This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft File: PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft (raw, json) Hash identifier: xHHlJHyzh+wlimtfbjztD1OH5MzcvP0MBRYjvIe61EA= Subject key identifier: 46:2C:76:6D:7F:54:9E:42:15:90:89:D0:D6:A8:10:A6:1E:7C:87:94 Authority key identifier: 3C:FE:E2:EA:3C:DE:08:73:A1:91:BD:D7:95:22:73:99:B5:6A:43:BA Certificate issuer: /CN=3cfee2ea3cde0873a191bdd795227399b56a43ba Certificate serial: 019BF9895BBFEE35C272534581DB22AC2C77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft Manifest number: 010F Signing time: Mon 26 Jan 2026 09:01:27 +0000 Manifest this update: Mon 26 Jan 2026 09:01:27 +0000 Manifest next update: Tue 27 Jan 2026 09:01:27 +0000 Files and hashes: 1: PP7i6jzeCHOhkb3XlSJzmbVqQ7o.crl (hash: dfbN8yrnU7vyU+tLKBk+F2h4zb+rkphkaALYjuyEAss=) 2: U1VjosqpBiqy2ZFxYLqdYxKnum4.roa (hash: AvN5YNAvDxw0bLWGw+RbIchpQR/eRlfnMr+l8l+QHy8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft rsync://rpki.ripe.net/repository/DEFAULT/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:89:5b:bf:ee:35:c2:72:53:45:81:db:22:ac:2c:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cfee2ea3cde0873a191bdd795227399b56a43ba Validity Not Before: Jan 26 09:01:27 2026 GMT Not After : Jan 27 09:01:27 2026 GMT Subject: CN=462c766d7f549e42159089d0d6a810a61e7c8794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:68:80:7e:03:71:4f:f5:5b:1b:cf:45:3c:c1: 2d:ec:53:80:ba:33:c1:a0:4f:e2:c1:96:89:2e:6e: 60:e4:2c:f3:19:d1:fc:93:65:d2:04:d8:e7:00:84: 93:39:57:2c:aa:fa:1f:db:18:38:64:2c:10:fa:6b: 6d:d4:ee:45:f4:99:ae:01:b7:b5:74:aa:e8:1c:87: 5e:ce:8f:4f:72:1a:58:c3:23:62:11:74:98:d2:ea: c8:8f:15:2a:ab:cd:32:0b:02:3f:54:ac:75:10:33: 67:b9:7f:57:99:51:ec:1c:f3:fc:f6:68:c0:6b:3e: 41:0d:67:1f:5f:07:98:2d:1e:46:12:ee:04:9f:ef: ed:0d:56:dd:40:8f:9a:18:e5:54:f6:54:52:56:ec: 7e:31:ae:f3:e1:08:5d:d0:2f:46:9b:1e:2a:96:70: f8:3f:97:ce:ca:52:67:18:3d:46:3d:b6:71:d7:82: 95:3b:64:67:2e:46:dd:eb:4a:2a:82:4b:88:fb:58: 33:48:4e:4f:52:d6:23:3a:11:59:4a:2e:b8:b5:38: aa:f6:b4:bb:58:5f:4f:fc:e6:66:25:6b:25:c2:f6: a0:ae:a5:8c:9f:c4:ac:31:f9:e2:5a:ef:9a:fa:7c: 64:61:56:90:1a:9a:9f:3d:33:d3:43:09:10:fc:50: 34:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:2C:76:6D:7F:54:9E:42:15:90:89:D0:D6:A8:10:A6:1E:7C:87:94 X509v3 Authority Key Identifier: keyid:3C:FE:E2:EA:3C:DE:08:73:A1:91:BD:D7:95:22:73:99:B5:6A:43:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:c2:16:ee:02:b2:08:60:29:a3:6c:9d:e8:2c:bb:2d:f6:20: 41:2b:77:aa:17:c1:d0:fe:f4:09:1d:8c:05:3a:f0:1d:58:c3: 05:9b:7c:25:2f:81:df:75:e5:ae:5c:06:c6:a4:b6:4a:1d:eb: 10:44:61:95:74:eb:ab:8c:93:0c:64:f7:e9:80:81:ce:bd:7d: c1:61:c6:24:78:af:7a:e3:6b:b7:10:f9:e1:60:92:c0:61:a4: 8c:88:95:a8:93:9a:30:36:9e:79:75:e5:44:0e:b0:d5:45:85: 9f:a1:98:03:77:36:52:05:ec:bf:33:4f:80:32:dc:26:c5:35: 50:ab:f4:e0:a8:2d:a0:59:05:6a:24:6b:b2:9c:53:20:e5:de: 21:d2:b3:a1:d3:b3:48:6f:5a:c8:b8:f4:86:e8:3e:af:87:ac: 05:21:0f:9e:8b:97:4e:06:da:46:af:ab:3c:5a:06:21:46:80: c5:6d:94:f4:44:b3:7a:a0:bb:54:62:31:35:4a:c1:33:68:8d: 9b:eb:50:7c:b1:d6:b2:fd:91:e6:21:ab:48:39:60:29:b4:3d: 2e:91:81:65:bb:91:1e:61:e5:c3:7c:59:1a:bb:eb:71:f4:c6: 73:17:d0:0d:e8:83:e0:0b:cb:f3:e5:bf:e2:03:09:d3:26:04: ab:6a:af:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5iVu/7jXCclNFgdsirCx3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjZmVlMmVhM2NkZTA4NzNhMTkxYmRkNzk1MjI3Mzk5YjU2 YTQzYmEwHhcNMjYwMTI2MDkwMTI3WhcNMjYwMTI3MDkwMTI3WjAzMTEwLwYDVQQD Eyg0NjJjNzY2ZDdmNTQ5ZTQyMTU5MDg5ZDBkNmE4MTBhNjFlN2M4Nzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmiAfgNxT/VbG89FPMEt7FOAujPB oE/iwZaJLm5g5CzzGdH8k2XSBNjnAISTOVcsqvof2xg4ZCwQ+mtt1O5F9JmuAbe1 dKroHIdezo9PchpYwyNiEXSY0urIjxUqq80yCwI/VKx1EDNnuX9XmVHsHPP89mjA az5BDWcfXweYLR5GEu4En+/tDVbdQI+aGOVU9lRSVux+Ma7z4Qhd0C9Gmx4qlnD4 P5fOylJnGD1GPbZx14KVO2RnLkbd60oqgkuI+1gzSE5PUtYjOhFZSi64tTiq9rS7 WF9P/OZmJWslwvagrqWMn8SsMfniWu+a+nxkYVaQGpqfPTPTQwkQ/FA0dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEYsdm1/VJ5CFZCJ0NaoEKYefIeUMB8GA1UdIwQY MBaAFDz+4uo83ghzoZG915Uic5m1akO6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFA3aTZqemVDSE9oa2IzWGxTSnptYlZxUTdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9mNjY4ZTAtZmIzNi00NWEwLTk3MWYt NmIyZjlkMTUxNTE5LzEvUFA3aTZqemVDSE9oa2IzWGxTSnptYlZxUTdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9mNjY4ZTAtZmIzNi00NWEwLTk3MWYtNmIyZjlkMTUxNTE5 LzEvUFA3aTZqemVDSE9oa2IzWGxTSnptYlZxUTdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYMIW7gKy CGApo2yd6Cy7LfYgQSt3qhfB0P70CR2MBTrwHVjDBZt8JS+B33XlrlwGxqS2Sh3r EERhlXTrq4yTDGT36YCBzr19wWHGJHiveuNrtxD54WCSwGGkjIiVqJOaMDaeeXXl RA6w1UWFn6GYA3c2UgXsvzNPgDLcJsU1UKv04KgtoFkFaiRrspxTIOXeIdKzodOz SG9ayLj0hug+r4esBSEPnouXTgbaRq+rPFoGIUaAxW2U9ESzeqC7VGIxNUrBM2iN m+tQfLHWsv2R5iGrSDlgKbQ9LpGBZbuRHmHlw3xZGrvrcfTGcxfQDeiD4AvL8+W/ 4gMJ0yYEq2qvxQ== -----END CERTIFICATE-----Generated at Mon Jan 26 12:41:35 2026 by rpki-client