This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft File: Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft (raw, json) Hash identifier: rSZ/Y4ndEe3DR1kEkInifWr1/DpPmOoxP5HUAMdpLI8= Subject key identifier: 69:E1:57:D7:7E:0F:84:84:03:77:84:D5:C9:F1:52:9D:01:07:60:73 Authority key identifier: 3D:EF:11:BB:8A:8D:48:0A:03:13:E1:F2:18:A6:6B:DF:4E:95:F6:27 Certificate issuer: /CN=3def11bb8a8d480a0313e1f218a66bdf4e95f627 Certificate serial: 019BF5AC1F9D57706FA17420A9BC46F5CD65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft Manifest number: 17E7 Signing time: Sun 25 Jan 2026 15:00:56 +0000 Manifest this update: Sun 25 Jan 2026 15:00:56 +0000 Manifest next update: Mon 26 Jan 2026 15:00:56 +0000 Files and hashes: 1: 6LPLfXRjPfIhjODnqMp3dSMQhpE.roa (hash: SwmREtsfcX2USnXEaEXyt246LdWmwOC0/X0ED+RKl5c=) 2: Pe8Ru4qNSAoDE-HyGKZr306V9ic.crl (hash: 7mCMffiia7rVuf7WIfrz3KQHhQ8D2Zr9+UKd6KvQ8tc=) 3: kvgue6TS--DcN7HG6o1wL6cSaEs.roa (hash: FoFeIWZgKjpGFpo+unUKSXljq5ce3QE7qtWREotLcT4=) 4: qLhFmr4T7lmhKT8keUmQGB3IPPk.roa (hash: 2UcGL5CSyZb5XFh4zJbKoqd+DUw15c/cw5GBlQgBwdA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft rsync://rpki.ripe.net/repository/DEFAULT/Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:1f:9d:57:70:6f:a1:74:20:a9:bc:46:f5:cd:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3def11bb8a8d480a0313e1f218a66bdf4e95f627 Validity Not Before: Jan 25 15:00:56 2026 GMT Not After : Jan 26 15:00:56 2026 GMT Subject: CN=69e157d77e0f8484037784d5c9f1529d01076073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b4:bb:0f:c3:25:8b:35:74:a9:98:48:d2:98: af:d4:62:0b:cd:b4:02:77:28:38:29:5a:4d:dd:47: cc:1a:99:a2:a5:3f:8d:f9:6e:95:a6:55:e3:8e:30: 55:83:8a:ac:27:e4:40:f5:31:30:7c:7e:e8:96:03: d2:3f:be:e8:72:06:f7:c2:f8:21:6c:72:db:ee:eb: 0b:84:f4:e6:f7:6b:15:7a:4d:05:10:1a:4b:34:d1: 94:51:8a:c1:2e:57:d4:33:eb:47:59:8e:8c:48:ac: 23:31:f4:1d:e7:b3:52:39:29:8a:7b:07:90:1b:c1: 1f:84:5d:56:0c:1e:55:05:48:da:0c:d0:86:fb:f5: 2f:d6:1e:5d:b3:fa:fa:fe:e9:54:88:a9:6b:8d:e2: 05:a0:5c:99:6d:60:bd:56:95:a3:9c:e4:40:49:75: 3a:60:6d:e0:b0:34:bf:db:86:9c:a0:c3:49:d0:a2: 66:24:17:b9:1b:a4:a5:26:df:8f:49:31:1a:04:29: 68:92:2e:08:ef:2e:ff:78:b3:8b:bf:f3:d2:c7:38: 68:03:17:c8:ea:17:1b:2f:2b:8b:94:16:09:8d:d9: bd:fb:2f:90:b3:c8:53:eb:4b:3d:d2:b3:f2:e6:67: 33:8c:b8:39:58:29:e1:f3:27:e0:8c:76:aa:f3:34: 48:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:E1:57:D7:7E:0F:84:84:03:77:84:D5:C9:F1:52:9D:01:07:60:73 X509v3 Authority Key Identifier: keyid:3D:EF:11:BB:8A:8D:48:0A:03:13:E1:F2:18:A6:6B:DF:4E:95:F6:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:e6:ed:d3:5f:a4:1d:12:6d:f1:c0:6a:9b:d1:43:ce:74:82: 4f:cd:f7:cf:b6:2a:41:a9:92:77:ff:af:72:bc:df:b4:ea:7f: ec:0a:1f:82:9b:2d:6a:51:fa:c5:62:72:4f:ea:13:fb:bf:50: 22:f7:f4:d2:b1:f7:40:b5:bc:16:60:7c:c3:f6:c3:0b:8f:9d: ea:89:fd:db:96:8a:11:a0:2a:9d:e3:20:42:0d:27:84:df:cf: 48:ca:22:a9:fc:9a:e9:cd:16:ba:35:ae:da:0f:09:22:35:3c: 89:16:d0:a8:e7:61:e3:eb:e4:ca:04:80:85:cb:01:19:d0:70: 42:ac:ab:79:b9:f8:6e:b8:b7:7c:51:13:1a:8b:f4:54:98:f3: b8:21:fe:50:00:ab:71:6d:8e:64:0e:3f:0e:b3:a3:27:70:af: 8a:dd:1f:a5:39:31:5e:7e:95:18:50:28:08:ca:f3:3c:4c:43: 26:1b:b6:19:c5:ca:50:c1:7c:ec:45:3c:de:4e:e0:e2:0d:e7: b8:64:98:75:40:1a:02:5e:34:4c:f2:40:5a:c2:de:37:1d:d9: 50:a9:d4:12:0e:38:90:4a:b5:de:39:1d:6d:19:3a:27:a8:a0: 91:86:a5:59:11:0e:01:35:5a:f6:10:8c:bf:23:2c:b1:4e:a2: 6a:bb:63:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rB+dV3BvoXQgqbxG9c1lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkZWYxMWJiOGE4ZDQ4MGEwMzEzZTFmMjE4YTY2YmRmNGU5 NWY2MjcwHhcNMjYwMTI1MTUwMDU2WhcNMjYwMTI2MTUwMDU2WjAzMTEwLwYDVQQD Eyg2OWUxNTdkNzdlMGY4NDg0MDM3Nzg0ZDVjOWYxNTI5ZDAxMDc2MDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLS7D8MlizV0qZhI0piv1GILzbQC dyg4KVpN3UfMGpmipT+N+W6VplXjjjBVg4qsJ+RA9TEwfH7olgPSP77ocgb3wvgh bHLb7usLhPTm92sVek0FEBpLNNGUUYrBLlfUM+tHWY6MSKwjMfQd57NSOSmKeweQ G8EfhF1WDB5VBUjaDNCG+/Uv1h5ds/r6/ulUiKlrjeIFoFyZbWC9VpWjnORASXU6 YG3gsDS/24acoMNJ0KJmJBe5G6SlJt+PSTEaBCloki4I7y7/eLOLv/PSxzhoAxfI 6hcbLyuLlBYJjdm9+y+Qs8hT60s90rPy5mczjLg5WCnh8yfgjHaq8zRIEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGnhV9d+D4SEA3eE1cnxUp0BB2BzMB8GA1UdIwQY MBaAFD3vEbuKjUgKAxPh8hima99OlfYnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGU4UnU0cU5TQW9ERS1IeUdLWnIzMDZWOWljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9kMWYxNzItMmRlZi00Nzk3LTgwNWYt YjQ5NDY2NDcyNGFkLzEvUGU4UnU0cU5TQW9ERS1IeUdLWnIzMDZWOWljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9kMWYxNzItMmRlZi00Nzk3LTgwNWYtYjQ5NDY2NDcyNGFk LzEvUGU4UnU0cU5TQW9ERS1IeUdLWnIzMDZWOWljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl+bt01+k HRJt8cBqm9FDznSCT833z7YqQamSd/+vcrzftOp/7AofgpstalH6xWJyT+oT+79Q Ivf00rH3QLW8FmB8w/bDC4+d6on925aKEaAqneMgQg0nhN/PSMoiqfya6c0WujWu 2g8JIjU8iRbQqOdh4+vkygSAhcsBGdBwQqyrebn4bri3fFETGov0VJjzuCH+UACr cW2OZA4/DrOjJ3Cvit0fpTkxXn6VGFAoCMrzPExDJhu2GcXKUMF87EU83k7g4g3n uGSYdUAaAl40TPJAWsLeNx3ZUKnUEg44kEq13jkdbRk6J6igkYalWREOATVa9hCM vyMssU6iartj/g== -----END CERTIFICATE-----Generated at Sun Jan 25 23:18:13 2026 by rpki-client