This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft File: PZQks8jnL3RqWesZlFWqNkajpFc.mft (raw, json) Hash identifier: X3xT9zeIqcrUIXy7Twf9C1UJ8XoARoNdOi/geSyxxzY= Subject key identifier: 90:CD:BD:14:8B:6E:1D:5E:A2:CB:3C:A7:8F:64:66:26:87:97:B1:37 Authority key identifier: 3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57 Certificate issuer: /CN=3d9424b3c8e72f746a59eb199455aa3646a3a457 Certificate serial: 019BF79AC14BBECE58AA77591DF58CD3D25E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft Manifest number: 17EA Signing time: Mon 26 Jan 2026 00:01:12 +0000 Manifest this update: Mon 26 Jan 2026 00:01:12 +0000 Manifest next update: Tue 27 Jan 2026 00:01:12 +0000 Files and hashes: 1: PZQks8jnL3RqWesZlFWqNkajpFc.crl (hash: BgeJQESHvQymoFFbwa32SdBSICicRVQE7H93yUlVdMw=) 2: S31jWM3wEsReURsulHI7U8Kz478.roa (hash: /Sp5r8Qxi7xeH5fyeueoA88dFZr2CShlD/FHWPU4Yh8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:c1:4b:be:ce:58:aa:77:59:1d:f5:8c:d3:d2:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d9424b3c8e72f746a59eb199455aa3646a3a457 Validity Not Before: Jan 26 00:01:12 2026 GMT Not After : Jan 27 00:01:12 2026 GMT Subject: CN=90cdbd148b6e1d5ea2cb3ca78f6466268797b137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:03:61:a5:3c:e7:96:2d:03:38:bd:76:23:34: 68:ff:22:00:f9:1c:ef:5e:73:e8:e7:66:eb:a0:50: 93:3c:ac:f9:b8:c2:bc:92:85:68:12:79:f8:e1:4a: 4d:f7:62:a9:80:a9:7d:0e:34:54:ec:a5:5e:b1:89: d5:af:53:d7:26:ee:03:a3:e1:49:00:3f:c8:00:68: 68:b6:a3:97:54:08:97:d6:1c:c1:88:e9:ef:6c:19: c2:81:a9:14:d1:6c:8e:62:4c:56:cc:ad:5d:61:fe: 56:9d:d0:bf:db:45:38:45:94:76:f0:b1:ca:14:85: 25:05:50:dc:f9:69:e6:11:8c:4d:87:1c:58:46:b2: 00:3d:f3:5f:85:ff:23:4b:34:c4:92:d1:31:be:6f: 42:86:83:1f:b8:4d:8b:34:22:5d:a5:6e:29:85:9e: e1:e9:9b:23:4f:8f:87:79:00:c2:9e:fd:bd:58:1c: 5a:40:be:aa:5e:31:bf:d3:bb:d0:d2:4d:96:34:8e: 2c:5d:2e:b1:ce:be:35:f9:4b:86:c7:38:13:50:73: 02:41:30:67:e2:41:e5:1c:a7:8a:68:53:06:ee:e1: db:57:2f:1d:d7:1d:1c:ca:e1:cd:ac:c8:4b:2a:cd: 52:b8:bf:f6:95:52:c3:da:2f:a8:c0:1d:e1:99:0b: 91:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:CD:BD:14:8B:6E:1D:5E:A2:CB:3C:A7:8F:64:66:26:87:97:B1:37 X509v3 Authority Key Identifier: keyid:3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:28:a3:f7:ab:10:50:d6:b1:c3:19:27:2a:24:5a:bc:d7:05: c6:3e:1d:82:a7:50:a5:83:5b:34:29:12:a8:d1:09:5f:91:5f: 56:0f:64:c0:c3:76:4e:88:c3:8e:cb:67:20:52:2e:fd:86:50: 22:7a:71:04:f8:88:6c:d6:4c:60:a7:e0:54:74:e4:66:68:09: 95:0d:6d:12:9b:3f:cf:a5:6b:4f:07:30:7c:95:da:8e:37:01: 7e:90:5a:0d:2d:4a:f5:5c:34:e3:e1:31:a7:bd:1f:f3:84:43: c3:51:d8:4b:70:37:da:68:b4:3f:b9:45:8c:74:ae:0b:bc:44: b7:13:cc:4e:91:12:65:db:4f:66:49:6b:40:34:de:08:26:74: 9e:07:2d:c5:85:69:b8:27:06:91:e9:2f:aa:31:a9:29:4b:cd: 38:51:22:57:a8:71:b4:af:07:68:4f:6d:e5:9b:27:c7:56:9a: 2e:74:95:d1:56:97:31:3f:9f:e6:47:cb:5e:74:b0:6d:bc:80: 69:a2:c0:88:15:ee:a9:ab:db:38:e4:cf:4b:aa:7b:9c:f5:25: 8a:c5:6e:93:6d:d2:ce:bb:11:b7:2d:0a:f6:c8:ab:45:75:a1: 78:d4:75:c1:6d:e4:28:2f:6f:53:19:85:6d:90:c9:7e:57:b4: 3b:34:48:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3msFLvs5YqndZHfWM09JeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOTQyNGIzYzhlNzJmNzQ2YTU5ZWIxOTk0NTVhYTM2NDZh M2E0NTcwHhcNMjYwMTI2MDAwMTEyWhcNMjYwMTI3MDAwMTEyWjAzMTEwLwYDVQQD Eyg5MGNkYmQxNDhiNmUxZDVlYTJjYjNjYTc4ZjY0NjYyNjg3OTdiMTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgNhpTznli0DOL12IzRo/yIA+Rzv XnPo52broFCTPKz5uMK8koVoEnn44UpN92KpgKl9DjRU7KVesYnVr1PXJu4Do+FJ AD/IAGhotqOXVAiX1hzBiOnvbBnCgakU0WyOYkxWzK1dYf5WndC/20U4RZR28LHK FIUlBVDc+WnmEYxNhxxYRrIAPfNfhf8jSzTEktExvm9ChoMfuE2LNCJdpW4phZ7h 6ZsjT4+HeQDCnv29WBxaQL6qXjG/07vQ0k2WNI4sXS6xzr41+UuGxzgTUHMCQTBn 4kHlHKeKaFMG7uHbVy8d1x0cyuHNrMhLKs1SuL/2lVLD2i+owB3hmQuRdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJDNvRSLbh1eoss8p49kZiaHl7E3MB8GA1UdIwQY MBaAFD2UJLPI5y90alnrGZRVqjZGo6RXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFpRa3M4am5MM1JxV2VzWmxGV3FOa2FqcEZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9kZjI5NDctY2QwNS00NDA1LTk0OWEt NmE4MDMzZGNiZTFjLzEvUFpRa3M4am5MM1JxV2VzWmxGV3FOa2FqcEZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9kZjI5NDctY2QwNS00NDA1LTk0OWEtNmE4MDMzZGNiZTFj LzEvUFpRa3M4am5MM1JxV2VzWmxGV3FOa2FqcEZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADyij96sQ UNaxwxknKiRavNcFxj4dgqdQpYNbNCkSqNEJX5FfVg9kwMN2TojDjstnIFIu/YZQ InpxBPiIbNZMYKfgVHTkZmgJlQ1tEps/z6VrTwcwfJXajjcBfpBaDS1K9Vw04+Ex p70f84RDw1HYS3A32mi0P7lFjHSuC7xEtxPMTpESZdtPZklrQDTeCCZ0ngctxYVp uCcGkekvqjGpKUvNOFEiV6hxtK8HaE9t5Zsnx1aaLnSV0VaXMT+f5kfLXnSwbbyA aaLAiBXuqavbOOTPS6p7nPUlisVuk23SzrsRty0K9sirRXWheNR1wW3kKC9vUxmF bZDJfle0OzRIRw== -----END CERTIFICATE-----Generated at Mon Jan 26 07:50:04 2026 by rpki-client