This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft File: PCr6XHBtPrCpLaibXUG5NutJzLg.mft (raw, json) Hash identifier: K6ATFLn2IrUpNYZ5D5U+UgqafFQAhC0vJvjfyh00Fgo= Subject key identifier: 74:EB:C4:3D:42:93:9B:65:5B:6A:56:24:F9:2B:E2:7E:6F:9F:90:61 Authority key identifier: 3C:2A:FA:5C:70:6D:3E:B0:A9:2D:A8:9B:5D:41:B9:36:EB:49:CC:B8 Certificate issuer: /CN=3c2afa5c706d3eb0a92da89b5d41b936eb49ccb8 Certificate serial: 019BB1DE31F644B8F93B42E465DA2F1DDD68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft Manifest number: 127D Signing time: Mon 12 Jan 2026 11:01:27 +0000 Manifest this update: Mon 12 Jan 2026 11:01:27 +0000 Manifest next update: Tue 13 Jan 2026 11:01:27 +0000 Files and hashes: 1: MKEGaibdVBKo4Y86kBLFEKWntWc.roa (hash: wEDcZmG8dZd0uCd7pZvA4Qd89Tl1qRGRFYmO0DbhcdI=) 2: PCr6XHBtPrCpLaibXUG5NutJzLg.crl (hash: d+ii3RPasNSy4i9EeFYRybWYr9Ul84Vg66ggshw3H+o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 11:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b1:de:31:f6:44:b8:f9:3b:42:e4:65:da:2f:1d:dd:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c2afa5c706d3eb0a92da89b5d41b936eb49ccb8 Validity Not Before: Jan 12 11:01:27 2026 GMT Not After : Jan 13 11:01:27 2026 GMT Subject: CN=74ebc43d42939b655b6a5624f92be27e6f9f9061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:da:f8:45:b2:fe:b6:c4:48:b3:e5:1b:95:61: 2a:05:39:e4:4e:4b:45:dd:88:eb:14:16:22:bc:5b: 28:69:45:df:e7:40:38:9e:cc:dd:01:24:0f:ff:d6: 62:f1:19:8c:80:f7:ea:f4:20:2e:19:6e:b7:6a:28: 85:b3:99:21:3c:2b:e1:41:0d:ee:5e:dc:5d:c0:eb: 38:73:41:81:32:d5:b1:44:e0:9b:f1:4f:4c:d6:e2: 00:6e:5e:c9:a1:3a:eb:e5:b5:cc:d5:8a:8d:8c:89: 66:12:07:7a:c9:dd:84:64:cd:ea:3b:05:2e:72:f3: b2:67:ec:d1:00:93:a9:e5:66:a7:64:36:5f:c6:8e: d3:86:9a:2d:74:7b:ab:b8:f9:b4:3f:cc:1e:b5:4e: 40:f5:9d:d1:1b:b9:e3:af:29:8e:0c:cc:e3:93:ef: 7a:cf:25:42:57:2e:30:75:3c:e4:92:a5:c0:8e:e3: 1e:58:23:b4:d8:f0:26:9c:d4:14:15:56:ce:78:02: ec:cd:39:8c:09:1e:b5:08:d6:64:c1:1d:ac:ce:d3: d2:a8:a4:de:5f:17:99:47:84:e0:1d:1a:a4:d9:1d: 23:83:24:e8:20:6a:20:71:ed:d4:32:ca:6f:ce:28: 3c:9c:bc:33:85:45:be:c2:b7:2a:9a:e7:ae:d2:94: 84:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:EB:C4:3D:42:93:9B:65:5B:6A:56:24:F9:2B:E2:7E:6F:9F:90:61 X509v3 Authority Key Identifier: keyid:3C:2A:FA:5C:70:6D:3E:B0:A9:2D:A8:9B:5D:41:B9:36:EB:49:CC:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:bd:17:ec:cc:37:17:c7:df:32:9f:f1:54:10:26:2a:fa:bf: 58:74:31:42:24:9b:34:5a:85:84:c1:4c:cd:9c:9b:3a:d2:7a: 4f:d9:14:30:0d:58:f7:4f:b4:b0:df:63:4f:a6:f8:fe:dd:b0: 05:60:83:f9:1e:32:24:5b:a1:32:ca:36:49:d0:55:e2:7a:75: 30:2c:5b:32:5a:79:f0:a4:0d:41:70:83:83:6e:a6:56:af:9a: 49:81:4d:39:12:d6:23:8e:e0:eb:e2:20:a1:1c:7e:9c:6b:81: fa:80:42:c1:c3:b6:88:75:d3:09:ca:36:1a:b4:7b:8c:7c:7b: 5c:1c:21:52:6c:d4:7d:c7:18:ad:87:33:ac:9d:97:9b:14:a4: cf:16:17:c8:61:c5:7b:1a:2a:4b:30:93:a7:12:ad:83:86:3c: af:c3:67:10:84:5c:35:8f:c3:58:50:22:f3:d6:b5:57:90:d9: f9:4c:35:95:67:ce:4d:c4:c4:5a:6a:c2:89:1d:03:70:59:d0: 5a:62:1a:6f:bb:41:8e:92:7f:c9:1c:a9:e9:b8:ea:59:cc:14: 37:fd:83:0a:02:3f:30:ca:01:02:81:6a:c6:d9:7f:c8:3d:fc: ae:ae:ec:37:0b:c6:be:c1:6c:21:3b:e2:22:d2:39:46:c3:17: db:06:f6:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZux3jH2RLj5O0LkZdovHd1oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMmFmYTVjNzA2ZDNlYjBhOTJkYTg5YjVkNDFiOTM2ZWI0 OWNjYjgwHhcNMjYwMTEyMTEwMTI3WhcNMjYwMTEzMTEwMTI3WjAzMTEwLwYDVQQD Eyg3NGViYzQzZDQyOTM5YjY1NWI2YTU2MjRmOTJiZTI3ZTZmOWY5MDYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdr4RbL+tsRIs+UblWEqBTnkTktF 3YjrFBYivFsoaUXf50A4nszdASQP/9Zi8RmMgPfq9CAuGW63aiiFs5khPCvhQQ3u XtxdwOs4c0GBMtWxROCb8U9M1uIAbl7JoTrr5bXM1YqNjIlmEgd6yd2EZM3qOwUu cvOyZ+zRAJOp5WanZDZfxo7ThpotdHuruPm0P8wetU5A9Z3RG7njrymODMzjk+96 zyVCVy4wdTzkkqXAjuMeWCO02PAmnNQUFVbOeALszTmMCR61CNZkwR2sztPSqKTe XxeZR4TgHRqk2R0jgyToIGogce3UMspvzig8nLwzhUW+wrcqmueu0pSEZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHTrxD1Ck5tlW2pWJPkr4n5vn5BhMB8GA1UdIwQY MBaAFDwq+lxwbT6wqS2om11BuTbrScy4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUENyNlhIQnRQckNwTGFpYlhVRzVOdXRKekxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9lYjFjNGYtZmQ4MC00OTE5LWIxODUt Zjc4MzNhM2YyNDg1LzEvUENyNlhIQnRQckNwTGFpYlhVRzVOdXRKekxnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9lYjFjNGYtZmQ4MC00OTE5LWIxODUtZjc4MzNhM2YyNDg1 LzEvUENyNlhIQnRQckNwTGFpYlhVRzVOdXRKekxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeb0X7Mw3 F8ffMp/xVBAmKvq/WHQxQiSbNFqFhMFMzZybOtJ6T9kUMA1Y90+0sN9jT6b4/t2w BWCD+R4yJFuhMso2SdBV4np1MCxbMlp58KQNQXCDg26mVq+aSYFNORLWI47g6+Ig oRx+nGuB+oBCwcO2iHXTCco2GrR7jHx7XBwhUmzUfccYrYczrJ2XmxSkzxYXyGHF exoqSzCTpxKtg4Y8r8NnEIRcNY/DWFAi89a1V5DZ+Uw1lWfOTcTEWmrCiR0DcFnQ WmIab7tBjpJ/yRyp6bjqWcwUN/2DCgI/MMoBAoFqxtl/yD38rq7sNwvGvsFsITvi ItI5RsMX2wb2CQ== -----END CERTIFICATE-----Generated at Mon Jan 12 14:02:30 2026 by rpki-client