This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft File: P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft (raw, json) Hash identifier: qvg//PFYY9psbvGV2yl7pVgvABEuEX3JnXLtIuw3RpA= Subject key identifier: 4E:A4:FB:88:16:5A:C3:C2:CE:8F:50:1B:9C:A1:4B:4E:2F:5E:60:BD Authority key identifier: 3F:DA:63:02:13:CD:42:38:80:F9:FE:F1:6D:78:FB:43:6E:08:F2:47 Certificate issuer: /CN=3fda630213cd423880f9fef16d78fb436e08f247 Certificate serial: 019B797FA4B9DF0F3AA4D31A759A41922886 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9pjAhPNQjiA-f7xbXj7Q24I8kc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft Manifest number: 0E88 Signing time: Thu 01 Jan 2026 12:19:26 +0000 Manifest this update: Thu 01 Jan 2026 12:19:26 +0000 Manifest next update: Fri 02 Jan 2026 12:19:26 +0000 Files and hashes: 1: P9pjAhPNQjiA-f7xbXj7Q24I8kc.crl (hash: lxvv4jfCFhisrJ+9YX2d47Jn2BX7r123RQy8SvzbtJA=) 2: qVEqTtkKfrVc5YzchSUNgfDRorc.roa (hash: K5fpw+GM90GMUvrPrbhqWZwOZsGaqvdsEI7pyNmXxYI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.crl rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft rsync://rpki.ripe.net/repository/DEFAULT/P9pjAhPNQjiA-f7xbXj7Q24I8kc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 12:19:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:a4:b9:df:0f:3a:a4:d3:1a:75:9a:41:92:28:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fda630213cd423880f9fef16d78fb436e08f247 Validity Not Before: Jan 1 12:19:26 2026 GMT Not After : Jan 2 12:19:26 2026 GMT Subject: CN=4ea4fb88165ac3c2ce8f501b9ca14b4e2f5e60bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:58:9d:3e:02:99:13:a5:f4:db:21:0c:7d:4a: b3:a5:be:4f:61:04:7e:4b:60:d0:0c:b3:5c:81:d2: 96:08:81:54:a6:21:3d:6b:f3:96:78:9a:07:ef:e9: 0f:fc:16:fa:3b:b8:a4:3c:10:c6:d4:04:05:0b:0a: 87:e4:ec:b9:8c:ce:46:23:59:b5:b9:81:eb:5d:4b: 52:2a:29:dd:e6:40:67:b2:d2:77:8e:4d:e7:2e:cc: e1:16:b5:ea:51:f9:1d:9a:11:6f:b0:ee:64:a7:82: 01:12:72:1b:2b:ac:80:0b:40:0b:28:ca:e0:1d:fa: 73:b0:41:db:84:a7:9b:47:32:58:88:97:e2:e7:0e: 66:93:3b:b9:df:29:28:bc:e2:2a:e9:83:e9:6d:dc: f6:59:83:72:8a:6b:f9:ea:5c:87:a0:a6:2c:6e:fb: e6:51:a5:cb:6d:5f:c6:ce:90:28:f4:63:c5:1c:72: 13:44:88:e2:1e:3e:3e:99:20:12:0f:5e:82:76:21: 25:94:aa:b2:c0:c0:36:68:92:e0:fe:28:19:4b:12: 9f:07:3b:be:0d:0f:33:08:a5:a5:ae:dc:2f:a6:03: 63:0e:1c:a4:57:59:34:83:17:96:2d:b7:62:cf:e3: 9f:ca:6f:1e:b7:28:87:51:94:9a:9d:1f:93:b7:56: ee:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A4:FB:88:16:5A:C3:C2:CE:8F:50:1B:9C:A1:4B:4E:2F:5E:60:BD X509v3 Authority Key Identifier: keyid:3F:DA:63:02:13:CD:42:38:80:F9:FE:F1:6D:78:FB:43:6E:08:F2:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9pjAhPNQjiA-f7xbXj7Q24I8kc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:6d:11:e4:2e:ac:2f:39:7e:5a:47:44:fc:05:bb:c6:c6:bd: c0:cb:47:15:6d:fb:4a:20:7b:f1:c2:a8:96:69:7c:48:dc:d2: db:f2:98:15:aa:5e:12:b0:bb:8f:b9:b8:ef:78:2b:6b:54:8d: 4f:46:09:ec:92:5a:90:10:10:1a:2c:13:4c:14:7d:68:71:f2: 0b:19:23:af:43:4f:b0:73:10:13:0a:40:88:14:7c:d0:a4:9a: 2b:62:6f:05:e4:d5:9b:f1:fd:c1:3a:e8:02:3e:ab:95:e7:52: 7f:e1:dc:cd:4b:a3:bc:63:f3:4e:74:19:58:d8:b8:cf:85:54: 0a:33:0b:46:e9:21:98:f1:89:9e:3f:43:48:3c:ae:95:02:62: 87:3f:a8:a8:50:4d:b3:a4:7d:66:b6:38:4e:bc:2d:ff:0e:c4: db:38:64:c0:0d:77:03:2b:05:de:36:92:35:76:59:a2:e7:d7: 66:91:80:59:34:b1:9c:3e:b2:b7:47:6c:c5:ec:b9:ed:30:6f: da:a2:01:27:d0:b1:eb:e1:27:db:1c:c8:d9:dc:97:86:f7:9c: 54:68:a8:84:74:02:be:22:01:8a:c9:c4:9b:ee:b7:44:76:c3: 18:6b:e1:fd:52:e0:3b:6b:5d:2e:50:37:a5:57:ef:79:2c:57: 24:46:81:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt5f6S53w86pNMadZpBkiiGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZGE2MzAyMTNjZDQyMzg4MGY5ZmVmMTZkNzhmYjQzNmUw OGYyNDcwHhcNMjYwMTAxMTIxOTI2WhcNMjYwMTAyMTIxOTI2WjAzMTEwLwYDVQQD Eyg0ZWE0ZmI4ODE2NWFjM2MyY2U4ZjUwMWI5Y2ExNGI0ZTJmNWU2MGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01idPgKZE6X02yEMfUqzpb5PYQR+ S2DQDLNcgdKWCIFUpiE9a/OWeJoH7+kP/Bb6O7ikPBDG1AQFCwqH5Oy5jM5GI1m1 uYHrXUtSKind5kBnstJ3jk3nLszhFrXqUfkdmhFvsO5kp4IBEnIbK6yAC0ALKMrg HfpzsEHbhKebRzJYiJfi5w5mkzu53ykovOIq6YPpbdz2WYNyimv56lyHoKYsbvvm UaXLbV/GzpAo9GPFHHITRIjiHj4+mSASD16CdiEllKqywMA2aJLg/igZSxKfBzu+ DQ8zCKWlrtwvpgNjDhykV1k0gxeWLbdiz+Ofym8etyiHUZSanR+Tt1bu0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE6k+4gWWsPCzo9QG5yhS04vXmC9MB8GA1UdIwQY MBaAFD/aYwITzUI4gPn+8W14+0NuCPJHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlwakFoUE5RamlBLWY3eGJYajdRMjRJOGtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My81NGM2OTEtOWZiYi00MzhhLWE1NWYt MzgyMzdmZTRlNDE0LzEvUDlwakFoUE5RamlBLWY3eGJYajdRMjRJOGtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My81NGM2OTEtOWZiYi00MzhhLWE1NWYtMzgyMzdmZTRlNDE0 LzEvUDlwakFoUE5RamlBLWY3eGJYajdRMjRJOGtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdm0R5C6s Lzl+WkdE/AW7xsa9wMtHFW37SiB78cKolml8SNzS2/KYFapeErC7j7m473gra1SN T0YJ7JJakBAQGiwTTBR9aHHyCxkjr0NPsHMQEwpAiBR80KSaK2JvBeTVm/H9wTro Aj6rledSf+HczUujvGPzTnQZWNi4z4VUCjMLRukhmPGJnj9DSDyulQJihz+oqFBN s6R9ZrY4Trwt/w7E2zhkwA13AysF3jaSNXZZoufXZpGAWTSxnD6yt0dsxey57TBv 2qIBJ9Cx6+En2xzI2dyXhvecVGiohHQCviIBisnEm+63RHbDGGvh/VLgO2tdLlA3 pVfveSxXJEaBSg== -----END CERTIFICATE-----Generated at Thu Jan 1 21:23:29 2026 by rpki-client