This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft File: pPTBZVXW8DttbI0KjMvhrx6uxDo.mft (raw, json) Hash identifier: 0uyruq+zUYooXpGHTjC76/D4s2040gGQLCn4LURj51M= Subject key identifier: 32:51:6E:59:32:9D:BA:36:35:C6:5D:25:65:72:F7:2A:90:9A:93:C3 Authority key identifier: A4:F4:C1:65:55:D6:F0:3B:6D:6C:8D:0A:8C:CB:E1:AF:1E:AE:C4:3A Certificate issuer: /CN=a4f4c16555d6f03b6d6c8d0a8ccbe1af1eaec43a Certificate serial: 019BF5071505F74A48399549CE44F2345EDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPTBZVXW8DttbI0KjMvhrx6uxDo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft Manifest number: 01CE Signing time: Sun 25 Jan 2026 12:00:40 +0000 Manifest this update: Sun 25 Jan 2026 12:00:40 +0000 Manifest next update: Mon 26 Jan 2026 12:00:40 +0000 Files and hashes: 1: lha0ZmedDVL5ojeX6XufkbgdzDc.roa (hash: aql9eZoUUBsK6RGXxorryRAzls71w3x+Yu3C3M/JeMA=) 2: pPTBZVXW8DttbI0KjMvhrx6uxDo.crl (hash: C4rbzDegvrSgpmilwExDVpG7OsyEMcO10AXBYEm1FPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft rsync://rpki.ripe.net/repository/DEFAULT/pPTBZVXW8DttbI0KjMvhrx6uxDo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:15:05:f7:4a:48:39:95:49:ce:44:f2:34:5e:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4f4c16555d6f03b6d6c8d0a8ccbe1af1eaec43a Validity Not Before: Jan 25 12:00:40 2026 GMT Not After : Jan 26 12:00:40 2026 GMT Subject: CN=32516e59329dba3635c65d256572f72a909a93c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d3:33:ad:bd:b1:b0:0e:dd:e8:1f:5c:b3:2b: 01:b5:e0:a7:f7:9c:95:81:0a:5a:60:78:95:40:06: 34:01:19:48:fb:91:b8:33:e2:2b:d3:ab:ad:15:78: 01:48:27:65:35:c5:07:18:bb:8b:c0:fc:ca:0b:f1: a1:3b:52:bb:91:b8:d9:f6:70:25:2b:ba:73:1d:1b: 2c:83:24:c3:01:25:b5:80:29:a2:4d:03:42:fb:30: a1:42:a1:0b:c8:8e:32:09:6e:4f:b7:ea:05:69:37: af:87:6b:2d:5b:ee:cc:ff:d5:a0:22:e8:44:5b:d0: 6e:1d:50:8d:a9:59:d1:d1:0c:84:2d:fe:5a:c5:b8: 4f:40:fa:a8:80:a0:8d:ea:0c:b7:cb:52:f2:ce:c3: 6a:45:77:b3:f0:79:1e:4c:53:36:2f:1b:16:8d:91: 03:b4:0c:17:79:f6:ed:f6:e5:3e:f5:31:29:53:29: 2e:61:7e:bd:14:b7:cd:30:7e:c4:71:b9:79:49:8d: 19:62:e5:fd:72:da:be:a6:91:aa:bd:4d:d6:73:d4: d7:da:06:c4:4d:c4:00:9c:e4:8a:24:76:8e:18:54: 81:a9:85:01:43:e2:19:d5:f1:71:8d:82:68:fc:b8: 77:31:c0:8d:03:df:9f:3e:b8:38:e7:5a:88:61:71: b9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:51:6E:59:32:9D:BA:36:35:C6:5D:25:65:72:F7:2A:90:9A:93:C3 X509v3 Authority Key Identifier: keyid:A4:F4:C1:65:55:D6:F0:3B:6D:6C:8D:0A:8C:CB:E1:AF:1E:AE:C4:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPTBZVXW8DttbI0KjMvhrx6uxDo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:f0:e0:e9:5e:8f:97:42:cd:ab:c0:30:13:b8:32:98:28:53: 86:5a:02:f7:4b:76:74:00:28:c8:bd:96:dd:43:f4:73:3f:2e: a4:08:e1:4e:11:1d:da:c6:eb:56:c1:6b:55:97:68:d0:b4:7e: ae:80:d4:26:c4:a0:b1:76:43:e6:36:48:fe:70:f0:bf:be:03: 70:2f:4d:26:01:93:2f:50:d9:94:97:5f:97:8f:16:7b:5b:fa: 60:45:5b:f0:03:8e:1f:40:78:74:11:48:b8:a5:67:73:ac:94: bc:90:88:28:74:d5:a1:0c:0e:4d:d0:c8:48:ef:40:7f:c0:9e: c6:97:9e:80:89:72:19:1b:32:54:8d:49:04:8b:42:9f:3d:fd: 71:bb:56:22:71:b9:16:34:11:07:e1:94:a2:f4:d2:30:f2:b6: 83:96:8a:22:3e:d6:e0:d2:f2:bf:ac:d4:44:ec:40:ab:47:36: 69:66:b1:27:1d:07:db:c0:75:9e:6d:45:14:cc:83:73:76:bf: 43:c8:ba:28:d4:c5:8f:c7:48:45:9d:3e:af:2b:32:85:5c:ab: a6:a9:17:b3:61:59:d1:e2:81:76:d8:49:d7:f2:cb:9b:c9:cd: e7:03:a2:23:e1:59:6a:ce:3a:bc:7e:18:f4:1d:bd:7f:f9:a3: 8f:85:4d:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1BxUF90pIOZVJzkTyNF7eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZjRjMTY1NTVkNmYwM2I2ZDZjOGQwYThjY2JlMWFmMWVh ZWM0M2EwHhcNMjYwMTI1MTIwMDQwWhcNMjYwMTI2MTIwMDQwWjAzMTEwLwYDVQQD EygzMjUxNmU1OTMyOWRiYTM2MzVjNjVkMjU2NTcyZjcyYTkwOWE5M2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9Mzrb2xsA7d6B9csysBteCn95yV gQpaYHiVQAY0ARlI+5G4M+Ir06utFXgBSCdlNcUHGLuLwPzKC/GhO1K7kbjZ9nAl K7pzHRssgyTDASW1gCmiTQNC+zChQqELyI4yCW5Pt+oFaTevh2stW+7M/9WgIuhE W9BuHVCNqVnR0QyELf5axbhPQPqogKCN6gy3y1LyzsNqRXez8HkeTFM2LxsWjZED tAwXefbt9uU+9TEpUykuYX69FLfNMH7Ecbl5SY0ZYuX9ctq+ppGqvU3Wc9TX2gbE TcQAnOSKJHaOGFSBqYUBQ+IZ1fFxjYJo/Lh3McCNA9+fPrg451qIYXG5GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDJRblkynbo2NcZdJWVy9yqQmpPDMB8GA1UdIwQY MBaAFKT0wWVV1vA7bWyNCozL4a8ersQ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFBUQlpWWFc4RHR0YkkwS2pNdmhyeDZ1eERvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9kOTQyOTQtNzk5OS00MDA5LTlkZDYt MjU2N2Y0YTliMTM5LzEvcFBUQlpWWFc4RHR0YkkwS2pNdmhyeDZ1eERvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9kOTQyOTQtNzk5OS00MDA5LTlkZDYtMjU2N2Y0YTliMTM5 LzEvcFBUQlpWWFc4RHR0YkkwS2pNdmhyeDZ1eERvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm/Dg6V6P l0LNq8AwE7gymChThloC90t2dAAoyL2W3UP0cz8upAjhThEd2sbrVsFrVZdo0LR+ roDUJsSgsXZD5jZI/nDwv74DcC9NJgGTL1DZlJdfl48We1v6YEVb8AOOH0B4dBFI uKVnc6yUvJCIKHTVoQwOTdDISO9Af8CexpeegIlyGRsyVI1JBItCnz39cbtWInG5 FjQRB+GUovTSMPK2g5aKIj7W4NLyv6zUROxAq0c2aWaxJx0H28B1nm1FFMyDc3a/ Q8i6KNTFj8dIRZ0+rysyhVyrpqkXs2FZ0eKBdthJ1/LLm8nN5wOiI+FZas46vH4Y 9B29f/mjj4VNVQ== -----END CERTIFICATE-----Generated at Sun Jan 25 20:39:23 2026 by rpki-client