This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.mft File: pszH03YZ_dof84uT_s5gq9SYq4Q.mft (raw, json) Hash identifier: WCQkw6mcjEyPxDc6SuFQFxeNA2os1HvJRImgeNe4ZMI= Subject key identifier: DB:D2:BC:FA:DB:A1:33:B7:45:E0:B0:A6:45:C8:FC:F7:86:B3:DE:6B Authority key identifier: A6:CC:C7:D3:76:19:FD:DA:1F:F3:8B:93:FE:CE:60:AB:D4:98:AB:84 Certificate issuer: /CN=a6ccc7d37619fdda1ff38b93fece60abd498ab84 Certificate serial: 019BF6BE76ADA1E15F8A35F28A0236819267 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pszH03YZ_dof84uT_s5gq9SYq4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.mft Manifest number: E2 Signing time: Sun 25 Jan 2026 20:00:35 +0000 Manifest this update: Sun 25 Jan 2026 20:00:35 +0000 Manifest next update: Mon 26 Jan 2026 20:00:35 +0000 Files and hashes: 1: cNWWHlQTLoBnWDX0Cr-HJhDwkyQ.roa (hash: RBDJxnmtcnqGTkRo8S/I5iM/CbwoBW03aRJgb8eIgr4=) 2: pszH03YZ_dof84uT_s5gq9SYq4Q.crl (hash: xuW/WtvNXisoR5u9F7vVwSFCY0pepghpvapXI0aXjHE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/pszH03YZ_dof84uT_s5gq9SYq4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:76:ad:a1:e1:5f:8a:35:f2:8a:02:36:81:92:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6ccc7d37619fdda1ff38b93fece60abd498ab84 Validity Not Before: Jan 25 20:00:35 2026 GMT Not After : Jan 26 20:00:35 2026 GMT Subject: CN=dbd2bcfadba133b745e0b0a645c8fcf786b3de6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a5:02:fd:83:bd:fe:08:53:dc:f3:d8:c8:01: f8:09:69:6b:1f:43:57:ac:da:79:01:6e:fd:19:a1: 05:33:65:42:65:49:34:8b:84:58:5f:bd:0f:b7:f5: f1:54:62:bf:02:16:98:ef:c0:ee:52:72:75:de:07: cb:14:00:e6:c1:73:6c:64:1c:45:d4:00:8d:ba:7b: 8e:48:c7:53:6d:07:8f:fe:d4:f4:cf:a6:cc:61:b4: 60:e9:ec:81:7e:db:97:c3:b6:f0:9c:5c:d7:f2:eb: 63:6b:53:3b:c9:80:3d:f0:88:23:b0:86:1f:46:5c: 4b:5e:90:11:4e:b9:ae:9f:cf:3a:3a:57:32:a0:df: 4e:d2:e5:20:67:8c:cb:f1:8a:ee:4c:95:81:c6:81: 15:a7:d5:7a:ad:85:ee:84:64:0f:a6:d3:b8:2b:1a: 33:95:8a:c0:99:bb:9a:9e:69:60:56:c5:26:96:83: 7e:4e:d6:0d:f9:5e:c3:ed:a9:e3:79:8e:2d:92:21: f2:33:7f:ea:e2:c1:d2:d1:83:71:24:a8:a8:77:e5: 5f:8a:7a:03:2f:a6:a2:09:15:b4:2a:67:cc:25:8b: ec:de:7a:83:89:25:ca:01:14:64:7f:93:d7:e5:17: b9:ad:71:a5:55:88:56:59:3b:1e:9d:af:91:aa:6f: 3c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:D2:BC:FA:DB:A1:33:B7:45:E0:B0:A6:45:C8:FC:F7:86:B3:DE:6B X509v3 Authority Key Identifier: keyid:A6:CC:C7:D3:76:19:FD:DA:1F:F3:8B:93:FE:CE:60:AB:D4:98:AB:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pszH03YZ_dof84uT_s5gq9SYq4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:24:a7:40:fc:73:e5:92:f0:3a:61:67:1e:8e:2a:25:29:1f: 97:59:58:fc:25:34:de:da:bb:99:0f:de:87:50:20:2d:fd:d1: 07:be:77:c2:5d:f2:26:fc:39:1b:df:8c:0d:fe:91:ba:28:73: 5e:52:78:2c:48:dd:7f:a4:2b:ee:ae:53:17:0d:02:0e:58:5e: a6:3f:9c:0e:fa:d4:bd:d4:40:2c:3f:67:2a:03:b2:85:fb:11: 52:d4:4f:f9:fd:db:b9:e3:4a:8b:b3:91:9e:37:41:11:6d:b3: ef:a6:e0:9b:39:ab:ce:47:bb:73:75:d1:01:71:75:20:d2:14: f0:f6:c8:5d:4b:65:38:a1:db:ef:ac:7f:54:7e:88:27:2d:7e: 23:f4:28:02:b3:65:3b:87:cb:5b:6b:cd:9f:d5:bc:bb:d1:32: 24:fa:4d:10:40:40:ee:d2:6b:cc:2a:e5:78:95:fb:1a:12:38: 01:a5:9f:e9:62:5f:4b:99:b8:37:bf:8e:65:7a:bb:76:7a:a5: 9f:49:0e:22:7f:6e:6a:b0:a2:4e:27:b9:a5:ee:ab:9c:e4:a2: 68:14:af:73:26:05:42:50:5b:6d:63:4d:fd:9c:ad:8c:d7:27: dc:12:3a:1f:2a:4b:39:22:af:b4:b2:d8:49:2e:6d:a1:74:8a: 1b:0e:c1:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vnatoeFfijXyigI2gZJnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2Y2NjN2QzNzYxOWZkZGExZmYzOGI5M2ZlY2U2MGFiZDQ5 OGFiODQwHhcNMjYwMTI1MjAwMDM1WhcNMjYwMTI2MjAwMDM1WjAzMTEwLwYDVQQD EyhkYmQyYmNmYWRiYTEzM2I3NDVlMGIwYTY0NWM4ZmNmNzg2YjNkZTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaUC/YO9/ghT3PPYyAH4CWlrH0NX rNp5AW79GaEFM2VCZUk0i4RYX70Pt/XxVGK/AhaY78DuUnJ13gfLFADmwXNsZBxF 1ACNunuOSMdTbQeP/tT0z6bMYbRg6eyBftuXw7bwnFzX8utja1M7yYA98IgjsIYf RlxLXpARTrmun886OlcyoN9O0uUgZ4zL8YruTJWBxoEVp9V6rYXuhGQPptO4Kxoz lYrAmbuanmlgVsUmloN+TtYN+V7D7anjeY4tkiHyM3/q4sHS0YNxJKiod+VfinoD L6aiCRW0KmfMJYvs3nqDiSXKARRkf5PX5Re5rXGlVYhWWTsena+Rqm88JQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNvSvPrboTO3ReCwpkXI/PeGs95rMB8GA1UdIwQY MBaAFKbMx9N2Gf3aH/OLk/7OYKvUmKuEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHN6SDAzWVpfZG9mODR1VF9zNWdxOVNZcTRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mNWNjMWUtYTI5NC00NWM3LTlkMTAt ZjFiYzk1Njg1OGFhLzEvcHN6SDAzWVpfZG9mODR1VF9zNWdxOVNZcTRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9mNWNjMWUtYTI5NC00NWM3LTlkMTAtZjFiYzk1Njg1OGFh LzEvcHN6SDAzWVpfZG9mODR1VF9zNWdxOVNZcTRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApSSnQPxz 5ZLwOmFnHo4qJSkfl1lY/CU03tq7mQ/eh1AgLf3RB753wl3yJvw5G9+MDf6Ruihz XlJ4LEjdf6Qr7q5TFw0CDlhepj+cDvrUvdRALD9nKgOyhfsRUtRP+f3bueNKi7OR njdBEW2z76bgmzmrzke7c3XRAXF1INIU8PbIXUtlOKHb76x/VH6IJy1+I/QoArNl O4fLW2vNn9W8u9EyJPpNEEBA7tJrzCrleJX7GhI4AaWf6WJfS5m4N7+OZXq7dnql n0kOIn9uarCiTie5pe6rnOSiaBSvcyYFQlBbbWNN/ZytjNcn3BI6HypLOSKvtLLY SS5toXSKGw7Bjw== -----END CERTIFICATE-----Generated at Mon Jan 26 04:44:44 2026 by rpki-client