This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft File: PSOEt4Txl-oD2sL-2niV_Et0Byk.mft (raw, json) Hash identifier: VCOn/N0dsrgMcsP5AeNYmP7HLpjU80TfIB2exUaXMas= Subject key identifier: 77:6C:3E:77:F4:AD:D8:C7:41:2B:C5:76:1E:90:B5:70:9F:1E:B4:8B Authority key identifier: 3D:23:84:B7:84:F1:97:EA:03:DA:C2:FE:DA:78:95:FC:4B:74:07:29 Certificate issuer: /CN=3d2384b784f197ea03dac2feda7895fc4b740729 Certificate serial: 019BA490C5156EACABE571D890F1A46ECF48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft Manifest number: 17C3 Signing time: Fri 09 Jan 2026 21:01:49 +0000 Manifest this update: Fri 09 Jan 2026 21:01:49 +0000 Manifest next update: Sat 10 Jan 2026 21:01:49 +0000 Files and hashes: 1: Fm0_ISZH1-WWGaWgz0JdnaHmNHg.roa (hash: 1I6JL/WcV3w6U1WH8/hKKwC4XbqutTUGbOTh1CUIMIo=) 2: PSOEt4Txl-oD2sL-2niV_Et0Byk.crl (hash: GHRIcIFBryDBYD9tdXr1EzPoYQgtAVKDgTehmkwVYVY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a4:90:c5:15:6e:ac:ab:e5:71:d8:90:f1:a4:6e:cf:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d2384b784f197ea03dac2feda7895fc4b740729 Validity Not Before: Jan 9 21:01:49 2026 GMT Not After : Jan 10 21:01:49 2026 GMT Subject: CN=776c3e77f4add8c7412bc5761e90b5709f1eb48b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:53:b0:d8:c4:6e:eb:4b:77:da:aa:ea:61:27: e5:ac:30:65:b6:75:42:4d:e3:26:2e:58:63:fd:19: 15:b4:c8:69:2e:65:f6:cf:2f:ad:35:71:7f:10:d0: e4:62:a6:d1:0f:8a:a6:e0:8d:ec:bd:80:ad:45:09: cf:1f:6f:e8:34:57:ab:9b:47:4a:6e:62:94:2d:d3: 36:bf:80:b9:f3:14:73:d1:90:ca:2d:a8:70:87:10: 05:f1:a4:7f:61:c9:16:70:60:c0:c0:3c:33:40:d8: 57:91:a4:ae:39:29:c6:c1:4c:13:fb:b4:3c:26:6a: 1d:4e:cb:03:28:c5:0a:01:70:ac:b1:08:f7:b6:e0: 4e:7c:40:b0:18:cd:f7:80:59:ed:94:af:b2:42:d6: cc:9d:c9:9a:3c:3a:f1:1f:45:cd:44:ac:bc:35:94: 3b:87:1a:ae:f5:5b:22:b7:57:d1:ad:f7:99:3a:52: bc:a3:fe:23:ca:e5:d1:dd:79:3b:08:14:d1:9e:9e: b0:80:96:b1:20:be:36:59:6f:3f:77:8f:7b:2e:f0: c2:e1:17:2b:c5:4e:bb:0d:94:2c:77:2f:1c:ac:3d: a0:79:9f:5c:19:76:7a:0b:df:c0:3e:e2:f1:2d:d1: 7d:30:c2:24:8d:43:89:1a:2a:e8:76:16:2c:7c:d1: 73:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:6C:3E:77:F4:AD:D8:C7:41:2B:C5:76:1E:90:B5:70:9F:1E:B4:8B X509v3 Authority Key Identifier: keyid:3D:23:84:B7:84:F1:97:EA:03:DA:C2:FE:DA:78:95:FC:4B:74:07:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:84:c0:ac:fa:74:54:cf:67:80:77:52:60:db:97:ad:8e:cf: 95:a2:61:6a:e4:0a:e1:5b:42:cd:59:37:e3:ec:c5:30:79:27: 7b:7a:01:b6:93:b6:fe:9a:f1:46:8e:2c:0b:74:7b:57:e3:e8: 97:5c:4f:d6:db:de:60:46:b6:04:fd:2b:50:5f:72:6c:10:f2: 59:05:e0:fc:01:fc:12:51:68:7f:cb:9a:0b:64:7f:5f:84:fc: 80:af:9d:64:f9:83:d7:65:b2:19:11:db:6f:db:e1:9c:1e:68: 22:d3:2c:a4:94:ee:79:a5:d3:c5:33:62:c6:a8:a6:41:7a:40: a5:dd:43:26:df:fb:4d:94:11:30:2a:cc:31:d4:fa:f5:21:c2: aa:4c:9b:5e:27:19:fb:93:69:eb:c7:43:f4:67:40:2d:22:4f: 01:a2:65:83:a8:39:0e:28:c2:f9:2a:2d:e3:89:35:3a:05:5a: 2b:a0:3f:1f:71:fa:0a:46:fd:b3:96:3a:0f:f2:13:13:f2:a7: c6:a3:0a:48:3a:86:0d:f3:f6:9c:28:95:57:8a:9c:33:e7:af: 0d:58:87:bb:ca:f3:7a:aa:fb:b4:28:8c:ae:52:d4:4f:e3:0d: c4:27:68:1b:39:45:71:18:7a:a8:1b:21:00:36:9a:f2:e1:0e: 0a:9b:23:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZukkMUVbqyr5XHYkPGkbs9IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkMjM4NGI3ODRmMTk3ZWEwM2RhYzJmZWRhNzg5NWZjNGI3 NDA3MjkwHhcNMjYwMTA5MjEwMTQ5WhcNMjYwMTEwMjEwMTQ5WjAzMTEwLwYDVQQD Eyg3NzZjM2U3N2Y0YWRkOGM3NDEyYmM1NzYxZTkwYjU3MDlmMWViNDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFOw2MRu60t32qrqYSflrDBltnVC TeMmLlhj/RkVtMhpLmX2zy+tNXF/ENDkYqbRD4qm4I3svYCtRQnPH2/oNFerm0dK bmKULdM2v4C58xRz0ZDKLahwhxAF8aR/YckWcGDAwDwzQNhXkaSuOSnGwUwT+7Q8 JmodTssDKMUKAXCssQj3tuBOfECwGM33gFntlK+yQtbMncmaPDrxH0XNRKy8NZQ7 hxqu9Vsit1fRrfeZOlK8o/4jyuXR3Xk7CBTRnp6wgJaxIL42WW8/d497LvDC4Rcr xU67DZQsdy8crD2geZ9cGXZ6C9/APuLxLdF9MMIkjUOJGirodhYsfNFzSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHdsPnf0rdjHQSvFdh6QtXCfHrSLMB8GA1UdIwQY MBaAFD0jhLeE8ZfqA9rC/tp4lfxLdAcpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFNPRXQ0VHhsLW9EMnNMLTJuaVZfRXQwQnlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8zYmQxM2QtZmU5NS00ODZmLTgwZWYt ZjA3MzU0ODM1MmJmLzEvUFNPRXQ0VHhsLW9EMnNMLTJuaVZfRXQwQnlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8zYmQxM2QtZmU5NS00ODZmLTgwZWYtZjA3MzU0ODM1MmJm LzEvUFNPRXQ0VHhsLW9EMnNMLTJuaVZfRXQwQnlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj4TArPp0 VM9ngHdSYNuXrY7PlaJhauQK4VtCzVk34+zFMHkne3oBtpO2/prxRo4sC3R7V+Po l1xP1tveYEa2BP0rUF9ybBDyWQXg/AH8ElFof8uaC2R/X4T8gK+dZPmD12WyGRHb b9vhnB5oItMspJTueaXTxTNixqimQXpApd1DJt/7TZQRMCrMMdT69SHCqkybXicZ +5Np68dD9GdALSJPAaJlg6g5DijC+Sot44k1OgVaK6A/H3H6Ckb9s5Y6D/ITE/Kn xqMKSDqGDfP2nCiVV4qcM+evDViHu8rzeqr7tCiMrlLUT+MNxCdoGzlFcRh6qBsh ADaa8uEOCpsjkA== -----END CERTIFICATE-----Generated at Sat Jan 10 04:18:25 2026 by rpki-client