This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft File: pstoJGZQvVjCKirgCtBmF4qB628.mft (raw, json) Hash identifier: 3RmKCVmAU54dAdjv122FkBs2kDDCWnKiWph0WMMSBZA= Subject key identifier: 1B:AE:B2:79:E7:C0:A9:98:E2:AF:5D:E5:1A:1C:BB:A5:24:E6:F2:73 Authority key identifier: A6:CB:68:24:66:50:BD:58:C2:2A:2A:E0:0A:D0:66:17:8A:81:EB:6F Certificate issuer: /CN=a6cb68246650bd58c22a2ae00ad066178a81eb6f Certificate serial: 019BF76369BB85021682C6D918EEDA702D2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pstoJGZQvVjCKirgCtBmF4qB628.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft Manifest number: 1066 Signing time: Sun 25 Jan 2026 23:00:45 +0000 Manifest this update: Sun 25 Jan 2026 23:00:45 +0000 Manifest next update: Mon 26 Jan 2026 23:00:45 +0000 Files and hashes: 1: SNOlYOcqtrnciePvkCUcLJcoUvU.roa (hash: loMPRzn55InS2adOqJYmW2DSfbGu3PbAMnR1VbbSvpc=) 2: pstoJGZQvVjCKirgCtBmF4qB628.crl (hash: X8DwKjU+LXBevgREEnpzGm97T4+WMGiZ0ntDVzUensc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.crl rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft rsync://rpki.ripe.net/repository/DEFAULT/pstoJGZQvVjCKirgCtBmF4qB628.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 23:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:69:bb:85:02:16:82:c6:d9:18:ee:da:70:2d:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6cb68246650bd58c22a2ae00ad066178a81eb6f Validity Not Before: Jan 25 23:00:45 2026 GMT Not After : Jan 26 23:00:45 2026 GMT Subject: CN=1baeb279e7c0a998e2af5de51a1cbba524e6f273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c9:18:98:6a:3e:45:8b:b3:e3:8b:9e:51:b7: a7:68:37:39:87:aa:f1:29:a8:f1:bf:d3:c4:69:4d: af:a1:58:2e:c7:bb:93:42:b9:4d:90:2c:06:6c:34: 4b:9e:21:f5:7a:2b:21:c0:66:8a:74:9d:00:2e:97: 97:4b:a4:e3:a3:8b:d5:1a:96:58:c1:7d:12:77:f5: cb:1c:75:03:0b:cd:22:26:67:3a:84:55:ec:8e:5f: 9f:6c:5e:57:86:8c:fb:aa:65:11:73:10:b7:dd:8b: 11:c4:e4:e9:d1:83:35:1b:c9:c0:c2:5e:7a:43:ff: 8a:b8:53:54:4d:0e:c1:55:3d:0c:6f:d2:bb:32:46: 64:1d:59:04:55:5b:a0:8e:98:6f:d0:48:37:af:7b: a6:9e:4d:86:f8:8a:1e:07:30:56:81:64:d0:a2:aa: e9:91:cd:fb:aa:72:85:38:36:d8:f0:e0:f3:cb:d6: 8a:b4:bd:dc:7d:7c:20:d1:0f:9a:ff:9b:62:02:4f: 3f:89:19:db:bb:a5:1c:08:13:4e:b9:70:51:7f:e2: 8b:89:0e:32:c5:a8:e3:54:65:7a:01:8a:06:85:e9: 62:56:f1:e8:cc:55:9e:02:ca:16:e3:82:fb:28:ad: d0:aa:ae:56:bf:36:76:9a:e0:80:aa:0c:1c:76:cf: 94:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:AE:B2:79:E7:C0:A9:98:E2:AF:5D:E5:1A:1C:BB:A5:24:E6:F2:73 X509v3 Authority Key Identifier: keyid:A6:CB:68:24:66:50:BD:58:C2:2A:2A:E0:0A:D0:66:17:8A:81:EB:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pstoJGZQvVjCKirgCtBmF4qB628.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:97:8c:a0:2d:3a:bb:74:54:5e:e5:4a:85:60:fd:52:e3:3c: 53:e6:41:ad:f6:a5:e6:23:b7:a5:73:18:e1:eb:a6:b4:45:20: 85:51:20:66:68:1f:1a:14:f2:0b:5d:3c:83:53:26:91:85:3e: e4:45:39:b9:19:f9:d2:b9:27:59:b5:4a:2a:f4:ee:d8:8e:1b: ed:24:6c:d7:8a:b6:94:cc:cc:2d:d8:89:f9:de:c5:0f:7e:2b: 01:bd:d9:e4:a8:79:72:f1:9a:2b:07:ec:e2:db:24:62:9a:b4: 48:01:73:50:2f:23:69:76:49:10:e5:cb:4a:54:ed:28:a3:ba: 09:97:6e:4b:2f:b3:88:53:ce:eb:da:26:81:df:53:9b:66:07: da:1e:11:4d:35:fb:83:cd:e9:50:ed:62:49:09:5e:8b:fd:e1: 43:ea:29:61:0a:bb:47:a2:80:20:fb:30:3f:7c:f2:07:07:de: 0d:6e:11:7a:d2:82:49:79:4b:88:37:f0:dc:bb:71:2d:13:68: 1c:64:a5:23:93:e9:0a:8b:52:47:b4:a1:32:ca:3a:d8:e4:62: 94:6e:06:6f:69:33:ef:28:49:ec:f0:3e:60:f9:0c:27:d7:06: 3d:49:83:ec:78:a9:da:0c:03:d2:3f:ae:4b:84:1b:d8:23:c9: 9b:77:a1:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y2m7hQIWgsbZGO7acC0sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2Y2I2ODI0NjY1MGJkNThjMjJhMmFlMDBhZDA2NjE3OGE4 MWViNmYwHhcNMjYwMTI1MjMwMDQ1WhcNMjYwMTI2MjMwMDQ1WjAzMTEwLwYDVQQD EygxYmFlYjI3OWU3YzBhOTk4ZTJhZjVkZTUxYTFjYmJhNTI0ZTZmMjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtckYmGo+RYuz44ueUbenaDc5h6rx Kajxv9PEaU2voVgux7uTQrlNkCwGbDRLniH1eishwGaKdJ0ALpeXS6Tjo4vVGpZY wX0Sd/XLHHUDC80iJmc6hFXsjl+fbF5Xhoz7qmURcxC33YsRxOTp0YM1G8nAwl56 Q/+KuFNUTQ7BVT0Mb9K7MkZkHVkEVVugjphv0Eg3r3umnk2G+IoeBzBWgWTQoqrp kc37qnKFODbY8ODzy9aKtL3cfXwg0Q+a/5tiAk8/iRnbu6UcCBNOuXBRf+KLiQ4y xajjVGV6AYoGheliVvHozFWeAsoW44L7KK3Qqq5WvzZ2muCAqgwcds+U3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBuusnnnwKmY4q9d5Rocu6Uk5vJzMB8GA1UdIwQY MBaAFKbLaCRmUL1Ywioq4ArQZheKgetvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHN0b0pHWlF2VmpDS2lyZ0N0Qm1GNHFCNjI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9iNjBkNTAtNTUyYS00NGFmLThiYTUt MzZlNGZiNTZmZGI0LzEvcHN0b0pHWlF2VmpDS2lyZ0N0Qm1GNHFCNjI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9iNjBkNTAtNTUyYS00NGFmLThiYTUtMzZlNGZiNTZmZGI0 LzEvcHN0b0pHWlF2VmpDS2lyZ0N0Qm1GNHFCNjI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyJeMoC06 u3RUXuVKhWD9UuM8U+ZBrfal5iO3pXMY4eumtEUghVEgZmgfGhTyC108g1MmkYU+ 5EU5uRn50rknWbVKKvTu2I4b7SRs14q2lMzMLdiJ+d7FD34rAb3Z5Kh5cvGaKwfs 4tskYpq0SAFzUC8jaXZJEOXLSlTtKKO6CZduSy+ziFPO69omgd9Tm2YH2h4RTTX7 g83pUO1iSQlei/3hQ+opYQq7R6KAIPswP3zyBwfeDW4RetKCSXlLiDfw3LtxLRNo HGSlI5PpCotSR7ShMso62ORilG4Gb2kz7yhJ7PA+YPkMJ9cGPUmD7Hip2gwD0j+u S4Qb2CPJm3ehQQ== -----END CERTIFICATE-----Generated at Mon Jan 26 09:02:00 2026 by rpki-client