This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.mft File: PBnm8n2SgJXlYN52ePKONFnVWUc.mft (raw, json) Hash identifier: FAXPegj7icxwGlIMyRlzUAew3LvLcphoR0MWTP8Ky00= Subject key identifier: 5B:87:F3:0C:85:F0:44:22:D8:B0:A8:C9:53:AD:26:FF:F9:2E:7B:BC Authority key identifier: 3C:19:E6:F2:7D:92:80:95:E5:60:DE:76:78:F2:8E:34:59:D5:59:47 Certificate issuer: /CN=3c19e6f27d928095e560de7678f28e3459d55947 Certificate serial: 019BF83F2D77705BC5F59460843EC8AE3619 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBnm8n2SgJXlYN52ePKONFnVWUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.mft Manifest number: 02FD Signing time: Mon 26 Jan 2026 03:00:48 +0000 Manifest this update: Mon 26 Jan 2026 03:00:48 +0000 Manifest next update: Tue 27 Jan 2026 03:00:48 +0000 Files and hashes: 1: CB5dZw_OUbWQmf6rrxVZ4SzmOPA.roa (hash: 7zRrcVpQEfWDa1cgriGdXYM3UTbJ90zYlGXeGAuJSjI=) 2: PBnm8n2SgJXlYN52ePKONFnVWUc.crl (hash: Z88reFIn6WtTu0Hy0xiR9+8gHmXdQbeni51UHRXdsAo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.mft rsync://rpki.ripe.net/repository/DEFAULT/PBnm8n2SgJXlYN52ePKONFnVWUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:2d:77:70:5b:c5:f5:94:60:84:3e:c8:ae:36:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c19e6f27d928095e560de7678f28e3459d55947 Validity Not Before: Jan 26 03:00:48 2026 GMT Not After : Jan 27 03:00:48 2026 GMT Subject: CN=5b87f30c85f04422d8b0a8c953ad26fff92e7bbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:7d:08:70:94:99:9b:e1:0b:49:61:58:5a:39: 6d:80:b0:91:9e:7c:57:b3:9c:44:da:e4:f4:a6:77: 5e:55:79:ee:7d:61:88:6a:3d:b5:d3:0d:93:b6:9e: da:4c:ce:4d:1e:82:00:bd:26:e2:bb:c4:f9:8c:37: aa:52:4a:3d:91:0d:6e:8a:00:33:fe:97:23:da:c0: d9:b3:e6:36:a5:b0:ba:5d:c9:1e:eb:06:cd:fc:42: b3:96:6a:6e:2d:1e:49:0b:56:5b:3f:60:f9:73:ca: e6:49:65:b1:5f:e8:9a:db:41:f8:85:6e:f0:82:7d: 42:b4:f7:be:ae:13:1b:59:9b:b3:48:f7:9c:35:eb: 8d:d5:ad:b3:b6:a8:11:11:51:47:91:dd:b3:5c:48: 0f:57:ad:2e:64:a9:26:72:0d:f7:1d:b9:9c:13:a3: 54:58:76:a7:15:a2:57:4e:4c:80:71:d1:d3:3d:e3: f9:4b:8d:83:07:7d:3b:e7:75:1d:29:bd:99:86:75: 15:72:99:bf:c6:ba:4e:15:79:3b:e2:7d:8e:f5:08: 7e:c1:d9:f2:6c:24:ad:c0:71:24:2a:c3:a1:51:df: 41:d3:a3:5e:58:f1:a5:81:d6:ce:d9:99:2f:1e:a0: 96:7e:d0:5b:e4:ea:1e:f4:07:00:ba:a0:7f:17:0c: af:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:87:F3:0C:85:F0:44:22:D8:B0:A8:C9:53:AD:26:FF:F9:2E:7B:BC X509v3 Authority Key Identifier: keyid:3C:19:E6:F2:7D:92:80:95:E5:60:DE:76:78:F2:8E:34:59:D5:59:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBnm8n2SgJXlYN52ePKONFnVWUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:6a:47:09:53:aa:b3:83:b5:a0:14:2d:dc:0f:45:c2:bf:b6: 83:6b:72:d5:f8:47:ad:70:0e:a6:ae:e5:19:1d:11:98:7b:6b: 8d:38:9d:8e:ce:d6:ef:4b:0f:50:72:17:4f:c9:d0:28:2a:74: de:75:38:e2:71:9f:53:04:7a:42:9b:bf:7e:6c:65:a8:a2:06: bb:35:87:06:82:10:fa:35:47:e9:3c:11:2e:7a:df:ce:cb:b3: ab:5a:9d:c0:19:14:0e:c0:7d:31:2b:1f:1e:26:2c:da:dc:d1: 3e:1e:d9:dc:23:fd:c3:55:d3:92:d1:69:1f:d5:2a:a3:6e:44: ee:52:a5:8c:83:c2:ff:02:19:6d:57:35:1f:42:f8:7e:aa:4a: 6b:84:03:9b:87:c1:eb:f6:3f:23:08:5b:c1:be:51:5e:3a:0b: 55:aa:b3:42:5e:a9:22:8d:2a:91:77:a5:2e:18:df:7f:0c:58: 46:0b:09:28:b6:d0:97:f4:06:93:62:88:44:ba:58:bc:05:64: 8f:f5:7f:91:13:47:70:f0:a5:24:db:c8:66:86:6b:8d:a2:62: 3f:67:e2:cb:f0:7b:da:9a:7e:39:9f:3f:0c:ff:2d:52:b5:8d: 28:be:79:8c:69:6f:7e:6a:37:05:ec:51:45:88:53:6a:2e:0e: c5:a4:25:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4Py13cFvF9ZRghD7IrjYZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMTllNmYyN2Q5MjgwOTVlNTYwZGU3Njc4ZjI4ZTM0NTlk NTU5NDcwHhcNMjYwMTI2MDMwMDQ4WhcNMjYwMTI3MDMwMDQ4WjAzMTEwLwYDVQQD Eyg1Yjg3ZjMwYzg1ZjA0NDIyZDhiMGE4Yzk1M2FkMjZmZmY5MmU3YmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm30IcJSZm+ELSWFYWjltgLCRnnxX s5xE2uT0pndeVXnufWGIaj210w2Ttp7aTM5NHoIAvSbiu8T5jDeqUko9kQ1uigAz /pcj2sDZs+Y2pbC6Xcke6wbN/EKzlmpuLR5JC1ZbP2D5c8rmSWWxX+ia20H4hW7w gn1CtPe+rhMbWZuzSPecNeuN1a2ztqgREVFHkd2zXEgPV60uZKkmcg33HbmcE6NU WHanFaJXTkyAcdHTPeP5S42DB30753UdKb2ZhnUVcpm/xrpOFXk74n2O9Qh+wdny bCStwHEkKsOhUd9B06NeWPGlgdbO2ZkvHqCWftBb5Ooe9AcAuqB/FwyvbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFuH8wyF8EQi2LCoyVOtJv/5Lnu8MB8GA1UdIwQY MBaAFDwZ5vJ9koCV5WDednjyjjRZ1VlHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEJubThuMlNnSlhsWU41MmVQS09ORm5WV1VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8yMzliNzMtN2FhNy00YjU4LWIxMmMt NzkyN2RlNTM5MzY0LzEvUEJubThuMlNnSlhsWU41MmVQS09ORm5WV1VjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS8yMzliNzMtN2FhNy00YjU4LWIxMmMtNzkyN2RlNTM5MzY0 LzEvUEJubThuMlNnSlhsWU41MmVQS09ORm5WV1VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsWpHCVOq s4O1oBQt3A9Fwr+2g2ty1fhHrXAOpq7lGR0RmHtrjTidjs7W70sPUHIXT8nQKCp0 3nU44nGfUwR6Qpu/fmxlqKIGuzWHBoIQ+jVH6TwRLnrfzsuzq1qdwBkUDsB9MSsf HiYs2tzRPh7Z3CP9w1XTktFpH9Uqo25E7lKljIPC/wIZbVc1H0L4fqpKa4QDm4fB 6/Y/Iwhbwb5RXjoLVaqzQl6pIo0qkXelLhjffwxYRgsJKLbQl/QGk2KIRLpYvAVk j/V/kRNHcPClJNvIZoZrjaJiP2fiy/B72pp+OZ8/DP8tUrWNKL55jGlvfmo3BexR RYhTai4OxaQl1w== -----END CERTIFICATE-----Generated at Mon Jan 26 07:50:41 2026 by rpki-client