This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.mft File: PqvgKPO-fuByiF0Cu9e2KmUkJe8.mft (raw, json) Hash identifier: zfSBzVJRBfF1svh4lKsvxh6vsRsWa1A3e5j5e13Ex6U= Subject key identifier: 04:68:21:CF:7E:9D:5D:AC:FD:B2:21:61:72:FB:3D:96:C9:5A:8E:D0 Authority key identifier: 3E:AB:E0:28:F3:BE:7E:E0:72:88:5D:02:BB:D7:B6:2A:65:24:25:EF Certificate issuer: /CN=3eabe028f3be7ee072885d02bbd7b62a652425ef Certificate serial: 019B80836EA5E4CB57B6B2C4646FC0F0EEFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqvgKPO-fuByiF0Cu9e2KmUkJe8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.mft Manifest number: 0DBE Signing time: Fri 02 Jan 2026 21:00:55 +0000 Manifest this update: Fri 02 Jan 2026 21:00:55 +0000 Manifest next update: Sat 03 Jan 2026 21:00:55 +0000 Files and hashes: 1: 66CPSBvOBs6dFqzBnItMz4Q213g.roa (hash: b1rR7/NAs6w4yv3zdYzfmRYRTyFpzzr69EUW9oij5uE=) 2: PqvgKPO-fuByiF0Cu9e2KmUkJe8.crl (hash: zb1W6K//9JpUsRl0aPmUcB2A7T02HNfa4dDcfJWrW2Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.mft rsync://rpki.ripe.net/repository/DEFAULT/PqvgKPO-fuByiF0Cu9e2KmUkJe8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:80:83:6e:a5:e4:cb:57:b6:b2:c4:64:6f:c0:f0:ee:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eabe028f3be7ee072885d02bbd7b62a652425ef Validity Not Before: Jan 2 21:00:55 2026 GMT Not After : Jan 3 21:00:55 2026 GMT Subject: CN=046821cf7e9d5dacfdb2216172fb3d96c95a8ed0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bd:20:13:4c:c4:c1:cd:f8:28:db:27:9e:9c: a1:4d:a1:36:86:ea:ff:7b:ea:f1:2c:5c:65:e5:b6: f3:94:7c:a8:14:07:f0:22:02:00:b7:3a:46:b4:a2: 3a:7a:53:a2:2f:33:b0:4d:e9:c0:f8:40:ce:5c:17: 92:44:a0:cf:4b:e2:86:08:da:98:73:eb:bd:2f:6a: 59:fe:07:55:4e:af:54:36:ff:5a:d3:32:2a:d8:33: af:8e:70:ae:0b:55:66:b0:a0:71:71:70:31:08:16: a0:c9:03:f7:ca:8c:56:32:34:38:07:3d:6a:c7:30: 40:27:cb:c2:f1:23:dc:e7:ca:43:8e:f6:ca:46:29: a8:8a:16:93:d9:4d:fa:11:63:8d:b5:ee:c9:67:89: 7f:b8:23:1c:fc:4b:e4:e9:f0:24:7f:14:01:4f:05: 36:f8:fd:a8:92:bd:8a:3d:28:64:73:d7:b1:48:80: 7f:c5:4e:e2:36:30:21:a5:a6:b8:66:41:9f:cc:c6: e8:d4:87:30:11:6f:f7:5f:bd:22:b9:8a:fd:82:ed: 49:d0:5d:f0:f2:73:10:d8:e2:08:0d:41:52:56:02: da:6f:3f:10:e1:0f:28:e6:9e:66:e9:75:6e:09:fc: 0b:5e:3e:52:11:b1:1e:a0:d1:17:84:d5:14:47:33: 9e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:68:21:CF:7E:9D:5D:AC:FD:B2:21:61:72:FB:3D:96:C9:5A:8E:D0 X509v3 Authority Key Identifier: keyid:3E:AB:E0:28:F3:BE:7E:E0:72:88:5D:02:BB:D7:B6:2A:65:24:25:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqvgKPO-fuByiF0Cu9e2KmUkJe8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:8e:a0:c8:95:5b:2c:25:5b:26:4d:1f:5a:42:73:5f:b3:d0: 42:28:6c:7d:76:b1:53:28:b3:24:b5:32:ad:e3:99:1d:59:58: d6:d0:8e:6a:4c:c7:b1:61:b2:4b:52:7a:d6:df:4b:e8:76:8f: cd:23:09:1c:72:f4:d2:05:82:f3:a6:a1:c4:38:2b:a3:e5:1b: 87:69:b6:b4:f0:53:b0:b1:6a:73:07:39:43:f3:b1:12:8f:e1: 99:3b:3f:94:34:9a:60:65:d7:f5:42:28:03:cb:fd:1d:40:e8: d4:d8:ab:31:cb:3c:f0:5e:95:99:2c:06:5f:31:b9:57:e8:4e: ce:61:74:6c:3e:6a:64:1e:86:54:e4:fa:c3:ec:c6:d6:87:4f: a7:27:62:35:fa:6f:34:7f:06:96:29:b7:03:54:ab:38:54:d3: 5c:8e:a2:ca:01:0a:00:a8:15:d3:20:cc:c1:20:c2:0c:f1:76: 38:d1:d3:8e:02:a2:e3:89:73:b0:25:38:18:08:03:cf:a9:e3: b5:a6:cc:16:2e:ad:6f:9f:d2:29:38:cc:f2:e1:30:6e:04:a1: 4f:71:3c:54:08:b4:39:bb:25:ec:36:a5:e6:58:8b:79:23:80: 4f:e2:cf:63:bb:57:fa:53:cb:2a:c7:23:13:85:d6:7c:83:24: d2:95:d4:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuAg26l5MtXtrLEZG/A8O7+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYWJlMDI4ZjNiZTdlZTA3Mjg4NWQwMmJiZDdiNjJhNjUy NDI1ZWYwHhcNMjYwMTAyMjEwMDU1WhcNMjYwMTAzMjEwMDU1WjAzMTEwLwYDVQQD EygwNDY4MjFjZjdlOWQ1ZGFjZmRiMjIxNjE3MmZiM2Q5NmM5NWE4ZWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtb0gE0zEwc34KNsnnpyhTaE2hur/ e+rxLFxl5bbzlHyoFAfwIgIAtzpGtKI6elOiLzOwTenA+EDOXBeSRKDPS+KGCNqY c+u9L2pZ/gdVTq9UNv9a0zIq2DOvjnCuC1VmsKBxcXAxCBagyQP3yoxWMjQ4Bz1q xzBAJ8vC8SPc58pDjvbKRimoihaT2U36EWONte7JZ4l/uCMc/Evk6fAkfxQBTwU2 +P2okr2KPShkc9exSIB/xU7iNjAhpaa4ZkGfzMbo1IcwEW/3X70iuYr9gu1J0F3w 8nMQ2OIIDUFSVgLabz8Q4Q8o5p5m6XVuCfwLXj5SEbEeoNEXhNUURzOeKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFARoIc9+nV2s/bIhYXL7PZbJWo7QMB8GA1UdIwQY MBaAFD6r4Cjzvn7gcohdArvXtiplJCXvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHF2Z0tQTy1mdUJ5aUYwQ3U5ZTJLbVVrSmU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8yYWQ0ZmEtYmQ3Yi00MDdlLWIyNWEt ZGY3NDEwYjJkMjc1LzEvUHF2Z0tQTy1mdUJ5aUYwQ3U5ZTJLbVVrSmU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8yYWQ0ZmEtYmQ3Yi00MDdlLWIyNWEtZGY3NDEwYjJkMjc1 LzEvUHF2Z0tQTy1mdUJ5aUYwQ3U5ZTJLbVVrSmU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABI6gyJVb LCVbJk0fWkJzX7PQQihsfXaxUyizJLUyreOZHVlY1tCOakzHsWGyS1J61t9L6HaP zSMJHHL00gWC86ahxDgro+Ubh2m2tPBTsLFqcwc5Q/OxEo/hmTs/lDSaYGXX9UIo A8v9HUDo1NirMcs88F6VmSwGXzG5V+hOzmF0bD5qZB6GVOT6w+zG1odPpydiNfpv NH8Glim3A1SrOFTTXI6iygEKAKgV0yDMwSDCDPF2ONHTjgKi44lzsCU4GAgDz6nj tabMFi6tb5/SKTjM8uEwbgShT3E8VAi0Obsl7Dal5liLeSOAT+LPY7tX+lPLKscj E4XWfIMk0pXUDQ== -----END CERTIFICATE-----Generated at Sat Jan 3 04:18:02 2026 by rpki-client