This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft File: pcY3PqsZz0PdL0MRE5g4PuK60DA.mft (raw, json) Hash identifier: JN30uZMMa5S1xRyjtVLA8mYE41866Ix8M1O2b4RCQcc= Subject key identifier: 47:55:85:B6:17:A2:17:21:39:A1:10:AE:41:0C:67:23:1B:2E:7D:5B Authority key identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30 Certificate issuer: /CN=a5c6373eab19cf43dd2f43111398383ee2bad030 Certificate serial: 019BF350A6269D0D426EFAF346EC9560C61F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft Manifest number: 12A3 Signing time: Sun 25 Jan 2026 04:01:47 +0000 Manifest this update: Sun 25 Jan 2026 04:01:47 +0000 Manifest next update: Mon 26 Jan 2026 04:01:47 +0000 Files and hashes: 1: 3TWQKB1cnPa0egTpgv4hHONnk6g.roa (hash: 7Md6IbzdaA19dddiYJSTqvYDtis8EUY+mCYILklb6m4=) 2: ExTCIeQK6Vb8OCwCNuc_-quqRmI.roa (hash: yAl2sJH2YaylYmZhqm6jDAUkF463bPlFn5SJl2V0nqk=) 3: JzElV8rMB35_r5yROjAIe1YSEGk.roa (hash: prxCAC9aS1jR/lGKgImoCaF1puXWY2FG75jnwkB+CC4=) 4: U6ayks1P5BRjFFhc1UxRq5VC3jI.roa (hash: nvEU1lFde+SY+X4ElX6UspKi9KkL8IPg/Z79T8X9J68=) 5: VXazB19Is6W_OKKCp0AvNqbD-rM.roa (hash: IwIknG6od+Fc8/mQwvVulKrK8qXdxe2y0/Y0Cy93yB0=) 6: pcY3PqsZz0PdL0MRE5g4PuK60DA.crl (hash: qpfhCa/0NdGfG0khYFfJpRLesbF1dBV+Mtkga9TR7pA=) 7: xC-EAU29A34DWs98hyrYzhXpyZ8.roa (hash: jAQevc7Xb/Yzwsa/p7bJP+rHW+tHRc2iSYt5PmCJM2M=) 8: xiRiEOWddXme3nTY0cPZtUg6ADU.roa (hash: gYS4wLSjO292ggFXgtLrb2tXsY0mWqq4tWIaaZhXMCY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:50:a6:26:9d:0d:42:6e:fa:f3:46:ec:95:60:c6:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5c6373eab19cf43dd2f43111398383ee2bad030 Validity Not Before: Jan 25 04:01:47 2026 GMT Not After : Jan 26 04:01:47 2026 GMT Subject: CN=475585b617a2172139a110ae410c67231b2e7d5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:17:71:f5:f7:46:59:1b:79:66:9e:d9:2e:1c: 42:26:3f:c0:e7:cf:06:c0:b9:3d:02:59:42:e1:7c: 2d:fc:76:57:d0:f5:60:c4:fd:61:ea:d4:31:a9:f6: c9:3b:1b:01:83:9c:4c:aa:1e:29:1d:b8:a7:aa:8b: 5e:2f:8b:47:c9:5a:29:61:5e:cc:9d:e4:ba:1c:64: a5:be:49:c9:d4:a4:ea:c6:db:46:5d:55:f0:2d:d2: fc:d5:98:2a:c3:b3:44:92:c9:08:23:52:25:7b:78: ff:69:9a:ca:2e:67:35:ab:53:10:b6:86:0c:bd:0c: 2e:f4:bf:41:d8:48:f9:e1:96:b4:ee:e7:7d:f7:3e: 76:8a:28:19:32:2f:fb:1a:53:36:fa:c3:56:7b:45: 94:44:04:60:8c:d8:50:01:b1:82:53:09:d8:6c:a8: 1a:4d:d2:66:1e:37:f6:3a:63:f4:24:96:80:1f:9e: 7d:a6:c9:0d:dd:6d:5e:6e:84:7f:7a:06:6f:5f:6a: 2e:54:fb:9b:16:1d:f5:3b:85:28:65:aa:31:5d:50: c6:08:05:de:95:3f:bd:34:ca:29:02:24:33:b3:91: 06:ae:72:30:2b:92:d4:2a:cc:7b:5d:91:b4:9d:54: 31:44:1f:c7:6c:dc:d9:10:3c:56:07:6a:4b:5b:d0: 3d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:55:85:B6:17:A2:17:21:39:A1:10:AE:41:0C:67:23:1B:2E:7D:5B X509v3 Authority Key Identifier: keyid:A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:e3:01:8a:90:4e:3b:8a:a0:eb:48:81:94:45:54:3e:b4:10: af:34:60:d8:9a:e2:9f:ec:e7:ce:a6:38:62:46:11:c5:47:f2: aa:68:a2:45:c5:3c:63:23:da:3e:db:83:70:96:d7:36:5d:5f: 04:db:1a:c2:4c:5a:d4:8f:01:82:57:f9:07:66:42:43:52:89: e2:77:10:4f:c5:3b:00:38:52:0b:78:c1:b6:4d:69:7f:30:99: 41:46:89:53:14:7a:c1:6b:03:13:d5:2f:17:50:88:dd:fa:b4: 00:56:9b:60:68:1f:9e:db:ac:84:27:bb:42:a3:f1:f0:73:07: ac:4e:21:c6:aa:d0:a6:e9:b4:71:18:37:2b:b8:60:33:f8:2c: fc:e4:9e:5f:0a:e2:75:0b:bc:12:ef:71:df:5d:be:60:ac:55: 48:11:db:d0:4b:9c:1e:73:fc:47:b4:59:62:d8:ca:94:04:51: f8:c1:06:12:d4:e6:ea:c6:43:01:49:b1:9b:17:4c:e3:14:86: 93:ac:a4:7f:4f:c8:ad:88:23:c0:fe:0f:93:d3:c4:f4:e7:20: f0:fe:c4:48:78:78:fa:6e:9b:91:91:23:3a:44:a8:43:63:f0: d0:d8:96:ef:58:02:25:de:88:f4:ee:69:6e:9f:4c:17:7d:dc: 8f:fe:81:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzUKYmnQ1CbvrzRuyVYMYfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YzYzNzNlYWIxOWNmNDNkZDJmNDMxMTEzOTgzODNlZTJi YWQwMzAwHhcNMjYwMTI1MDQwMTQ3WhcNMjYwMTI2MDQwMTQ3WjAzMTEwLwYDVQQD Eyg0NzU1ODViNjE3YTIxNzIxMzlhMTEwYWU0MTBjNjcyMzFiMmU3ZDViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBdx9fdGWRt5Zp7ZLhxCJj/A588G wLk9AllC4Xwt/HZX0PVgxP1h6tQxqfbJOxsBg5xMqh4pHbinqoteL4tHyVopYV7M neS6HGSlvknJ1KTqxttGXVXwLdL81Zgqw7NEkskII1Ile3j/aZrKLmc1q1MQtoYM vQwu9L9B2Ej54Za07ud99z52iigZMi/7GlM2+sNWe0WURARgjNhQAbGCUwnYbKga TdJmHjf2OmP0JJaAH559pskN3W1eboR/egZvX2ouVPubFh31O4UoZaoxXVDGCAXe lT+9NMopAiQzs5EGrnIwK5LUKsx7XZG0nVQxRB/HbNzZEDxWB2pLW9A99wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEdVhbYXohchOaEQrkEMZyMbLn1bMB8GA1UdIwQY MBaAFKXGNz6rGc9D3S9DEROYOD7iutAwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGNZM1Bxc1p6MFBkTDBNUkU1ZzRQdUs2MERBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9mMGY1ZTMtNjA1MC00ZTJkLWE0ZWEt YTRlYTBhNjNmNzY2LzEvcGNZM1Bxc1p6MFBkTDBNUkU1ZzRQdUs2MERBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9mMGY1ZTMtNjA1MC00ZTJkLWE0ZWEtYTRlYTBhNjNmNzY2 LzEvcGNZM1Bxc1p6MFBkTDBNUkU1ZzRQdUs2MERBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhuMBipBO O4qg60iBlEVUPrQQrzRg2Jrin+znzqY4YkYRxUfyqmiiRcU8YyPaPtuDcJbXNl1f BNsawkxa1I8Bglf5B2ZCQ1KJ4ncQT8U7ADhSC3jBtk1pfzCZQUaJUxR6wWsDE9Uv F1CI3fq0AFabYGgfntushCe7QqPx8HMHrE4hxqrQpum0cRg3K7hgM/gs/OSeXwri dQu8Eu9x312+YKxVSBHb0EucHnP8R7RZYtjKlARR+MEGEtTm6sZDAUmxmxdM4xSG k6ykf0/IrYgjwP4Pk9PE9Ocg8P7ESHh4+m6bkZEjOkSoQ2Pw0NiW71gCJd6I9O5p bp9MF33cj/6BEA== -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:47 2026 by rpki-client