This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft File: PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft (raw, json) Hash identifier: Z+bhqF07NZgkG8c4jLXAz2crSHSeHRY0bDaJrdg2qow= Subject key identifier: A4:41:7F:33:2E:DE:0E:83:97:22:CE:65:CB:B6:5D:98:8D:35:A2:0B Authority key identifier: 3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D Certificate issuer: /CN=3e34b02edc7c2878f94c5104cafa8978afb6752d Certificate serial: 019BF79AE636BD2FF71579125FACD00C132A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft Manifest number: 0A03 Signing time: Mon 26 Jan 2026 00:01:22 +0000 Manifest this update: Mon 26 Jan 2026 00:01:22 +0000 Manifest next update: Tue 27 Jan 2026 00:01:22 +0000 Files and hashes: 1: PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl (hash: 2BYbiYirV4ealjVfx8z9Q6et4Z0oqZgK7cDMnp8AfiA=) 2: gvs0UvHWJjRzgW_Syd97phf7MKo.roa (hash: fexk3vqFl5jqXokxQAei7fGYBfpuoLUr1xwGug2Wu34=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:e6:36:bd:2f:f7:15:79:12:5f:ac:d0:0c:13:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e34b02edc7c2878f94c5104cafa8978afb6752d Validity Not Before: Jan 26 00:01:22 2026 GMT Not After : Jan 27 00:01:22 2026 GMT Subject: CN=a4417f332ede0e839722ce65cbb65d988d35a20b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:bf:fc:20:19:94:fe:ad:df:50:e6:1f:6c:e0: d5:f6:75:cf:d4:6f:15:4c:e8:46:89:fc:cf:d0:1f: 96:17:77:fc:01:65:83:81:f0:70:58:25:1b:ec:52: ad:ee:ca:be:40:5d:b1:a2:74:b3:9f:46:23:90:31: 22:8f:df:93:8d:b1:ab:e1:22:94:c8:f4:7a:8d:8a: ee:b5:79:10:84:21:fe:80:4f:df:49:14:3a:3f:43: c8:1c:16:55:0e:0a:ef:39:aa:04:f2:af:1b:a6:28: 18:10:bf:5e:8f:72:7d:d6:de:af:ab:a6:55:7b:6c: 6f:6f:c6:18:6f:1f:79:17:db:dc:95:6c:8f:85:6f: be:e6:6e:1f:5e:be:35:1f:ce:f2:71:56:81:03:33: c5:56:09:6f:96:43:6e:86:d7:d3:3e:ed:be:76:06: 36:ca:64:1e:8f:db:f5:24:2f:1f:cd:9b:50:01:b2: 1f:1c:c8:07:0d:56:7e:ab:d3:f2:82:15:b6:4b:c3: c0:6b:f5:8e:2b:b9:e2:42:56:dc:d5:33:71:4e:33: f7:43:01:77:c9:3c:ce:d1:58:cd:bf:d5:87:bd:f5: fb:77:41:8f:70:a9:fa:6f:fb:ad:b9:78:11:3c:79: b0:81:3d:55:5d:90:47:e9:76:47:48:56:90:c3:94: 09:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:41:7F:33:2E:DE:0E:83:97:22:CE:65:CB:B6:5D:98:8D:35:A2:0B X509v3 Authority Key Identifier: keyid:3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:63:e9:f3:0c:f6:b4:56:01:27:95:ec:d9:53:68:d5:a6:ed: a8:bf:d7:51:eb:92:be:ab:83:b6:e2:0f:23:5e:12:f1:3d:26: 21:0e:fd:c4:fc:0b:26:72:fc:06:fc:32:5b:d2:e6:94:65:1b: 42:8c:62:15:2e:af:63:30:85:c4:75:26:12:f0:4e:ce:a2:91: dc:2e:e0:6c:8b:16:35:42:13:7f:f6:ee:0b:74:ad:d1:ec:da: 39:90:26:c8:a5:bf:e9:ae:e6:ae:32:c6:17:3e:22:69:24:cf: a7:f5:6d:2c:3f:54:04:fb:f5:a3:4a:a5:83:ee:50:a2:f5:78: aa:7d:04:ac:07:35:72:94:dd:69:a7:2c:d3:38:e0:85:75:e0: 77:09:d7:9d:c9:85:dd:65:84:82:c9:30:d9:e7:cb:aa:c5:1e: 89:bc:48:a4:0d:5b:d4:a2:14:df:39:35:85:7b:c1:67:eb:2e: a2:5a:fb:7f:27:ce:5a:4b:bb:b8:9b:5b:b3:ee:fc:e6:3b:97: 75:f4:f2:dd:12:52:96:25:70:8b:9c:01:8c:12:4f:e0:ee:db: 58:64:11:71:1f:52:4c:83:20:e8:b5:43:58:48:48:48:7d:8a: d1:73:d3:29:78:5e:72:9f:e6:bc:63:83:6c:0d:b7:9f:f2:3a: ea:21:a0:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3muY2vS/3FXkSX6zQDBMqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMzRiMDJlZGM3YzI4NzhmOTRjNTEwNGNhZmE4OTc4YWZi Njc1MmQwHhcNMjYwMTI2MDAwMTIyWhcNMjYwMTI3MDAwMTIyWjAzMTEwLwYDVQQD EyhhNDQxN2YzMzJlZGUwZTgzOTcyMmNlNjVjYmI2NWQ5ODhkMzVhMjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1r/8IBmU/q3fUOYfbODV9nXP1G8V TOhGifzP0B+WF3f8AWWDgfBwWCUb7FKt7sq+QF2xonSzn0YjkDEij9+TjbGr4SKU yPR6jYrutXkQhCH+gE/fSRQ6P0PIHBZVDgrvOaoE8q8bpigYEL9ej3J91t6vq6ZV e2xvb8YYbx95F9vclWyPhW++5m4fXr41H87ycVaBAzPFVglvlkNuhtfTPu2+dgY2 ymQej9v1JC8fzZtQAbIfHMgHDVZ+q9PyghW2S8PAa/WOK7niQlbc1TNxTjP3QwF3 yTzO0VjNv9WHvfX7d0GPcKn6b/utuXgRPHmwgT1VXZBH6XZHSFaQw5QJZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKRBfzMu3g6DlyLOZcu2XZiNNaILMB8GA1UdIwQY MBaAFD40sC7cfCh4+UxRBMr6iXivtnUtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGpTd0x0eDhLSGo1VEZFRXl2cUplSy0yZFMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi80MjI1MmUtMDMyMS00ZGEyLTkyZjQt MzVhMDI0MWE0MzAxLzEvUGpTd0x0eDhLSGo1VEZFRXl2cUplSy0yZFMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi80MjI1MmUtMDMyMS00ZGEyLTkyZjQtMzVhMDI0MWE0MzAx LzEvUGpTd0x0eDhLSGo1VEZFRXl2cUplSy0yZFMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW2Pp8wz2 tFYBJ5Xs2VNo1abtqL/XUeuSvquDtuIPI14S8T0mIQ79xPwLJnL8BvwyW9LmlGUb QoxiFS6vYzCFxHUmEvBOzqKR3C7gbIsWNUITf/buC3St0ezaOZAmyKW/6a7mrjLG Fz4iaSTPp/VtLD9UBPv1o0qlg+5QovV4qn0ErAc1cpTdaacs0zjghXXgdwnXncmF 3WWEgskw2efLqsUeibxIpA1b1KIU3zk1hXvBZ+suolr7fyfOWku7uJtbs+785juX dfTy3RJSliVwi5wBjBJP4O7bWGQRcR9STIMg6LVDWEhISH2K0XPTKXhecp/mvGOD bA23n/I66iGgHw== -----END CERTIFICATE-----Generated at Mon Jan 26 09:46:26 2026 by rpki-client