This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft File: PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft (raw, json) Hash identifier: /e1+0qGY5lRl4WP6QQwxbOb7hC1hsnfFKC43tZFmyWM= Subject key identifier: 73:B3:2C:8F:38:A5:C5:10:C3:DA:E9:5D:5E:A0:47:99:20:B4:83:09 Authority key identifier: 3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35 Certificate issuer: /CN=3cc94ff479778651a605121f1ffe678196328f35 Certificate serial: 019BF8E3D59E636D9ED3A1A3D10526378F33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft Manifest number: 17EB Signing time: Mon 26 Jan 2026 06:00:39 +0000 Manifest this update: Mon 26 Jan 2026 06:00:39 +0000 Manifest next update: Tue 27 Jan 2026 06:00:39 +0000 Files and hashes: 1: 5ApvAMni12n_Tl97hQfErFu1d6c.roa (hash: CMR/4LXkDxQdsem1khNHlRD0gmxgV2kLwB9hrxJKQb0=) 2: PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl (hash: Nb9fJGj9MA7byfvmtdXHEKwi4CKLmIV3GiVXpr+OdpY=) 3: XuBRU-qTaIe3iIMhEcyOCN_o1WE.roa (hash: aMfF2+emhhqGrwHfGQBas1ojIcyc28sSmp2XmBjy3No=) 4: kq8a46tLEeqaFqiTieRfOg3LWKo.roa (hash: qYlRFmIgG79GEajldFvoiEkS/VYV56G5bugYQU8ZN5o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:e3:d5:9e:63:6d:9e:d3:a1:a3:d1:05:26:37:8f:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cc94ff479778651a605121f1ffe678196328f35 Validity Not Before: Jan 26 06:00:39 2026 GMT Not After : Jan 27 06:00:39 2026 GMT Subject: CN=73b32c8f38a5c510c3dae95d5ea0479920b48309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f5:25:a0:aa:a7:5f:21:01:cd:f8:de:2e:7f: 4d:df:c7:dc:3f:43:4a:93:82:d6:10:8d:fa:61:ba: b6:43:b5:52:3e:d2:70:1e:85:03:20:a0:11:57:58: 8c:a7:ab:65:dd:a6:36:7b:74:ab:54:ce:3c:75:09: 15:91:1f:ad:c7:16:69:2d:12:1a:13:13:38:f4:16: cf:60:68:d6:3e:dd:62:2d:e8:b4:dd:bb:a5:bb:18: 57:4f:f5:b8:87:f6:e9:4d:be:8c:fe:66:2a:b6:6f: f1:3e:b0:8e:64:39:77:a2:94:01:75:13:bb:e6:05: 7e:32:13:c1:97:f7:0e:d4:8c:f2:82:b2:89:a5:0e: 97:43:60:9c:25:f1:4f:0c:d5:fa:e9:b7:08:4a:52: bc:5f:0c:0a:c2:86:7f:d4:4f:0a:80:18:bc:cc:2d: 6e:ce:24:aa:39:bf:85:aa:7d:2f:82:87:6b:0c:e6: 45:71:68:dc:79:bd:32:be:5b:b7:e0:82:77:de:48: 7d:08:b9:6e:25:3e:4f:0a:28:5c:2c:39:5c:cc:61: 8c:4b:df:8a:d9:14:4c:d2:ca:b4:4a:ab:23:c9:d9: ec:cb:29:62:09:e7:6d:b7:3b:cb:39:f6:0f:6c:ab: 50:6f:3b:e5:bd:b6:eb:b0:b2:f0:eb:b7:e0:35:75: 18:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:B3:2C:8F:38:A5:C5:10:C3:DA:E9:5D:5E:A0:47:99:20:B4:83:09 X509v3 Authority Key Identifier: keyid:3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:f7:4d:9d:d7:4f:2e:18:8c:7b:ec:f4:64:4b:12:84:4f:8d: ec:47:38:15:9e:d2:50:36:37:49:bc:82:29:d3:24:20:d7:25: 8b:8e:a8:0f:2f:d7:b5:5e:6a:e1:fa:50:86:d9:1f:93:11:1a: 8b:ae:a5:22:c9:6e:7b:e1:0d:e5:d2:6f:06:f3:70:a3:54:98: 4c:0f:70:47:5e:4e:10:ca:8a:ec:86:a3:42:38:c6:41:a7:ed: 6b:15:c7:1d:d6:53:18:d3:ed:01:0a:03:41:0a:e4:dc:f1:cd: 37:71:dc:de:83:81:b5:18:c0:d6:6d:90:0b:49:10:54:7c:d4: 0c:68:ff:10:18:26:50:3d:c4:95:a8:df:e4:5f:ff:c1:66:dc: 10:91:51:16:00:22:b4:8c:ae:74:27:bc:af:08:ff:4e:38:70: 68:b9:99:a4:72:a9:b0:cf:65:40:bb:c8:34:c9:79:e2:7b:dc: 23:5a:cc:14:2b:4c:f0:26:67:83:5a:23:e3:70:56:2f:2a:b1: b0:a0:e3:55:98:74:b2:34:36:55:65:a3:75:c9:41:e1:34:2d: 58:35:59:64:c8:8d:80:50:a9:b7:aa:12:73:d9:93:77:02:5d: 46:18:d4:8a:02:85:43:d0:94:81:de:2c:02:c2:b4:d0:a9:87: 2d:cf:56:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv449WeY22e06Gj0QUmN48zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjYzk0ZmY0Nzk3Nzg2NTFhNjA1MTIxZjFmZmU2NzgxOTYz MjhmMzUwHhcNMjYwMTI2MDYwMDM5WhcNMjYwMTI3MDYwMDM5WjAzMTEwLwYDVQQD Eyg3M2IzMmM4ZjM4YTVjNTEwYzNkYWU5NWQ1ZWEwNDc5OTIwYjQ4MzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufUloKqnXyEBzfjeLn9N38fcP0NK k4LWEI36Ybq2Q7VSPtJwHoUDIKARV1iMp6tl3aY2e3SrVM48dQkVkR+txxZpLRIa ExM49BbPYGjWPt1iLei03buluxhXT/W4h/bpTb6M/mYqtm/xPrCOZDl3opQBdRO7 5gV+MhPBl/cO1IzygrKJpQ6XQ2CcJfFPDNX66bcISlK8XwwKwoZ/1E8KgBi8zC1u ziSqOb+Fqn0vgodrDOZFcWjceb0yvlu34IJ33kh9CLluJT5PCihcLDlczGGMS9+K 2RRM0sq0SqsjydnsyyliCedttzvLOfYPbKtQbzvlvbbrsLLw67fgNXUYhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHOzLI84pcUQw9rpXV6gR5kgtIMJMB8GA1UdIwQY MBaAFDzJT/R5d4ZRpgUSHx/+Z4GWMo81MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUE1sUDlIbDNobEdtQlJJZkhfNW5nWll5anpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8xZTYzYjYtMzk1Ni00ZDEyLWIxOWYt NWJlZjY0MjBhMDI4LzEvUE1sUDlIbDNobEdtQlJJZkhfNW5nWll5anpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni8xZTYzYjYtMzk1Ni00ZDEyLWIxOWYtNWJlZjY0MjBhMDI4 LzEvUE1sUDlIbDNobEdtQlJJZkhfNW5nWll5anpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO/dNnddP LhiMe+z0ZEsShE+N7Ec4FZ7SUDY3SbyCKdMkINcli46oDy/XtV5q4fpQhtkfkxEa i66lIslue+EN5dJvBvNwo1SYTA9wR15OEMqK7IajQjjGQaftaxXHHdZTGNPtAQoD QQrk3PHNN3Hc3oOBtRjA1m2QC0kQVHzUDGj/EBgmUD3Elajf5F//wWbcEJFRFgAi tIyudCe8rwj/TjhwaLmZpHKpsM9lQLvINMl54nvcI1rMFCtM8CZng1oj43BWLyqx sKDjVZh0sjQ2VWWjdclB4TQtWDVZZMiNgFCpt6oSc9mTdwJdRhjUigKFQ9CUgd4s AsK00KmHLc9Wgg== -----END CERTIFICATE-----Generated at Mon Jan 26 07:45:22 2026 by rpki-client