This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft File: pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft (raw, json) Hash identifier: fEzeyXMBl5UuQE+IKflsrr2nMDqZsepereyA998fDy8= Subject key identifier: 9A:2E:B7:81:28:BF:AC:9F:AE:65:F3:A8:F6:0D:EC:A6:50:48:F4:01 Authority key identifier: A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95 Certificate issuer: /CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395 Certificate serial: 019BF9F6913472C9852112DC02F8C9BA451B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft Manifest number: 17EA Signing time: Mon 26 Jan 2026 11:00:44 +0000 Manifest this update: Mon 26 Jan 2026 11:00:44 +0000 Manifest next update: Tue 27 Jan 2026 11:00:44 +0000 Files and hashes: 1: ZMTWhcJ1e7tvXHUUl4ANoGMrIWk.roa (hash: 9yOiqGJYeL5bi8PHF9fNeVVcmhOJdy6bDsiWR0m6Ve0=) 2: pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl (hash: rdciQ+CBxlu1K+H0J/6z9BJ0rDgw0PUirD0cc76GeeI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:f6:91:34:72:c9:85:21:12:dc:02:f8:c9:ba:45:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395 Validity Not Before: Jan 26 11:00:44 2026 GMT Not After : Jan 27 11:00:44 2026 GMT Subject: CN=9a2eb78128bfac9fae65f3a8f60deca65048f401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:81:57:32:4c:e6:04:5a:65:1e:60:4b:18:84: 0f:be:19:3d:66:e7:b7:30:5a:4d:2f:d4:24:5b:35: d5:cc:c3:2f:94:ee:7e:18:b9:59:f3:11:52:0c:fc: d3:b8:9d:d4:0d:ee:02:96:da:38:45:a4:eb:ad:7b: 83:52:cf:64:bd:1c:e5:eb:3b:44:2c:bd:d1:bc:e9: ef:74:37:40:a8:f8:06:54:47:a7:6f:b8:3a:6e:9d: e8:5a:3d:eb:2f:4f:eb:63:2d:bb:77:c6:32:a1:e6: 56:97:b4:a1:0f:24:ab:a4:91:60:84:3a:38:57:58: 63:f1:2e:6f:c0:55:25:ef:17:98:d9:f3:d8:22:59: d4:1f:4c:8a:35:11:1b:34:d1:09:b2:2a:6a:50:9d: db:24:80:a7:52:9a:39:81:16:ac:c7:74:f8:61:3f: 6c:90:e6:a0:b0:7b:93:3e:e9:13:44:92:01:c6:c5: 40:b4:55:6b:dd:43:14:02:f5:7d:31:30:d4:88:fb: 2f:19:af:68:6d:4a:3a:68:52:f1:62:f9:1e:7b:91: 05:83:b7:b1:bb:1d:08:da:4d:28:69:02:1c:06:de: 30:b2:1f:e8:04:01:0f:87:fd:74:e8:c2:2f:1f:3b: c1:ad:30:74:d1:28:f2:7e:cc:4c:09:48:3c:cf:f2: dd:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:2E:B7:81:28:BF:AC:9F:AE:65:F3:A8:F6:0D:EC:A6:50:48:F4:01 X509v3 Authority Key Identifier: keyid:A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:55:2a:8a:a1:3b:d0:04:65:04:f9:65:6f:22:bf:3a:ec:90: 28:2f:41:88:a2:2b:51:79:0f:9a:4c:44:f3:97:21:58:8c:fe: 4d:d5:90:a8:c1:33:72:ff:f5:86:7b:54:a0:26:9f:4e:df:78: ca:a6:c2:3a:f8:a7:13:9b:76:a3:99:74:98:40:4f:a6:cc:64: f2:4f:3d:17:53:ea:ed:86:ef:61:bf:49:1b:37:a5:16:94:59: 59:a7:50:d8:85:ce:1c:2c:ea:2a:aa:fb:ca:48:da:28:e7:fb: 48:15:26:28:c1:1e:06:ce:ab:f8:7a:25:97:cb:f8:1b:a1:3b: cf:5f:aa:07:97:52:82:80:b1:2a:c3:a5:cd:f4:0f:a8:47:3f: 0a:a1:40:0e:f2:90:49:8e:fa:3c:f8:fb:f6:a6:69:dd:1c:5a: 31:85:3a:74:47:1b:f0:86:b1:2d:d6:35:42:7f:2c:1c:b5:54: fd:4b:93:9d:6b:dd:8e:99:0d:29:01:77:39:f9:c6:a7:20:34: c5:0e:7e:93:eb:f2:8b:84:ce:6a:0f:39:2c:97:4b:0e:62:63: 0f:8f:88:29:d6:61:8a:fa:a4:93:dd:a6:77:c2:7a:67:f5:93: bb:6a:88:32:78:ee:30:21:32:35:72:15:6e:4c:aa:15:85:ec: cf:f9:c3:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv59pE0csmFIRLcAvjJukUbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZjUyM2Q5NDgzODdkOGM1ZmNkZjc1MmUwYTFjYzQwOGNm ZTgzOTUwHhcNMjYwMTI2MTEwMDQ0WhcNMjYwMTI3MTEwMDQ0WjAzMTEwLwYDVQQD Eyg5YTJlYjc4MTI4YmZhYzlmYWU2NWYzYThmNjBkZWNhNjUwNDhmNDAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYFXMkzmBFplHmBLGIQPvhk9Zue3 MFpNL9QkWzXVzMMvlO5+GLlZ8xFSDPzTuJ3UDe4Clto4RaTrrXuDUs9kvRzl6ztE LL3RvOnvdDdAqPgGVEenb7g6bp3oWj3rL0/rYy27d8YyoeZWl7ShDySrpJFghDo4 V1hj8S5vwFUl7xeY2fPYIlnUH0yKNREbNNEJsipqUJ3bJICnUpo5gRasx3T4YT9s kOagsHuTPukTRJIBxsVAtFVr3UMUAvV9MTDUiPsvGa9obUo6aFLxYvkee5EFg7ex ux0I2k0oaQIcBt4wsh/oBAEPh/106MIvHzvBrTB00SjyfsxMCUg8z/LdTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJout4Eov6yfrmXzqPYN7KZQSPQBMB8GA1UdIwQY MBaAFKT1I9lIOH2MX833UuChzECM/oOVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFBVajJVZzRmWXhmemZkUzRLSE1RSXotZzVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8wODVjMzUtMjhhYy00MjQxLWI5NTEt MjBhOTAwYmM3NzZhLzEvcFBVajJVZzRmWXhmemZkUzRLSE1RSXotZzVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8wODVjMzUtMjhhYy00MjQxLWI5NTEtMjBhOTAwYmM3NzZh LzEvcFBVajJVZzRmWXhmemZkUzRLSE1RSXotZzVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd1UqiqE7 0ARlBPllbyK/OuyQKC9BiKIrUXkPmkxE85chWIz+TdWQqMEzcv/1hntUoCafTt94 yqbCOvinE5t2o5l0mEBPpsxk8k89F1Pq7YbvYb9JGzelFpRZWadQ2IXOHCzqKqr7 ykjaKOf7SBUmKMEeBs6r+Holl8v4G6E7z1+qB5dSgoCxKsOlzfQPqEc/CqFADvKQ SY76PPj79qZp3RxaMYU6dEcb8IaxLdY1Qn8sHLVU/UuTnWvdjpkNKQF3OfnGpyA0 xQ5+k+vyi4TOag85LJdLDmJjD4+IKdZhivqkk92md8J6Z/WTu2qIMnjuMCEyNXIV bkyqFYXsz/nDHw== -----END CERTIFICATE-----Generated at Mon Jan 26 14:03:52 2026 by rpki-client