This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft File: pQl6FWrvL4L_E7PBav9vfhbbAsg.mft (raw, json) Hash identifier: YH+r13yQnyE9ZSHoIYdOTW8FBF4lQ1cfBPMU79PZK9M= Subject key identifier: 36:6E:70:11:8D:07:F8:BE:02:7B:90:30:68:81:30:7F:50:45:51:69 Authority key identifier: A5:09:7A:15:6A:EF:2F:82:FF:13:B3:C1:6A:FF:6F:7E:16:DB:02:C8 Certificate issuer: /CN=a5097a156aef2f82ff13b3c16aff6f7e16db02c8 Certificate serial: 019BF8768015269369FBCDE4C6F47F72248E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft Manifest number: 06B0 Signing time: Mon 26 Jan 2026 04:01:14 +0000 Manifest this update: Mon 26 Jan 2026 04:01:14 +0000 Manifest next update: Tue 27 Jan 2026 04:01:14 +0000 Files and hashes: 1: gJz6RmgOr74ogolKTIbJJ0khIbY.roa (hash: nc3zZ0AuWIJRv8B+9l+JRXdB9csW2X29DxKckbvvC9Q=) 2: pQl6FWrvL4L_E7PBav9vfhbbAsg.crl (hash: 9joe0Z20jK1ru4lx1Lgiug4/NbINUPIhpsYxZmydXQA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:76:80:15:26:93:69:fb:cd:e4:c6:f4:7f:72:24:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5097a156aef2f82ff13b3c16aff6f7e16db02c8 Validity Not Before: Jan 26 04:01:14 2026 GMT Not After : Jan 27 04:01:14 2026 GMT Subject: CN=366e70118d07f8be027b90306881307f50455169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b3:0b:6b:70:88:b1:cf:fd:85:4a:08:15:d2: 55:ef:80:7c:6b:de:cc:4b:a0:fe:a5:8d:c6:92:49: 9b:6c:81:4d:98:9c:c9:57:0c:81:95:ac:2e:e2:af: ee:2e:d1:c2:b9:38:1e:d7:48:04:99:f1:cc:bd:ac: c6:fe:0b:d5:46:f7:73:a1:6c:16:61:8f:b8:68:f3: 4e:95:c0:fb:8b:8f:6d:94:3d:86:2a:20:68:81:df: 19:ac:f7:d3:f6:d2:d3:3a:67:15:9f:a9:d4:82:fa: ca:d5:85:04:09:81:34:cd:d9:89:41:be:80:3c:7c: 69:19:5f:53:03:47:48:e9:b4:e7:14:b7:69:0a:ee: 1f:64:9e:d5:90:ed:1b:fd:3e:15:aa:f4:02:34:24: 77:e1:2d:46:b3:bd:84:c5:cf:e7:41:19:72:2f:12: ed:b4:ea:09:07:2d:7a:a0:d8:e1:3f:1d:ab:3e:a5: f4:60:6a:58:44:88:02:23:95:52:6a:42:e3:cb:a0: 6c:fe:c0:4c:df:0f:9c:2a:86:0d:3d:71:74:65:6e: 18:0d:e9:4d:9a:7f:e6:69:01:6f:d0:6d:e6:38:73: 5b:3a:28:93:ec:fb:1f:20:61:25:20:56:2e:2f:5a: 26:20:7f:9c:30:21:d2:9d:af:7a:dd:6f:a3:57:0c: 30:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:6E:70:11:8D:07:F8:BE:02:7B:90:30:68:81:30:7F:50:45:51:69 X509v3 Authority Key Identifier: keyid:A5:09:7A:15:6A:EF:2F:82:FF:13:B3:C1:6A:FF:6F:7E:16:DB:02:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:ef:8a:25:67:51:12:b2:39:7c:bc:74:d0:cb:ff:5d:1d:50: 71:25:b2:49:b9:61:69:05:0f:e9:56:bb:db:6b:c0:22:aa:05: 9a:73:cc:f6:b8:89:38:c2:99:e3:57:6b:0f:0c:d2:80:8a:c4: 9e:47:c2:aa:e9:5e:7c:35:84:ae:2d:25:b2:89:9d:3f:b5:1c: 49:f3:57:b3:04:60:6b:cc:bc:7e:2d:a3:b1:b8:4c:98:cd:12: be:29:29:90:6a:7b:68:94:6a:d3:9c:6a:44:f9:aa:1d:3f:29: 1e:06:f5:1b:48:3b:32:77:f3:78:6c:44:32:25:4a:a8:0e:46: 78:3e:8d:7e:70:06:9b:66:fc:5a:2d:b9:1e:84:3b:53:39:0f: ae:eb:75:8a:46:8d:42:f3:ce:3f:f1:06:e8:42:bd:c6:6f:6f: 5d:2f:df:3b:72:84:6b:c8:b3:18:0b:da:c0:cd:68:55:f9:ab: a6:b4:5a:dc:9c:98:9f:6a:ad:a0:1d:6c:e4:a2:45:cd:0f:cf: a8:88:85:ad:1c:9c:e9:48:47:bb:c4:58:21:39:18:6d:3e:b5: 56:bb:1d:7c:dc:62:dc:6c:2d:4e:69:f4:8a:51:c5:6e:05:b8: 15:62:75:13:66:11:7e:66:f4:df:93:45:de:a6:02:5f:40:69: 78:d2:97:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4doAVJpNp+83kxvR/ciSOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1MDk3YTE1NmFlZjJmODJmZjEzYjNjMTZhZmY2ZjdlMTZk YjAyYzgwHhcNMjYwMTI2MDQwMTE0WhcNMjYwMTI3MDQwMTE0WjAzMTEwLwYDVQQD EygzNjZlNzAxMThkMDdmOGJlMDI3YjkwMzA2ODgxMzA3ZjUwNDU1MTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrMLa3CIsc/9hUoIFdJV74B8a97M S6D+pY3GkkmbbIFNmJzJVwyBlawu4q/uLtHCuTge10gEmfHMvazG/gvVRvdzoWwW YY+4aPNOlcD7i49tlD2GKiBogd8ZrPfT9tLTOmcVn6nUgvrK1YUECYE0zdmJQb6A PHxpGV9TA0dI6bTnFLdpCu4fZJ7VkO0b/T4VqvQCNCR34S1Gs72Exc/nQRlyLxLt tOoJBy16oNjhPx2rPqX0YGpYRIgCI5VSakLjy6Bs/sBM3w+cKoYNPXF0ZW4YDelN mn/maQFv0G3mOHNbOiiT7PsfIGElIFYuL1omIH+cMCHSna963W+jVwwwSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDZucBGNB/i+AnuQMGiBMH9QRVFpMB8GA1UdIwQY MBaAFKUJehVq7y+C/xOzwWr/b34W2wLIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFFsNkZXcnZMNExfRTdQQmF2OXZmaGJiQXNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi80MmY3ZjgtNzQwNy00MzJkLWJiYjUt MGQzMzk3MDdjYjg4LzEvcFFsNkZXcnZMNExfRTdQQmF2OXZmaGJiQXNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi80MmY3ZjgtNzQwNy00MzJkLWJiYjUtMGQzMzk3MDdjYjg4 LzEvcFFsNkZXcnZMNExfRTdQQmF2OXZmaGJiQXNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHu+KJWdR ErI5fLx00Mv/XR1QcSWySblhaQUP6Va722vAIqoFmnPM9riJOMKZ41drDwzSgIrE nkfCqulefDWEri0lsomdP7UcSfNXswRga8y8fi2jsbhMmM0SvikpkGp7aJRq05xq RPmqHT8pHgb1G0g7MnfzeGxEMiVKqA5GeD6NfnAGm2b8Wi25HoQ7UzkPrut1ikaN QvPOP/EG6EK9xm9vXS/fO3KEa8izGAvawM1oVfmrprRa3JyYn2qtoB1s5KJFzQ/P qIiFrRyc6UhHu8RYITkYbT61VrsdfNxi3GwtTmn0ilHFbgW4FWJ1E2YRfmb035NF 3qYCX0BpeNKXSg== -----END CERTIFICATE-----Generated at Mon Jan 26 09:01:58 2026 by rpki-client