This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.mft File: preJsy4W6d0vcFExGdx36mH_Hgk.mft (raw, json) Hash identifier: pry1t/dHqsQ5CdsjBqJGyzh7xHXY01pqHXT6ipT+dU0= Subject key identifier: 0A:3B:E1:F9:A7:80:4A:E9:1E:1B:78:3B:D7:E2:CF:9A:FA:7C:36:FB Authority key identifier: A6:B7:89:B3:2E:16:E9:DD:2F:70:51:31:19:DC:77:EA:61:FF:1E:09 Certificate issuer: /CN=a6b789b32e16e9dd2f70513119dc77ea61ff1e09 Certificate serial: 019BFBE5260FF3E92D91B0655CDA84876011 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/preJsy4W6d0vcFExGdx36mH_Hgk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.mft Manifest number: 1672 Signing time: Mon 26 Jan 2026 20:00:57 +0000 Manifest this update: Mon 26 Jan 2026 20:00:57 +0000 Manifest next update: Tue 27 Jan 2026 20:00:57 +0000 Files and hashes: 1: 8P6X0x59C3VckILV8m4M69IldqE.roa (hash: QOXkZ9qVgfqH0XpMQGh9X+mEF5OYLP10GuMRHcWRTjE=) 2: QCuKQCl6KP2estrIaG6k5Uc81F4.roa (hash: cBmWMEy/zwB8Bt1wF3nlzEol1nOu9jM3rhWTCCMjNfY=) 3: YzkQZIuWtNFelhNpi4EnHDyBQJU.roa (hash: 7C0rYIhC0IdYSE2/clMiQQwJ66KGMZ1ByQiGiFH5l9s=) 4: _e5AZzGVltklRadfv-MK2ei60tQ.roa (hash: eZnnL/QqgvT71AWN7mEZ0+pU5MPgz24zK984iwP+gE8=) 5: preJsy4W6d0vcFExGdx36mH_Hgk.crl (hash: Xt2sOQ3O6ddZE3Yb/zFzD8Im11wbfo2UQyk+oM3EY18=) 6: zih4pEofMsc0PfEmVcpJbSHS8Vw.roa (hash: LBA2zilX1jjETkANtyysp3KbVjSb0vGJ+k7nTqc9Wjo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.mft rsync://rpki.ripe.net/repository/DEFAULT/preJsy4W6d0vcFExGdx36mH_Hgk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:e5:26:0f:f3:e9:2d:91:b0:65:5c:da:84:87:60:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6b789b32e16e9dd2f70513119dc77ea61ff1e09 Validity Not Before: Jan 26 20:00:57 2026 GMT Not After : Jan 27 20:00:57 2026 GMT Subject: CN=0a3be1f9a7804ae91e1b783bd7e2cf9afa7c36fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1a:69:ad:a0:40:3f:8a:7c:86:fa:0a:60:b9: 5e:52:df:48:fe:4c:c5:a7:79:eb:55:7a:b2:ad:71: 1f:0f:1d:f6:fa:51:14:d2:e0:4b:59:06:ca:10:ce: db:d1:45:67:f3:55:b8:f2:93:f5:0d:89:c4:d0:84: 6b:67:e2:18:b3:a5:54:4d:cf:05:14:f7:31:d3:99: 26:c2:e7:2b:58:99:73:60:79:da:c7:b7:4d:91:d3: ec:39:31:a6:24:90:e9:97:42:f1:62:af:9e:d3:7d: 3e:46:31:29:01:42:b0:e4:c7:a3:ce:de:78:7b:40: 6c:f6:2f:7d:d9:df:fe:30:b4:e1:c6:63:12:8c:3d: ea:c2:7c:52:44:50:76:6a:77:19:37:63:67:65:21: 0f:23:4f:3c:37:c3:4c:ef:2f:5c:5a:c2:92:cc:00: 3a:f9:33:eb:83:37:20:6d:0f:53:e4:62:73:ca:3e: 2d:b0:31:62:57:6c:95:83:40:53:36:eb:8f:58:5f: 30:8a:24:5a:fd:e3:2e:2b:3c:ac:12:20:88:97:c6: a6:92:4e:92:6e:57:b6:8c:8e:2f:06:02:38:3f:1a: 41:6e:5b:6e:6a:56:f5:73:d5:f7:3c:a4:89:7d:48: 54:e6:70:d0:ee:31:a8:08:e8:ff:22:0e:d2:74:c4: 9e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:3B:E1:F9:A7:80:4A:E9:1E:1B:78:3B:D7:E2:CF:9A:FA:7C:36:FB X509v3 Authority Key Identifier: keyid:A6:B7:89:B3:2E:16:E9:DD:2F:70:51:31:19:DC:77:EA:61:FF:1E:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/preJsy4W6d0vcFExGdx36mH_Hgk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:3d:9f:6c:5e:8b:f3:8c:ea:a9:1d:00:12:a7:68:3c:e4:86: 24:b6:31:0e:04:b7:4d:19:d7:c7:ac:25:80:83:dc:7f:13:18: bd:ba:3a:fc:2f:70:45:c1:5e:28:2b:e0:74:1b:7b:98:b2:f5: 11:1d:d6:78:4e:46:33:01:e5:8a:a9:54:dd:6b:27:81:e4:07: d1:2e:3c:35:fa:19:52:95:ea:9a:e6:c3:4b:ab:2e:09:08:4b: 9b:61:9b:a5:e1:2b:47:5a:93:c4:80:a0:dc:13:05:a1:02:85: c4:90:29:0f:92:ed:b8:61:1c:df:5f:11:16:d2:e8:fb:a7:61: 6d:e1:c0:f0:48:2d:c8:ce:b8:58:34:18:30:ab:d5:40:b2:3f: ca:29:06:f6:44:c4:c4:db:e4:ea:5e:60:d2:58:a6:2d:5a:37: 92:e7:4b:d6:71:f4:4b:f2:c4:a7:cf:b8:40:cf:08:86:0a:87: b6:96:3c:c1:25:02:bc:a2:73:fb:41:1d:15:fa:11:58:df:c1: c9:60:42:a0:62:70:fd:67:a7:c6:6e:50:c3:33:9b:6e:f8:96: b1:a5:90:8f:d5:e4:33:e2:f0:2c:07:9f:b4:68:f7:2c:de:0d: 3e:1c:ab:9f:f5:af:30:cf:32:c5:fa:a0:d5:fd:8f:97:4c:c7: 01:a1:f3:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv75SYP8+ktkbBlXNqEh2ARMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2Yjc4OWIzMmUxNmU5ZGQyZjcwNTEzMTE5ZGM3N2VhNjFm ZjFlMDkwHhcNMjYwMTI2MjAwMDU3WhcNMjYwMTI3MjAwMDU3WjAzMTEwLwYDVQQD EygwYTNiZTFmOWE3ODA0YWU5MWUxYjc4M2JkN2UyY2Y5YWZhN2MzNmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRppraBAP4p8hvoKYLleUt9I/kzF p3nrVXqyrXEfDx32+lEU0uBLWQbKEM7b0UVn81W48pP1DYnE0IRrZ+IYs6VUTc8F FPcx05kmwucrWJlzYHnax7dNkdPsOTGmJJDpl0LxYq+e030+RjEpAUKw5Mejzt54 e0Bs9i992d/+MLThxmMSjD3qwnxSRFB2ancZN2NnZSEPI088N8NM7y9cWsKSzAA6 +TPrgzcgbQ9T5GJzyj4tsDFiV2yVg0BTNuuPWF8wiiRa/eMuKzysEiCIl8amkk6S ble2jI4vBgI4PxpBbltualb1c9X3PKSJfUhU5nDQ7jGoCOj/Ig7SdMSeWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAo74fmngErpHht4O9fiz5r6fDb7MB8GA1UdIwQY MBaAFKa3ibMuFundL3BRMRncd+ph/x4JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHJlSnN5NFc2ZDB2Y0ZFeEdkeDM2bUhfSGdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9lNzY4YmQtZjUxMi00YjhhLTkzNmEt MDZjOTI5NmYwOGEyLzEvcHJlSnN5NFc2ZDB2Y0ZFeEdkeDM2bUhfSGdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9lNzY4YmQtZjUxMi00YjhhLTkzNmEtMDZjOTI5NmYwOGEy LzEvcHJlSnN5NFc2ZDB2Y0ZFeEdkeDM2bUhfSGdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeD2fbF6L 84zqqR0AEqdoPOSGJLYxDgS3TRnXx6wlgIPcfxMYvbo6/C9wRcFeKCvgdBt7mLL1 ER3WeE5GMwHliqlU3WsngeQH0S48NfoZUpXqmubDS6suCQhLm2GbpeErR1qTxICg 3BMFoQKFxJApD5LtuGEc318RFtLo+6dhbeHA8EgtyM64WDQYMKvVQLI/yikG9kTE xNvk6l5g0limLVo3kudL1nH0S/LEp8+4QM8IhgqHtpY8wSUCvKJz+0EdFfoRWN/B yWBCoGJw/Wenxm5QwzObbviWsaWQj9XkM+LwLAeftGj3LN4NPhyrn/WvMM8yxfqg 1f2Pl0zHAaHz7Q== -----END CERTIFICATE-----Generated at Tue Jan 27 06:08:11 2026 by rpki-client