad:1e: e0:36:43:ca:65:1c:a8:bf:6b:f6:c6:f4:ad:a8:00: 5b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:D6:2E:9C:26:03:2F:BC:30:13:78:64:35:84:EC:30:70:38:4E:09 X509v3 Authority Key Identifier: keyid:A4:92:9F:CD:61:DC:69:DC:CF:BE:01:D5:FF:00:35:B4:1A:C9:52:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:c2:af:bf:27:48:fc:eb:9a:06:9e:b5:5b:57:d7:bf:4e:2e: f0:eb:af:6a:b9:c0:ec:aa:aa:5a:62:7b:44:8f:d0:2d:d7:cb: c9:d0:8f:5b:71:f4:3a:32:f5:8e:74:0d:d2:17:19:09:d0:30: 19:66:8e:1e:f5:d6:6b:a8:c1:e4:d6:9b:e6:73:4d:3b:57:51: 7f:5d:54:d0:e5:74:c8:f5:3f:af:cb:58:f9:3a:af:39:96:1e: 48:1a:a4:7a:4d:88:c9:d7:14:18:94:7a:23:4c:66:f5:1e:68: ab:ea:c6:1d:59:3b:41:3f:0a:ec:c1:78:cb:0f:50:24:8d:c3: 2c:cb:0e:44:ee:b8:c7:12:42:41:39:e2:1e:4a:04:33:21:b9: eb:93:84:c9:fe:05:7f:52:08:7f:d8:53:88:f2:81:90:f7:66: 99:81:b0:2b:46:a4:3c:7d:27:d4:15:16:e6:b3:14:62:83:15: 73:54:05:70:86:ba:af:1d:71:c3:33:e6:67:fd:a3:22:ad:0a: 45:18:c6:a3:53:8c:c8:83:27:19:66:79:34:66:aa:c9:0e:55: f3:12:88:c0:c5:6d:df:e5:6a:38:bf:d6:25:dd:f4:eb:64:ae: 3e:71:ec:e5:a5:95:72:f5:03:ed:83:54:1a:c0:b6:e4:2a:6a: 3c:bb:cd:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1BzGrpZXjRUzwov9+RXehMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0OTI5ZmNkNjFkYzY5ZGNjZmJlMDFkNWZmMDAzNWI0MWFj OTUyNjAwHhcNMjYwMTI1MTIwMDQ3WhcNMjYwMTI2MTIwMDQ3WjAzMTEwLwYDVQQD Eyg0NGQ2MmU5YzI2MDMyZmJjMzAxMzc4NjQzNTg0ZWMzMDcwMzg0ZTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sIjeMkXLjZ5AI2xsYia9+hWjMg7 Q3ZweGjf5ApKeKzObYKZ2wRYZMoB2KhlQGD/wnsNeWEF5UNWgX+YOaxVCrXtoVgO ltMEt+hO8ABUsR8rLSteOWS0jo1FhqGizND3B1lrwHPVzeJ3FF0ucsqaGRtMuMZI nmwrcujPPHB8FdUNzSIibf+mJpxwZuyPyGzses01IYMQiWw4k65hCrNAlPKAHweL R3ssDpzWhR3GiUNAEFtpv6OJF/NNtjfZ3efnnVFIoue3FfNi8U4TkHTTnzltUIA4 L6U12YxRng22a6kg+0vLcVcR1h/UR7BKrR7gNkPKZRyov2v2xvStqABbLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFETWLpwmAy+8MBN4ZDWE7DBwOE4JMB8GA1UdIwQY MBaAFKSSn81h3Gncz74B1f8ANbQayVJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEpLZnpXSGNhZHpQdmdIVl93QTF0QnJKVW1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81YTIxMTctZjU4My00NDVkLWI3MmUt ZWJhOWM1Y2IzMmQwLzEvcEpLZnpXSGNhZHpQdmdIVl93QTF0QnJKVW1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy81YTIxMTctZjU4My00NDVkLWI3MmUtZWJhOWM1Y2IzMmQw LzEvcEpLZnpXSGNhZHpQdmdIVl93QTF0QnJKVW1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgcKvvydI /OuaBp61W1fXv04u8OuvarnA7KqqWmJ7RI/QLdfLydCPW3H0OjL1jnQN0hcZCdAw GWaOHvXWa6jB5Nab5nNNO1dRf11U0OV0yPU/r8tY+TqvOZYeSBqkek2IydcUGJR6 I0xm9R5oq+rGHVk7QT8K7MF4yw9QJI3DLMsORO64xxJCQTniHkoEMyG565OEyf4F f1IIf9hTiPKBkPdmmYGwK0akPH0n1BUW5rMUYoMVc1QFcIa6rx1xwzPmZ/2jIq0K RRjGo1OMyIMnGWZ5NGaqyQ5V8xKIwMVt3+VqOL/WJd3062SuPnHs5aWVcvUD7YNU GsC25CpqPLvN0g== -----END CERTIFICATE-----Generated at Sun Jan 25 22:21:49 2026 by rpki-client