This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.mft File: pnac0wPoTc03o3XW52tgKfzDZ7Q.mft (raw, json) Hash identifier: HBvw3kvoriejmDMy4QMh5vq0C8aG5FGlUj/WRJlxa/Y= Subject key identifier: 4D:9B:83:46:28:E5:20:3F:B6:B7:1E:CA:C9:8A:88:32:8E:21:2A:40 Authority key identifier: A6:76:9C:D3:03:E8:4D:CD:37:A3:75:D6:E7:6B:60:29:FC:C3:67:B4 Certificate issuer: /CN=a6769cd303e84dcd37a375d6e76b6029fcc367b4 Certificate serial: 019BF2E19F07F6E4F00977DA418C2E393F08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnac0wPoTc03o3XW52tgKfzDZ7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.mft Manifest number: 0172 Signing time: Sun 25 Jan 2026 02:00:31 +0000 Manifest this update: Sun 25 Jan 2026 02:00:31 +0000 Manifest next update: Mon 26 Jan 2026 02:00:31 +0000 Files and hashes: 1: ODmnFvkoRJ8KBXIwmG3VyMbhpMg.roa (hash: UzQ9zfqJ6GmOojpgnIMRQs0ikmH8yfkpdXYgZqB0SfM=) 2: pnac0wPoTc03o3XW52tgKfzDZ7Q.crl (hash: aVYg2NBOrpwSfy/e+sg3s2IUoe90DzUAigkPvFOdopo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/pnac0wPoTc03o3XW52tgKfzDZ7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:e1:9f:07:f6:e4:f0:09:77:da:41:8c:2e:39:3f:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6769cd303e84dcd37a375d6e76b6029fcc367b4 Validity Not Before: Jan 25 02:00:31 2026 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=4d9b834628e5203fb6b71ecac98a88328e212a40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ea:ec:4b:96:29:37:10:e1:fa:84:6e:95:bd: 9b:86:74:91:76:db:40:ce:21:d6:7f:7f:bb:88:fa: a0:70:67:57:89:a9:a7:b6:9e:75:5f:dd:40:81:88: 0e:c5:8e:ca:db:df:e6:25:d4:1d:df:e2:59:ad:af: 4a:0c:9e:57:2f:f4:eb:4c:f9:19:e3:8c:46:81:32: a5:33:f1:c7:5c:d1:6e:93:62:ba:31:3d:34:f0:ee: 6a:d0:8f:36:96:ad:69:01:69:a8:ca:bb:7c:ed:7a: 91:bb:dd:f3:c9:48:b6:3e:30:37:1e:b5:be:4f:23: 37:9d:da:1b:71:51:0b:bd:6e:d8:f0:cb:99:85:78: 25:62:bf:8f:f7:ba:0d:22:09:75:d5:03:49:ac:3d: 11:25:2c:52:db:69:f5:e9:11:10:03:9b:be:7a:f5: 55:43:a6:e5:19:7b:2a:97:e5:2d:a1:a4:7e:81:fb: f4:2f:8e:c4:d4:30:df:05:41:b5:b3:5e:5c:59:48: 70:d7:19:96:a6:94:4a:34:df:bd:3e:26:13:c5:2a: a6:b1:0c:b1:67:f0:67:57:54:39:e9:4e:a8:20:52: c1:98:c4:0f:f7:93:6f:83:c4:a0:43:43:fd:c1:8b: 89:9d:c0:14:ea:09:e8:5f:6f:71:f0:f1:39:ec:0e: c6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:9B:83:46:28:E5:20:3F:B6:B7:1E:CA:C9:8A:88:32:8E:21:2A:40 X509v3 Authority Key Identifier: keyid:A6:76:9C:D3:03:E8:4D:CD:37:A3:75:D6:E7:6B:60:29:FC:C3:67:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnac0wPoTc03o3XW52tgKfzDZ7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:ae:a7:87:5f:da:4b:84:6a:a0:8d:05:b2:d8:66:4b:60:0c: 59:34:77:85:70:f4:23:43:2e:1a:6c:2f:87:67:73:e4:e9:86: 6c:ad:fe:8b:97:4e:47:d8:1f:a6:7f:9c:9b:df:c9:22:f8:47: b3:0a:47:11:06:22:43:ef:5f:be:c1:73:26:d5:cf:d0:24:39: 98:e7:34:28:9a:58:f9:bd:05:f8:f4:06:3c:19:d4:80:e7:fd: d7:e0:af:9e:aa:b9:70:54:cf:80:6f:07:ea:2b:fe:eb:ab:53: b2:b8:be:f5:cf:17:ec:33:ca:ff:f3:ce:57:62:45:7e:62:f7: c0:ae:88:ef:6a:59:0c:dc:86:87:31:0c:b9:63:66:57:f8:29: 87:2f:df:b4:fa:a6:55:74:30:ba:67:51:15:8f:28:2e:a0:88: df:f2:c7:11:86:40:c4:fb:e3:6d:73:9d:4e:b7:75:cc:21:3d: 30:06:6c:0c:29:84:7a:27:99:63:e0:5a:3f:89:03:21:8c:f1: 02:f4:cb:c0:76:ae:b3:0c:72:16:83:d7:22:9a:d6:d2:d6:aa: e1:de:1f:4d:4b:ac:15:3f:65:09:34:b5:ef:d1:42:f7:d6:b5: 31:b6:76:e2:6b:1a:12:3d:53:34:78:92:a5:66:7f:f8:a4:e0: 2a:8d:72:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvy4Z8H9uTwCXfaQYwuOT8IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2NzY5Y2QzMDNlODRkY2QzN2EzNzVkNmU3NmI2MDI5ZmNj MzY3YjQwHhcNMjYwMTI1MDIwMDMxWhcNMjYwMTI2MDIwMDMxWjAzMTEwLwYDVQQD Eyg0ZDliODM0NjI4ZTUyMDNmYjZiNzFlY2FjOThhODgzMjhlMjEyYTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApersS5YpNxDh+oRulb2bhnSRdttA ziHWf3+7iPqgcGdXiamntp51X91AgYgOxY7K29/mJdQd3+JZra9KDJ5XL/TrTPkZ 44xGgTKlM/HHXNFuk2K6MT008O5q0I82lq1pAWmoyrt87XqRu93zyUi2PjA3HrW+ TyM3ndobcVELvW7Y8MuZhXglYr+P97oNIgl11QNJrD0RJSxS22n16REQA5u+evVV Q6blGXsql+UtoaR+gfv0L47E1DDfBUG1s15cWUhw1xmWppRKNN+9PiYTxSqmsQyx Z/BnV1Q56U6oIFLBmMQP95Nvg8SgQ0P9wYuJncAU6gnoX29x8PE57A7GawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE2bg0Yo5SA/trceysmKiDKOISpAMB8GA1UdIwQY MBaAFKZ2nNMD6E3NN6N11udrYCn8w2e0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcG5hYzB3UG9UYzAzbzNYVzUydGdLZnpEWjdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wMjM3YmMtOWQ1ZC00ZGI0LWFmOWIt OTdhN2I5MzI3Nzg3LzEvcG5hYzB3UG9UYzAzbzNYVzUydGdLZnpEWjdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8wMjM3YmMtOWQ1ZC00ZGI0LWFmOWItOTdhN2I5MzI3Nzg3 LzEvcG5hYzB3UG9UYzAzbzNYVzUydGdLZnpEWjdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATK6nh1/a S4RqoI0FsthmS2AMWTR3hXD0I0MuGmwvh2dz5OmGbK3+i5dOR9gfpn+cm9/JIvhH swpHEQYiQ+9fvsFzJtXP0CQ5mOc0KJpY+b0F+PQGPBnUgOf91+Cvnqq5cFTPgG8H 6iv+66tTsri+9c8X7DPK//POV2JFfmL3wK6I72pZDNyGhzEMuWNmV/gphy/ftPqm VXQwumdRFY8oLqCI3/LHEYZAxPvjbXOdTrd1zCE9MAZsDCmEeieZY+BaP4kDIYzx AvTLwHauswxyFoPXIprW0taq4d4fTUusFT9lCTS179FC99a1MbZ24msaEj1TNHiS pWZ/+KTgKo1y7A== -----END CERTIFICATE-----Generated at Sun Jan 25 11:49:59 2026 by rpki-client