This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft File: PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft (raw, json) Hash identifier: TDwCP9ZlvsxA448Tx9l/ywKvh+FVE5M3bJwubohnwzk= Subject key identifier: 6A:CF:0E:43:80:06:31:1F:7B:BC:0D:37:29:04:A9:4A:13:54:B8:92 Authority key identifier: 3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3 Certificate issuer: /CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3 Certificate serial: 019BF4625AE5900AC3C1E6FD24DDDA184E1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft Manifest number: 099E Signing time: Sun 25 Jan 2026 09:00:44 +0000 Manifest this update: Sun 25 Jan 2026 09:00:44 +0000 Manifest next update: Mon 26 Jan 2026 09:00:44 +0000 Files and hashes: 1: PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl (hash: Hz5mWSd4zKmG3Y1tg+cZhvd22gBPDQKiCYj9cZdiQEc=) 2: Rc7RzqAPPUCBuDvI3EccxhXQFx0.roa (hash: NZZ300KypQkIx5yRquXaIhhH8xlduscfQaOkKsQw9Kc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:5a:e5:90:0a:c3:c1:e6:fd:24:dd:da:18:4e:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3 Validity Not Before: Jan 25 09:00:44 2026 GMT Not After : Jan 26 09:00:44 2026 GMT Subject: CN=6acf0e438006311f7bbc0d372904a94a1354b892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ff:ed:16:ae:3e:9d:57:8b:79:cd:dc:e0:c0: 14:ce:ef:a9:84:f2:69:2c:24:8a:9a:6f:f9:c8:8d: 32:0f:c7:a1:9f:67:3a:4d:22:2d:a7:fc:42:94:7d: 30:0f:7f:b4:5e:70:96:ac:c0:5d:b8:a3:d3:e3:4f: c5:63:a4:d0:8e:45:60:2a:73:c7:6e:70:c1:77:c7: e1:57:26:56:4d:3f:a8:6d:e3:be:e0:ee:1d:42:71: 5d:7d:65:cc:0b:8f:46:e6:1c:fe:25:d5:2b:e2:89: 22:73:fe:0e:57:86:c5:53:3a:93:ec:fd:dc:80:be: 17:84:23:72:64:59:c1:bc:d8:8b:ba:3c:31:c1:58: 9d:68:41:8d:56:9b:ce:d0:a6:8c:cc:34:8f:cc:8e: 3d:e3:82:7c:f9:0a:db:d2:65:b1:2a:88:31:f5:7e: 63:da:0b:df:f8:13:95:a8:db:eb:c3:35:47:e2:66: c7:e5:d8:b9:16:de:13:a6:5a:8a:c4:b6:dd:43:28: 31:ab:cd:95:f7:59:a6:5b:21:33:2e:61:af:79:c5: fd:f2:60:76:1d:79:00:21:07:4d:7a:9f:89:ed:ff: d5:c5:13:a8:6b:d5:59:1e:8a:8b:f7:07:60:92:ba: 88:bb:6c:24:0b:41:68:d3:4f:50:29:b0:4d:82:5c: e2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:CF:0E:43:80:06:31:1F:7B:BC:0D:37:29:04:A9:4A:13:54:B8:92 X509v3 Authority Key Identifier: keyid:3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:23:48:11:52:8c:7e:56:83:bc:55:bb:64:fd:6e:af:30:bc: 46:b2:41:45:0c:13:7c:84:f5:2a:d9:ab:c3:2a:5f:6c:84:c3: f6:50:85:7d:6c:79:06:76:b6:c3:ab:4c:83:96:fa:2f:52:0a: 74:53:34:52:0a:ab:2f:7e:8b:19:09:d2:7d:4b:08:39:a5:43: aa:43:14:e6:c7:2c:a2:fc:f0:66:72:ab:ef:da:0c:90:14:57: d3:b8:1b:54:45:26:5b:f0:80:52:6f:49:53:0f:51:a2:17:f5: 33:3a:58:74:bd:0c:8d:d9:49:20:88:99:7e:5b:8e:b8:4d:f8: 3f:ee:9e:46:1e:ec:dd:75:da:19:26:c5:47:0c:f6:ee:cd:7c: dc:69:f5:c9:bd:2d:4b:9f:a8:d6:d7:bf:59:c0:09:d0:40:b5: 08:cd:7f:50:46:f7:51:cd:ec:fa:dc:11:79:15:cd:b6:91:55: f1:e5:0f:8c:60:c9:e6:9e:ec:51:4f:18:f3:b1:c9:6f:73:37: bf:59:b2:de:ec:fd:f6:ee:5d:1c:da:2e:3d:8f:29:c4:8a:ab: c2:05:19:cb:7c:6f:c3:e9:97:f1:a8:44:a7:f7:89:1e:db:4a: d0:38:a3:c8:4d:3d:26:b9:a7:38:53:cb:9c:55:1e:99:01:06: 17:cf:41:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YlrlkArDweb9JN3aGE4bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNDMyNzdiN2NhNzlkMGU5ZTA3ZmM0YTRiMzE4MDQxZGY0 MTVjYjMwHhcNMjYwMTI1MDkwMDQ0WhcNMjYwMTI2MDkwMDQ0WjAzMTEwLwYDVQQD Eyg2YWNmMGU0MzgwMDYzMTFmN2JiYzBkMzcyOTA0YTk0YTEzNTRiODkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApf/tFq4+nVeLec3c4MAUzu+phPJp LCSKmm/5yI0yD8ehn2c6TSItp/xClH0wD3+0XnCWrMBduKPT40/FY6TQjkVgKnPH bnDBd8fhVyZWTT+obeO+4O4dQnFdfWXMC49G5hz+JdUr4okic/4OV4bFUzqT7P3c gL4XhCNyZFnBvNiLujwxwVidaEGNVpvO0KaMzDSPzI4944J8+Qrb0mWxKogx9X5j 2gvf+BOVqNvrwzVH4mbH5di5Ft4TplqKxLbdQygxq82V91mmWyEzLmGvecX98mB2 HXkAIQdNep+J7f/VxROoa9VZHoqL9wdgkrqIu2wkC0Fo009QKbBNglzi/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGrPDkOABjEfe7wNNykEqUoTVLiSMB8GA1UdIwQY MBaAFD5DJ3t8p50Ongf8SksxgEHfQVyzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGtNbmUzeW5uUTZlQl94S1N6R0FRZDlCWExNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yMjE5NDUtYTc0ZS00Nzc1LWFlYTUt M2NmMmE0NjIyZmJjLzEvUGtNbmUzeW5uUTZlQl94S1N6R0FRZDlCWExNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8yMjE5NDUtYTc0ZS00Nzc1LWFlYTUtM2NmMmE0NjIyZmJj LzEvUGtNbmUzeW5uUTZlQl94S1N6R0FRZDlCWExNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADiNIEVKM flaDvFW7ZP1urzC8RrJBRQwTfIT1KtmrwypfbITD9lCFfWx5Bna2w6tMg5b6L1IK dFM0UgqrL36LGQnSfUsIOaVDqkMU5scsovzwZnKr79oMkBRX07gbVEUmW/CAUm9J Uw9Rohf1MzpYdL0MjdlJIIiZfluOuE34P+6eRh7s3XXaGSbFRwz27s183Gn1yb0t S5+o1te/WcAJ0EC1CM1/UEb3Uc3s+twReRXNtpFV8eUPjGDJ5p7sUU8Y87HJb3M3 v1my3uz99u5dHNouPY8pxIqrwgUZy3xvw+mX8ahEp/eJHttK0DijyE09JrmnOFPL nFUemQEGF89BgA== -----END CERTIFICATE-----Generated at Sun Jan 25 16:46:14 2026 by rpki-client