This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft File: pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft (raw, json) Hash identifier: r5P6s+636RNEW2ctjZrZwKA8668UWBCPUmO/lhOETpk= Subject key identifier: 65:39:D0:50:44:B1:6B:95:1D:56:9A:9E:A9:FC:D3:81:11:CE:58:AD Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Certificate serial: 019BF5ABE9F62DDAE6B8510EC7CB486570BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft Manifest number: 14C4 Signing time: Sun 25 Jan 2026 15:00:42 +0000 Manifest this update: Sun 25 Jan 2026 15:00:42 +0000 Manifest next update: Mon 26 Jan 2026 15:00:42 +0000 Files and hashes: 1: 0inTqtkV7aRdA0poVknUSc5weqM.roa (hash: tQvVVhfk99FYUlPYyVFhzpH6v9igywPSJePiCAXt2L8=) 2: 6TbA_Za4Eowieja7n7niJ7Rt1gs.roa (hash: scQ2AMr4c5KWoojUsMClo/2J+rhonxe/8Y7reFR2/oA=) 3: 7mvF9myTKlEKYunZpLTQD5KEFrY.roa (hash: 1UIT2TzCE1FlQDr/AW6XvHwVdir3xpnco3QCOUshSZI=) 4: F0ubE8ZoOIcH6EOeRRsm7BjDGv0.roa (hash: jxUQ0KKcc1cvSdaRZ9vh81k1iQSpuyreVGWce3iIfz4=) 5: GHszpS3-Dwi_R7QrobaC-6mzjVA.roa (hash: KYs3hrYFykvRa+MGqLwUV/+w9WDj/E2vkaV5H8LeqGw=) 6: O1GW4ziuKGxF3aTFCKn2xqIz0NE.roa (hash: ScOFNBiJmWWMmbvpEIy/O/H23s5tvByR/NPpUmMp9Tg=) 7: Z3nS0nqVZ-vslxx54klnYbz02l8.roa (hash: dO6OHSX+aPL7qnM4VP6WsbVvNbzWQqrh27kk5gBnp4w=) 8: aA_qu5IgNcJltCsGsxXyXwjv3A8.roa (hash: Dy2evysieg8Bw8Kefzu6MvOLG6ZrZ3EW+74fqHbs4Tc=) 9: aBJGwoNtwjYYCfL_vY3KC-5KRiw.roa (hash: qe/bdX+L1Ag/Xhut7yjVu6KrdVE0BnulRsPIthNL1pg=) 10: hB3YY5wUUGfV6IIyHwEnpTSv42A.roa (hash: 1OC88dVocx3G+QkH4qBimK+HQdGVwhYEBjKSlW54FuM=) 11: pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl (hash: Uq+K9C6lseO18SNGlgrIPnM9f+UHJkMxq5CQiZ2AHXo=) 12: roVhJvLE3W-3AVNXrvbfZb_XPPo.roa (hash: 6LQ91r1uUm0MXEXzntSjw9cSGp9nmQGmFVNHFHmb1Zw=) 13: thPKVIAn4Mtb5x7VAf0Ti0_MWKQ.roa (hash: U0wPlIAv75ZKpiMwZqpBCEwATCl9LCbwg1gs4MzHORI=) 14: tpKBXwzKN2mHCmBOzrBx0WRWZGY.roa (hash: 7rikcS4Ls1HmHeVnsKZgA/s/j4eis9rsmH9qENfz2po=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ab:e9:f6:2d:da:e6:b8:51:0e:c7:cb:48:65:70:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Validity Not Before: Jan 25 15:00:42 2026 GMT Not After : Jan 26 15:00:42 2026 GMT Subject: CN=6539d05044b16b951d569a9ea9fcd38111ce58ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:66:1d:8a:df:31:7e:4e:1d:b9:be:22:c0:16: fe:64:90:af:fb:4b:27:50:f4:24:39:d8:25:8e:9e: d1:a8:73:2a:c9:20:11:1d:7f:dd:60:45:92:0e:8c: 6e:57:78:16:32:c6:4c:48:06:f1:94:5b:9d:ab:57: 2e:63:ac:be:25:f9:f9:0f:fe:d1:cd:76:66:09:10: 7b:d4:a7:4d:74:bc:58:49:88:20:c7:9f:fd:4b:5c: 49:88:cd:6b:b4:cc:c2:29:24:76:79:10:85:24:99: 7c:5b:9c:7f:4d:66:57:ae:95:ee:55:fb:3c:e1:af: 37:71:70:01:09:ff:b4:0d:31:00:11:02:09:d3:c3: 5e:27:07:0e:ae:7b:81:ef:23:6e:27:fa:9d:ba:6c: d1:6e:79:12:76:12:e2:d3:5d:cd:2d:3c:64:b1:ff: e9:57:e4:f9:d2:46:44:73:20:16:04:3c:ec:5a:15: 90:28:e3:a8:ee:88:6c:a2:60:4e:ab:55:9c:6d:19: a4:51:9c:4f:3f:52:af:80:7b:9a:19:cd:56:87:9c: 69:24:fc:6c:1b:b1:1c:8c:2d:51:12:7d:8a:ec:3d: 73:b3:91:d7:3e:ec:09:69:14:a8:4d:fd:61:6f:f0: 3f:a0:0e:ef:70:87:bf:0c:2a:06:b8:ad:4c:c2:58: 37:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:39:D0:50:44:B1:6B:95:1D:56:9A:9E:A9:FC:D3:81:11:CE:58:AD X509v3 Authority Key Identifier: keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:47:59:74:6c:66:19:09:00:ff:3d:ae:4d:2c:ad:c8:46:0c: e6:12:a4:40:0b:6d:88:e4:0a:cb:0e:83:3e:0b:e6:d1:8f:be: 91:1d:c8:ae:39:5f:9e:a0:fa:a5:84:f7:6a:ce:b1:af:d8:9c: 78:92:84:e2:ba:f3:61:a9:d1:37:1d:0d:82:3c:39:15:06:e9: a5:80:6f:09:b2:98:47:7b:0b:3f:c5:a2:e9:ea:62:78:b4:e7: 64:72:c7:44:1f:90:86:90:38:38:e6:e1:ae:8c:f9:ec:c1:47: 88:03:b2:18:a3:61:89:46:42:4f:63:ea:3f:7c:05:09:b6:07: 25:df:e6:da:ce:f9:d7:c6:43:d0:98:a0:c4:34:f1:e0:28:df: ed:78:cb:54:23:3d:5a:b9:89:06:a6:54:53:78:bd:3a:e8:09: 88:50:70:1d:84:8d:19:0c:89:b0:39:5c:f3:7b:84:05:80:5b: f7:20:a7:f1:bc:56:b4:28:70:bd:2f:46:0c:c2:c0:7a:74:e2: 59:37:e1:85:21:65:f5:0d:c5:9f:01:c0:fb:0b:a7:3a:3b:22: 7d:ee:ae:c9:2c:0e:51:ce:52:79:d5:d0:86:a8:29:06:b0:80: f6:fd:17:00:7f:7d:06:6d:ce:9d:dd:b0:40:73:2e:bf:7e:e9: 30:09:4e:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1q+n2LdrmuFEOx8tIZXC6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0Y2U5NjQwYTNlZjJmZWExOTM3NGFkOGY5OWY0MjNkN2Fh N2M3NmIwHhcNMjYwMTI1MTUwMDQyWhcNMjYwMTI2MTUwMDQyWjAzMTEwLwYDVQQD Eyg2NTM5ZDA1MDQ0YjE2Yjk1MWQ1NjlhOWVhOWZjZDM4MTExY2U1OGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmYdit8xfk4dub4iwBb+ZJCv+0sn UPQkOdgljp7RqHMqySARHX/dYEWSDoxuV3gWMsZMSAbxlFudq1cuY6y+Jfn5D/7R zXZmCRB71KdNdLxYSYggx5/9S1xJiM1rtMzCKSR2eRCFJJl8W5x/TWZXrpXuVfs8 4a83cXABCf+0DTEAEQIJ08NeJwcOrnuB7yNuJ/qdumzRbnkSdhLi013NLTxksf/p V+T50kZEcyAWBDzsWhWQKOOo7ohsomBOq1WcbRmkUZxPP1KvgHuaGc1Wh5xpJPxs G7EcjC1REn2K7D1zs5HXPuwJaRSoTf1hb/A/oA7vcIe/DCoGuK1Mwlg38QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGU50FBEsWuVHVaanqn804ERzlitMB8GA1UdIwQY MBaAFKTOlkCj7y/qGTdK2PmfQj16p8drMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQt MjgzZmU1NGE2ZjJmLzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQtMjgzZmU1NGE2ZjJm LzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp0dZdGxm GQkA/z2uTSytyEYM5hKkQAttiOQKyw6DPgvm0Y++kR3IrjlfnqD6pYT3as6xr9ic eJKE4rrzYanRNx0Ngjw5FQbppYBvCbKYR3sLP8Wi6epieLTnZHLHRB+QhpA4OObh roz57MFHiAOyGKNhiUZCT2PqP3wFCbYHJd/m2s7518ZD0JigxDTx4Cjf7XjLVCM9 WrmJBqZUU3i9OugJiFBwHYSNGQyJsDlc83uEBYBb9yCn8bxWtChwvS9GDMLAenTi WTfhhSFl9Q3FnwHA+wunOjsife6uySwOUc5SedXQhqgpBrCA9v0XAH99Bm3Ond2w QHMuv37pMAlOaQ== -----END CERTIFICATE-----Generated at Sun Jan 25 18:26:27 2026 by rpki-client