This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft File: PLHMl1whjxZoawhB7fwwnMp0ans.mft (raw, json) Hash identifier: iwZ0i+5eVP7HtvZnJr4A0KFLYBvVA89rn9QGbsHg3OA= Subject key identifier: 63:C3:4C:77:EE:BA:5E:F5:1D:07:65:E6:8B:81:5E:D1:39:45:FE:0A Authority key identifier: 3C:B1:CC:97:5C:21:8F:16:68:6B:08:41:ED:FC:30:9C:CA:74:6A:7B Certificate issuer: /CN=3cb1cc975c218f16686b0841edfc309cca746a7b Certificate serial: 019BF7D24A98E3AA45FCD663F4638A2DACCA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft Manifest number: 0445 Signing time: Mon 26 Jan 2026 01:01:52 +0000 Manifest this update: Mon 26 Jan 2026 01:01:52 +0000 Manifest next update: Tue 27 Jan 2026 01:01:52 +0000 Files and hashes: 1: PLHMl1whjxZoawhB7fwwnMp0ans.crl (hash: dBYG35AFqLCPUjXEqTBfkJvV4lJLHcS/44C4A9clGaI=) 2: u4cgh7Nj-_luUR3bdBkEgf5SpHQ.roa (hash: Af7PsAxhlGeBEitHo4c+wU7iGd5LHt68jODuQoQrn3Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d2:4a:98:e3:aa:45:fc:d6:63:f4:63:8a:2d:ac:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cb1cc975c218f16686b0841edfc309cca746a7b Validity Not Before: Jan 26 01:01:52 2026 GMT Not After : Jan 27 01:01:52 2026 GMT Subject: CN=63c34c77eeba5ef51d0765e68b815ed13945fe0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:08:56:38:69:38:c1:c4:9d:11:48:8a:45:eb: 79:f9:0e:e5:29:01:9d:34:f9:2e:21:c6:84:e8:f7: 29:77:b3:8a:6e:e3:5a:33:8b:2a:07:f9:0d:35:be: 35:11:cf:5e:fd:2c:78:3a:75:12:4e:86:d5:21:62: 92:6f:9b:b1:66:db:ea:5b:00:e0:3a:8c:45:d8:20: f4:09:2b:e5:19:35:19:ac:59:ce:8f:27:8d:6d:00: 8a:37:9c:6b:33:41:5c:1b:a9:b2:e9:8e:47:bb:77: 4a:dc:64:b0:ad:7a:53:52:8f:a1:e5:be:00:66:5a: 47:8b:ca:9d:6f:c1:d0:c4:ee:18:36:bf:48:93:b0: 97:33:e1:d8:f9:62:d1:0c:c4:f1:14:c8:e8:ae:b3: a7:06:b7:bf:31:fa:e9:dd:8e:b1:29:ce:ab:d9:aa: ce:b2:ea:71:25:95:c7:03:a9:59:0c:94:56:da:60: b3:58:01:ed:8f:5d:7e:89:c9:37:9e:84:75:8a:67: 1f:6e:15:a2:18:7d:e3:c6:54:ac:ff:a2:67:ae:9d: 69:a4:9c:d6:5d:67:cd:5b:6a:a8:d3:43:74:a3:fa: 49:43:63:53:bc:72:29:02:96:85:9d:85:8d:59:2a: c9:92:f2:fd:9a:86:d2:5b:08:43:32:85:1e:a2:7b: 2e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:C3:4C:77:EE:BA:5E:F5:1D:07:65:E6:8B:81:5E:D1:39:45:FE:0A X509v3 Authority Key Identifier: keyid:3C:B1:CC:97:5C:21:8F:16:68:6B:08:41:ED:FC:30:9C:CA:74:6A:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:74:41:19:52:30:20:e5:82:0e:09:54:7d:95:f0:5c:61:7e: 10:e3:56:26:fc:77:9a:90:ca:6c:c8:9b:5d:aa:b1:3e:34:43: 1e:5f:ac:03:9b:d7:05:35:e3:4a:99:be:9e:17:84:f1:cf:27: c6:c2:ba:64:52:80:c4:84:5f:48:cc:fe:ae:5d:e1:e1:e7:9c: 33:e6:8a:97:a6:4b:df:a7:22:8c:77:4b:d2:83:f2:3a:06:83: 3f:6c:4c:88:56:cf:d4:37:c3:a5:91:98:e2:b5:8d:b3:dc:44: 77:21:70:8d:88:e6:d0:38:0c:d7:61:69:84:da:76:d3:bf:32: 96:97:1c:ab:dc:e5:39:60:ad:4f:e0:98:99:f8:56:97:d9:9c: 96:35:25:77:73:e1:d2:c6:ae:2c:2c:c2:88:f5:b1:97:53:b7: d4:48:a4:4f:0c:f2:fc:1e:bd:94:52:41:44:fd:74:97:a0:57: 53:25:d8:e6:9d:5c:0f:d4:9b:da:29:d0:e5:f4:b6:48:9a:4e: c5:22:38:ac:ea:46:25:7c:87:da:c2:06:9b:62:4f:da:97:fc: 98:af:1c:92:61:0c:4f:96:34:fa:88:e3:b7:3e:d7:28:b5:7f: 41:21:17:c4:15:17:39:1a:6f:40:18:a2:4b:2d:ab:67:68:4d: 7c:85:ea:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30kqY46pF/NZj9GOKLazKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjYjFjYzk3NWMyMThmMTY2ODZiMDg0MWVkZmMzMDljY2E3 NDZhN2IwHhcNMjYwMTI2MDEwMTUyWhcNMjYwMTI3MDEwMTUyWjAzMTEwLwYDVQQD Eyg2M2MzNGM3N2VlYmE1ZWY1MWQwNzY1ZTY4YjgxNWVkMTM5NDVmZTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsghWOGk4wcSdEUiKRet5+Q7lKQGd NPkuIcaE6Pcpd7OKbuNaM4sqB/kNNb41Ec9e/Sx4OnUSTobVIWKSb5uxZtvqWwDg OoxF2CD0CSvlGTUZrFnOjyeNbQCKN5xrM0FcG6my6Y5Hu3dK3GSwrXpTUo+h5b4A ZlpHi8qdb8HQxO4YNr9Ik7CXM+HY+WLRDMTxFMjorrOnBre/Mfrp3Y6xKc6r2arO supxJZXHA6lZDJRW2mCzWAHtj11+ick3noR1imcfbhWiGH3jxlSs/6Jnrp1ppJzW XWfNW2qo00N0o/pJQ2NTvHIpApaFnYWNWSrJkvL9mobSWwhDMoUeonsu8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGPDTHfuul71HQdl5ouBXtE5Rf4KMB8GA1UdIwQY MBaAFDyxzJdcIY8WaGsIQe38MJzKdGp7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUExITWwxd2hqeFpvYXdoQjdmd3duTXAwYW5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8yMzlhOGUtOTBkOC00M2JkLTkwZWQt M2UzNGQwMDczMmEzLzEvUExITWwxd2hqeFpvYXdoQjdmd3duTXAwYW5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8yMzlhOGUtOTBkOC00M2JkLTkwZWQtM2UzNGQwMDczMmEz LzEvUExITWwxd2hqeFpvYXdoQjdmd3duTXAwYW5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnnRBGVIw IOWCDglUfZXwXGF+EONWJvx3mpDKbMibXaqxPjRDHl+sA5vXBTXjSpm+nheE8c8n xsK6ZFKAxIRfSMz+rl3h4eecM+aKl6ZL36cijHdL0oPyOgaDP2xMiFbP1DfDpZGY 4rWNs9xEdyFwjYjm0DgM12FphNp2078ylpccq9zlOWCtT+CYmfhWl9mcljUld3Ph 0sauLCzCiPWxl1O31EikTwzy/B69lFJBRP10l6BXUyXY5p1cD9Sb2inQ5fS2SJpO xSI4rOpGJXyH2sIGm2JP2pf8mK8ckmEMT5Y0+ojjtz7XKLV/QSEXxBUXORpvQBii Sy2rZ2hNfIXqIg== -----END CERTIFICATE-----Generated at Mon Jan 26 10:18:44 2026 by rpki-client