This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.mft File: Pls0eWfOpnu2K2nSWazeS4-elBc.mft (raw, json) Hash identifier: HpG5qfhycW/uMHJsB2UE8iKncnMALFDjsdHsD00WqNc= Subject key identifier: 50:F7:A2:6E:3E:27:C1:86:99:B0:BC:CF:56:DE:CF:7C:D6:03:66:5C Authority key identifier: 3E:5B:34:79:67:CE:A6:7B:B6:2B:69:D2:59:AC:DE:4B:8F:9E:94:17 Certificate issuer: /CN=3e5b347967cea67bb62b69d259acde4b8f9e9417 Certificate serial: 019BF507308064C36D41951D1089C06A6425 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pls0eWfOpnu2K2nSWazeS4-elBc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.mft Manifest number: 0CFF Signing time: Sun 25 Jan 2026 12:00:47 +0000 Manifest this update: Sun 25 Jan 2026 12:00:47 +0000 Manifest next update: Mon 26 Jan 2026 12:00:47 +0000 Files and hashes: 1: C9VfmyBoyBG--3Zr3s8ERPvb0L4.roa (hash: AyN3qqD/8tiCfn+7UUC8E6XJPPe6XPYGtMnnz4+mJrI=) 2: Pls0eWfOpnu2K2nSWazeS4-elBc.crl (hash: yddI6m2lOIvDTHNb0twynQ6Aex7JYXLXkd8eTxv6jok=) 3: piQLCnB2P_Ziu_cu-vigeTnpkCU.asa (hash: cn2oaHr5CFE2Bng3VhPMgV26fdtMuwLaMTiwxHB9DSg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.crl rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.mft rsync://rpki.ripe.net/repository/DEFAULT/Pls0eWfOpnu2K2nSWazeS4-elBc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:30:80:64:c3:6d:41:95:1d:10:89:c0:6a:64:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e5b347967cea67bb62b69d259acde4b8f9e9417 Validity Not Before: Jan 25 12:00:47 2026 GMT Not After : Jan 26 12:00:47 2026 GMT Subject: CN=50f7a26e3e27c18699b0bccf56decf7cd603665c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:3b:db:77:0c:c0:b7:80:8d:17:f8:1a:9d:a3: 66:78:9d:1d:5f:e2:f3:e9:69:1d:ab:43:f3:4b:1a: 26:1d:80:1d:01:37:90:b7:86:74:2b:1b:a4:08:68: 30:82:e3:e5:d0:f4:b2:0a:e1:09:b3:f0:68:17:86: 4f:25:71:9d:2f:91:0a:0a:c4:17:69:d4:c3:b2:db: a8:39:3c:b9:8f:e9:c0:ef:81:ab:d7:84:54:21:42: 75:c0:da:f2:87:88:57:9d:cb:75:12:99:0a:10:48: a8:6a:65:b0:4f:93:21:08:4e:77:52:d9:fd:f9:b5: 5b:90:a8:55:f7:98:cc:82:b3:c1:5a:0f:69:00:d3: 72:90:29:35:c8:96:8f:38:ee:19:63:cb:28:67:f1: a9:93:f8:9d:97:a4:5a:a0:12:7f:f9:59:7c:66:b4: 01:50:ee:0e:7f:d1:b9:d2:a1:97:86:a1:bf:cc:19: af:f1:92:33:59:ef:54:04:a2:e6:7f:47:3c:6f:85: 60:aa:06:71:ef:5d:6b:ae:94:d4:13:1c:db:19:60: 0d:ca:f4:60:cc:ae:8f:0b:95:61:e1:36:fe:27:f4: 10:6a:7b:18:d3:22:a4:fd:49:b1:07:9b:a4:c4:33: e3:61:c8:9b:a8:5a:ae:26:13:9d:40:0a:a8:2f:3d: 45:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:F7:A2:6E:3E:27:C1:86:99:B0:BC:CF:56:DE:CF:7C:D6:03:66:5C X509v3 Authority Key Identifier: keyid:3E:5B:34:79:67:CE:A6:7B:B6:2B:69:D2:59:AC:DE:4B:8F:9E:94:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pls0eWfOpnu2K2nSWazeS4-elBc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:02:a3:c4:54:de:b4:38:74:4f:92:28:aa:f8:b6:31:da:82: 27:63:2d:60:89:1f:50:a0:dd:33:07:cc:cd:02:0b:e3:fa:49: 8f:f6:b8:2c:ed:36:61:bb:8b:98:9e:c1:d8:b6:0d:2e:31:6c: 60:9f:f0:b0:10:2d:4e:22:e2:ad:00:7a:fa:16:9c:d2:74:5a: 53:88:2d:d4:bf:58:39:35:ff:78:86:10:e7:be:a4:53:03:a3: 86:9e:dd:3c:d9:c4:cc:75:00:be:37:6f:f5:6d:8f:89:3f:a3: 8d:9f:3d:7b:1e:a8:54:da:73:64:7b:89:f6:16:9e:19:4b:1e: 1a:1c:ac:74:dc:96:b2:f6:49:a1:18:28:01:04:09:54:11:7c: 8d:e5:38:26:84:53:26:13:81:ce:e2:04:e7:61:de:34:03:c5: 29:cc:0f:fa:79:5f:35:5b:f9:03:92:ff:c2:7c:9d:e8:78:1f: ff:64:35:6f:8e:52:1d:16:85:dc:d7:9f:9b:28:f1:49:92:62: d3:1d:1f:cd:29:f8:22:cd:bc:90:13:62:e9:ea:03:5b:72:c9: de:0b:b4:23:8e:0e:84:4a:e1:f8:eb:af:9c:ab:ff:27:32:41: 40:e0:5e:eb:d1:cc:b4:3d:70:2b:b5:19:d0:da:f5:1d:d5:30: 05:67:77:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1BzCAZMNtQZUdEInAamQlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNWIzNDc5NjdjZWE2N2JiNjJiNjlkMjU5YWNkZTRiOGY5 ZTk0MTcwHhcNMjYwMTI1MTIwMDQ3WhcNMjYwMTI2MTIwMDQ3WjAzMTEwLwYDVQQD Eyg1MGY3YTI2ZTNlMjdjMTg2OTliMGJjY2Y1NmRlY2Y3Y2Q2MDM2NjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzvbdwzAt4CNF/ganaNmeJ0dX+Lz 6Wkdq0PzSxomHYAdATeQt4Z0KxukCGgwguPl0PSyCuEJs/BoF4ZPJXGdL5EKCsQX adTDstuoOTy5j+nA74Gr14RUIUJ1wNryh4hXnct1EpkKEEioamWwT5MhCE53Utn9 +bVbkKhV95jMgrPBWg9pANNykCk1yJaPOO4ZY8soZ/Gpk/idl6RaoBJ/+Vl8ZrQB UO4Of9G50qGXhqG/zBmv8ZIzWe9UBKLmf0c8b4VgqgZx711rrpTUExzbGWANyvRg zK6PC5Vh4Tb+J/QQansY0yKk/UmxB5ukxDPjYcibqFquJhOdQAqoLz1F4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFD3om4+J8GGmbC8z1bez3zWA2ZcMB8GA1UdIwQY MBaAFD5bNHlnzqZ7titp0lms3kuPnpQXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGxzMGVXZk9wbnUySzJuU1dhemVTNC1lbEJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8yNTZkYTctMTlkMC00NTlhLWI1M2Ut OTRlN2QwN2ZiMzFkLzEvUGxzMGVXZk9wbnUySzJuU1dhemVTNC1lbEJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS8yNTZkYTctMTlkMC00NTlhLWI1M2UtOTRlN2QwN2ZiMzFk LzEvUGxzMGVXZk9wbnUySzJuU1dhemVTNC1lbEJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgQKjxFTe tDh0T5Ioqvi2MdqCJ2MtYIkfUKDdMwfMzQIL4/pJj/a4LO02YbuLmJ7B2LYNLjFs YJ/wsBAtTiLirQB6+hac0nRaU4gt1L9YOTX/eIYQ576kUwOjhp7dPNnEzHUAvjdv 9W2PiT+jjZ89ex6oVNpzZHuJ9haeGUseGhysdNyWsvZJoRgoAQQJVBF8jeU4JoRT JhOBzuIE52HeNAPFKcwP+nlfNVv5A5L/wnyd6Hgf/2Q1b45SHRaF3NefmyjxSZJi 0x0fzSn4Is28kBNi6eoDW3LJ3gu0I44OhErh+OuvnKv/JzJBQOBe69HMtD1wK7UZ 0Nr1HdUwBWd3wA== -----END CERTIFICATE-----Generated at Sun Jan 25 20:52:24 2026 by rpki-client