This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft File: PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft (raw, json) Hash identifier: CNDAR5rG6lwGFcH3LCDGGQVT1+gfXL0BE8LmzPB1rBI= Subject key identifier: 50:55:F4:54:40:32:A7:AA:B0:97:34:CF:D7:16:64:BB:5D:1C:FE:F5 Authority key identifier: 3D:63:9F:A4:ED:DC:16:2D:F3:65:9E:72:1D:24:7F:F3:38:96:2F:68 Certificate issuer: /CN=3d639fa4eddc162df3659e721d247ff338962f68 Certificate serial: 019BF5AC0866FF51C74A0E579C7899A31773 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft Manifest number: BE Signing time: Sun 25 Jan 2026 15:00:50 +0000 Manifest this update: Sun 25 Jan 2026 15:00:50 +0000 Manifest next update: Mon 26 Jan 2026 15:00:50 +0000 Files and hashes: 1: PWOfpO3cFi3zZZ5yHSR_8ziWL2g.crl (hash: zaYT1ML1/kwPyKzsqZWZ5J70I8RI3ouUgaBeV1+0KUo=) 2: SSbCIFUzoJnAufFAmpn4-eL0evQ.roa (hash: xLYQWvxW9OI7//jHrJrCiY97JsgcAmDpELt0HCZDcTk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft rsync://rpki.ripe.net/repository/DEFAULT/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:08:66:ff:51:c7:4a:0e:57:9c:78:99:a3:17:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d639fa4eddc162df3659e721d247ff338962f68 Validity Not Before: Jan 25 15:00:50 2026 GMT Not After : Jan 26 15:00:50 2026 GMT Subject: CN=5055f4544032a7aab09734cfd71664bb5d1cfef5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a5:63:0a:4f:49:1e:f6:8f:ae:2a:a2:99:97: 8e:46:2a:e5:61:54:37:45:03:a5:41:59:de:16:2f: 16:4d:73:36:b9:ca:cf:69:8a:35:89:db:3a:36:64: 18:52:9a:a0:ca:94:ba:ea:e0:bb:c1:55:c5:7d:cd: 30:9c:5e:70:75:57:de:75:ae:58:31:de:a8:aa:ab: bb:28:76:38:60:db:96:07:06:c8:41:cf:9c:78:8c: 16:fb:a3:7c:6b:5f:f7:d1:54:3b:60:df:f0:f5:be: 83:98:bc:84:6a:11:fb:3c:10:95:2f:45:aa:8d:7f: 49:50:48:e2:cb:dd:3a:eb:3d:4f:48:aa:f7:d5:34: b8:98:02:57:42:f2:35:a9:90:75:d5:c0:d2:ce:34: 15:28:65:db:1e:68:14:56:4d:ed:54:4b:60:57:d5: dc:78:44:96:4a:ee:ba:aa:b6:79:41:48:5f:3e:9e: 88:e7:45:64:38:44:00:bd:e8:7d:d7:3a:7f:3c:8b: 34:52:8f:45:83:aa:61:3f:b9:42:0c:18:0f:ff:42: ce:de:04:83:d5:27:97:1c:1c:36:80:0c:53:8a:28: 32:91:33:ec:6b:10:6b:70:c8:16:d2:a2:c4:1c:ea: fd:a8:d4:a8:2a:41:71:4e:2d:89:d8:a7:70:27:f5: c8:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:55:F4:54:40:32:A7:AA:B0:97:34:CF:D7:16:64:BB:5D:1C:FE:F5 X509v3 Authority Key Identifier: keyid:3D:63:9F:A4:ED:DC:16:2D:F3:65:9E:72:1D:24:7F:F3:38:96:2F:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:ef:a3:90:72:8c:cd:66:ed:2c:11:12:d7:f0:ba:9b:49:71: b4:b7:2f:7e:2c:b6:d3:be:46:ea:bb:a2:41:0c:15:46:0a:35: 41:0c:37:73:bb:d8:fa:e1:88:4f:42:fc:d7:41:78:9d:fd:c3: 89:a1:da:43:df:0a:fe:f6:5b:d7:ef:bc:9a:fd:c9:2a:37:59: 4a:3e:68:f4:23:76:c4:f4:7c:a9:22:03:90:c7:36:45:aa:fd: 4b:eb:3f:2f:78:59:42:62:70:a0:c9:7f:66:7e:de:1b:32:77: 4e:58:10:fa:fc:4b:31:e3:ae:51:69:cd:df:1a:e0:6a:08:0b: bf:de:1f:7d:a3:54:aa:9b:a0:d1:64:ce:47:c9:54:fa:13:eb: c8:fe:6c:d0:12:f7:e9:85:fc:b0:87:b6:5c:f0:9d:66:59:70: db:f3:5c:bf:68:6a:5b:9e:1f:1f:c4:df:69:6d:ef:bc:02:11: 73:9d:db:97:39:39:e8:11:58:a0:66:4f:0d:39:b8:0d:f1:19: f2:27:2d:43:cc:02:f4:06:9d:a9:ba:15:8a:b6:68:74:bd:73: 9b:ea:8e:94:5e:70:01:8b:fe:aa:ad:07:ce:ae:4c:d6:7a:ce: e2:0b:7c:fd:f8:90:92:9c:c5:19:75:ca:6b:83:cb:0a:e0:46: e2:b1:50:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rAhm/1HHSg5XnHiZoxdzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkNjM5ZmE0ZWRkYzE2MmRmMzY1OWU3MjFkMjQ3ZmYzMzg5 NjJmNjgwHhcNMjYwMTI1MTUwMDUwWhcNMjYwMTI2MTUwMDUwWjAzMTEwLwYDVQQD Eyg1MDU1ZjQ1NDQwMzJhN2FhYjA5NzM0Y2ZkNzE2NjRiYjVkMWNmZWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKVjCk9JHvaPriqimZeORirlYVQ3 RQOlQVneFi8WTXM2ucrPaYo1ids6NmQYUpqgypS66uC7wVXFfc0wnF5wdVfeda5Y Md6oqqu7KHY4YNuWBwbIQc+ceIwW+6N8a1/30VQ7YN/w9b6DmLyEahH7PBCVL0Wq jX9JUEjiy9066z1PSKr31TS4mAJXQvI1qZB11cDSzjQVKGXbHmgUVk3tVEtgV9Xc eESWSu66qrZ5QUhfPp6I50VkOEQAveh91zp/PIs0Uo9Fg6phP7lCDBgP/0LO3gSD 1SeXHBw2gAxTiigykTPsaxBrcMgW0qLEHOr9qNSoKkFxTi2J2KdwJ/XIUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFBV9FRAMqeqsJc0z9cWZLtdHP71MB8GA1UdIwQY MBaAFD1jn6Tt3BYt82Wech0kf/M4li9oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFdPZnBPM2NGaTN6Wlo1eUhTUl84emlXTDJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9jNzc5ODMtYmUzYS00OGUzLWI1ZDAt YWQyODRkMjgyNGE0LzEvUFdPZnBPM2NGaTN6Wlo1eUhTUl84emlXTDJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9jNzc5ODMtYmUzYS00OGUzLWI1ZDAtYWQyODRkMjgyNGE0 LzEvUFdPZnBPM2NGaTN6Wlo1eUhTUl84emlXTDJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmO+jkHKM zWbtLBES1/C6m0lxtLcvfiy2075G6ruiQQwVRgo1QQw3c7vY+uGIT0L810F4nf3D iaHaQ98K/vZb1++8mv3JKjdZSj5o9CN2xPR8qSIDkMc2Rar9S+s/L3hZQmJwoMl/ Zn7eGzJ3TlgQ+vxLMeOuUWnN3xrgaggLv94ffaNUqpug0WTOR8lU+hPryP5s0BL3 6YX8sIe2XPCdZllw2/Ncv2hqW54fH8TfaW3vvAIRc53blzk56BFYoGZPDTm4DfEZ 8ictQ8wC9AadqboVirZodL1zm+qOlF5wAYv+qq0Hzq5M1nrO4gt8/fiQkpzFGXXK a4PLCuBG4rFQag== -----END CERTIFICATE-----Generated at Sun Jan 25 20:32:25 2026 by rpki-client