This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft File: pbnffpj285_iukAi2id9KBmCgCE.mft (raw, json) Hash identifier: fYhoMU5CEyR3XPE6EXNmvC6KnfrAVZrAHXYdK/Sn3RU= Subject key identifier: 3F:EC:F8:C5:81:D0:06:9A:74:9B:D9:D0:07:08:F5:7C:B0:1C:17:38 Authority key identifier: A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21 Certificate issuer: /CN=a5b9df7e98f6f39fe2ba4022da277d2819828021 Certificate serial: 019BFAD2B93D1332C056E3016740B8082D46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft Manifest number: 0FAA Signing time: Mon 26 Jan 2026 15:01:12 +0000 Manifest this update: Mon 26 Jan 2026 15:01:12 +0000 Manifest next update: Tue 27 Jan 2026 15:01:12 +0000 Files and hashes: 1: I9LHF-RZZYWSxcstDpnevIA6riE.roa (hash: vYLGIUfFYxCx7fMsQHhbZTUJyamMIn1ZfEPepnwBTW8=) 2: O9WsHSnzYk742zCkAgQTbUGTREs.roa (hash: C1fEjAGlIYgN7QiKgwHHUyzZLesUlNI/jIZwl5Vbn8I=) 3: d7Oiy-xT-SexaolqG9PRJlxgqjU.roa (hash: 4jNxmS+Ck07zOfCR3EWOcxcJ2oApBPu6aJ/ogvm3WZk=) 4: pbnffpj285_iukAi2id9KBmCgCE.crl (hash: LfHluwES9Q1n2SljXC1OiotUpSyqnWkS0+c6YrdGIgg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:d2:b9:3d:13:32:c0:56:e3:01:67:40:b8:08:2d:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5b9df7e98f6f39fe2ba4022da277d2819828021 Validity Not Before: Jan 26 15:01:12 2026 GMT Not After : Jan 27 15:01:12 2026 GMT Subject: CN=3fecf8c581d0069a749bd9d00708f57cb01c1738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9f:5b:b0:79:4f:c9:57:1a:51:6e:8a:47:54: ef:43:64:98:2c:40:63:f4:68:76:2c:09:c1:f0:65: b4:70:36:d2:92:0c:ed:8b:5b:d2:56:dc:cb:cb:80: e2:78:05:3a:61:db:82:28:b5:41:33:53:12:25:23: de:73:2c:5e:64:dd:0f:0e:bb:5f:26:ed:d0:2c:f7: 24:3c:b6:2e:1e:e8:83:a8:e6:d4:67:f1:75:33:84: f2:67:52:43:23:c9:20:f6:16:71:68:d2:12:8d:d4: c5:0e:f3:23:13:e0:6d:1f:7a:22:76:d0:87:65:d1: 87:71:6b:18:04:f1:7e:e4:1e:75:88:1b:9c:3a:5d: 97:2d:22:aa:6c:b2:18:0f:59:d2:5c:dd:6f:e7:21: f4:1c:27:b1:9b:c8:d1:47:a6:2a:be:3a:ca:59:dd: cc:03:99:2c:2e:79:8c:9f:36:70:84:2d:00:ed:65: 19:ca:ee:9a:4a:d2:b1:42:82:4f:e0:63:27:de:3d: 5a:ec:d1:ea:16:f2:dc:34:b6:43:bf:71:1e:c9:a3: 38:42:08:a7:72:94:65:39:4e:d2:59:e2:a7:7b:e7: a3:15:e4:b8:56:80:82:5f:cd:a5:4e:cd:5a:01:5f: b4:8a:73:2f:b9:7b:02:29:f0:df:0e:ae:9c:18:45: fa:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:EC:F8:C5:81:D0:06:9A:74:9B:D9:D0:07:08:F5:7C:B0:1C:17:38 X509v3 Authority Key Identifier: keyid:A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:0f:c8:be:de:cb:29:66:67:bd:ae:34:a0:4e:09:74:30:95: 3f:21:fa:ab:73:94:79:61:14:ef:d1:8d:28:f8:3b:05:19:ac: a7:44:d3:10:02:9f:9e:35:f0:38:01:46:26:56:5e:f5:be:a7: 4e:06:93:82:37:b4:27:a3:7e:5c:c0:85:62:c8:49:d6:35:f0: 99:ce:c3:c1:eb:d8:1c:cd:a7:74:9a:64:5f:d0:ef:7c:f2:57: 80:6a:20:a6:ed:f3:f7:ad:73:5e:10:d2:f3:a2:ff:5d:97:12: c8:b8:d7:6e:ca:95:46:e2:08:0b:e1:b1:22:e8:23:86:6a:e6: dc:74:79:29:1a:3c:ba:33:68:38:c2:19:aa:8a:1c:cf:9a:f0: 12:6e:30:7e:ba:3e:a0:85:fd:72:c9:a4:35:ef:5f:b7:5c:27: 52:0f:6b:1f:1b:ac:89:ef:21:5f:0f:f8:32:b3:de:57:a8:e3: 6e:97:69:a5:ff:d2:60:12:24:24:d3:c9:91:9e:a3:73:b3:d2: 48:f9:ca:6d:fc:44:e8:54:73:d7:67:c6:4c:82:1b:d2:00:e5: 55:67:5e:8c:df:97:e6:2d:b1:5e:15:00:38:27:73:fa:6f:a0: 49:37:3a:94:42:25:71:d5:e2:3a:77:95:c6:28:e8:b3:3d:45: 4e:7d:94:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv60rk9EzLAVuMBZ0C4CC1GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YjlkZjdlOThmNmYzOWZlMmJhNDAyMmRhMjc3ZDI4MTk4 MjgwMjEwHhcNMjYwMTI2MTUwMTEyWhcNMjYwMTI3MTUwMTEyWjAzMTEwLwYDVQQD EygzZmVjZjhjNTgxZDAwNjlhNzQ5YmQ5ZDAwNzA4ZjU3Y2IwMWMxNzM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApp9bsHlPyVcaUW6KR1TvQ2SYLEBj 9Gh2LAnB8GW0cDbSkgzti1vSVtzLy4DieAU6YduCKLVBM1MSJSPecyxeZN0PDrtf Ju3QLPckPLYuHuiDqObUZ/F1M4TyZ1JDI8kg9hZxaNISjdTFDvMjE+BtH3oidtCH ZdGHcWsYBPF+5B51iBucOl2XLSKqbLIYD1nSXN1v5yH0HCexm8jRR6YqvjrKWd3M A5ksLnmMnzZwhC0A7WUZyu6aStKxQoJP4GMn3j1a7NHqFvLcNLZDv3EeyaM4Qgin cpRlOU7SWeKne+ejFeS4VoCCX82lTs1aAV+0inMvuXsCKfDfDq6cGEX6xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD/s+MWB0AaadJvZ0AcI9XywHBc4MB8GA1UdIwQY MBaAFKW5336Y9vOf4rpAItonfSgZgoAhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGJuZmZwajI4NV9pdWtBaTJpZDlLQm1DZ0NFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC85NzMwNDctODkxNC00MWM2LWExZTAt MGFjN2I3ZWRlNDJiLzEvcGJuZmZwajI4NV9pdWtBaTJpZDlLQm1DZ0NFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC85NzMwNDctODkxNC00MWM2LWExZTAtMGFjN2I3ZWRlNDJi LzEvcGJuZmZwajI4NV9pdWtBaTJpZDlLQm1DZ0NFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdQ/Ivt7L KWZnva40oE4JdDCVPyH6q3OUeWEU79GNKPg7BRmsp0TTEAKfnjXwOAFGJlZe9b6n TgaTgje0J6N+XMCFYshJ1jXwmc7DwevYHM2ndJpkX9DvfPJXgGogpu3z961zXhDS 86L/XZcSyLjXbsqVRuIIC+GxIugjhmrm3HR5KRo8ujNoOMIZqoocz5rwEm4wfro+ oIX9csmkNe9ft1wnUg9rHxusie8hXw/4MrPeV6jjbpdppf/SYBIkJNPJkZ6jc7PS SPnKbfxE6FRz12fGTIIb0gDlVWdejN+X5i2xXhUAOCdz+m+gSTc6lEIlcdXiOneV xijosz1FTn2USA== -----END CERTIFICATE-----Generated at Mon Jan 26 16:27:46 2026 by rpki-client