This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft File: PjMt0plMbuiUNhWKLqwfSCkizSo.mft (raw, json) Hash identifier: 5UaMhIi1Gmq+7KyG4+eNQhJT95cwDEOwY9brm8DcQZU= Subject key identifier: 24:16:56:95:6F:C1:3A:5B:AA:55:50:40:78:59:3F:43:4B:00:10:7C Authority key identifier: 3E:33:2D:D2:99:4C:6E:E8:94:36:15:8A:2E:AC:1F:48:29:22:CD:2A Certificate issuer: /CN=3e332dd2994c6ee89436158a2eac1f482922cd2a Certificate serial: 019BF4D0DF6299A3B61CBA5DE6F352D99C21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PjMt0plMbuiUNhWKLqwfSCkizSo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft Manifest number: 08FF Signing time: Sun 25 Jan 2026 11:01:27 +0000 Manifest this update: Sun 25 Jan 2026 11:01:27 +0000 Manifest next update: Mon 26 Jan 2026 11:01:27 +0000 Files and hashes: 1: 8xmLEuWVoq-luhpUPZd1WI6D0Js.roa (hash: j13xyv2Txbt+npMeAxt4bkLbD3ednHhJEFGvJw7Inx4=) 2: C-zWCgwAxUcB5PR-BZP8SY0imsc.roa (hash: tH6y5VegxHL/FivasKZlqGMSC8JeobbFVY2ZXp/Rp9w=) 3: PjMt0plMbuiUNhWKLqwfSCkizSo.crl (hash: iQqBnFZvuEsVbpIYvWj4oq/3+hXogmVhDDgNdLZ56qk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft rsync://rpki.ripe.net/repository/DEFAULT/PjMt0plMbuiUNhWKLqwfSCkizSo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:df:62:99:a3:b6:1c:ba:5d:e6:f3:52:d9:9c:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e332dd2994c6ee89436158a2eac1f482922cd2a Validity Not Before: Jan 25 11:01:27 2026 GMT Not After : Jan 26 11:01:27 2026 GMT Subject: CN=241656956fc13a5baa55504078593f434b00107c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f9:94:1d:10:19:9a:26:c1:da:90:ce:be:da: 12:80:02:35:40:fb:a6:81:ad:71:c3:60:e8:b5:72: 2e:02:99:1d:ec:3f:ee:a7:bb:cb:21:cc:78:0f:e9: 70:fd:b9:72:1a:7d:58:98:0d:bb:e5:13:1b:8b:f3: 84:be:d2:b3:d2:f3:2e:35:60:62:41:fb:9b:90:15: f0:18:56:8d:ca:6b:7d:79:1b:26:ab:9f:78:7c:fb: 42:1a:7b:53:ff:e1:1e:a2:f9:57:de:b5:59:cb:1f: e6:85:8f:6c:fe:3d:ca:e4:dc:1f:1a:69:59:f1:28: 5f:01:54:ad:cf:af:0f:e7:25:bf:50:19:47:be:39: b7:54:0f:04:66:fb:46:57:d3:84:06:22:51:67:65: 92:53:04:2d:89:d6:cf:5c:74:ed:9a:80:64:9c:2f: 12:23:a9:3b:e8:3a:03:90:17:9f:07:10:d0:1c:a9: 1c:f7:0a:6f:88:1b:38:63:d9:05:0f:6b:dd:e6:ac: 59:cd:ca:44:e0:6a:50:ab:a4:61:3e:1a:e8:70:46: 40:1b:aa:f6:ac:ca:24:e5:2c:2c:40:0d:0a:7b:f9: fe:46:00:ab:a6:d8:9a:68:da:93:c5:7c:06:d2:c6: be:c3:81:cb:63:55:8a:b5:bf:7d:4d:a5:0c:72:43: ba:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:16:56:95:6F:C1:3A:5B:AA:55:50:40:78:59:3F:43:4B:00:10:7C X509v3 Authority Key Identifier: keyid:3E:33:2D:D2:99:4C:6E:E8:94:36:15:8A:2E:AC:1F:48:29:22:CD:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PjMt0plMbuiUNhWKLqwfSCkizSo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:c0:bb:10:58:aa:a3:7a:7f:0c:0a:98:f7:89:d2:40:42:4b: a3:c5:aa:6c:ab:b2:87:4c:e8:96:eb:0e:6c:09:b1:ad:c5:57: 46:f1:5f:b0:d3:59:e2:49:48:64:2b:45:80:f1:d2:f8:66:14: 6e:9f:ec:87:40:0e:b9:0f:ea:2a:fd:81:b7:99:8a:a3:25:56: 58:cc:67:01:9f:28:9f:f2:aa:86:0f:13:fe:26:d9:9a:7a:77: 86:6f:7d:b8:8c:3c:91:1c:9a:a7:8b:cc:ab:16:bd:3f:9f:58: 6e:9b:0e:64:ba:1c:8f:a6:1a:a6:0f:2c:5f:b6:d8:6e:bc:39: 2b:10:73:df:c5:fc:c6:c1:e8:4a:a9:b1:df:47:7a:97:11:58: c3:18:08:e4:54:75:4c:84:34:0c:23:5b:af:ff:51:50:be:52: 19:4e:39:46:49:b1:8e:06:93:49:5f:76:ee:0f:d5:1f:2f:96: 1f:a3:cc:23:0c:eb:6a:b4:58:27:3d:73:69:22:3b:08:60:00: 61:96:9e:42:25:f2:4c:1c:eb:05:8d:53:43:ff:76:68:63:b9: 98:65:43:df:8c:04:19:4c:58:9c:b1:65:57:1f:34:22:63:91: 88:00:f2:31:6d:82:1e:3f:7a:ab:f5:f9:ff:24:73:f3:4e:de: c5:eb:f4:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00N9imaO2HLpd5vNS2ZwhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMzMyZGQyOTk0YzZlZTg5NDM2MTU4YTJlYWMxZjQ4Mjky MmNkMmEwHhcNMjYwMTI1MTEwMTI3WhcNMjYwMTI2MTEwMTI3WjAzMTEwLwYDVQQD EygyNDE2NTY5NTZmYzEzYTViYWE1NTUwNDA3ODU5M2Y0MzRiMDAxMDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPmUHRAZmibB2pDOvtoSgAI1QPum ga1xw2DotXIuApkd7D/up7vLIcx4D+lw/blyGn1YmA275RMbi/OEvtKz0vMuNWBi QfubkBXwGFaNymt9eRsmq594fPtCGntT/+EeovlX3rVZyx/mhY9s/j3K5NwfGmlZ 8ShfAVStz68P5yW/UBlHvjm3VA8EZvtGV9OEBiJRZ2WSUwQtidbPXHTtmoBknC8S I6k76DoDkBefBxDQHKkc9wpviBs4Y9kFD2vd5qxZzcpE4GpQq6RhPhrocEZAG6r2 rMok5SwsQA0Ke/n+RgCrptiaaNqTxXwG0sa+w4HLY1WKtb99TaUMckO60QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCQWVpVvwTpbqlVQQHhZP0NLABB8MB8GA1UdIwQY MBaAFD4zLdKZTG7olDYVii6sH0gpIs0qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGpNdDBwbE1idWlVTmhXS0xxd2ZTQ2tpelNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82MDhlMjEtNmE0MC00NzExLTljODMt ZDAyNGFkNGI3YmViLzEvUGpNdDBwbE1idWlVTmhXS0xxd2ZTQ2tpelNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC82MDhlMjEtNmE0MC00NzExLTljODMtZDAyNGFkNGI3YmVi LzEvUGpNdDBwbE1idWlVTmhXS0xxd2ZTQ2tpelNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADsC7EFiq o3p/DAqY94nSQEJLo8WqbKuyh0zolusObAmxrcVXRvFfsNNZ4klIZCtFgPHS+GYU bp/sh0AOuQ/qKv2Bt5mKoyVWWMxnAZ8on/Kqhg8T/ibZmnp3hm99uIw8kRyap4vM qxa9P59YbpsOZLocj6Yapg8sX7bYbrw5KxBz38X8xsHoSqmx30d6lxFYwxgI5FR1 TIQ0DCNbr/9RUL5SGU45RkmxjgaTSV927g/VHy+WH6PMIwzrarRYJz1zaSI7CGAA YZaeQiXyTBzrBY1TQ/92aGO5mGVD34wEGUxYnLFlVx80ImORiADyMW2CHj96q/X5 /yRz807exev0/w== -----END CERTIFICATE-----Generated at Sun Jan 25 17:01:58 2026 by rpki-client