This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft File: pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft (raw, json) Hash identifier: EMIgsNcvrA+N/WKhFrbNl7BXpRNkuJ0zfT15JI0YgL4= Subject key identifier: 03:76:53:05:AF:E0:6F:9C:DF:AF:F5:CB:CA:CF:A7:D4:E2:72:6D:10 Authority key identifier: A4:F5:53:3A:52:7B:26:4C:A2:E8:37:32:85:D7:80:D3:3A:2B:D0:A1 Certificate issuer: /CN=a4f5533a527b264ca2e8373285d780d33a2bd0a1 Certificate serial: 019BF6517BD5E1A75E9A34F83524B046E7F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft Manifest number: 047C Signing time: Sun 25 Jan 2026 18:01:33 +0000 Manifest this update: Sun 25 Jan 2026 18:01:33 +0000 Manifest next update: Mon 26 Jan 2026 18:01:33 +0000 Files and hashes: 1: pPVTOlJ7Jkyi6DcyhdeA0zor0KE.crl (hash: icaUOnbRc0KrHOFOuo2FCb+5zBaFatZfkDDXcNZWRFM=) 2: t83QwmnsF94N1e2quVeWFqxv3Q4.roa (hash: S00r80MkvAcmYicBdHFKql/0j/7ix5B+Lwxl0Q6uMXI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft rsync://rpki.ripe.net/repository/DEFAULT/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:7b:d5:e1:a7:5e:9a:34:f8:35:24:b0:46:e7:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4f5533a527b264ca2e8373285d780d33a2bd0a1 Validity Not Before: Jan 25 18:01:33 2026 GMT Not After : Jan 26 18:01:33 2026 GMT Subject: CN=03765305afe06f9cdfaff5cbcacfa7d4e2726d10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ee:b0:d5:6a:29:a1:88:e3:66:5d:3a:cb:8d: ea:2d:43:41:06:bf:76:b0:94:b1:83:c6:c9:36:64: d4:87:c6:fa:db:30:aa:89:17:ac:71:71:26:00:26: 76:72:2e:1a:4f:7b:2d:3b:5d:9d:da:ac:32:67:5e: c9:26:da:56:be:53:29:76:1d:f1:19:e6:9f:f3:54: de:35:7e:ab:a0:ec:ed:24:56:85:62:aa:03:61:03: 66:99:c4:d6:83:fe:c3:00:74:75:ea:a5:6e:b7:c9: c8:98:1a:12:09:57:7d:1b:1a:f9:11:99:c7:2d:ca: 70:e3:8b:06:bf:ad:18:87:a8:3d:2f:ca:93:9c:03: 9f:16:02:2b:ce:35:e4:75:64:48:03:1a:c6:30:9d: 70:00:c9:11:fd:0a:d6:b0:93:0d:68:6c:fb:37:ec: 53:44:8b:c4:2f:fa:3c:d0:e9:35:9a:eb:60:ea:da: 75:7e:ef:61:e0:52:d3:d4:1b:31:d6:06:d5:a9:79: f8:8c:cc:d4:33:74:a6:7f:10:8f:3b:5b:31:b0:0c: d7:ea:53:d8:91:5e:ca:a9:f2:69:e1:85:05:40:99: ce:15:5e:d6:5a:98:29:82:02:f2:1e:3d:e0:39:f5: f3:a5:ee:e9:f7:23:66:16:82:ea:44:df:25:2a:44: 9e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:76:53:05:AF:E0:6F:9C:DF:AF:F5:CB:CA:CF:A7:D4:E2:72:6D:10 X509v3 Authority Key Identifier: keyid:A4:F5:53:3A:52:7B:26:4C:A2:E8:37:32:85:D7:80:D3:3A:2B:D0:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:00:72:c0:59:7b:70:08:2e:60:d7:d5:8e:88:1e:99:fb:5f: b1:3e:0f:69:1d:ad:f2:ae:aa:cb:1f:76:1e:4c:75:9b:8c:e9: 8c:bf:5c:d6:14:3d:fa:a7:7b:1f:d3:a8:31:8a:6d:e8:40:ae: fc:f1:1e:f2:d4:5e:44:a1:6b:6b:18:8c:4a:f7:ed:e0:b9:3e: f3:fa:f1:98:ba:9c:f6:62:ac:26:9e:51:63:f9:29:f8:da:80: c5:ae:4f:78:71:1e:5c:5c:56:a4:9c:29:21:22:37:7c:c2:0b: 1f:45:38:64:30:7f:79:e5:35:57:51:fd:d6:68:3b:01:98:61: 08:17:ac:3c:5f:ee:ae:de:9a:27:d9:a6:6e:8b:eb:7d:6e:0a: 37:de:44:bf:5f:7c:23:ac:5c:e3:32:23:99:82:8e:b1:fb:4c: 51:01:61:f5:1e:bd:ea:92:61:03:69:24:bd:df:2d:4b:e1:2c: a1:6c:99:93:e7:32:b2:eb:87:25:ad:98:59:31:09:6a:f4:b8: 07:45:0d:53:58:5e:30:44:05:c1:46:b4:2e:b8:aa:10:cf:91: 6c:60:f2:97:49:5f:89:9c:aa:d2:ac:1d:2a:12:24:c1:ad:02: ae:e1:32:a0:4e:cb:85:8f:78:b8:b4:32:b7:00:7a:99:8d:35: 9a:21:2e:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UXvV4ademjT4NSSwRufwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZjU1MzNhNTI3YjI2NGNhMmU4MzczMjg1ZDc4MGQzM2Ey YmQwYTEwHhcNMjYwMTI1MTgwMTMzWhcNMjYwMTI2MTgwMTMzWjAzMTEwLwYDVQQD EygwMzc2NTMwNWFmZTA2ZjljZGZhZmY1Y2JjYWNmYTdkNGUyNzI2ZDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApO6w1WopoYjjZl06y43qLUNBBr92 sJSxg8bJNmTUh8b62zCqiRescXEmACZ2ci4aT3stO12d2qwyZ17JJtpWvlMpdh3x Geaf81TeNX6roOztJFaFYqoDYQNmmcTWg/7DAHR16qVut8nImBoSCVd9Gxr5EZnH Lcpw44sGv60Yh6g9L8qTnAOfFgIrzjXkdWRIAxrGMJ1wAMkR/QrWsJMNaGz7N+xT RIvEL/o80Ok1mutg6tp1fu9h4FLT1Bsx1gbVqXn4jMzUM3SmfxCPO1sxsAzX6lPY kV7KqfJp4YUFQJnOFV7WWpgpggLyHj3gOfXzpe7p9yNmFoLqRN8lKkSeaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAN2UwWv4G+c36/1y8rPp9Ticm0QMB8GA1UdIwQY MBaAFKT1UzpSeyZMoug3MoXXgNM6K9ChMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFBWVE9sSjdKa3lpNkRjeWhkZUEwem9yMEtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9hZmMzYzgtZTk1Mi00MDcwLWE1NDYt NDI0NDYyYmM5NDliLzEvcFBWVE9sSjdKa3lpNkRjeWhkZUEwem9yMEtFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9hZmMzYzgtZTk1Mi00MDcwLWE1NDYtNDI0NDYyYmM5NDli LzEvcFBWVE9sSjdKa3lpNkRjeWhkZUEwem9yMEtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJQBywFl7 cAguYNfVjogemftfsT4PaR2t8q6qyx92Hkx1m4zpjL9c1hQ9+qd7H9OoMYpt6ECu /PEe8tReRKFraxiMSvft4Lk+8/rxmLqc9mKsJp5RY/kp+NqAxa5PeHEeXFxWpJwp ISI3fMILH0U4ZDB/eeU1V1H91mg7AZhhCBesPF/urt6aJ9mmbovrfW4KN95Ev198 I6xc4zIjmYKOsftMUQFh9R696pJhA2kkvd8tS+EsoWyZk+cysuuHJa2YWTEJavS4 B0UNU1heMEQFwUa0LriqEM+RbGDyl0lfiZyq0qwdKhIkwa0CruEyoE7LhY94uLQy twB6mY01miEu7A== -----END CERTIFICATE-----Generated at Sun Jan 25 22:52:42 2026 by rpki-client