This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft File: prswRa6njo-nZIEpcU-3NgaNw3s.mft (raw, json) Hash identifier: f0juW5ZD5ZTNtSLncC6bFELh13afPMc4K/SS8ZHB85o= Subject key identifier: DA:03:D3:DE:47:8E:C1:CA:B3:3E:31:66:3D:4D:5A:E0:65:F8:95:6C Authority key identifier: A6:BB:30:45:AE:A7:8E:8F:A7:64:81:29:71:4F:B7:36:06:8D:C3:7B Certificate issuer: /CN=a6bb3045aea78e8fa7648129714fb736068dc37b Certificate serial: 019C040C93AF7D2E4A0D73FBF84969D5774B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft Manifest number: 0B4B Signing time: Wed 28 Jan 2026 10:00:58 +0000 Manifest this update: Wed 28 Jan 2026 10:00:58 +0000 Manifest next update: Thu 29 Jan 2026 10:00:58 +0000 Files and hashes: 1: G42-Fdl3gJAxSTqoOxR_BXG1oH8.roa (hash: pai33aN90kyIzUMmy6nzZwQfDVVekgEOsKj6Cwhhy24=) 2: prswRa6njo-nZIEpcU-3NgaNw3s.crl (hash: oztZ+TUDghBgI++Qw7UnUky0f8p/6lQPd0r2Zj/4LHE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:04:0c:93:af:7d:2e:4a:0d:73:fb:f8:49:69:d5:77:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6bb3045aea78e8fa7648129714fb736068dc37b Validity Not Before: Jan 28 10:00:58 2026 GMT Not After : Jan 29 10:00:58 2026 GMT Subject: CN=da03d3de478ec1cab33e31663d4d5ae065f8956c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:40:41:a0:ba:22:2c:69:fe:f8:05:a1:a8:e3: 9f:58:80:3a:4d:17:4b:47:b6:8a:7b:28:67:0d:ff: 01:58:4f:ec:78:94:ba:c7:2b:8c:6f:0b:69:50:99: 46:92:e5:5e:34:2f:5c:d1:5b:0c:84:e8:8a:82:92: 36:f9:4e:28:22:ca:65:dd:7f:81:3c:50:44:8f:e4: 8c:85:6c:ba:ef:69:2c:5b:49:10:d1:dd:2b:54:5a: 12:3b:91:f1:ce:e4:c5:05:5f:a7:64:af:ba:30:f5: c3:14:25:4f:44:8d:a1:0d:55:25:2a:f5:70:c5:76: c8:44:c0:2e:08:6c:75:5b:e8:b6:77:42:b6:05:d1: eb:f7:1e:2d:81:ef:82:41:7a:04:26:19:eb:c4:ad: ba:f9:c3:c0:d1:93:23:58:b0:9b:db:a0:ed:05:d2: 4b:95:75:f0:be:30:8f:55:e4:3a:a7:0a:b3:73:98: a6:2f:6a:8e:51:e3:26:2e:fd:a1:44:1f:2a:c8:23: e5:77:5c:73:e1:ef:9d:d0:59:3f:1e:e7:96:e6:0e: bd:b1:85:f2:92:57:d8:48:ce:99:3a:00:9c:f9:d5: 1a:db:87:ab:52:32:45:50:4e:15:04:42:f5:9d:ed: 5a:fb:f6:51:0c:17:bf:11:90:19:ee:e7:94:27:c5: c1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:03:D3:DE:47:8E:C1:CA:B3:3E:31:66:3D:4D:5A:E0:65:F8:95:6C X509v3 Authority Key Identifier: keyid:A6:BB:30:45:AE:A7:8E:8F:A7:64:81:29:71:4F:B7:36:06:8D:C3:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:37:2a:62:e2:9b:28:a5:8d:4b:44:78:50:60:8f:38:45:78: 15:00:e3:cb:80:24:49:b6:82:6d:35:5e:76:41:a6:1c:c5:ed: fe:90:9d:0f:b9:fb:7c:aa:b2:52:c6:cf:5f:84:70:c9:03:19: fc:24:26:aa:ab:a0:e6:e6:b1:7e:c7:76:b4:15:be:fe:26:63: 36:76:bf:d9:e0:eb:98:f8:16:d4:19:ea:e2:00:a0:b9:88:89: a8:fc:7e:e3:21:10:80:b6:6a:db:52:39:c4:25:c0:d5:30:2e: f2:c8:25:15:19:ed:1c:11:6d:5e:26:f7:29:4b:c9:e3:57:68: 48:38:76:7d:31:0d:b0:f9:77:41:5f:92:78:fa:45:4f:f7:c4: 68:72:91:ba:a0:06:01:fc:56:f0:f2:b4:ef:9e:4c:4b:d8:78: 89:fa:8b:9e:a4:d8:f4:0b:be:0b:79:26:8a:ef:30:74:f5:ef: 74:2c:cd:f0:ab:3e:d3:79:a6:52:ee:b8:3f:bf:f7:06:40:07: 3a:02:f9:13:38:22:22:40:b4:e7:69:07:fc:be:e3:33:a0:71: ba:9b:03:ea:f4:a1:0e:87:57:fd:3b:61:d2:12:76:fd:75:99: c7:c7:3e:22:c0:80:5f:92:f3:2b:f4:c2:11:9f:07:92:3d:cc: 77:86:5d:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwEDJOvfS5KDXP7+Elp1XdLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2YmIzMDQ1YWVhNzhlOGZhNzY0ODEyOTcxNGZiNzM2MDY4 ZGMzN2IwHhcNMjYwMTI4MTAwMDU4WhcNMjYwMTI5MTAwMDU4WjAzMTEwLwYDVQQD EyhkYTAzZDNkZTQ3OGVjMWNhYjMzZTMxNjYzZDRkNWFlMDY1Zjg5NTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUBBoLoiLGn++AWhqOOfWIA6TRdL R7aKeyhnDf8BWE/seJS6xyuMbwtpUJlGkuVeNC9c0VsMhOiKgpI2+U4oIspl3X+B PFBEj+SMhWy672ksW0kQ0d0rVFoSO5HxzuTFBV+nZK+6MPXDFCVPRI2hDVUlKvVw xXbIRMAuCGx1W+i2d0K2BdHr9x4tge+CQXoEJhnrxK26+cPA0ZMjWLCb26DtBdJL lXXwvjCPVeQ6pwqzc5imL2qOUeMmLv2hRB8qyCPld1xz4e+d0Fk/HueW5g69sYXy klfYSM6ZOgCc+dUa24erUjJFUE4VBEL1ne1a+/ZRDBe/EZAZ7ueUJ8XB2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNoD095HjsHKsz4xZj1NWuBl+JVsMB8GA1UdIwQY MBaAFKa7MEWup46Pp2SBKXFPtzYGjcN7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHJzd1JhNm5qby1uWklFcGNVLTNOZ2FOdzNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80MWVhZjktNjU2ZC00MGQ5LTlmN2Et MzM0ZGUzZDc2ZmU1LzEvcHJzd1JhNm5qby1uWklFcGNVLTNOZ2FOdzNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi80MWVhZjktNjU2ZC00MGQ5LTlmN2EtMzM0ZGUzZDc2ZmU1 LzEvcHJzd1JhNm5qby1uWklFcGNVLTNOZ2FOdzNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbDcqYuKb KKWNS0R4UGCPOEV4FQDjy4AkSbaCbTVedkGmHMXt/pCdD7n7fKqyUsbPX4RwyQMZ /CQmqqug5uaxfsd2tBW+/iZjNna/2eDrmPgW1Bnq4gCguYiJqPx+4yEQgLZq21I5 xCXA1TAu8sglFRntHBFtXib3KUvJ41doSDh2fTENsPl3QV+SePpFT/fEaHKRuqAG AfxW8PK0755MS9h4ifqLnqTY9Au+C3kmiu8wdPXvdCzN8Ks+03mmUu64P7/3BkAH OgL5EzgiIkC052kH/L7jM6BxupsD6vShDodX/Tth0hJ2/XWZx8c+IsCAX5LzK/TC EZ8Hkj3Md4ZdeA== -----END CERTIFICATE-----Generated at Wed Jan 28 17:54:44 2026 by rpki-client