This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft File: PS60FH7nv8a6cvwDSUU0mPAA5YE.mft (raw, json) Hash identifier: j1h098mNTHgD8ok33eVLP/8nUYRUk7AjAEHS+EN1U/o= Subject key identifier: DF:43:30:D7:F8:D6:42:BC:93:38:09:37:69:B9:6E:EC:5F:19:77:F1 Authority key identifier: 3D:2E:B4:14:7E:E7:BF:C6:BA:72:FC:03:49:45:34:98:F0:00:E5:81 Certificate issuer: /CN=3d2eb4147ee7bfc6ba72fc0349453498f000e581 Certificate serial: 019BF5E3B86B837BC313DD9D532A7D09043B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft Manifest number: 04DC Signing time: Sun 25 Jan 2026 16:01:40 +0000 Manifest this update: Sun 25 Jan 2026 16:01:40 +0000 Manifest next update: Mon 26 Jan 2026 16:01:40 +0000 Files and hashes: 1: PS60FH7nv8a6cvwDSUU0mPAA5YE.crl (hash: 6sCxV7pwRr2Jw3QtdeVHHImc4BtaPPsO9wUWEs5xraA=) 2: ycAuPmO_sLVvMbeFsggXQjZ-bEc.roa (hash: IOeAqOcXQYE9MbdToOk7llMBN5GYLYRtb8t8JnGE6Kk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:b8:6b:83:7b:c3:13:dd:9d:53:2a:7d:09:04:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d2eb4147ee7bfc6ba72fc0349453498f000e581 Validity Not Before: Jan 25 16:01:40 2026 GMT Not After : Jan 26 16:01:40 2026 GMT Subject: CN=df4330d7f8d642bc9338093769b96eec5f1977f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:02:d0:ea:5d:a3:ee:f1:a1:3c:83:45:8d:86: 5b:7a:e8:58:ab:64:2d:5a:94:3b:a8:4e:78:8d:34: 7a:d4:de:b1:4f:5e:74:52:3a:eb:dc:60:2e:0f:97: 90:15:d8:04:1f:dd:50:b5:18:58:08:11:d3:50:29: 6d:05:6f:b4:6a:f1:8b:14:6d:98:8f:5f:3b:68:bf: ea:4e:72:c5:05:01:d5:94:6b:26:c7:ad:d7:83:68: 80:06:77:f9:2e:f5:1d:68:40:64:e6:93:7e:ef:b4: 1a:d0:63:79:70:96:58:2e:f4:a3:ff:c2:6f:22:97: 63:79:33:a8:1a:d5:e7:4e:f2:87:3a:24:e2:83:23: c2:b5:c3:c4:bd:84:74:37:94:bc:3a:30:6a:fc:c1: 61:9c:c5:5d:ed:bf:cd:83:df:90:e7:73:11:56:ed: 75:d6:8c:33:64:24:e8:7a:53:17:b4:be:78:c3:4e: 95:64:e9:b8:7e:3d:8d:32:e8:4b:53:f5:43:f5:63: 5a:f6:72:50:de:11:92:1e:2b:ea:77:a3:ef:53:e0: f1:1a:06:69:53:62:37:eb:35:50:11:00:54:b9:b9: 37:b0:75:ab:d5:76:51:11:b2:6d:b3:a0:7f:10:d5: 80:e6:51:41:bb:52:b9:15:bb:60:dd:b2:ea:68:c8: 22:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:43:30:D7:F8:D6:42:BC:93:38:09:37:69:B9:6E:EC:5F:19:77:F1 X509v3 Authority Key Identifier: keyid:3D:2E:B4:14:7E:E7:BF:C6:BA:72:FC:03:49:45:34:98:F0:00:E5:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:64:28:f9:c1:38:c3:f5:4f:02:70:97:76:eb:8d:7c:2d:c5: e1:ad:4a:ef:91:a5:43:13:09:8f:dd:9f:e5:e5:f4:62:8d:31: 01:40:ac:07:32:b4:22:c5:b7:43:d7:02:ab:7b:ea:85:73:53: 18:65:3f:fe:5e:59:87:f8:7b:5f:50:55:07:44:78:39:63:79: 56:12:f3:96:16:b0:9e:69:5a:d9:14:c9:69:6a:5d:ad:43:3d: 38:9c:95:43:b4:83:bf:3d:ba:df:c3:f0:53:cb:68:2e:f5:be: d1:d4:6e:2d:38:9b:56:e6:29:1b:35:73:5c:43:fd:1a:0c:e0: 65:34:f7:f7:a8:39:bc:77:d8:ef:64:f1:8e:00:22:07:00:0a: 32:dc:5b:79:a0:0f:7c:bf:91:1c:ed:05:3d:73:b4:ed:c8:05: 80:22:ae:a4:a8:b0:de:0c:d8:9c:87:a0:8e:8c:18:da:6c:31: 6d:01:e4:93:89:47:5b:ef:64:e2:a2:a8:c4:50:5c:14:49:ea: ce:ed:a3:2f:15:9e:67:20:23:b6:23:4e:27:fc:0c:e7:ad:dd: 51:f8:bd:d2:43:b0:b4:02:a6:f8:ec:ea:e1:6c:47:fb:0e:8b: 0d:ee:96:5b:3d:b9:85:6f:fb:98:26:18:29:86:6a:da:6b:73: c4:65:d9:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv147hrg3vDE92dUyp9CQQ7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkMmViNDE0N2VlN2JmYzZiYTcyZmMwMzQ5NDUzNDk4ZjAw MGU1ODEwHhcNMjYwMTI1MTYwMTQwWhcNMjYwMTI2MTYwMTQwWjAzMTEwLwYDVQQD EyhkZjQzMzBkN2Y4ZDY0MmJjOTMzODA5Mzc2OWI5NmVlYzVmMTk3N2YxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtALQ6l2j7vGhPINFjYZbeuhYq2Qt WpQ7qE54jTR61N6xT150Ujrr3GAuD5eQFdgEH91QtRhYCBHTUCltBW+0avGLFG2Y j187aL/qTnLFBQHVlGsmx63Xg2iABnf5LvUdaEBk5pN+77Qa0GN5cJZYLvSj/8Jv IpdjeTOoGtXnTvKHOiTigyPCtcPEvYR0N5S8OjBq/MFhnMVd7b/Ng9+Q53MRVu11 1owzZCToelMXtL54w06VZOm4fj2NMuhLU/VD9WNa9nJQ3hGSHivqd6PvU+DxGgZp U2I36zVQEQBUubk3sHWr1XZREbJts6B/ENWA5lFBu1K5Fbtg3bLqaMgiAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN9DMNf41kK8kzgJN2m5buxfGXfxMB8GA1UdIwQY MBaAFD0utBR+57/GunL8A0lFNJjwAOWBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFM2MEZIN252OGE2Y3Z3RFNVVTBtUEFBNVlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9iOGY1M2YtNDY3Zi00NWNmLTgzMDYt NDI5NTFjMmNhNzM4LzEvUFM2MEZIN252OGE2Y3Z3RFNVVTBtUEFBNVlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9iOGY1M2YtNDY3Zi00NWNmLTgzMDYtNDI5NTFjMmNhNzM4 LzEvUFM2MEZIN252OGE2Y3Z3RFNVVTBtUEFBNVlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp2Qo+cE4 w/VPAnCXduuNfC3F4a1K75GlQxMJj92f5eX0Yo0xAUCsBzK0IsW3Q9cCq3vqhXNT GGU//l5Zh/h7X1BVB0R4OWN5VhLzlhawnmla2RTJaWpdrUM9OJyVQ7SDvz2638Pw U8toLvW+0dRuLTibVuYpGzVzXEP9GgzgZTT396g5vHfY72TxjgAiBwAKMtxbeaAP fL+RHO0FPXO07cgFgCKupKiw3gzYnIegjowY2mwxbQHkk4lHW+9k4qKoxFBcFEnq zu2jLxWeZyAjtiNOJ/wM563dUfi90kOwtAKm+Ozq4WxH+w6LDe6WWz25hW/7mCYY KYZq2mtzxGXZEA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:50:45 2026 by rpki-client