This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft File: pJMvpJVkpXamFD5F-BVmjyANdjc.mft (raw, json) Hash identifier: 2HjQA0g4BovoJeyuHwUl96DqRUGWCwl0Rxndwetibq0= Subject key identifier: 9D:B9:09:D4:B3:A2:86:CA:07:2F:54:F1:AE:B3:1A:7E:CF:EA:D3:FD Authority key identifier: A4:93:2F:A4:95:64:A5:76:A6:14:3E:45:F8:15:66:8F:20:0D:76:37 Certificate issuer: /CN=a4932fa49564a576a6143e45f815668f200d7637 Certificate serial: 019BA0EAEB9AFFD4344D7BC8B0B146A6575A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJMvpJVkpXamFD5F-BVmjyANdjc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft Manifest number: 0869 Signing time: Fri 09 Jan 2026 04:01:48 +0000 Manifest this update: Fri 09 Jan 2026 04:01:48 +0000 Manifest next update: Sat 10 Jan 2026 04:01:48 +0000 Files and hashes: 1: A47ejH-QND_4p5ZynnjdFhGZbf4.roa (hash: +HcmD5EzZ2PGTv159HFtwSPGyMK2+fjDllHmAYnxw3I=) 2: pJMvpJVkpXamFD5F-BVmjyANdjc.crl (hash: dxKbMncK5peoRu0GgcXAPw4pCNtin8VqJWp3o0BE8Pk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft rsync://rpki.ripe.net/repository/DEFAULT/pJMvpJVkpXamFD5F-BVmjyANdjc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a0:ea:eb:9a:ff:d4:34:4d:7b:c8:b0:b1:46:a6:57:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4932fa49564a576a6143e45f815668f200d7637 Validity Not Before: Jan 9 04:01:48 2026 GMT Not After : Jan 10 04:01:48 2026 GMT Subject: CN=9db909d4b3a286ca072f54f1aeb31a7ecfead3fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b1:7c:8d:e5:0c:2c:a6:4b:e0:68:fc:5a:f6: 97:b7:48:c1:05:a6:d3:aa:1c:e5:42:18:e9:cb:11: f6:7e:64:68:26:7c:23:05:3a:8f:18:ed:04:6d:fe: c2:e5:86:ef:fd:93:0f:74:fe:f1:bb:54:e9:dc:e8: 4e:be:f9:d2:8c:3e:3f:52:72:27:46:0b:68:5f:b2: d3:51:2f:76:76:c2:80:4a:1c:70:8f:6d:03:47:52: d2:2d:00:ef:65:11:a8:d5:c2:11:e0:32:22:ee:81: 62:c2:56:0b:71:16:96:d6:91:23:36:67:e1:3f:ce: 1a:5a:12:9b:2d:d5:8e:14:97:b9:5c:ac:f8:f7:bf: 06:d6:c6:5a:57:e0:45:52:2f:18:42:eb:c4:35:85: 8e:4d:e0:c2:5b:73:c0:a7:42:0b:c9:94:dc:58:91: 39:69:27:83:43:ca:68:e3:d1:07:cc:e4:fc:1c:b5: c9:cd:26:02:af:15:85:a5:af:e6:51:3c:23:a8:24: 36:0d:ff:9b:21:43:bb:77:36:06:c2:7b:d2:ea:4d: 40:e5:69:41:9f:dd:a6:88:11:1f:fa:cc:ba:c1:73: ad:12:45:68:70:e7:fc:f7:ac:b4:e0:85:db:4b:8c: d8:79:b6:f4:a7:b1:d0:c0:3e:f6:2d:64:b0:2d:d9: aa:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B9:09:D4:B3:A2:86:CA:07:2F:54:F1:AE:B3:1A:7E:CF:EA:D3:FD X509v3 Authority Key Identifier: keyid:A4:93:2F:A4:95:64:A5:76:A6:14:3E:45:F8:15:66:8F:20:0D:76:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJMvpJVkpXamFD5F-BVmjyANdjc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:49:39:6e:b3:fb:78:62:bd:54:cd:c9:7d:a8:f7:3e:6e:a3: ac:f4:20:ab:a2:73:eb:f6:60:df:30:11:68:4e:a9:d4:12:4e: bd:e6:d8:55:12:a8:ed:31:b1:45:87:6e:c8:e8:0a:3d:f8:f9: 94:62:84:1b:30:39:1b:6c:29:cf:0d:87:b2:b8:eb:e5:b8:e4: 98:dd:b6:70:fd:76:c7:3d:5b:16:da:4e:47:e2:11:a5:c1:58: 55:3d:f9:bf:78:ff:e4:80:4b:1a:e7:c9:20:ee:8c:18:70:07: 31:98:70:a7:69:4f:02:f6:1c:a3:e1:de:f4:91:be:9b:d2:b5: be:00:e8:c4:11:f3:d9:61:02:90:58:cf:2d:52:6f:26:a9:d1: 44:24:3f:7a:26:94:3f:95:41:44:fb:56:36:12:82:f6:f0:4a: 71:fc:fd:54:b0:3c:9b:74:54:b0:e3:7d:4f:71:48:f9:84:19: 02:e5:2a:5f:7f:58:ff:12:bf:f4:00:ef:b2:c0:5f:27:85:ec: dc:bb:17:7d:22:5f:14:11:a1:de:40:07:b3:0a:2b:f8:00:e8: 2a:52:77:b0:c0:52:f3:99:df:ca:69:d2:6d:cb:b9:1a:cf:8c: ac:e2:0e:82:c6:60:b9:0a:11:dc:d0:13:01:fd:0a:d1:f5:12: 4c:63:98:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZug6uua/9Q0TXvIsLFGpldaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0OTMyZmE0OTU2NGE1NzZhNjE0M2U0NWY4MTU2NjhmMjAw ZDc2MzcwHhcNMjYwMTA5MDQwMTQ4WhcNMjYwMTEwMDQwMTQ4WjAzMTEwLwYDVQQD Eyg5ZGI5MDlkNGIzYTI4NmNhMDcyZjU0ZjFhZWIzMWE3ZWNmZWFkM2ZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibF8jeUMLKZL4Gj8WvaXt0jBBabT qhzlQhjpyxH2fmRoJnwjBTqPGO0Ebf7C5Ybv/ZMPdP7xu1Tp3OhOvvnSjD4/UnIn RgtoX7LTUS92dsKAShxwj20DR1LSLQDvZRGo1cIR4DIi7oFiwlYLcRaW1pEjNmfh P84aWhKbLdWOFJe5XKz4978G1sZaV+BFUi8YQuvENYWOTeDCW3PAp0ILyZTcWJE5 aSeDQ8po49EHzOT8HLXJzSYCrxWFpa/mUTwjqCQ2Df+bIUO7dzYGwnvS6k1A5WlB n92miBEf+sy6wXOtEkVocOf896y04IXbS4zYebb0p7HQwD72LWSwLdmqswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ25CdSzoobKBy9U8a6zGn7P6tP9MB8GA1UdIwQY MBaAFKSTL6SVZKV2phQ+RfgVZo8gDXY3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEpNdnBKVmtwWGFtRkQ1Ri1CVm1qeUFOZGpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8wNGFiNDYtODNmMy00MTViLTg4M2Et YzdjMzI2ZDdhMzY0LzEvcEpNdnBKVmtwWGFtRkQ1Ri1CVm1qeUFOZGpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi8wNGFiNDYtODNmMy00MTViLTg4M2EtYzdjMzI2ZDdhMzY0 LzEvcEpNdnBKVmtwWGFtRkQ1Ri1CVm1qeUFOZGpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgkk5brP7 eGK9VM3Jfaj3Pm6jrPQgq6Jz6/Zg3zARaE6p1BJOvebYVRKo7TGxRYduyOgKPfj5 lGKEGzA5G2wpzw2Hsrjr5bjkmN22cP12xz1bFtpOR+IRpcFYVT35v3j/5IBLGufJ IO6MGHAHMZhwp2lPAvYco+He9JG+m9K1vgDoxBHz2WECkFjPLVJvJqnRRCQ/eiaU P5VBRPtWNhKC9vBKcfz9VLA8m3RUsON9T3FI+YQZAuUqX39Y/xK/9ADvssBfJ4Xs 3LsXfSJfFBGh3kAHswor+ADoKlJ3sMBS85nfymnSbcu5Gs+MrOIOgsZguQoR3NAT Af0K0fUSTGOYTQ== -----END CERTIFICATE-----Generated at Fri Jan 9 07:38:13 2026 by rpki-client