This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft File: PcI-io7JOWsbVM_7JxxVdm2UkZk.mft (raw, json) Hash identifier: fRPzzhKQdqz3t2Pz7gGZq0unie4bSxSPt9zBnOpMmfo= Subject key identifier: 20:E7:75:3C:5F:51:5F:2D:45:E8:04:67:51:53:70:5C:56:2E:9C:65 Authority key identifier: 3D:C2:3E:8A:8E:C9:39:6B:1B:54:CF:FB:27:1C:55:76:6D:94:91:99 Certificate issuer: /CN=3dc23e8a8ec9396b1b54cffb271c55766d949199 Certificate serial: 019BF53EDFDC70AB6C91ED3FC95A5EC3BA2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft Manifest number: 1351 Signing time: Sun 25 Jan 2026 13:01:37 +0000 Manifest this update: Sun 25 Jan 2026 13:01:37 +0000 Manifest next update: Mon 26 Jan 2026 13:01:37 +0000 Files and hashes: 1: PcI-io7JOWsbVM_7JxxVdm2UkZk.crl (hash: wnQPdFSVWUzhAPF7atvw+6Y6wkJt8i0txpCTghMXYSE=) 2: TonW-R-Zm7EJ5G4DyPorHXUfsQY.roa (hash: 4NWLdATC5TzLcy4vgySsRMRG+JcNTxLmpZ+bS7QNQno=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:df:dc:70:ab:6c:91:ed:3f:c9:5a:5e:c3:ba:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3dc23e8a8ec9396b1b54cffb271c55766d949199 Validity Not Before: Jan 25 13:01:37 2026 GMT Not After : Jan 26 13:01:37 2026 GMT Subject: CN=20e7753c5f515f2d45e804675153705c562e9c65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f2:eb:55:09:8b:49:99:9e:e8:dd:19:00:3e: 2e:ae:f1:bc:b0:a7:23:3a:5f:bd:89:c7:77:8d:36: 4d:d6:fb:0c:31:21:09:9d:e7:ad:77:29:c0:63:63: a3:4f:5b:80:18:98:75:bb:72:ff:a4:f9:e3:cd:69: 7d:f6:89:0d:58:31:cf:1d:4b:3d:ea:63:1f:83:66: fc:3b:89:40:0e:f9:72:51:07:db:88:77:9c:f2:43: 84:b8:a3:7a:e0:89:90:3e:47:d0:cd:d6:1d:13:a0: f9:f1:06:20:8f:88:8f:1f:16:95:0d:89:b5:d5:3c: e0:fb:01:7d:57:4b:26:29:43:9f:b3:27:e9:ca:d2: be:e8:c6:41:08:99:c9:67:95:b8:1b:c1:93:c9:6c: 53:86:d2:af:64:f0:cb:65:52:f6:6e:fc:dc:3d:bf: 0a:ca:74:90:41:97:df:55:44:b8:cb:e9:f3:8b:0a: 52:d2:2a:96:ce:d0:6e:fb:4b:e7:66:f3:7f:f9:27: 06:fe:33:d9:de:77:ce:3b:94:a5:5a:50:83:21:bf: de:13:4e:42:89:87:67:26:ad:25:a7:87:0a:9a:5f: a3:42:82:e2:46:f5:c4:1b:92:1b:e1:8c:67:07:f7: 9f:2a:1f:95:be:32:57:5c:10:49:9f:2c:cb:e8:91: 6f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E7:75:3C:5F:51:5F:2D:45:E8:04:67:51:53:70:5C:56:2E:9C:65 X509v3 Authority Key Identifier: keyid:3D:C2:3E:8A:8E:C9:39:6B:1B:54:CF:FB:27:1C:55:76:6D:94:91:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:86:ab:0f:b1:ad:48:86:56:92:c7:81:a3:a3:0a:02:83:59: 57:d5:08:26:68:f6:1c:11:2d:da:58:6a:32:64:5f:1f:89:ea: 67:a9:18:8c:9c:73:1f:ed:74:8e:01:70:28:fa:15:4d:4a:25: 2e:fa:8c:77:d7:5b:35:9b:67:94:8b:41:23:9b:6a:0a:7d:45: d8:bb:41:a5:3c:65:f0:ee:3f:39:30:1f:33:30:52:9d:26:46: 71:20:62:86:b8:0f:6b:bc:e7:b1:11:1b:a8:07:96:cb:0f:61: a3:65:1b:8d:67:bd:19:c4:f7:e2:a3:3f:d2:9e:9f:8a:44:69: 08:4b:81:62:46:a7:4b:76:c3:77:10:13:8e:48:91:64:f9:c5: 8d:19:d0:54:fc:5f:16:f0:f4:8c:b1:ba:a4:c8:3a:38:28:a6: d3:e1:44:3d:0c:c3:ab:cc:e3:bf:15:79:45:0a:b5:4b:e6:4d: 30:bf:ea:65:ff:e5:5b:6d:83:f5:a0:8a:ac:27:12:66:0a:1d: 02:ad:8d:14:28:8d:a7:86:99:90:01:8a:7e:34:97:71:1d:9e: e4:6d:8e:fa:a8:5b:69:34:9d:93:c7:5d:62:b1:c5:7a:04:67: 5e:c3:e5:20:c9:46:5d:b4:0e:9d:3a:71:42:09:31:2f:9d:7c: 57:2d:db:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1Pt/ccKtske0/yVpew7otMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkYzIzZThhOGVjOTM5NmIxYjU0Y2ZmYjI3MWM1NTc2NmQ5 NDkxOTkwHhcNMjYwMTI1MTMwMTM3WhcNMjYwMTI2MTMwMTM3WjAzMTEwLwYDVQQD EygyMGU3NzUzYzVmNTE1ZjJkNDVlODA0Njc1MTUzNzA1YzU2MmU5YzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPLrVQmLSZme6N0ZAD4urvG8sKcj Ol+9icd3jTZN1vsMMSEJneetdynAY2OjT1uAGJh1u3L/pPnjzWl99okNWDHPHUs9 6mMfg2b8O4lADvlyUQfbiHec8kOEuKN64ImQPkfQzdYdE6D58QYgj4iPHxaVDYm1 1Tzg+wF9V0smKUOfsyfpytK+6MZBCJnJZ5W4G8GTyWxThtKvZPDLZVL2bvzcPb8K ynSQQZffVUS4y+nziwpS0iqWztBu+0vnZvN/+ScG/jPZ3nfOO5SlWlCDIb/eE05C iYdnJq0lp4cKml+jQoLiRvXEG5Ib4YxnB/efKh+VvjJXXBBJnyzL6JFvKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCDndTxfUV8tRegEZ1FTcFxWLpxlMB8GA1UdIwQY MBaAFD3CPoqOyTlrG1TP+yccVXZtlJGZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGNJLWlvN0pPV3NiVk1fN0p4eFZkbTJVa1prLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9kMWNmZDctOThkMy00M2I5LTk4MWUt YzBkZDQ3NzFjMmFhLzEvUGNJLWlvN0pPV3NiVk1fN0p4eFZkbTJVa1prLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9kMWNmZDctOThkMy00M2I5LTk4MWUtYzBkZDQ3NzFjMmFh LzEvUGNJLWlvN0pPV3NiVk1fN0p4eFZkbTJVa1prLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoYarD7Gt SIZWkseBo6MKAoNZV9UIJmj2HBEt2lhqMmRfH4nqZ6kYjJxzH+10jgFwKPoVTUol LvqMd9dbNZtnlItBI5tqCn1F2LtBpTxl8O4/OTAfMzBSnSZGcSBihrgPa7znsREb qAeWyw9ho2UbjWe9GcT34qM/0p6fikRpCEuBYkanS3bDdxATjkiRZPnFjRnQVPxf FvD0jLG6pMg6OCim0+FEPQzDq8zjvxV5RQq1S+ZNML/qZf/lW22D9aCKrCcSZgod Aq2NFCiNp4aZkAGKfjSXcR2e5G2O+qhbaTSdk8ddYrHFegRnXsPlIMlGXbQOnTpx QgkxL518Vy3bAg== -----END CERTIFICATE-----Generated at Sun Jan 25 23:09:12 2026 by rpki-client