This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft File: pu1EK5HU6Dpt45-2eXGh55xrHtU.mft (raw, json) Hash identifier: tKv3ha0a3hBS8c241jXAZClLNCovMIJuO1rman7GWjk= Subject key identifier: 11:A2:F2:3C:DF:26:56:C8:74:B8:DF:DB:88:A3:D8:BA:A6:B9:44:4F Authority key identifier: A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5 Certificate issuer: /CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5 Certificate serial: 019BF619C09EE07EC35406B954084F8BB627 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft Manifest number: 17ED Signing time: Sun 25 Jan 2026 17:00:41 +0000 Manifest this update: Sun 25 Jan 2026 17:00:41 +0000 Manifest next update: Mon 26 Jan 2026 17:00:41 +0000 Files and hashes: 1: hdnWz3HdQxPoPCQp2KpJgiW0GYk.roa (hash: iMGwa4BAxWRevm4MAo9XcPLpOn3GuQnZbwXs5mOFnXs=) 2: mQL1nW7K7ybu0TZ9G8v3WzDDFmg.roa (hash: O084txLhwyZ8zQFJ9DRJsh8HYo5IGT97mu78wCO555Y=) 3: pu1EK5HU6Dpt45-2eXGh55xrHtU.crl (hash: Rrpc/z/qTbLp5da+6+fC5V0uoVcsrbPhcIgX2gVkeWY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:c0:9e:e0:7e:c3:54:06:b9:54:08:4f:8b:b6:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5 Validity Not Before: Jan 25 17:00:41 2026 GMT Not After : Jan 26 17:00:41 2026 GMT Subject: CN=11a2f23cdf2656c874b8dfdb88a3d8baa6b9444f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:37:29:5a:a8:53:7f:b8:73:ee:54:5a:34:86: 61:10:ea:a9:e2:9b:c7:a6:c6:6a:0e:f2:5f:e7:1a: 5a:0c:69:19:dc:3f:f2:25:45:39:60:be:85:4e:7d: 01:95:c9:91:7a:78:ef:76:d5:9a:70:71:6c:84:50: b2:e3:6c:32:d8:fc:ca:f8:2c:48:0e:2b:13:fb:6e: 5d:e0:2c:19:d7:d0:60:60:f2:7a:be:fc:7d:d4:7f: fc:da:f2:01:5d:a3:32:d6:5a:c7:08:5b:9f:93:8b: 11:b6:bd:a7:36:22:29:c8:89:30:34:ad:72:57:1a: 70:95:02:62:89:15:07:a5:3d:a7:9e:60:84:07:74: d0:06:50:be:91:fd:df:89:64:98:2d:df:33:e3:b0: c9:a1:17:5b:f4:9d:1e:f2:f8:2f:e6:36:be:c9:cd: e8:f1:24:29:d7:3a:85:c9:05:20:cf:1b:21:79:4f: 7d:91:dd:8d:9d:05:b5:a3:c3:42:ba:47:86:f8:1c: d1:47:b2:b8:c6:b5:5a:57:97:4f:0c:1c:c5:51:a6: 45:e6:d5:c4:07:8f:4a:22:96:f1:97:ee:77:96:15: 07:24:54:83:4a:86:cd:f5:b9:4f:17:ef:bc:29:10: d1:ee:c9:a0:5f:5e:d5:3f:d5:af:56:e4:6a:6f:0f: 3b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A2:F2:3C:DF:26:56:C8:74:B8:DF:DB:88:A3:D8:BA:A6:B9:44:4F X509v3 Authority Key Identifier: keyid:A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:84:2d:99:ae:2e:14:1e:dd:53:88:db:01:cd:b0:87:47:95: 51:be:e0:9c:4e:80:3f:96:61:d8:ca:34:95:50:69:3a:31:b8: e8:9a:54:fb:34:d7:c6:fd:4b:c4:34:e1:d1:20:a3:50:f4:0b: bb:ac:92:72:ce:2a:75:3a:8c:5b:eb:fd:fb:dc:d9:bf:06:36: 9e:7a:f3:23:22:04:4c:16:03:8b:1e:f7:66:e1:7d:93:55:5a: 3e:ea:80:89:4e:73:b1:79:0f:11:df:77:a5:7b:e3:48:78:ea: 51:9c:f5:2b:67:b0:59:c5:e4:0a:f0:e5:d8:aa:30:c9:f2:06: d7:90:fc:57:ef:36:f4:59:14:a1:d0:a7:4c:7a:5a:4a:fd:f6: 23:0d:e2:1a:65:47:9a:7a:4f:a0:06:b7:1e:d8:4f:e7:00:e3: 88:ef:c1:04:01:6d:b5:be:05:95:0f:fa:f8:30:21:26:3e:4f: b0:ac:97:cf:eb:79:35:5d:6d:b7:ba:ef:24:5b:21:e7:c0:97: 77:c1:c6:83:ac:15:b7:bf:dd:f0:47:0e:52:01:62:3e:1d:f1: d1:3f:c3:82:3c:61:4b:4b:b3:ac:b8:90:6d:40:92:6b:e5:1b: d7:ab:65:ea:ab:3f:ee:f6:c9:61:96:ea:64:c0:53:b8:d6:dc: 74:85:f8:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GcCe4H7DVAa5VAhPi7YnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2ZWQ0NDJiOTFkNGU4M2E2ZGUzOWZiNjc5NzFhMWU3OWM2 YjFlZDUwHhcNMjYwMTI1MTcwMDQxWhcNMjYwMTI2MTcwMDQxWjAzMTEwLwYDVQQD EygxMWEyZjIzY2RmMjY1NmM4NzRiOGRmZGI4OGEzZDhiYWE2Yjk0NDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDcpWqhTf7hz7lRaNIZhEOqp4pvH psZqDvJf5xpaDGkZ3D/yJUU5YL6FTn0BlcmRenjvdtWacHFshFCy42wy2PzK+CxI DisT+25d4CwZ19BgYPJ6vvx91H/82vIBXaMy1lrHCFufk4sRtr2nNiIpyIkwNK1y VxpwlQJiiRUHpT2nnmCEB3TQBlC+kf3fiWSYLd8z47DJoRdb9J0e8vgv5ja+yc3o 8SQp1zqFyQUgzxsheU99kd2NnQW1o8NCukeG+BzRR7K4xrVaV5dPDBzFUaZF5tXE B49KIpbxl+53lhUHJFSDSobN9blPF++8KRDR7smgX17VP9WvVuRqbw87UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBGi8jzfJlbIdLjf24ij2LqmuURPMB8GA1UdIwQY MBaAFKbtRCuR1Og6beOftnlxoeecax7VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHUxRUs1SFU2RHB0NDUtMmVYR2g1NXhySHRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS81NTNkYzYtMTJkMC00ZDRhLWEyOTQt OTdjNWQ1OWIwYmJmLzEvcHUxRUs1SFU2RHB0NDUtMmVYR2g1NXhySHRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS81NTNkYzYtMTJkMC00ZDRhLWEyOTQtOTdjNWQ1OWIwYmJm LzEvcHUxRUs1SFU2RHB0NDUtMmVYR2g1NXhySHRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUoQtma4u FB7dU4jbAc2wh0eVUb7gnE6AP5Zh2Mo0lVBpOjG46JpU+zTXxv1LxDTh0SCjUPQL u6yScs4qdTqMW+v9+9zZvwY2nnrzIyIETBYDix73ZuF9k1VaPuqAiU5zsXkPEd93 pXvjSHjqUZz1K2ewWcXkCvDl2KowyfIG15D8V+829FkUodCnTHpaSv32Iw3iGmVH mnpPoAa3HthP5wDjiO/BBAFttb4FlQ/6+DAhJj5PsKyXz+t5NV1tt7rvJFsh58CX d8HGg6wVt7/d8EcOUgFiPh3x0T/DgjxhS0uzrLiQbUCSa+Ub16tl6qs/7vbJYZbq ZMBTuNbcdIX4iA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:00:52 2026 by rpki-client