This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft File: pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft (raw, json) Hash identifier: kjrDhx2F0SjZfb+tzmZM5KFlhbVhkrAKowrvIXKHUpM= Subject key identifier: 71:AA:50:4B:09:8B:AB:45:60:4D:65:31:F8:01:4A:18:41:48:60:10 Authority key identifier: A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95 Certificate issuer: /CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395 Certificate serial: 019BAEA664AF42C3D6D501B88256784B54D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft Manifest number: 17C3 Signing time: Sun 11 Jan 2026 20:01:38 +0000 Manifest this update: Sun 11 Jan 2026 20:01:38 +0000 Manifest next update: Mon 12 Jan 2026 20:01:38 +0000 Files and hashes: 1: ZMTWhcJ1e7tvXHUUl4ANoGMrIWk.roa (hash: 9yOiqGJYeL5bi8PHF9fNeVVcmhOJdy6bDsiWR0m6Ve0=) 2: pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl (hash: /LiuoQndwA+VQO8bl1Va5r2AcJ8K65adwxGjOJ/DyTc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:a6:64:af:42:c3:d6:d5:01:b8:82:56:78:4b:54:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395 Validity Not Before: Jan 11 20:01:38 2026 GMT Not After : Jan 12 20:01:38 2026 GMT Subject: CN=71aa504b098bab45604d6531f8014a1841486010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:cd:90:02:6b:4b:d6:cf:6e:e1:5f:60:f8:a2: 68:4f:fd:fb:64:fe:b7:30:a5:36:ac:31:04:e0:dc: 0b:47:c9:b6:1f:70:25:35:ea:f4:41:78:48:db:da: 81:d3:1f:ff:58:17:f2:02:dd:78:30:d3:91:97:15: ca:78:68:f6:99:64:97:d8:6b:13:d9:8d:1d:04:52: 6c:85:61:36:1f:a1:69:13:da:f0:ee:a2:b3:37:f9: e5:68:5b:9c:8c:d9:40:2c:8b:85:33:44:97:b2:0c: cc:1d:84:88:43:c7:96:be:21:5f:46:76:4d:d7:61: 71:b5:a8:5c:c6:4f:97:fa:13:c8:d9:99:65:4d:8d: 8b:8a:c1:bf:ee:8e:69:d1:2e:22:47:ff:d5:21:c3: 52:70:f3:bf:cf:63:0e:1c:cd:c2:ae:d7:b5:6e:4d: 34:fd:1b:dc:f0:8a:1b:32:26:f0:91:e2:e3:13:da: 5d:83:13:06:4c:36:82:d8:98:c0:5e:e8:ea:c7:2c: 97:5e:c1:b7:57:ff:2b:5c:dd:5f:ef:be:f8:c6:b4: c4:92:10:55:bf:02:16:e7:71:8f:1d:b1:98:5f:2e: 9b:22:d6:5f:35:ff:8e:96:98:9a:b1:ce:e2:eb:8a: 34:7a:5f:58:b2:14:25:31:fe:98:0a:74:d7:e1:b4: 6c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:AA:50:4B:09:8B:AB:45:60:4D:65:31:F8:01:4A:18:41:48:60:10 X509v3 Authority Key Identifier: keyid:A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:49:98:82:32:76:88:a5:a8:78:bc:16:9d:4a:23:3d:45:da: 91:a2:28:0b:db:f5:ca:73:ab:d7:15:96:f4:17:88:4a:ee:0f: 10:df:08:fe:d7:2a:5d:a0:cb:5d:4e:55:58:80:94:d7:c3:34: 9f:c1:06:9e:b1:11:be:b5:0d:c9:6c:b0:e3:4c:00:d7:0c:9e: 0d:6d:2e:6d:97:12:70:49:4f:31:38:f1:50:a8:d1:09:c7:2f: a9:6e:2c:5f:ce:7d:13:cf:97:76:96:4e:06:9c:50:5d:e4:df: 06:62:26:f2:a1:6f:74:df:14:3e:ab:85:f4:67:99:1b:09:fb: 46:6b:5a:26:b9:b6:c2:d5:8e:fa:52:54:ac:e1:f1:7f:97:54: d3:59:d5:95:5b:90:d0:c5:52:9e:da:01:44:36:f6:73:d1:da: cd:99:50:8b:79:82:82:95:9a:89:59:8c:26:d9:6c:f8:fb:60: 01:ab:68:2e:8e:e6:85:62:4f:e1:a1:18:67:ce:a2:2f:06:64: 72:33:02:57:cd:90:3f:ec:8d:d1:07:bd:57:39:ce:6e:e8:89: 88:12:ab:d2:7a:6d:f1:f9:f8:1a:4e:25:75:0d:5d:c1:35:36: 28:ab:32:fd:8c:78:5d:f5:bd:2b:e2:17:7b:5a:68:c1:45:56: 49:56:a6:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuupmSvQsPW1QG4glZ4S1TSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZjUyM2Q5NDgzODdkOGM1ZmNkZjc1MmUwYTFjYzQwOGNm ZTgzOTUwHhcNMjYwMTExMjAwMTM4WhcNMjYwMTEyMjAwMTM4WjAzMTEwLwYDVQQD Eyg3MWFhNTA0YjA5OGJhYjQ1NjA0ZDY1MzFmODAxNGExODQxNDg2MDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmc2QAmtL1s9u4V9g+KJoT/37ZP63 MKU2rDEE4NwLR8m2H3AlNer0QXhI29qB0x//WBfyAt14MNORlxXKeGj2mWSX2GsT 2Y0dBFJshWE2H6FpE9rw7qKzN/nlaFucjNlALIuFM0SXsgzMHYSIQ8eWviFfRnZN 12Fxtahcxk+X+hPI2ZllTY2LisG/7o5p0S4iR//VIcNScPO/z2MOHM3Crte1bk00 /Rvc8IobMibwkeLjE9pdgxMGTDaC2JjAXujqxyyXXsG3V/8rXN1f7774xrTEkhBV vwIW53GPHbGYXy6bItZfNf+Olpiasc7i64o0el9YshQlMf6YCnTX4bRssQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHGqUEsJi6tFYE1lMfgBShhBSGAQMB8GA1UdIwQY MBaAFKT1I9lIOH2MX833UuChzECM/oOVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFBVajJVZzRmWXhmemZkUzRLSE1RSXotZzVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8wODVjMzUtMjhhYy00MjQxLWI5NTEt MjBhOTAwYmM3NzZhLzEvcFBVajJVZzRmWXhmemZkUzRLSE1RSXotZzVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8wODVjMzUtMjhhYy00MjQxLWI5NTEtMjBhOTAwYmM3NzZh LzEvcFBVajJVZzRmWXhmemZkUzRLSE1RSXotZzVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbUmYgjJ2 iKWoeLwWnUojPUXakaIoC9v1ynOr1xWW9BeISu4PEN8I/tcqXaDLXU5VWICU18M0 n8EGnrERvrUNyWyw40wA1wyeDW0ubZcScElPMTjxUKjRCccvqW4sX859E8+XdpZO BpxQXeTfBmIm8qFvdN8UPquF9GeZGwn7RmtaJrm2wtWO+lJUrOHxf5dU01nVlVuQ 0MVSntoBRDb2c9HazZlQi3mCgpWaiVmMJtls+PtgAatoLo7mhWJP4aEYZ86iLwZk cjMCV82QP+yN0Qe9VznObuiJiBKr0npt8fn4Gk4ldQ1dwTU2KKsy/Yx4XfW9K+IX e1powUVWSVambQ== -----END CERTIFICATE-----Generated at Sun Jan 11 23:43:43 2026 by rpki-client