This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.mft File: PqlK-DEYyT_-izYnXtU0mU1not0.mft (raw, json) Hash identifier: D4B//6SzrHI/tUbhtRqEbLSQedpFLFWaZqnULKF4Gfo= Subject key identifier: CE:9D:30:7A:11:A4:32:2D:52:5C:06:26:00:47:4C:D0:EB:D7:CC:AD Authority key identifier: 3E:A9:4A:F8:31:18:C9:3F:FE:8B:36:27:5E:D5:34:99:4D:67:A2:DD Certificate issuer: /CN=3ea94af83118c93ffe8b36275ed534994d67a2dd Certificate serial: 019BABA4C5D22D238166FFA45FC3B34F3FB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqlK-DEYyT_-izYnXtU0mU1not0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.mft Manifest number: 13B2 Signing time: Sun 11 Jan 2026 06:01:00 +0000 Manifest this update: Sun 11 Jan 2026 06:01:00 +0000 Manifest next update: Mon 12 Jan 2026 06:01:00 +0000 Files and hashes: 1: PqlK-DEYyT_-izYnXtU0mU1not0.crl (hash: nOdkVdC7R/4DHDTALmcdUX2n6EB/uGel18ruRb5gk38=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.mft rsync://rpki.ripe.net/repository/DEFAULT/PqlK-DEYyT_-izYnXtU0mU1not0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 06:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ab:a4:c5:d2:2d:23:81:66:ff:a4:5f:c3:b3:4f:3f:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ea94af83118c93ffe8b36275ed534994d67a2dd Validity Not Before: Jan 11 06:01:00 2026 GMT Not After : Jan 12 06:01:00 2026 GMT Subject: CN=ce9d307a11a4322d525c062600474cd0ebd7ccad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4a:5e:2d:e7:8f:08:4e:32:b8:71:69:66:e0: a9:62:9b:1c:f1:fc:4b:17:9e:c2:a8:6a:d4:fb:e7: 71:29:5c:ea:83:02:ec:1d:be:e8:e0:15:46:68:c1: c6:7e:4e:8f:e1:fb:81:46:ee:59:d1:52:96:0a:d1: 55:4a:8c:2d:b3:dc:2a:ab:eb:dc:a8:6e:11:de:8c: 2d:49:d6:be:b4:36:c3:fd:e1:4f:75:81:39:2c:e8: 55:fd:80:d7:55:f3:62:4e:0f:1b:d7:b2:21:c6:2e: d5:cf:b6:41:80:98:50:6d:5e:dd:09:7e:ba:39:4e: 94:4e:9c:8f:15:75:99:6b:e2:0a:60:cb:0f:46:83: e8:ee:89:1d:dd:4a:7c:35:ca:51:75:88:77:35:13: 00:4b:13:bc:7d:b9:81:42:8e:63:88:02:fe:4c:bf: 50:1c:65:aa:83:70:ab:3a:e1:2a:3a:65:52:be:7f: 7b:7f:c9:4d:82:20:0e:14:27:73:82:13:47:ea:05: 42:e3:42:da:5d:5d:87:2b:5c:65:9c:0d:77:32:64: a8:52:41:77:e3:96:30:0f:1b:35:17:b5:a0:a5:07: 34:4a:02:e8:0b:27:2f:d9:87:66:88:8a:b5:2e:d9: 80:cc:cd:e5:e6:a9:90:76:e0:79:df:17:cb:75:fa: da:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:9D:30:7A:11:A4:32:2D:52:5C:06:26:00:47:4C:D0:EB:D7:CC:AD X509v3 Authority Key Identifier: keyid:3E:A9:4A:F8:31:18:C9:3F:FE:8B:36:27:5E:D5:34:99:4D:67:A2:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqlK-DEYyT_-izYnXtU0mU1not0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:2e:d0:aa:2a:e3:7a:be:e4:7c:19:ca:69:06:b7:5b:55:18: 3a:c1:a9:22:ca:fe:91:6b:fc:1c:ed:34:4d:14:d1:e0:29:71: 94:43:76:ff:67:89:1f:f5:6d:a0:a1:61:fd:16:98:02:a5:70: b3:a9:c9:ea:09:ef:c9:61:e4:fd:4f:8d:95:83:c8:39:72:74: c1:3a:2d:af:fd:6d:c3:5b:fd:90:2a:d0:6a:bd:cc:c0:e3:ba: 1f:70:d1:b4:ea:20:13:02:54:54:42:90:19:2d:d5:fc:17:4e: 66:32:06:50:61:b3:d7:7e:4b:ca:42:30:31:fc:dc:93:97:c8: 07:aa:27:11:fa:e1:18:08:a0:cc:70:97:68:c9:20:ec:fe:bb: 13:40:f1:0b:73:7c:6a:90:5b:67:83:2d:c4:90:32:ae:43:c1: 0b:14:0e:05:cf:54:41:e9:fd:fd:c4:1d:04:c4:12:e5:e5:8e: 4c:fa:4a:26:eb:41:7f:ba:22:89:52:91:76:68:0b:f7:a5:c5: 50:eb:2f:02:11:0e:5b:b7:0d:3b:a5:8c:cb:6a:fc:85:10:dc: 02:04:1f:6d:72:d4:14:93:7d:58:a9:af:20:ad:79:44:1e:9e: 5f:92:d0:e9:31:cd:e3:45:a9:1d:ca:3f:de:ac:d6:43:aa:27: 47:79:e4:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZurpMXSLSOBZv+kX8OzTz+0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYTk0YWY4MzExOGM5M2ZmZThiMzYyNzVlZDUzNDk5NGQ2 N2EyZGQwHhcNMjYwMTExMDYwMTAwWhcNMjYwMTEyMDYwMTAwWjAzMTEwLwYDVQQD EyhjZTlkMzA3YTExYTQzMjJkNTI1YzA2MjYwMDQ3NGNkMGViZDdjY2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkpeLeePCE4yuHFpZuCpYpsc8fxL F57CqGrU++dxKVzqgwLsHb7o4BVGaMHGfk6P4fuBRu5Z0VKWCtFVSowts9wqq+vc qG4R3owtSda+tDbD/eFPdYE5LOhV/YDXVfNiTg8b17Ihxi7Vz7ZBgJhQbV7dCX66 OU6UTpyPFXWZa+IKYMsPRoPo7okd3Up8NcpRdYh3NRMASxO8fbmBQo5jiAL+TL9Q HGWqg3CrOuEqOmVSvn97f8lNgiAOFCdzghNH6gVC40LaXV2HK1xlnA13MmSoUkF3 45YwDxs1F7WgpQc0SgLoCycv2YdmiIq1LtmAzM3l5qmQduB53xfLdfraUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM6dMHoRpDItUlwGJgBHTNDr18ytMB8GA1UdIwQY MBaAFD6pSvgxGMk//os2J17VNJlNZ6LdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHFsSy1ERVl5VF8taXpZblh0VTBtVTFub3QwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9mZjQxOTEtYjlmMy00MzgyLWJlZTEt Mjk1N2FmYjE0Nzk0LzEvUHFsSy1ERVl5VF8taXpZblh0VTBtVTFub3QwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9mZjQxOTEtYjlmMy00MzgyLWJlZTEtMjk1N2FmYjE0Nzk0 LzEvUHFsSy1ERVl5VF8taXpZblh0VTBtVTFub3QwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALy7Qqirj er7kfBnKaQa3W1UYOsGpIsr+kWv8HO00TRTR4ClxlEN2/2eJH/VtoKFh/RaYAqVw s6nJ6gnvyWHk/U+NlYPIOXJ0wTotr/1tw1v9kCrQar3MwOO6H3DRtOogEwJUVEKQ GS3V/BdOZjIGUGGz135LykIwMfzck5fIB6onEfrhGAigzHCXaMkg7P67E0DxC3N8 apBbZ4MtxJAyrkPBCxQOBc9UQen9/cQdBMQS5eWOTPpKJutBf7oiiVKRdmgL96XF UOsvAhEOW7cNO6WMy2r8hRDcAgQfbXLUFJN9WKmvIK15RB6eX5LQ6THN40WpHco/ 3qzWQ6onR3nk9g== -----END CERTIFICATE-----Generated at Sun Jan 11 15:11:23 2026 by rpki-client