This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft File: PxnYdtwluWxdxZi-Lb9uywZal18.mft (raw, json) Hash identifier: /vBDnAqRFU31CZKYcK8X2SXJUF+LYL3/3wSG8x9kwRA= Subject key identifier: BC:27:E0:56:AD:A7:D7:94:4B:74:24:45:FD:55:F0:F1:36:B0:C2:83 Authority key identifier: 3F:19:D8:76:DC:25:B9:6C:5D:C5:98:BE:2D:BF:6E:CB:06:5A:97:5F Certificate issuer: /CN=3f19d876dc25b96c5dc598be2dbf6ecb065a975f Certificate serial: 019BF763C540288647157D5ECA4528FFA1B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft Manifest number: 0616 Signing time: Sun 25 Jan 2026 23:01:09 +0000 Manifest this update: Sun 25 Jan 2026 23:01:09 +0000 Manifest next update: Mon 26 Jan 2026 23:01:09 +0000 Files and hashes: 1: Kjlpy0uZoHJkclrGbsxI7LzDTQ8.roa (hash: 0z6/PsejZa1lGmMq31n1RdPDmTfr5YeDjwNglhdjlQ8=) 2: PxnYdtwluWxdxZi-Lb9uywZal18.crl (hash: hmoa4oyvD6Ukb5yhXLIHwuluCQOYY4lRxJ4STCkDNUg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:c5:40:28:86:47:15:7d:5e:ca:45:28:ff:a1:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f19d876dc25b96c5dc598be2dbf6ecb065a975f Validity Not Before: Jan 25 23:01:09 2026 GMT Not After : Jan 26 23:01:09 2026 GMT Subject: CN=bc27e056ada7d7944b742445fd55f0f136b0c283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:73:b5:c6:d8:0e:3d:04:65:3b:b3:54:c6:f0: 97:3b:67:e3:85:c6:5f:1b:9f:09:a8:9c:f5:14:0f: 38:24:90:85:08:2a:10:4a:48:ae:b9:19:14:f1:36: 07:ea:9d:41:fa:10:3c:31:8e:5e:5c:35:58:8f:b4: 82:a2:68:e6:f9:f0:db:83:9a:75:3a:ba:1c:1e:80: 78:c0:fa:6b:31:bf:51:5b:48:b2:c8:4e:e9:29:bb: 08:aa:17:84:c7:f0:a9:ad:67:7c:f9:df:4e:d0:8a: a0:7f:8b:7b:0d:b3:d5:ec:53:51:d3:56:21:06:d9: 37:a7:c4:38:0e:4d:9e:65:f4:fa:7d:3b:f0:1b:fd: f1:2e:84:33:9b:89:d2:55:8c:b9:b5:f2:1d:e1:0b: b0:9c:e9:03:3f:ff:a5:df:76:09:22:ab:18:59:39: a2:bc:41:d4:56:ee:c5:cc:c3:98:fa:a4:b7:15:32: ad:67:fd:4a:33:2d:0c:9f:45:ee:76:f9:40:f0:31: 3a:8e:25:71:d5:48:a0:57:66:92:2e:0a:63:db:f6: b9:3e:83:ed:ef:61:04:40:56:4d:55:ae:89:91:42: f8:9e:cb:df:7e:f3:68:0c:b3:93:36:6b:e2:6b:5c: 93:a2:82:c7:6b:91:c9:18:c2:63:b0:3b:80:c9:ed: e4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:27:E0:56:AD:A7:D7:94:4B:74:24:45:FD:55:F0:F1:36:B0:C2:83 X509v3 Authority Key Identifier: keyid:3F:19:D8:76:DC:25:B9:6C:5D:C5:98:BE:2D:BF:6E:CB:06:5A:97:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:8b:7d:5a:63:80:fe:c6:ed:8e:91:7c:34:80:86:85:9b:99: 36:50:71:34:e1:28:46:94:a9:bf:b3:d5:f3:5e:ed:d4:c7:1a: 95:b6:6e:b2:f8:c9:8d:36:67:2d:4e:26:36:47:28:c2:e6:6f: 02:5b:ad:4f:08:e5:15:41:f1:13:82:21:2a:af:dc:6e:85:89: b1:5c:cc:1b:0b:8d:43:a9:b1:5b:fb:f3:19:f0:ae:62:34:99: 29:57:5e:ea:79:99:b8:3c:f4:3b:d2:a1:51:1a:58:64:4b:6a: ef:10:b7:51:dc:5c:dc:d7:67:3f:33:af:2c:60:be:5e:fb:6d: c9:1e:72:81:c7:8e:ca:60:9d:5c:9e:13:59:92:91:c6:5e:b7: 45:06:de:ea:6a:e1:ac:2d:b1:d6:da:ce:3d:7c:0c:3b:49:58: d7:01:6e:e5:4a:f3:7a:e0:c1:07:87:f0:bd:cb:63:fa:69:c6: 98:a4:fb:44:8e:89:c3:2b:8d:41:e1:6e:db:8f:3a:0a:81:47: d5:b5:22:ab:b9:ab:ef:7e:7d:54:7e:cb:76:c9:1c:75:24:fe: c4:46:82:52:fd:d9:77:36:32:f2:00:47:1a:08:2b:e1:9a:99: 99:38:ac:c8:6e:45:c4:8c:9a:04:3f:59:92:66:64:17:9f:2b: 92:cc:da:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y8VAKIZHFX1eykUo/6GwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmMTlkODc2ZGMyNWI5NmM1ZGM1OThiZTJkYmY2ZWNiMDY1 YTk3NWYwHhcNMjYwMTI1MjMwMTA5WhcNMjYwMTI2MjMwMTA5WjAzMTEwLwYDVQQD EyhiYzI3ZTA1NmFkYTdkNzk0NGI3NDI0NDVmZDU1ZjBmMTM2YjBjMjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHO1xtgOPQRlO7NUxvCXO2fjhcZf G58JqJz1FA84JJCFCCoQSkiuuRkU8TYH6p1B+hA8MY5eXDVYj7SComjm+fDbg5p1 OrocHoB4wPprMb9RW0iyyE7pKbsIqheEx/CprWd8+d9O0Iqgf4t7DbPV7FNR01Yh Btk3p8Q4Dk2eZfT6fTvwG/3xLoQzm4nSVYy5tfId4QuwnOkDP/+l33YJIqsYWTmi vEHUVu7FzMOY+qS3FTKtZ/1KMy0Mn0XudvlA8DE6jiVx1UigV2aSLgpj2/a5PoPt 72EEQFZNVa6JkUL4nsvffvNoDLOTNmvia1yTooLHa5HJGMJjsDuAye3kqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLwn4Fatp9eUS3QkRf1V8PE2sMKDMB8GA1UdIwQY MBaAFD8Z2HbcJblsXcWYvi2/bssGWpdfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHhuWWR0d2x1V3hkeFppLUxiOXV5d1phbDE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yMjY0NTUtMTdhMC00NjNjLTg5NTkt MGZiMTM5MWI1NGViLzEvUHhuWWR0d2x1V3hkeFppLUxiOXV5d1phbDE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8yMjY0NTUtMTdhMC00NjNjLTg5NTktMGZiMTM5MWI1NGVi LzEvUHhuWWR0d2x1V3hkeFppLUxiOXV5d1phbDE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr4t9WmOA /sbtjpF8NICGhZuZNlBxNOEoRpSpv7PV817t1McalbZusvjJjTZnLU4mNkcowuZv AlutTwjlFUHxE4IhKq/cboWJsVzMGwuNQ6mxW/vzGfCuYjSZKVde6nmZuDz0O9Kh URpYZEtq7xC3Udxc3NdnPzOvLGC+XvttyR5ygceOymCdXJ4TWZKRxl63RQbe6mrh rC2x1trOPXwMO0lY1wFu5UrzeuDBB4fwvctj+mnGmKT7RI6JwyuNQeFu2486CoFH 1bUiq7mr7359VH7LdskcdST+xEaCUv3ZdzYy8gBHGggr4ZqZmTisyG5FxIyaBD9Z kmZkF58rkszasQ== -----END CERTIFICATE-----Generated at Mon Jan 26 05:38:45 2026 by rpki-client