This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft File: pBM1JPJKSooh1GwGwQJfQPNK0no.mft (raw, json) Hash identifier: tAe5x+TtpSFxmzp7iYFGii5WBtBQ5yEaFgznBM++Pl0= Subject key identifier: DB:38:B4:51:19:A1:D5:8B:1B:57:E6:67:99:E9:AE:E6:F2:BF:10:1E Authority key identifier: A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A Certificate issuer: /CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a Certificate serial: 019BF763D7462436039F75CEDF30DE898529 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 23:01:14 +0000 Manifest this update: Sun 25 Jan 2026 23:01:14 +0000 Manifest next update: Mon 26 Jan 2026 23:01:14 +0000 Files and hashes: 1: pBM1JPJKSooh1GwGwQJfQPNK0no.crl (hash: +VMwhMIvFsKY7GfApYTJ0LcgBXXnVFLZhat7joU7Ims=) 2: y5UyZn3R0XHujvT13C_kHj2w0cs.roa (hash: ZG5nlrTnagfrNNiXJY30QrIi37+GVW+aj1DQcrSdzhI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:d7:46:24:36:03:9f:75:ce:df:30:de:89:85:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a Validity Not Before: Jan 25 23:01:14 2026 GMT Not After : Jan 26 23:01:14 2026 GMT Subject: CN=db38b45119a1d58b1b57e66799e9aee6f2bf101e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e7:3c:ea:77:f6:bd:64:50:1c:a8:3a:dd:4e: 55:ad:1d:91:a5:0b:47:25:b9:5b:d8:cc:9c:5a:58: 70:88:3c:13:63:ba:b6:1e:13:3b:27:a0:4f:1a:9a: a9:c6:b7:d7:44:82:d1:e7:b1:92:75:24:77:f9:2c: 0b:be:f3:72:3e:35:31:51:a2:4d:4d:91:c4:d9:8d: aa:e6:d3:c9:4e:ca:f3:42:0e:78:4d:4e:71:01:2e: cc:ed:70:a4:dc:52:b8:0c:fd:b7:fc:9a:db:71:87: 2e:fa:d6:fc:48:0d:d0:a9:4e:36:14:00:64:c7:74: ba:08:0d:f1:94:de:66:2e:3b:88:c5:3b:3a:1b:dd: 3a:a4:81:e0:65:70:dc:3f:5a:52:0d:84:fa:8d:2a: 93:33:c8:fa:04:d4:6a:0f:f7:1d:f6:eb:b2:25:12: a2:02:b5:e5:b2:7d:cd:63:4f:2d:39:58:50:3f:83: bc:68:ec:4d:91:2e:a2:5b:8a:3a:a4:c9:35:5a:c0: cc:cc:46:9c:14:53:24:82:33:d7:1c:1e:3c:87:2b: 10:44:9b:a9:98:a4:14:09:ec:6d:95:e8:65:ce:45: de:63:0f:be:79:29:7d:a8:9e:ae:1b:25:03:6c:9e: 4d:5a:05:ef:f9:28:f2:ef:5a:f7:3c:c4:41:1f:c0: 1a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:38:B4:51:19:A1:D5:8B:1B:57:E6:67:99:E9:AE:E6:F2:BF:10:1E X509v3 Authority Key Identifier: keyid:A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:7d:93:90:a8:0b:35:26:bc:14:e4:64:b6:17:1c:29:a9:cf: 91:96:bd:b9:2c:1a:81:23:16:f4:1e:15:f7:b6:24:d1:ee:c0: 1c:2b:0b:ff:e8:1d:16:3e:f2:03:60:cc:20:8e:38:fc:30:80: bb:f6:71:b7:d4:53:a9:b9:85:01:05:e0:95:78:d4:44:da:2a: 51:95:b0:5d:4f:73:02:85:49:d1:68:0c:12:64:77:8f:d5:c6: 79:56:49:73:04:e8:c4:a2:51:0f:6b:9e:86:dd:ee:a6:1b:cf: d2:ce:1c:02:77:4f:0d:3a:78:b4:ac:6b:11:84:ee:03:75:31: 41:64:d4:7f:02:6a:dd:b3:b6:04:7c:42:6a:30:ba:b3:a0:3f: 4f:cc:e2:9b:c2:06:5f:1e:6e:29:08:9b:5f:a5:e6:40:fe:bd: 8a:e8:03:ac:17:6d:c6:47:85:e6:0d:3d:a0:43:80:da:b1:a9: a6:d4:e8:71:11:a4:06:31:3a:9f:4c:45:03:70:75:55:e1:7c: 50:f0:1c:b2:92:3a:82:f6:f8:b9:0b:6b:4a:be:87:94:f9:75: 52:bc:52:8f:36:f4:9a:c0:18:f0:e3:4f:d6:d5:f3:78:54:9a: 70:ec:80:0b:f8:00:3a:8f:c5:14:5b:51:8c:95:08:4c:51:ec: 8e:55:a2:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y9dGJDYDn3XO3zDeiYUpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MTMzNTI0ZjI0YTRhOGEyMWQ0NmMwNmMxMDI1ZjQwZjM0 YWQyN2EwHhcNMjYwMTI1MjMwMTE0WhcNMjYwMTI2MjMwMTE0WjAzMTEwLwYDVQQD EyhkYjM4YjQ1MTE5YTFkNThiMWI1N2U2Njc5OWU5YWVlNmYyYmYxMDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuc86nf2vWRQHKg63U5VrR2RpQtH Jblb2MycWlhwiDwTY7q2HhM7J6BPGpqpxrfXRILR57GSdSR3+SwLvvNyPjUxUaJN TZHE2Y2q5tPJTsrzQg54TU5xAS7M7XCk3FK4DP23/JrbcYcu+tb8SA3QqU42FABk x3S6CA3xlN5mLjuIxTs6G906pIHgZXDcP1pSDYT6jSqTM8j6BNRqD/cd9uuyJRKi ArXlsn3NY08tOVhQP4O8aOxNkS6iW4o6pMk1WsDMzEacFFMkgjPXHB48hysQRJup mKQUCextlehlzkXeYw++eSl9qJ6uGyUDbJ5NWgXv+Sjy71r3PMRBH8AayQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNs4tFEZodWLG1fmZ5nprubyvxAeMB8GA1UdIwQY MBaAFKQTNSTySkqKIdRsBsECX0DzStJ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEJNMUpQSktTb29oMUd3R3dRSmZRUE5LMG5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zYzI0YmUtMjY2ZS00NTIyLTk3ZDYt N2Q5ZTYyYWZjNDQ0LzEvcEJNMUpQSktTb29oMUd3R3dRSmZRUE5LMG5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8zYzI0YmUtMjY2ZS00NTIyLTk3ZDYtN2Q5ZTYyYWZjNDQ0 LzEvcEJNMUpQSktTb29oMUd3R3dRSmZRUE5LMG5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa32TkKgL NSa8FORkthccKanPkZa9uSwagSMW9B4V97Yk0e7AHCsL/+gdFj7yA2DMII44/DCA u/Zxt9RTqbmFAQXglXjURNoqUZWwXU9zAoVJ0WgMEmR3j9XGeVZJcwToxKJRD2ue ht3uphvP0s4cAndPDTp4tKxrEYTuA3UxQWTUfwJq3bO2BHxCajC6s6A/T8zim8IG Xx5uKQibX6XmQP69iugDrBdtxkeF5g09oEOA2rGpptTocRGkBjE6n0xFA3B1VeF8 UPAcspI6gvb4uQtrSr6HlPl1UrxSjzb0msAY8ONP1tXzeFSacOyAC/gAOo/FFFtR jJUITFHsjlWiYQ== -----END CERTIFICATE-----Generated at Mon Jan 26 04:01:52 2026 by rpki-client