This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft File: PNJOCMV2B8rrzBnIVS6uLpNeguU.mft (raw, json) Hash identifier: sTr2eoR18rA3ne1RALcxYfysWNNafWkYCn9/W5Dgs2U= Subject key identifier: 69:67:05:92:7D:64:F9:A8:9D:4D:77:20:A2:F7:28:1B:9C:49:ED:9F Authority key identifier: 3C:D2:4E:08:C5:76:07:CA:EB:CC:19:C8:55:2E:AE:2E:93:5E:82:E5 Certificate issuer: /CN=3cd24e08c57607caebcc19c8552eae2e935e82e5 Certificate serial: 019BF83FCD39C2CD807D55D33F10F79DFF61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNJOCMV2B8rrzBnIVS6uLpNeguU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft Manifest number: 030A Signing time: Mon 26 Jan 2026 03:01:29 +0000 Manifest this update: Mon 26 Jan 2026 03:01:29 +0000 Manifest next update: Tue 27 Jan 2026 03:01:29 +0000 Files and hashes: 1: PNJOCMV2B8rrzBnIVS6uLpNeguU.crl (hash: q9ncYXJWGoi9QSEFe+X9PLDTkroIBfYJzXm6gvBFtaE=) 2: b06IK2jnqaGT2Aa6wapV_ItJbLk.roa (hash: evhqnMI6fxBMtq2kvZ+VYu5aDa3S4q8vrEyodEWm170=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft rsync://rpki.ripe.net/repository/DEFAULT/PNJOCMV2B8rrzBnIVS6uLpNeguU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:cd:39:c2:cd:80:7d:55:d3:3f:10:f7:9d:ff:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cd24e08c57607caebcc19c8552eae2e935e82e5 Validity Not Before: Jan 26 03:01:29 2026 GMT Not After : Jan 27 03:01:29 2026 GMT Subject: CN=696705927d64f9a89d4d7720a2f7281b9c49ed9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ac:af:06:3f:a3:52:79:74:15:05:b8:1a:68: ca:8a:af:8c:5f:a6:56:0e:b5:58:b0:32:3e:0b:97: 94:4e:56:9c:49:97:7a:cc:98:d7:67:e7:8b:38:93: eb:82:c6:ea:ee:c9:06:32:2b:d3:58:d0:f5:48:16: 77:60:2b:b1:8a:12:f1:db:34:99:1d:b6:51:76:22: c3:45:7a:7f:43:d2:08:3c:60:5f:5c:f8:54:35:91: 38:d8:55:f1:ce:49:d4:5f:63:93:7f:76:e9:ee:79: fd:41:ce:b4:eb:6c:79:aa:74:23:c3:72:37:8d:8a: 92:1b:c3:f1:4e:0c:cd:57:c3:5e:87:5f:d3:a7:3f: 7e:69:f7:e0:eb:0e:bc:3a:e6:79:3a:32:6e:d8:9b: 0d:d9:e6:f5:74:6b:e7:e3:4e:64:96:10:7c:e1:24: 7e:cd:ec:9c:ce:1d:dc:76:3e:db:b1:bc:8b:97:dc: e1:bd:0b:e8:a3:c5:91:70:ec:e7:2b:9a:93:c4:11: 7d:1c:03:4f:76:75:59:de:df:41:67:df:e6:29:07: ac:09:21:63:29:1a:5a:35:c2:e5:18:93:b5:90:da: 66:fa:da:90:2c:4d:66:e7:ab:d2:ce:f1:b2:7f:e4: ed:89:63:95:b9:b8:c7:7c:89:7d:c7:a8:ff:41:86: 00:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:67:05:92:7D:64:F9:A8:9D:4D:77:20:A2:F7:28:1B:9C:49:ED:9F X509v3 Authority Key Identifier: keyid:3C:D2:4E:08:C5:76:07:CA:EB:CC:19:C8:55:2E:AE:2E:93:5E:82:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNJOCMV2B8rrzBnIVS6uLpNeguU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:7e:4d:73:71:e6:92:71:1b:b4:78:67:bc:7d:3d:8e:c3:b4: d0:2f:8d:4c:4a:54:3a:d1:4f:c9:95:6e:3a:d1:c5:b6:9f:15: 80:98:ba:0a:e5:16:c9:36:c7:bc:03:40:d5:78:8d:86:8a:92: f4:03:55:8c:92:21:45:23:1a:69:e0:bb:e1:a9:f6:22:62:97: 93:6e:f3:19:26:6b:be:39:aa:8d:68:2f:bb:a4:a5:51:c7:56: 4b:71:46:5e:e4:b6:8f:cd:51:fe:0f:00:ea:b8:ee:cb:7d:fd: e0:8a:20:70:ef:cd:cb:93:12:05:68:68:77:4c:ed:77:09:fc: fb:a1:81:33:ce:6f:6b:0f:1f:3d:6a:5f:34:a2:5d:80:43:a3: fb:2a:3c:2e:93:da:38:2d:66:e6:67:2b:1c:28:fc:e4:54:2d: 98:9a:88:43:1d:c2:60:db:99:aa:20:63:e7:93:7b:6c:b4:bd: 95:8a:c2:7c:ab:bd:86:b9:b5:51:c8:a7:d4:1e:ae:d6:f5:d0: 5c:7a:97:40:29:d6:a3:fc:b6:07:72:bc:18:7c:1d:ce:5e:36: d7:0f:ca:33:23:bf:74:97:25:5b:5c:3d:68:93:71:aa:23:0f: 4f:75:87:4c:e9:08:e0:6c:58:5f:8e:aa:8f:5e:00:3c:64:b8: 02:e5:26:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P805ws2AfVXTPxD3nf9hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjZDI0ZTA4YzU3NjA3Y2FlYmNjMTljODU1MmVhZTJlOTM1 ZTgyZTUwHhcNMjYwMTI2MDMwMTI5WhcNMjYwMTI3MDMwMTI5WjAzMTEwLwYDVQQD Eyg2OTY3MDU5MjdkNjRmOWE4OWQ0ZDc3MjBhMmY3MjgxYjljNDllZDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6yvBj+jUnl0FQW4GmjKiq+MX6ZW DrVYsDI+C5eUTlacSZd6zJjXZ+eLOJPrgsbq7skGMivTWND1SBZ3YCuxihLx2zSZ HbZRdiLDRXp/Q9IIPGBfXPhUNZE42FXxzknUX2OTf3bp7nn9Qc6062x5qnQjw3I3 jYqSG8PxTgzNV8Neh1/Tpz9+affg6w68OuZ5OjJu2JsN2eb1dGvn405klhB84SR+ zeyczh3cdj7bsbyLl9zhvQvoo8WRcOznK5qTxBF9HANPdnVZ3t9BZ9/mKQesCSFj KRpaNcLlGJO1kNpm+tqQLE1m56vSzvGyf+TtiWOVubjHfIl9x6j/QYYA2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGlnBZJ9ZPmonU13IKL3KBucSe2fMB8GA1UdIwQY MBaAFDzSTgjFdgfK68wZyFUuri6TXoLlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUE5KT0NNVjJCOHJyekJuSVZTNnVMcE5lZ3VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8wODRmNzUtZDAwZS00M2M1LWJjYTgt MzZmZDcyM2EzODBhLzEvUE5KT0NNVjJCOHJyekJuSVZTNnVMcE5lZ3VVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy8wODRmNzUtZDAwZS00M2M1LWJjYTgtMzZmZDcyM2EzODBh LzEvUE5KT0NNVjJCOHJyekJuSVZTNnVMcE5lZ3VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKn5Nc3Hm knEbtHhnvH09jsO00C+NTEpUOtFPyZVuOtHFtp8VgJi6CuUWyTbHvANA1XiNhoqS 9ANVjJIhRSMaaeC74an2ImKXk27zGSZrvjmqjWgvu6SlUcdWS3FGXuS2j81R/g8A 6rjuy3394IogcO/Ny5MSBWhod0ztdwn8+6GBM85vaw8fPWpfNKJdgEOj+yo8LpPa OC1m5mcrHCj85FQtmJqIQx3CYNuZqiBj55N7bLS9lYrCfKu9hrm1Ucin1B6u1vXQ XHqXQCnWo/y2B3K8GHwdzl421w/KMyO/dJclW1w9aJNxqiMPT3WHTOkI4GxYX46q j14APGS4AuUmqQ== -----END CERTIFICATE-----Generated at Mon Jan 26 10:18:42 2026 by rpki-client