This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft File: pCzz6j9GGa3XsfheXbx2jNPRdC0.mft (raw, json) Hash identifier: ABgbuf4lvJEy68d7HOZwpmN2C1aeURO5arybTMzg2og= Subject key identifier: AD:D0:8F:F3:73:B8:DD:C9:B9:63:9A:48:FE:76:04:51:49:5C:64:21 Authority key identifier: A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D Certificate issuer: /CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d Certificate serial: 019BFB0A2FC15980F47C54C84A4C31688B4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 16:01:47 +0000 Manifest this update: Mon 26 Jan 2026 16:01:47 +0000 Manifest next update: Tue 27 Jan 2026 16:01:47 +0000 Files and hashes: 1: Urq1eK2xjT76TDiGVNPLNYSAots.roa (hash: JIPIWUvk2jdNeoap+skOWO5/nkQDUADjKMBqk5o7Ql4=) 2: fUJVfPMe1XGExx7fdEk0_IUNnjQ.roa (hash: FC4xYnyMIWrY9agdhsu1OBRUWLqsl9NHbIz4gZTG77I=) 3: pCzz6j9GGa3XsfheXbx2jNPRdC0.crl (hash: rVLXqTPmQyTJn8VGnpBnGOn8Caf3za4b75qMmc6HqC4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:0a:2f:c1:59:80:f4:7c:54:c8:4a:4c:31:68:8b:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d Validity Not Before: Jan 26 16:01:47 2026 GMT Not After : Jan 27 16:01:47 2026 GMT Subject: CN=add08ff373b8ddc9b9639a48fe760451495c6421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3a:5f:98:9d:77:78:58:4b:6d:de:e7:c8:bb: 34:39:4e:a4:87:70:df:6b:3f:f4:0d:71:4c:3e:6c: f3:9b:3f:c3:38:0e:01:28:f2:bd:3f:b0:7f:90:a6: ed:d0:db:c1:11:f0:13:bc:c6:f4:77:da:43:e1:6e: 6b:64:16:cc:59:94:dd:9b:28:df:ed:db:bd:53:73: 0c:9c:8a:ec:c9:92:86:4d:86:9d:9e:34:d8:89:4f: a1:4f:d0:a7:19:c9:1a:7f:fe:ea:1c:78:9d:03:48: e4:e8:21:26:fc:38:18:49:c4:e3:80:80:b2:7f:27: 3a:c9:52:bc:fc:c3:68:ec:b7:a1:b0:f3:31:17:ed: 8b:45:39:10:b1:e1:41:54:c5:26:7f:c7:5f:5a:42: b0:b7:bf:0b:21:f7:54:58:c1:2a:c2:27:71:4e:dc: b1:7c:91:88:f1:19:a4:54:5a:57:f8:1b:45:94:7a: 76:5b:0c:71:a3:2c:77:50:ec:02:85:4b:98:c0:d3: f1:86:6e:30:38:61:ef:0c:51:c4:9b:d8:f2:4f:c7: 69:e1:88:29:2c:f4:4a:02:3a:01:c4:f0:89:b3:d5: 73:18:d0:0f:86:ca:58:51:77:23:48:8a:d4:c4:89: 01:07:4e:73:dd:c9:9f:00:c4:82:aa:77:ce:9a:e6: ae:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D0:8F:F3:73:B8:DD:C9:B9:63:9A:48:FE:76:04:51:49:5C:64:21 X509v3 Authority Key Identifier: keyid:A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:9a:ed:90:c1:57:97:64:44:ed:e4:31:b1:0a:ab:b8:52:5d: 28:0b:ce:30:da:6d:25:b6:af:71:75:de:21:b6:62:2a:d6:81: a7:4b:ca:7a:84:a0:d6:33:b0:d4:60:1c:cc:8a:2c:7d:f9:6c: 9b:50:29:c8:e3:ed:1f:9f:1d:a3:04:b8:9b:92:59:b6:d5:06: 97:7a:d6:7d:89:de:ef:47:9e:9a:90:23:3b:69:9e:9f:d2:15: 01:f7:43:d4:3c:fd:10:a7:c9:7d:9f:5e:98:63:4b:18:7f:1a: bf:89:d8:54:c3:f7:41:92:aa:1d:f5:bd:32:27:e4:fd:09:0f: 04:b2:22:4a:53:68:5e:95:4d:22:fe:60:76:be:36:7f:0a:68: 43:29:e7:8b:0b:50:7b:c7:d9:c0:b6:bc:a2:4c:4d:f3:b8:0c: fa:e1:4f:ba:a8:d1:06:a3:da:e4:6f:a9:25:df:4b:b2:4f:85: d1:1d:5b:32:09:4c:ae:9e:e6:44:ce:ac:8a:86:f9:72:80:b9: f8:dd:fe:cf:9e:8f:fc:90:bd:ac:fa:bf:ed:06:cc:42:da:8c: fa:32:4e:15:8c:b2:cf:9a:e7:78:ea:75:c9:a1:d3:e0:6b:98: 2e:4c:9b:e4:99:bb:d4:ce:80:56:37:64:cc:02:5f:d4:e4:ce: 39:09:6e:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7Ci/BWYD0fFTISkwxaItNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MmNmM2VhM2Y0NjE5YWRkN2IxZjg1ZTVkYmM3NjhjZDNk MTc0MmQwHhcNMjYwMTI2MTYwMTQ3WhcNMjYwMTI3MTYwMTQ3WjAzMTEwLwYDVQQD EyhhZGQwOGZmMzczYjhkZGM5Yjk2MzlhNDhmZTc2MDQ1MTQ5NWM2NDIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTpfmJ13eFhLbd7nyLs0OU6kh3Df az/0DXFMPmzzmz/DOA4BKPK9P7B/kKbt0NvBEfATvMb0d9pD4W5rZBbMWZTdmyjf 7du9U3MMnIrsyZKGTYadnjTYiU+hT9CnGckaf/7qHHidA0jk6CEm/DgYScTjgICy fyc6yVK8/MNo7LehsPMxF+2LRTkQseFBVMUmf8dfWkKwt78LIfdUWMEqwidxTtyx fJGI8RmkVFpX+BtFlHp2Wwxxoyx3UOwChUuYwNPxhm4wOGHvDFHEm9jyT8dp4Ygp LPRKAjoBxPCJs9VzGNAPhspYUXcjSIrUxIkBB05z3cmfAMSCqnfOmuaujQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK3Qj/NzuN3JuWOaSP52BFFJXGQhMB8GA1UdIwQY MBaAFKQs8+o/Rhmt17H4Xl28dozT0XQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEN6ejZqOUdHYTNYc2ZoZVhieDJqTlBSZEMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81NzI2OWItMGY3MC00NmNmLWJjZTIt Yzc3NzUxNTlmYzgyLzEvcEN6ejZqOUdHYTNYc2ZoZVhieDJqTlBSZEMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC81NzI2OWItMGY3MC00NmNmLWJjZTItYzc3NzUxNTlmYzgy LzEvcEN6ejZqOUdHYTNYc2ZoZVhieDJqTlBSZEMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu5rtkMFX l2RE7eQxsQqruFJdKAvOMNptJbavcXXeIbZiKtaBp0vKeoSg1jOw1GAczIosffls m1ApyOPtH58dowS4m5JZttUGl3rWfYne70eempAjO2men9IVAfdD1Dz9EKfJfZ9e mGNLGH8av4nYVMP3QZKqHfW9Mifk/QkPBLIiSlNoXpVNIv5gdr42fwpoQynniwtQ e8fZwLa8okxN87gM+uFPuqjRBqPa5G+pJd9Lsk+F0R1bMglMrp7mRM6siob5coC5 +N3+z56P/JC9rPq/7QbMQtqM+jJOFYyyz5rneOp1yaHT4GuYLkyb5Jm71M6AVjdk zAJf1OTOOQlurg== -----END CERTIFICATE-----Generated at Mon Jan 26 18:23:30 2026 by rpki-client