This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft File: PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft (raw, json) Hash identifier: QurrTauiQ7jammYdbT2bZVY61WIZxa7+NFZY609hlU8= Subject key identifier: 5B:F6:CB:8C:EB:0E:55:FB:04:83:AD:81:D6:96:DA:44:8C:86:5A:E1 Authority key identifier: 3C:22:64:3B:A6:A0:EA:EF:57:32:9B:F5:BD:C9:0B:31:C3:86:F8:A7 Certificate issuer: /CN=3c22643ba6a0eaef57329bf5bdc90b31c386f8a7 Certificate serial: 019BF506F465C54944AD55CEC2B9F7DFE142 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft Manifest number: 027D Signing time: Sun 25 Jan 2026 12:00:32 +0000 Manifest this update: Sun 25 Jan 2026 12:00:32 +0000 Manifest next update: Mon 26 Jan 2026 12:00:32 +0000 Files and hashes: 1: 74xdlthipiPwmQdVtWpcn9yMpH0.roa (hash: p90jbIWz3kNDEWy5wNiYtEyIp2vg1/zc3mIlW5yWFFQ=) 2: B1ztFUqJj0TJYJvOExVRSQmIl5A.roa (hash: v/mWzHGtLLbQQyMt4t++cIwVty9wjpt9ae5rJyBn1gU=) 3: DsSKa3jlsMcS8PZEA_lBBDaVuS0.roa (hash: sCNeXSE7wm7FbJmQ9E5zHLdMIcgEdKSApg1Y+J8Rl58=) 4: PCJkO6ag6u9XMpv1vckLMcOG-Kc.crl (hash: izdcTYpdKkmmaYoBG3n0naY/fPoS2CMlZ2mMUzmsPDE=) 5: cCVfq15MkQwWtM1jPJjocJnH1Wc.roa (hash: r85fd8Uvcz/76R6OT32K3Lqo+sirunePwgftHCYO6ns=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.crl rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:06:f4:65:c5:49:44:ad:55:ce:c2:b9:f7:df:e1:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c22643ba6a0eaef57329bf5bdc90b31c386f8a7 Validity Not Before: Jan 25 12:00:32 2026 GMT Not After : Jan 26 12:00:32 2026 GMT Subject: CN=5bf6cb8ceb0e55fb0483ad81d696da448c865ae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:bb:3d:e0:ca:d0:fa:bd:8e:ea:88:12:a5:aa: aa:5a:5a:a0:f2:2d:dd:93:40:9e:7d:a8:f9:3f:26: 85:36:70:7a:4e:d5:53:4a:dc:f3:fd:27:09:ec:fd: 75:c8:63:2f:53:74:e9:2f:d0:a3:79:5d:e9:bc:d9: a5:28:83:82:ed:c8:3c:52:49:79:33:6a:4e:11:b5: 75:34:71:02:28:22:72:13:d2:06:08:8b:6c:24:70: 5e:9a:3c:45:cb:bd:b9:e8:80:b2:98:c1:fb:5f:43: e4:e9:85:3e:f5:3e:9d:d0:b8:44:06:81:58:ec:8d: 83:e5:35:22:bd:44:c3:5a:4c:92:72:dc:c0:4e:24: fc:35:82:1e:10:8e:33:05:01:4a:cc:8c:e4:ba:37: 83:c1:50:11:2e:15:e6:6a:89:63:7b:e3:ec:33:35: 61:33:37:13:e8:4a:fe:3a:0c:fa:39:de:86:71:1d: 6d:3b:b9:29:00:c2:a5:a7:98:0f:4a:23:ad:28:0f: d4:62:8c:30:2d:d7:78:23:e2:7a:6e:67:e2:62:9c: c0:cb:71:58:34:a0:60:e8:e9:81:a6:df:5f:f8:4b: 99:1b:7d:79:21:be:2f:ab:8c:41:98:dc:3c:31:9e: c5:fc:aa:58:74:60:e2:be:c9:15:0d:c0:0c:f6:1a: 8c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F6:CB:8C:EB:0E:55:FB:04:83:AD:81:D6:96:DA:44:8C:86:5A:E1 X509v3 Authority Key Identifier: keyid:3C:22:64:3B:A6:A0:EA:EF:57:32:9B:F5:BD:C9:0B:31:C3:86:F8:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:2e:11:23:09:da:09:1b:cf:4e:ff:1f:b2:55:c1:2a:ae:51: 26:c7:e9:6d:f8:14:13:09:94:42:ae:a5:0c:42:56:05:23:3c: a8:84:12:28:b6:f4:56:99:87:49:f0:0e:c7:58:41:65:39:85: c7:47:d4:9f:f7:3b:57:1d:92:e8:11:0b:cb:13:d3:73:fe:a1: 84:3c:a7:35:be:3a:09:32:88:43:ba:a8:7e:f6:80:61:5b:92: 88:ef:28:0e:44:55:bb:9d:5e:46:d5:cb:f5:c4:bf:9d:93:59: 70:4e:94:be:0b:95:22:bf:72:01:1f:4d:14:b9:5a:fe:db:1a: 52:33:24:b1:b9:7f:f7:20:95:de:4d:12:b8:62:d2:bb:0d:eb: 04:8a:fc:91:43:ae:80:4e:87:59:bb:bf:e1:8c:7a:f5:29:7f: f8:59:63:1e:2c:0f:4c:91:10:ce:b0:d7:83:1c:72:fe:65:2a: 5e:94:ac:e3:cd:b9:f7:7f:8e:4a:eb:5e:33:62:08:5f:1e:81: 0a:a3:0c:ee:5e:73:71:fa:93:a9:e7:13:1a:ec:a8:9f:05:e4: df:a4:29:c3:7e:de:b2:bb:b1:b0:06:f6:dc:2d:84:6b:03:14: 44:f1:c9:42:b3:d0:41:37:d2:58:dc:c3:f3:7f:da:6c:0f:30: 1c:1b:06:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1BvRlxUlErVXOwrn33+FCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMjI2NDNiYTZhMGVhZWY1NzMyOWJmNWJkYzkwYjMxYzM4 NmY4YTcwHhcNMjYwMTI1MTIwMDMyWhcNMjYwMTI2MTIwMDMyWjAzMTEwLwYDVQQD Eyg1YmY2Y2I4Y2ViMGU1NWZiMDQ4M2FkODFkNjk2ZGE0NDhjODY1YWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ls94MrQ+r2O6ogSpaqqWlqg8i3d k0Cefaj5PyaFNnB6TtVTStzz/ScJ7P11yGMvU3TpL9CjeV3pvNmlKIOC7cg8Ukl5 M2pOEbV1NHECKCJyE9IGCItsJHBemjxFy7256ICymMH7X0Pk6YU+9T6d0LhEBoFY 7I2D5TUivUTDWkySctzATiT8NYIeEI4zBQFKzIzkujeDwVARLhXmaolje+PsMzVh MzcT6Er+Ogz6Od6GcR1tO7kpAMKlp5gPSiOtKA/UYowwLdd4I+J6bmfiYpzAy3FY NKBg6OmBpt9f+EuZG315Ib4vq4xBmNw8MZ7F/KpYdGDivskVDcAM9hqMWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFv2y4zrDlX7BIOtgdaW2kSMhlrhMB8GA1UdIwQY MBaAFDwiZDumoOrvVzKb9b3JCzHDhvinMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUENKa082YWc2dTlYTXB2MXZja0xNY09HLUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny83YWVkOTktYTQ3ZC00ZWM3LWI0YzUt ZmExNDg2ZWE3OThjLzEvUENKa082YWc2dTlYTXB2MXZja0xNY09HLUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny83YWVkOTktYTQ3ZC00ZWM3LWI0YzUtZmExNDg2ZWE3OThj LzEvUENKa082YWc2dTlYTXB2MXZja0xNY09HLUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfC4RIwna CRvPTv8fslXBKq5RJsfpbfgUEwmUQq6lDEJWBSM8qIQSKLb0VpmHSfAOx1hBZTmF x0fUn/c7Vx2S6BELyxPTc/6hhDynNb46CTKIQ7qofvaAYVuSiO8oDkRVu51eRtXL 9cS/nZNZcE6UvguVIr9yAR9NFLla/tsaUjMksbl/9yCV3k0SuGLSuw3rBIr8kUOu gE6HWbu/4Yx69Sl/+FljHiwPTJEQzrDXgxxy/mUqXpSs482593+OSuteM2IIXx6B CqMM7l5zcfqTqecTGuyonwXk36Qpw37esruxsAb23C2EawMURPHJQrPQQTfSWNzD 83/abA8wHBsGhQ== -----END CERTIFICATE-----Generated at Sun Jan 25 14:45:19 2026 by rpki-client