This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.mft File: pLm08Dm8goYBw44OrUwZWrvf_mM.mft (raw, json) Hash identifier: uvjFhu1ioxMbEQFyxuuEsyha4r5tA++OTeqcoPrjA7E= Subject key identifier: FD:97:6E:FD:80:6C:CD:0A:66:CC:C1:1E:FC:0F:24:F1:9E:13:32:54 Authority key identifier: A4:B9:B4:F0:39:BC:82:86:01:C3:8E:0E:AD:4C:19:5A:BB:DF:FE:63 Certificate issuer: /CN=a4b9b4f039bc828601c38e0ead4c195abbdffe63 Certificate serial: 019BF7D1624F3E0DCFD7346E01522E7E24A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLm08Dm8goYBw44OrUwZWrvf_mM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.mft Manifest number: 0254 Signing time: Mon 26 Jan 2026 01:00:52 +0000 Manifest this update: Mon 26 Jan 2026 01:00:52 +0000 Manifest next update: Tue 27 Jan 2026 01:00:52 +0000 Files and hashes: 1: JdkIQygmhQqcLnZC2_hEonjSX5Q.roa (hash: S2ckYV6ssSGLHtxoF3cPRRAOhiSavGP1nolNPr7KzVg=) 2: pLm08Dm8goYBw44OrUwZWrvf_mM.crl (hash: pMEzM5PCEM+EXRs+iTN2VwbXQ/PG/5ZfWRAE83RZdiw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.mft rsync://rpki.ripe.net/repository/DEFAULT/pLm08Dm8goYBw44OrUwZWrvf_mM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d1:62:4f:3e:0d:cf:d7:34:6e:01:52:2e:7e:24:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4b9b4f039bc828601c38e0ead4c195abbdffe63 Validity Not Before: Jan 26 01:00:52 2026 GMT Not After : Jan 27 01:00:52 2026 GMT Subject: CN=fd976efd806ccd0a66ccc11efc0f24f19e133254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c7:67:4d:12:69:04:dc:15:7e:0b:39:97:84: 1a:98:c2:eb:15:cc:9f:1d:b6:7a:3b:fb:b4:01:2a: 7f:01:63:04:6e:55:e6:df:57:6a:e7:4b:54:6b:59: b8:a8:56:27:e5:c4:8a:20:99:d0:b8:21:d7:8b:dc: 06:cf:51:55:dd:38:6b:06:6e:46:5f:1b:72:60:46: 3c:18:73:be:92:6b:8d:81:c1:41:3e:ce:e2:df:98: 54:7e:4b:58:c4:8a:f5:7d:df:69:22:c6:e0:c7:41: 23:05:14:43:43:85:42:10:02:c8:d9:5e:6c:74:2d: a7:ef:2a:71:f3:c3:ec:e6:27:5b:01:35:2f:3b:0f: 8e:1b:ed:c6:f3:29:b7:7c:7e:ef:b0:89:74:47:ae: eb:6d:28:9e:00:98:c0:34:14:af:dc:75:7a:48:f6: f9:ca:09:5c:d6:84:9c:45:75:e2:18:81:6a:4f:19: 3a:76:de:e6:ac:65:b7:1e:fa:31:8a:bb:a4:cb:0e: a8:ba:48:1f:44:db:55:82:89:c4:06:eb:4d:59:f4: 22:47:c3:8b:43:76:84:b4:1d:a3:ff:1a:af:b4:ca: ba:30:65:b3:1a:4b:73:57:81:3a:0b:e2:46:82:52: d3:2c:ff:54:9b:42:12:92:a0:57:1a:1a:d0:c9:6e: 34:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:97:6E:FD:80:6C:CD:0A:66:CC:C1:1E:FC:0F:24:F1:9E:13:32:54 X509v3 Authority Key Identifier: keyid:A4:B9:B4:F0:39:BC:82:86:01:C3:8E:0E:AD:4C:19:5A:BB:DF:FE:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLm08Dm8goYBw44OrUwZWrvf_mM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:c4:67:0b:4b:2a:5f:0f:1d:36:8d:71:0f:a1:5d:38:18:e8: 4b:74:a6:19:e2:22:36:10:8a:80:c0:f9:9f:48:82:6e:02:25: 31:94:c3:17:93:8f:2d:b2:ce:4f:60:de:85:22:01:b7:bd:5c: e4:b0:40:d5:bc:c8:2b:87:27:bb:a0:48:02:2b:e6:42:b5:25: db:de:68:3f:4b:98:d4:f6:f1:a6:6b:67:3d:ed:e6:fb:25:d8: 57:25:36:4c:d1:74:97:a2:77:e5:e9:f4:f5:d5:25:c1:f7:16: 0c:30:c7:f2:7c:c1:fc:76:a0:c6:95:48:0a:d4:4c:15:a8:19: 20:7e:6f:40:9b:d9:b1:6c:39:2c:2c:bd:1d:96:8e:68:b1:2c: b5:ad:da:4c:4e:6c:ea:dd:2b:06:2f:a4:b3:40:b3:7f:09:9f: 0a:cd:de:8c:cf:0d:26:33:9c:5a:3c:10:ec:06:20:27:e1:1c: 5d:af:c6:3e:62:17:14:53:96:a6:f9:c4:20:d0:49:49:d6:4f: 86:82:4a:8b:3a:f1:76:34:d7:5c:7e:41:62:a3:9f:5c:22:7d: 8c:60:29:cb:ca:da:9f:55:52:b1:8c:20:df:f6:9f:7c:17:26: 9d:ef:13:04:67:54:8e:f4:6a:ef:6a:fd:df:6b:a8:05:6d:6d: 26:50:00:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30WJPPg3P1zRuAVIufiSpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YjliNGYwMzliYzgyODYwMWMzOGUwZWFkNGMxOTVhYmJk ZmZlNjMwHhcNMjYwMTI2MDEwMDUyWhcNMjYwMTI3MDEwMDUyWjAzMTEwLwYDVQQD EyhmZDk3NmVmZDgwNmNjZDBhNjZjY2MxMWVmYzBmMjRmMTllMTMzMjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMdnTRJpBNwVfgs5l4QamMLrFcyf HbZ6O/u0ASp/AWMEblXm31dq50tUa1m4qFYn5cSKIJnQuCHXi9wGz1FV3ThrBm5G XxtyYEY8GHO+kmuNgcFBPs7i35hUfktYxIr1fd9pIsbgx0EjBRRDQ4VCEALI2V5s dC2n7ypx88Ps5idbATUvOw+OG+3G8ym3fH7vsIl0R67rbSieAJjANBSv3HV6SPb5 yglc1oScRXXiGIFqTxk6dt7mrGW3Hvoxirukyw6oukgfRNtVgonEButNWfQiR8OL Q3aEtB2j/xqvtMq6MGWzGktzV4E6C+JGglLTLP9Um0ISkqBXGhrQyW405QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP2Xbv2AbM0KZszBHvwPJPGeEzJUMB8GA1UdIwQY MBaAFKS5tPA5vIKGAcOODq1MGVq73/5jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcExtMDhEbThnb1lCdzQ0T3JVd1pXcnZmX21NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy81NmExNjMtOWNjYi00MTMxLTk3MmQt OGNjNmQxOTIzMzViLzEvcExtMDhEbThnb1lCdzQ0T3JVd1pXcnZmX21NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy81NmExNjMtOWNjYi00MTMxLTk3MmQtOGNjNmQxOTIzMzVi LzEvcExtMDhEbThnb1lCdzQ0T3JVd1pXcnZmX21NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHsRnC0sq Xw8dNo1xD6FdOBjoS3SmGeIiNhCKgMD5n0iCbgIlMZTDF5OPLbLOT2DehSIBt71c 5LBA1bzIK4cnu6BIAivmQrUl295oP0uY1PbxpmtnPe3m+yXYVyU2TNF0l6J35en0 9dUlwfcWDDDH8nzB/HagxpVICtRMFagZIH5vQJvZsWw5LCy9HZaOaLEsta3aTE5s 6t0rBi+ks0CzfwmfCs3ejM8NJjOcWjwQ7AYgJ+EcXa/GPmIXFFOWpvnEINBJSdZP hoJKizrxdjTXXH5BYqOfXCJ9jGApy8ran1VSsYwg3/affBcmne8TBGdUjvRq72r9 32uoBW1tJlAAsQ== -----END CERTIFICATE-----Generated at Mon Jan 26 10:58:14 2026 by rpki-client