This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft File: PeSbGET-RCKvvhDN0oGcdEgnfmU.mft (raw, json) Hash identifier: bcLiNVBknDiQ4iS4e+GZJhuapmKRmadsfbGk/UsQd/s= Subject key identifier: 8A:74:0A:C1:A2:72:E4:3C:23:92:A5:1D:BE:62:21:DB:C6:71:D5:C5 Authority key identifier: 3D:E4:9B:18:44:FE:44:22:AF:BE:10:CD:D2:81:9C:74:48:27:7E:65 Certificate issuer: /CN=3de49b1844fe4422afbe10cdd2819c7448277e65 Certificate serial: 019BF6F5D2DAC846DC81151C374DEA22A6FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft Manifest number: 0B98 Signing time: Sun 25 Jan 2026 21:01:03 +0000 Manifest this update: Sun 25 Jan 2026 21:01:03 +0000 Manifest next update: Mon 26 Jan 2026 21:01:03 +0000 Files and hashes: 1: NIh5X-X78HnV8OD004txMFNbvjM.roa (hash: 94RoT+RPhL7upzRI0H0wJCdguwdTer9SXhjbnB7fpSY=) 2: PeSbGET-RCKvvhDN0oGcdEgnfmU.crl (hash: bl3D9XTGNBZ6UI6Mud5Cya5G1J82D6/Y2+Db9HFQIpk=) 3: Tj-tszmPMOIdicR6OTt8f45Zya4.roa (hash: 38F17CYyilIBIc43xJOnaUQedazOErXtC4iNosY91dA=) 4: lFg7etq0z0bKQ1hcHnNof59N474.roa (hash: ur6JqNagspmUw5cjbkW9rFW1qoAf9GaSzlWdaC/M+ws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:d2:da:c8:46:dc:81:15:1c:37:4d:ea:22:a6:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3de49b1844fe4422afbe10cdd2819c7448277e65 Validity Not Before: Jan 25 21:01:03 2026 GMT Not After : Jan 26 21:01:03 2026 GMT Subject: CN=8a740ac1a272e43c2392a51dbe6221dbc671d5c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:57:01:85:6b:ee:7f:2c:b8:0a:6a:24:71:e0: 51:29:cb:7d:ed:cc:3f:8f:b7:a9:3d:9a:07:d0:10: 65:43:5d:42:ed:5d:53:af:f7:3c:1c:50:74:e6:0f: eb:d3:8e:cf:06:81:c0:22:9d:e7:1e:85:8e:66:45: 6a:14:50:56:0a:44:0c:32:65:9b:62:1a:aa:88:45: 39:84:40:c4:a2:ac:c2:da:11:a6:ab:3b:d4:81:7b: 28:d0:e6:b8:49:17:0a:0c:ff:a8:2a:37:bc:d5:a3: 38:8c:40:8f:55:e9:fd:74:40:cb:c9:1c:e8:db:55: 86:3e:2c:6c:ce:fc:64:4f:82:6c:e1:78:63:73:8e: 8c:f5:49:2b:ed:dc:70:96:ab:cc:78:2d:5d:b9:36: a7:a7:61:10:91:64:58:71:c0:7e:c7:c5:18:da:0c: 29:73:bd:2c:59:af:5a:7f:e4:6e:74:2b:2e:a2:94: 45:27:61:8b:43:ae:56:20:93:dd:c7:13:27:40:49: 15:e6:73:60:a4:fc:c5:04:d5:50:f9:6e:e0:9f:42: eb:63:86:ca:89:73:d7:c9:8c:ee:4b:25:33:7c:70: 5e:8c:64:89:ac:04:84:7d:04:46:9e:eb:03:76:a9: 05:e2:fd:36:a2:88:d6:d9:88:d9:fd:21:ea:e6:dd: 9b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:74:0A:C1:A2:72:E4:3C:23:92:A5:1D:BE:62:21:DB:C6:71:D5:C5 X509v3 Authority Key Identifier: keyid:3D:E4:9B:18:44:FE:44:22:AF:BE:10:CD:D2:81:9C:74:48:27:7E:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:12:8b:e8:76:33:0c:1d:ae:89:dc:23:52:03:1c:f4:3f:3f: 37:0a:89:06:85:d9:28:e4:25:46:fa:0d:2a:71:0b:1e:05:a8: 7e:6b:8a:c0:b7:d2:09:c0:a8:88:2c:6e:2f:7f:5d:0f:90:52: e7:85:29:fa:5e:2c:a0:b4:6f:27:21:21:2e:59:74:e1:9c:f8: 6d:0f:74:21:fb:cc:61:b9:fe:d0:98:ab:87:50:c3:16:60:a0: dd:45:fa:42:fa:d3:c4:48:f4:3c:27:f0:f7:9f:fd:b3:43:27: f0:d0:c6:bb:9a:2f:4f:18:5f:f1:82:16:28:57:a6:7d:87:73: bc:4e:a4:d1:8c:8a:b4:a3:46:18:a5:e3:9f:12:4a:31:98:1f: 2d:eb:7c:51:2a:5f:4a:f8:12:b3:53:06:20:6b:62:81:d9:b5: 7d:38:77:e0:51:02:ae:3f:5a:e5:c8:8c:bf:02:64:ba:bb:25: c1:9c:0b:1e:84:2b:fd:6d:30:06:95:a5:0f:e5:a7:74:88:16: c3:5e:df:cd:cf:10:22:ce:0c:10:a8:7d:64:bf:08:f6:af:8d: 5f:f8:25:7a:34:89:32:5c:47:e0:e0:98:54:72:91:b2:9d:df: 9e:a5:da:7f:e9:c9:5f:ef:63:fe:a9:a1:7f:78:7e:cb:fc:15: 2e:8e:b7:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29dLayEbcgRUcN03qIqb/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkZTQ5YjE4NDRmZTQ0MjJhZmJlMTBjZGQyODE5Yzc0NDgy NzdlNjUwHhcNMjYwMTI1MjEwMTAzWhcNMjYwMTI2MjEwMTAzWjAzMTEwLwYDVQQD Eyg4YTc0MGFjMWEyNzJlNDNjMjM5MmE1MWRiZTYyMjFkYmM2NzFkNWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVcBhWvufyy4CmokceBRKct97cw/ j7epPZoH0BBlQ11C7V1Tr/c8HFB05g/r047PBoHAIp3nHoWOZkVqFFBWCkQMMmWb YhqqiEU5hEDEoqzC2hGmqzvUgXso0Oa4SRcKDP+oKje81aM4jECPVen9dEDLyRzo 21WGPixszvxkT4Js4Xhjc46M9Ukr7dxwlqvMeC1duTanp2EQkWRYccB+x8UY2gwp c70sWa9af+RudCsuopRFJ2GLQ65WIJPdxxMnQEkV5nNgpPzFBNVQ+W7gn0LrY4bK iXPXyYzuSyUzfHBejGSJrASEfQRGnusDdqkF4v02oojW2YjZ/SHq5t2bgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIp0CsGicuQ8I5KlHb5iIdvGcdXFMB8GA1UdIwQY MBaAFD3kmxhE/kQir74QzdKBnHRIJ35lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGVTYkdFVC1SQ0t2dmhETjBvR2NkRWduZm1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC84MWIxODgtMjU1ZC00OWM3LTlmOTgt MGFjOWI0ZDdlYWI3LzEvUGVTYkdFVC1SQ0t2dmhETjBvR2NkRWduZm1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC84MWIxODgtMjU1ZC00OWM3LTlmOTgtMGFjOWI0ZDdlYWI3 LzEvUGVTYkdFVC1SQ0t2dmhETjBvR2NkRWduZm1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwBKL6HYz DB2uidwjUgMc9D8/NwqJBoXZKOQlRvoNKnELHgWofmuKwLfSCcCoiCxuL39dD5BS 54Up+l4soLRvJyEhLll04Zz4bQ90IfvMYbn+0Jirh1DDFmCg3UX6QvrTxEj0PCfw 95/9s0Mn8NDGu5ovTxhf8YIWKFemfYdzvE6k0YyKtKNGGKXjnxJKMZgfLet8USpf SvgSs1MGIGtigdm1fTh34FECrj9a5ciMvwJkurslwZwLHoQr/W0wBpWlD+WndIgW w17fzc8QIs4MEKh9ZL8I9q+NX/glejSJMlxH4OCYVHKRsp3fnqXaf+nJX+9j/qmh f3h+y/wVLo63hw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:48:49 2026 by rpki-client