This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft File: PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft (raw, json) Hash identifier: YOQHDD5K2iquE9ANiZZiOpv4IMwBFFlAdV90wsNMK0o= Subject key identifier: 99:D5:F4:3E:DE:D1:5C:F6:2D:C8:73:74:C0:8B:D3:0D:19:1E:33:D3 Authority key identifier: 3C:4C:F8:81:77:44:2A:54:F3:21:B8:FA:80:B6:CF:5D:F4:04:CF:F6 Certificate issuer: /CN=3c4cf88177442a54f321b8fa80b6cf5df404cff6 Certificate serial: 019BFA2DBF817D260D246DF9EC0658C4CC92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 12:01:00 +0000 Manifest this update: Mon 26 Jan 2026 12:01:00 +0000 Manifest next update: Tue 27 Jan 2026 12:01:00 +0000 Files and hashes: 1: N-Sz7eb5ejVM1p6qryCc5zRHIbU.roa (hash: YnpBvRTMf+9uMxTp+5UfUvUMx9s/3sJS6dWYTJ+uzTs=) 2: PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl (hash: q2jwHkeeX4hzLnalpwn0ShpWaDTR0kSY7cR9VZy0kq0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2d:bf:81:7d:26:0d:24:6d:f9:ec:06:58:c4:cc:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4cf88177442a54f321b8fa80b6cf5df404cff6 Validity Not Before: Jan 26 12:01:00 2026 GMT Not After : Jan 27 12:01:00 2026 GMT Subject: CN=99d5f43eded15cf62dc87374c08bd30d191e33d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5a:76:74:7c:ed:0a:fc:92:9c:9b:52:7c:22: 83:3b:8f:d5:68:f9:88:6d:b6:bb:e6:95:85:10:0c: 16:1c:67:15:a5:fa:62:48:a6:d5:9e:8e:13:08:e3: 74:46:ef:20:a0:a9:4b:81:63:95:3e:67:12:6c:06: 88:b2:ab:3a:0e:95:86:19:88:ac:08:04:28:4b:e9: 01:74:a3:2d:72:be:61:d5:41:39:c3:e5:d3:60:7f: b1:b2:b4:ba:28:97:c7:4d:a2:60:13:50:84:e1:98: 08:fc:b7:8f:cf:26:af:6b:18:94:b1:b0:ed:bb:2a: 31:ce:67:d4:3e:55:a2:15:90:37:e9:4a:a0:35:62: 9f:a7:d8:36:61:7a:27:92:52:99:84:d7:2b:35:11: 27:aa:44:fa:79:2f:7b:d4:48:18:1a:82:ee:51:0a: 64:7c:99:f0:2d:be:aa:d2:33:e8:47:93:1d:83:18: 0b:f5:e2:3a:60:32:c3:12:e5:f2:e2:f5:f9:17:43: 80:37:ac:09:54:8e:19:8e:7f:c0:71:a4:b1:18:3a: 79:9d:11:fd:ab:82:60:bf:4b:3f:8b:2f:e9:d9:7b: 6b:a3:0a:86:1c:86:e9:1d:5d:d2:db:70:c7:5b:55: c3:7b:ac:9f:53:9a:9a:c1:a6:75:03:85:0c:bd:82: ff:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D5:F4:3E:DE:D1:5C:F6:2D:C8:73:74:C0:8B:D3:0D:19:1E:33:D3 X509v3 Authority Key Identifier: keyid:3C:4C:F8:81:77:44:2A:54:F3:21:B8:FA:80:B6:CF:5D:F4:04:CF:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:c2:da:89:93:53:b5:88:7c:f5:35:c2:ca:e1:19:20:06:49: a6:4f:f4:31:e8:e1:10:4d:df:92:58:9c:69:c1:e1:63:f6:12: 4a:17:77:b8:a4:cb:f4:e0:db:df:aa:8f:8b:4d:b5:ff:47:cf: 6b:49:5b:24:49:9c:b8:57:10:50:6b:97:5a:09:e0:e6:27:cf: 54:22:6f:08:a1:16:7f:fc:9c:d8:b9:c9:c5:c5:8a:de:35:e7: 39:9a:04:6e:ea:2a:8a:93:cd:8e:a4:4c:99:b1:f4:fb:c5:6c: 65:a9:1c:f2:10:eb:51:c1:81:7f:8f:b6:f6:95:cb:6f:81:e2: ef:ed:4f:01:66:37:22:ca:9d:12:94:11:46:dd:15:cb:e8:83: 80:d6:56:33:3f:54:0f:b9:81:4d:ce:ae:bb:27:f7:7c:51:08: 6b:75:37:3d:03:3f:fb:02:24:56:9a:9a:d7:f5:23:e6:cc:d4: 8b:60:38:75:0b:96:83:da:66:3f:e9:a7:98:20:be:21:12:47: e1:ce:e6:39:2e:8b:c8:aa:6a:1b:12:e9:da:b5:24:67:55:cc: cb:4d:86:d7:88:c9:80:b5:e1:52:a1:53:46:a6:80:c8:8e:2e: 16:a8:f6:ae:17:e3:0b:ed:af:a2:3a:29:c4:ec:c2:92:82:61: 1b:bc:99:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6Lb+BfSYNJG357AZYxMySMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjNGNmODgxNzc0NDJhNTRmMzIxYjhmYTgwYjZjZjVkZjQw NGNmZjYwHhcNMjYwMTI2MTIwMTAwWhcNMjYwMTI3MTIwMTAwWjAzMTEwLwYDVQQD Eyg5OWQ1ZjQzZWRlZDE1Y2Y2MmRjODczNzRjMDhiZDMwZDE5MWUzM2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFp2dHztCvySnJtSfCKDO4/VaPmI bba75pWFEAwWHGcVpfpiSKbVno4TCON0Ru8goKlLgWOVPmcSbAaIsqs6DpWGGYis CAQoS+kBdKMtcr5h1UE5w+XTYH+xsrS6KJfHTaJgE1CE4ZgI/LePzyavaxiUsbDt uyoxzmfUPlWiFZA36UqgNWKfp9g2YXonklKZhNcrNREnqkT6eS971EgYGoLuUQpk fJnwLb6q0jPoR5MdgxgL9eI6YDLDEuXy4vX5F0OAN6wJVI4Zjn/AcaSxGDp5nRH9 q4Jgv0s/iy/p2XtrowqGHIbpHV3S23DHW1XDe6yfU5qawaZ1A4UMvYL/KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJnV9D7e0Vz2LchzdMCL0w0ZHjPTMB8GA1UdIwQY MBaAFDxM+IF3RCpU8yG4+oC2z130BM/2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEV6NGdYZEVLbFR6SWJqNmdMYlBYZlFFel9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8zYTQwYzAtMjQ3NS00ODE0LTg1NTkt NzAwZTMwMjdmNjIzLzEvUEV6NGdYZEVLbFR6SWJqNmdMYlBYZlFFel9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS8zYTQwYzAtMjQ3NS00ODE0LTg1NTktNzAwZTMwMjdmNjIz LzEvUEV6NGdYZEVLbFR6SWJqNmdMYlBYZlFFel9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKMLaiZNT tYh89TXCyuEZIAZJpk/0MejhEE3fklicacHhY/YSShd3uKTL9ODb36qPi021/0fP a0lbJEmcuFcQUGuXWgng5ifPVCJvCKEWf/yc2LnJxcWK3jXnOZoEbuoqipPNjqRM mbH0+8VsZakc8hDrUcGBf4+29pXLb4Hi7+1PAWY3IsqdEpQRRt0Vy+iDgNZWMz9U D7mBTc6uuyf3fFEIa3U3PQM/+wIkVpqa1/Uj5szUi2A4dQuWg9pmP+mnmCC+IRJH 4c7mOS6LyKpqGxLp2rUkZ1XMy02G14jJgLXhUqFTRqaAyI4uFqj2rhfjC+2vojop xOzCkoJhG7yZ7A== -----END CERTIFICATE-----Generated at Mon Jan 26 14:26:22 2026 by rpki-client