This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft File: PhrhW-husMTZp2TMeo9lmVv4yQ4.mft (raw, json) Hash identifier: blSYFnRRDNUg3MWTQHvTPwS56uoOIHnfpg3FznSlPJo= Subject key identifier: E4:67:ED:4C:84:29:A7:E6:EF:08:9A:35:59:DB:F7:16:12:29:88:B2 Authority key identifier: 3E:1A:E1:5B:E8:6E:B0:C4:D9:A7:64:CC:7A:8F:65:99:5B:F8:C9:0E Certificate issuer: /CN=3e1ae15be86eb0c4d9a764cc7a8f65995bf8c90e Certificate serial: 019BF989141E09FD7FE0E4E384416E8B80AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft Manifest number: 0FE1 Signing time: Mon 26 Jan 2026 09:01:08 +0000 Manifest this update: Mon 26 Jan 2026 09:01:08 +0000 Manifest next update: Tue 27 Jan 2026 09:01:08 +0000 Files and hashes: 1: 8kiAQtkav2NHfFCJtiBA0ERhqIA.roa (hash: F/EijD7R25vjZwA9wYF9LplNamhupuIHanpPILz4ls0=) 2: M_79XQ2SXAKWIFy3HNmBFX2YRgI.roa (hash: PQS0FU2tcc2qRmlqMUo4a/MCLdHlPpwQ5M9eqNDwavA=) 3: PhrhW-husMTZp2TMeo9lmVv4yQ4.crl (hash: L/NQsh6senHHltGTnTEI7Xgd8kyoSBPgkec9Yg8VNXk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:89:14:1e:09:fd:7f:e0:e4:e3:84:41:6e:8b:80:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e1ae15be86eb0c4d9a764cc7a8f65995bf8c90e Validity Not Before: Jan 26 09:01:08 2026 GMT Not After : Jan 27 09:01:08 2026 GMT Subject: CN=e467ed4c8429a7e6ef089a3559dbf716122988b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ce:8a:78:75:da:42:52:f9:54:96:95:b1:7e: 18:64:90:3f:c7:75:c9:05:eb:ab:4d:f4:ba:08:01: 93:ce:6e:b1:cc:9f:b8:70:18:20:ba:ee:76:c8:96: 3a:49:9b:9b:5f:18:15:9b:4d:41:5a:5d:e3:c6:25: 34:dd:9f:c2:23:03:69:1c:6a:52:d4:3c:e6:61:b4: 81:0f:48:b2:d1:f0:8b:1d:ab:c9:0a:13:62:b1:9b: a5:3e:0d:d0:02:9c:44:cd:3f:7f:86:50:3e:93:ad: 42:35:df:5c:e4:18:48:d7:99:d2:79:a5:40:be:db: 45:5d:f2:21:b6:db:29:a7:9e:13:a1:c7:22:fa:77: 13:9b:5b:31:da:8e:3c:1d:2f:a1:aa:4b:f7:47:fa: 55:67:6a:15:ec:c5:2c:ce:48:a9:02:e8:83:c6:8e: ce:41:d1:4c:05:c5:fa:f8:11:ee:69:ee:23:45:08: 37:86:ec:94:2f:bd:28:ae:45:c4:ea:54:af:05:73: bc:0a:a7:40:06:22:91:bc:98:d2:a3:53:82:97:7e: d9:31:c9:f0:58:1f:c9:97:4d:f7:fe:3f:d0:38:cd: f5:65:6b:b1:72:ad:d6:51:90:03:4b:da:42:32:93: 46:c7:1a:50:00:a7:44:c4:65:84:0b:64:d6:3e:8c: 9e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:67:ED:4C:84:29:A7:E6:EF:08:9A:35:59:DB:F7:16:12:29:88:B2 X509v3 Authority Key Identifier: keyid:3E:1A:E1:5B:E8:6E:B0:C4:D9:A7:64:CC:7A:8F:65:99:5B:F8:C9:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:14:15:b0:a9:2f:55:ef:44:c6:54:6a:30:dc:7f:19:5f:31: eb:85:15:f5:3f:a2:ad:04:8c:5c:52:c8:71:16:b7:b3:0f:8f: 3a:13:98:92:08:e9:73:52:6b:da:96:7e:87:a5:92:21:fe:30: e7:6a:33:6d:6a:b0:cd:f8:f8:28:36:c4:b4:68:1e:7a:1c:69: eb:74:8d:7f:f7:25:98:77:0e:8b:a6:6b:8e:ac:15:49:03:31: a3:0f:56:0e:7b:75:42:b7:92:5b:bf:0c:78:16:41:68:7c:ce: 66:27:44:a4:00:20:7f:f4:bc:e3:42:aa:b9:21:af:08:6a:b5: e4:e4:cf:0b:72:5b:bf:4f:d8:70:4e:00:2d:c7:e7:f9:01:7d: f9:e7:72:33:23:af:56:5f:f2:e6:31:d8:ad:d4:16:cf:8a:7d: c1:07:6d:bb:8a:a2:92:98:f3:90:a9:50:e2:4d:95:ad:de:dc: b3:28:e4:1e:8f:7d:76:10:53:9d:28:8b:ef:f2:d7:fa:b4:25: 68:1b:8f:2a:15:82:23:af:6b:59:02:37:e3:13:08:90:8e:ef: f8:bb:97:fb:31:6d:ab:ce:8a:81:d0:86:04:38:dc:41:b2:ce: 4e:39:4c:44:17:5d:f8:fe:07:4b:23:d1:7a:8b:3e:bf:67:1b: bf:eb:8d:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5iRQeCf1/4OTjhEFui4CvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMWFlMTViZTg2ZWIwYzRkOWE3NjRjYzdhOGY2NTk5NWJm OGM5MGUwHhcNMjYwMTI2MDkwMTA4WhcNMjYwMTI3MDkwMTA4WjAzMTEwLwYDVQQD EyhlNDY3ZWQ0Yzg0MjlhN2U2ZWYwODlhMzU1OWRiZjcxNjEyMjk4OGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA686KeHXaQlL5VJaVsX4YZJA/x3XJ BeurTfS6CAGTzm6xzJ+4cBgguu52yJY6SZubXxgVm01BWl3jxiU03Z/CIwNpHGpS 1DzmYbSBD0iy0fCLHavJChNisZulPg3QApxEzT9/hlA+k61CNd9c5BhI15nSeaVA vttFXfIhttspp54Tocci+ncTm1sx2o48HS+hqkv3R/pVZ2oV7MUszkipAuiDxo7O QdFMBcX6+BHuae4jRQg3huyUL70orkXE6lSvBXO8CqdABiKRvJjSo1OCl37ZMcnw WB/Jl033/j/QOM31ZWuxcq3WUZADS9pCMpNGxxpQAKdExGWEC2TWPoyeewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFORn7UyEKafm7wiaNVnb9xYSKYiyMB8GA1UdIwQY MBaAFD4a4VvobrDE2adkzHqPZZlb+MkOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGhyaFctaHVzTVRacDJUTWVvOWxtVnY0eVE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC83M2YyM2EtZTk3Ny00MWMzLTkyMmQt YjI3YzM0MTI0MjZhLzEvUGhyaFctaHVzTVRacDJUTWVvOWxtVnY0eVE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC83M2YyM2EtZTk3Ny00MWMzLTkyMmQtYjI3YzM0MTI0MjZh LzEvUGhyaFctaHVzTVRacDJUTWVvOWxtVnY0eVE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhRQVsKkv Ve9ExlRqMNx/GV8x64UV9T+irQSMXFLIcRa3sw+POhOYkgjpc1Jr2pZ+h6WSIf4w 52ozbWqwzfj4KDbEtGgeehxp63SNf/clmHcOi6ZrjqwVSQMxow9WDnt1QreSW78M eBZBaHzOZidEpAAgf/S840KquSGvCGq15OTPC3Jbv0/YcE4ALcfn+QF9+edyMyOv Vl/y5jHYrdQWz4p9wQdtu4qikpjzkKlQ4k2Vrd7csyjkHo99dhBTnSiL7/LX+rQl aBuPKhWCI69rWQI34xMIkI7v+LuX+zFtq86KgdCGBDjcQbLOTjlMRBdd+P4HSyPR eos+v2cbv+uNvA== -----END CERTIFICATE-----Generated at Mon Jan 26 12:13:39 2026 by rpki-client