This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft File: PQSDU4c3RT4vV_-1dJnDki6DY20.mft (raw, json) Hash identifier: MZDu3ttK3H9vMHGHkb/mSDcKr7OkbooKYUJBRxn/CTY= Subject key identifier: 89:F8:0F:1C:94:F6:13:9A:56:97:9C:F9:92:11:57:E4:D1:B2:4C:A8 Authority key identifier: 3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D Certificate issuer: /CN=3d0483538737453e2f57ffb57499c3922e83636d Certificate serial: 019BF2AB37DCC5D10361151A1C6C17A0D6D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft Manifest number: 1714 Signing time: Sun 25 Jan 2026 01:01:05 +0000 Manifest this update: Sun 25 Jan 2026 01:01:05 +0000 Manifest next update: Mon 26 Jan 2026 01:01:05 +0000 Files and hashes: 1: 1-UtCMLoYpQTccw0rAaKnjr3aeP4.roa (hash: N8latQNhGiEjvdqVYf+HsgaWPueV4r0S9nawy713xeE=) 2: 1-aNnq3G-3Uph4CDICNHGtMEexzM.roa (hash: COcKotvyQgXvt7JUDGUl9yoEfHAlHiTxt2Sp6dfcn4M=) 3: 5O5myP0lF1xP1jJEoQe9pSgv1NY.roa (hash: 1Ly5GkaJNn9NGiJHBbBhR411FTMTwdqj9zg5X4o1rJs=) 4: PQSDU4c3RT4vV_-1dJnDki6DY20.crl (hash: 6aDsUtSbhEP9gK0BEpnMtLNJgLi24a7qrBtZ8TgCxas=) 5: QB5DaA1MIwR5ikAvXA3gM5FxDQY.roa (hash: QVnUg9rir6hPV0SWbkI+uNhJZ6Bpm1g1EMmNwsSmgyI=) 6: Zae_gMNSGLYpjvDka3zKlP-S3hQ.roa (hash: KFAqhbt9W5g+ZaeRsfu703acWAo0iC27yLXUw/eFD2k=) 7: dBqvOag7Vn6SMH5-RRqsLXHXhvA.roa (hash: l+RlXCW7RTqPoNsvx1EDw/ugEa8VniO9ekXCbH/csAk=) 8: eIAvi_fRWFUTaXHfkY48zizgI6I.roa (hash: zlK7AxneUnvHvJcK0AMBNR80xbI0s9cOUQ5f2N58mBk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:ab:37:dc:c5:d1:03:61:15:1a:1c:6c:17:a0:d6:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d0483538737453e2f57ffb57499c3922e83636d Validity Not Before: Jan 25 01:01:05 2026 GMT Not After : Jan 26 01:01:05 2026 GMT Subject: CN=89f80f1c94f6139a56979cf9921157e4d1b24ca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6c:1f:02:8f:16:52:8e:c5:80:b2:2f:8d:86: 7b:e2:f0:ab:c5:91:be:6b:f7:aa:7d:81:99:69:f2: be:b8:da:74:3c:df:4a:e1:7e:48:6f:7c:e9:42:f6: 04:dc:0a:08:ac:d7:f8:86:b0:1c:0f:1c:8c:1e:1d: eb:48:98:7e:5c:f4:4d:38:cb:38:b3:28:4e:54:b0: db:60:23:77:8d:df:d3:50:b2:61:b2:36:09:20:e9: 2e:c1:c0:ef:81:02:b6:ed:1c:a5:ec:d2:e1:77:50: a0:08:0d:15:3c:b2:c9:96:c2:c5:fe:5c:8f:94:bd: ed:9d:e4:26:9d:bc:0e:98:fa:c5:5f:4c:46:09:d0: a2:d6:04:a3:a9:8a:5f:9c:44:aa:72:fa:57:e8:3a: 6c:3f:2c:14:83:69:ad:7b:7a:89:2e:98:0b:51:33: d3:8d:aa:11:5f:41:25:20:d9:3b:af:8e:34:da:e1: 2c:4a:58:66:67:76:3f:55:fd:61:f2:b9:a5:36:28: 9c:82:24:9d:e2:54:58:17:b0:0f:07:67:d2:f5:df: 3b:32:66:67:78:82:fa:04:85:b4:84:1b:f7:f5:ce: 89:96:f4:f0:09:d4:21:34:eb:85:61:79:71:c0:44: ee:1f:8e:46:f6:61:2b:a0:d1:75:20:35:a0:a0:eb: dc:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F8:0F:1C:94:F6:13:9A:56:97:9C:F9:92:11:57:E4:D1:B2:4C:A8 X509v3 Authority Key Identifier: keyid:3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:9f:fe:9a:06:33:88:eb:ff:e4:09:1d:18:6f:dc:65:65:f8: e5:45:14:68:4a:ae:cf:2b:48:87:28:1b:e7:dd:d0:b4:01:9f: 7e:33:b8:35:d1:91:f5:1d:d0:7b:cd:26:00:9b:e2:ce:a4:27: 9b:d6:09:25:e7:d7:a6:db:04:73:d8:94:db:29:3c:fb:b9:0a: 50:cc:3e:b5:16:99:86:f0:47:f2:95:70:21:1e:7e:a5:db:2b: c4:2e:c4:fa:6a:83:59:ab:d7:60:b2:35:ef:18:10:3b:4c:28: 6d:92:d5:30:0c:69:33:c4:3b:50:a2:fb:e9:14:b9:8b:86:79: 73:24:62:38:8c:68:c1:d6:31:66:47:ff:2c:19:70:40:1e:1f: 7e:2d:ed:af:1f:90:9b:95:99:c1:e9:52:e7:9f:99:58:a1:75: ca:04:9a:e8:91:07:30:9e:2c:fd:ab:35:ef:1d:05:34:6a:63: 4e:0c:54:99:b6:0e:50:48:63:8d:fb:02:8a:8b:dc:2b:16:89: 56:91:f3:e2:db:a4:a0:fa:73:62:8a:cc:0a:0e:5c:a8:63:93: 27:a5:47:ee:cf:92:bc:7d:f6:9e:f0:48:d3:6d:10:77:85:15: 3d:4a:73:54:e7:4a:44:48:95:11:df:39:ce:63:fa:5a:66:33: a9:86:62:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvyqzfcxdEDYRUaHGwXoNbYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkMDQ4MzUzODczNzQ1M2UyZjU3ZmZiNTc0OTljMzkyMmU4 MzYzNmQwHhcNMjYwMTI1MDEwMTA1WhcNMjYwMTI2MDEwMTA1WjAzMTEwLwYDVQQD Eyg4OWY4MGYxYzk0ZjYxMzlhNTY5NzljZjk5MjExNTdlNGQxYjI0Y2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWwfAo8WUo7FgLIvjYZ74vCrxZG+ a/eqfYGZafK+uNp0PN9K4X5Ib3zpQvYE3AoIrNf4hrAcDxyMHh3rSJh+XPRNOMs4 syhOVLDbYCN3jd/TULJhsjYJIOkuwcDvgQK27Ryl7NLhd1CgCA0VPLLJlsLF/lyP lL3tneQmnbwOmPrFX0xGCdCi1gSjqYpfnESqcvpX6DpsPywUg2mte3qJLpgLUTPT jaoRX0ElINk7r4402uEsSlhmZ3Y/Vf1h8rmlNiicgiSd4lRYF7APB2fS9d87MmZn eIL6BIW0hBv39c6JlvTwCdQhNOuFYXlxwETuH45G9mEroNF1IDWgoOvcVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIn4DxyU9hOaVpec+ZIRV+TRskyoMB8GA1UdIwQY MBaAFD0Eg1OHN0U+L1f/tXSZw5Iug2NtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFFTRFU0YzNSVDR2Vl8tMWRKbkRraTZEWTIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9lMTA2YzMtMGIxZi00MDEwLTg2ZjEt NjVhNDZjOGU0MWU5LzEvUFFTRFU0YzNSVDR2Vl8tMWRKbkRraTZEWTIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9lMTA2YzMtMGIxZi00MDEwLTg2ZjEtNjVhNDZjOGU0MWU5 LzEvUFFTRFU0YzNSVDR2Vl8tMWRKbkRraTZEWTIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN5/+mgYz iOv/5AkdGG/cZWX45UUUaEquzytIhygb593QtAGffjO4NdGR9R3Qe80mAJvizqQn m9YJJefXptsEc9iU2yk8+7kKUMw+tRaZhvBH8pVwIR5+pdsrxC7E+mqDWavXYLI1 7xgQO0wobZLVMAxpM8Q7UKL76RS5i4Z5cyRiOIxowdYxZkf/LBlwQB4ffi3trx+Q m5WZwelS55+ZWKF1ygSa6JEHMJ4s/as17x0FNGpjTgxUmbYOUEhjjfsCiovcKxaJ VpHz4tukoPpzYorMCg5cqGOTJ6VH7s+SvH32nvBI020Qd4UVPUpzVOdKREiVEd85 zmP6WmYzqYZiug== -----END CERTIFICATE-----Generated at Sun Jan 25 11:46:38 2026 by rpki-client