This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft File: pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft (raw, json) Hash identifier: AZcQ4rWrJiXEuNCtyR3+WvAm2s+piNdgmsVH6G0SyXg= Subject key identifier: 1A:E7:44:2D:DC:8E:06:F0:1E:1A:EE:9C:58:A6:5D:24:B5:C4:00:7C Authority key identifier: A6:33:72:5C:D5:DD:91:CF:19:0A:B3:A9:95:26:E8:98:35:78:56:EF Certificate issuer: /CN=a633725cd5dd91cf190ab3a99526e898357856ef Certificate serial: 019BF34FBBE64BA02EFF7E6C1FAE71596969 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 04:00:47 +0000 Manifest this update: Sun 25 Jan 2026 04:00:47 +0000 Manifest next update: Mon 26 Jan 2026 04:00:47 +0000 Files and hashes: 1: JCYIq9abXabyABSE5MBNKtlW6Ds.roa (hash: wyz0gi5oUZNHdIXWdMzjT6ryVOTn8WqxbAJlVCJ1Slc=) 2: gQlaDrKaYvl0-C-DyFPVtl0u3B4.roa (hash: A/ZwZg8++NTunxUO1oyToOusbEjGDF79YcXv8xOqsQM=) 3: pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl (hash: gOWnqrWLIZyUNY/r7+IHe8MrGA8crzw6NHWkDVim1AU=) 4: u0aDlmSdDj71EM-iDNS3bskqYP8.roa (hash: 7duuGh5xzVloGi3w0t9gMbtpB8qNHncN9NT4g5kJltI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:4f:bb:e6:4b:a0:2e:ff:7e:6c:1f:ae:71:59:69:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a633725cd5dd91cf190ab3a99526e898357856ef Validity Not Before: Jan 25 04:00:47 2026 GMT Not After : Jan 26 04:00:47 2026 GMT Subject: CN=1ae7442ddc8e06f01e1aee9c58a65d24b5c4007c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d2:40:7d:05:bb:5b:07:fd:4b:67:45:dc:57: 1d:3d:ae:34:21:77:2b:db:8d:34:ed:45:86:d0:76: 4d:bd:73:62:cd:b1:f7:d3:0a:cf:06:c2:12:d3:af: 93:33:78:f8:73:38:5f:5a:75:b0:43:c3:91:1a:b5: 9b:0e:31:17:7a:0d:af:40:be:97:97:da:25:1a:9f: c5:0c:9e:96:56:2d:3f:93:5d:64:19:a2:b0:6c:56: 6f:eb:2e:64:73:16:9f:50:a9:be:d2:4b:d9:ee:6f: 8f:34:8e:33:ed:4e:84:5f:66:db:78:6c:a7:e7:68: 37:79:23:be:2c:97:50:1a:3f:0b:81:dd:6f:9a:d5: 69:58:59:ed:b5:f3:fd:4d:0e:d6:83:fe:3a:79:c1: b3:97:c0:3a:94:5a:1c:c6:46:45:eb:81:d9:a8:ef: a9:da:88:1a:b7:51:7c:b6:79:77:e1:0c:ed:c3:05: c0:85:4e:6e:0b:2f:f8:7c:af:ce:5a:8a:7f:2d:cb: 19:da:a4:c1:34:6b:93:a5:26:01:9a:89:3d:2a:12: a1:a4:e4:97:bc:2b:cb:7f:40:8f:62:5f:f6:9d:b2: c4:08:fe:c8:f0:90:7a:6f:0a:ee:62:91:08:23:e3: 6d:31:9d:29:72:16:e6:ec:2b:84:8e:e7:1d:bb:e9: 28:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:E7:44:2D:DC:8E:06:F0:1E:1A:EE:9C:58:A6:5D:24:B5:C4:00:7C X509v3 Authority Key Identifier: keyid:A6:33:72:5C:D5:DD:91:CF:19:0A:B3:A9:95:26:E8:98:35:78:56:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:35:90:5e:e8:10:55:10:b1:4d:ee:ce:94:ee:d9:5c:70:0d: e4:73:24:f8:a0:bd:74:20:a7:85:e0:65:0c:9a:ab:50:07:4a: 09:0a:04:05:7c:bd:65:84:55:7f:55:be:68:8f:fd:a3:02:48: 8f:92:00:73:65:f5:2a:b9:9c:e3:56:f0:7b:ef:dc:67:9d:6f: 80:78:11:51:93:2b:6b:69:6c:b3:05:85:9d:5f:ed:31:6f:93: b4:16:33:c5:ba:b8:63:36:d7:c6:c5:5c:c8:27:0c:22:ac:e7: 2c:cd:02:a1:47:78:0a:bb:f6:1b:0f:47:0d:fe:c3:34:27:ed: 30:70:f9:05:25:75:c9:30:b3:70:a9:8b:b0:de:6e:71:b3:38: 14:27:e1:4f:6b:46:46:b5:7d:6d:1e:03:b2:4c:9e:c8:5d:5e: 6c:58:b9:d2:6a:49:c5:dc:86:70:93:a9:2d:d2:39:53:24:6b: 8a:8a:4e:84:6b:82:28:aa:08:34:52:07:49:d7:e3:ce:98:a4: dc:27:b1:9d:01:25:73:63:92:8f:15:dd:0e:5b:d1:99:36:25: 9b:e5:77:7b:03:8c:c4:b6:fc:23:5a:f1:ef:47:da:38:e0:28: 73:6a:d4:62:3c:45:69:1c:71:2a:60:42:27:81:63:ac:ac:61: 7e:c0:7c:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzT7vmS6Au/35sH65xWWlpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MzM3MjVjZDVkZDkxY2YxOTBhYjNhOTk1MjZlODk4MzU3 ODU2ZWYwHhcNMjYwMTI1MDQwMDQ3WhcNMjYwMTI2MDQwMDQ3WjAzMTEwLwYDVQQD EygxYWU3NDQyZGRjOGUwNmYwMWUxYWVlOWM1OGE2NWQyNGI1YzQwMDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstJAfQW7Wwf9S2dF3FcdPa40IXcr 24007UWG0HZNvXNizbH30wrPBsIS06+TM3j4czhfWnWwQ8ORGrWbDjEXeg2vQL6X l9olGp/FDJ6WVi0/k11kGaKwbFZv6y5kcxafUKm+0kvZ7m+PNI4z7U6EX2bbeGyn 52g3eSO+LJdQGj8Lgd1vmtVpWFnttfP9TQ7Wg/46ecGzl8A6lFocxkZF64HZqO+p 2ogat1F8tnl34QztwwXAhU5uCy/4fK/OWop/LcsZ2qTBNGuTpSYBmok9KhKhpOSX vCvLf0CPYl/2nbLECP7I8JB6bwruYpEII+NtMZ0pchbm7CuEjucdu+koAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBrnRC3cjgbwHhrunFimXSS1xAB8MB8GA1UdIwQY MBaAFKYzclzV3ZHPGQqzqZUm6Jg1eFbvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGpOeVhOWGRrYzhaQ3JPcGxTYm9tRFY0VnU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC81Yjg1NmEtYTkwZC00NzkxLTljMTAt YzBiODEzYjRlYzdlLzEvcGpOeVhOWGRrYzhaQ3JPcGxTYm9tRFY0VnU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC81Yjg1NmEtYTkwZC00NzkxLTljMTAtYzBiODEzYjRlYzdl LzEvcGpOeVhOWGRrYzhaQ3JPcGxTYm9tRFY0VnU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMDWQXugQ VRCxTe7OlO7ZXHAN5HMk+KC9dCCnheBlDJqrUAdKCQoEBXy9ZYRVf1W+aI/9owJI j5IAc2X1Krmc41bwe+/cZ51vgHgRUZMra2lsswWFnV/tMW+TtBYzxbq4YzbXxsVc yCcMIqznLM0CoUd4Crv2Gw9HDf7DNCftMHD5BSV1yTCzcKmLsN5ucbM4FCfhT2tG RrV9bR4DskyeyF1ebFi50mpJxdyGcJOpLdI5UyRriopOhGuCKKoINFIHSdfjzpik 3CexnQElc2OSjxXdDlvRmTYlm+V3ewOMxLb8I1rx70faOOAoc2rUYjxFaRxxKmBC J4FjrKxhfsB8fg== -----END CERTIFICATE-----Generated at Sun Jan 25 15:34:25 2026 by rpki-client