This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft File: pstoJGZQvVjCKirgCtBmF4qB628.mft (raw, json) Hash identifier: O740Lno+GuYkT9ARkBD8Q06rDGHqjx1GY/QgX+t6Z4s= Subject key identifier: 6D:C0:B5:27:95:1B:98:AB:01:C8:91:64:2C:47:97:AD:A0:3F:99:C0 Authority key identifier: A6:CB:68:24:66:50:BD:58:C2:2A:2A:E0:0A:D0:66:17:8A:81:EB:6F Certificate issuer: /CN=a6cb68246650bd58c22a2ae00ad066178a81eb6f Certificate serial: 019BF951C9D9C43A22107DA9418FD6B57198 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pstoJGZQvVjCKirgCtBmF4qB628.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft Manifest number: 1067 Signing time: Mon 26 Jan 2026 08:00:45 +0000 Manifest this update: Mon 26 Jan 2026 08:00:45 +0000 Manifest next update: Tue 27 Jan 2026 08:00:45 +0000 Files and hashes: 1: SNOlYOcqtrnciePvkCUcLJcoUvU.roa (hash: loMPRzn55InS2adOqJYmW2DSfbGu3PbAMnR1VbbSvpc=) 2: pstoJGZQvVjCKirgCtBmF4qB628.crl (hash: 8VUggmIGBZ9Y/8zUPYXF83YtLoWXQ1z/bXY0jshZRCI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.crl rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft rsync://rpki.ripe.net/repository/DEFAULT/pstoJGZQvVjCKirgCtBmF4qB628.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:51:c9:d9:c4:3a:22:10:7d:a9:41:8f:d6:b5:71:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6cb68246650bd58c22a2ae00ad066178a81eb6f Validity Not Before: Jan 26 08:00:45 2026 GMT Not After : Jan 27 08:00:45 2026 GMT Subject: CN=6dc0b527951b98ab01c891642c4797ada03f99c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b4:0d:64:9b:a9:7b:48:d8:9d:1a:5b:25:6e: 20:0d:5d:42:a4:c0:ce:bd:34:d7:c2:09:77:4e:1e: 70:dd:5d:ca:28:e1:eb:a1:a2:d8:6c:11:20:6f:23: 8b:a2:55:63:4e:69:bd:f3:c9:36:ec:36:47:0b:3d: 49:4e:16:a5:ff:e9:ad:96:47:83:1c:be:73:9f:35: 91:74:8b:a8:00:48:41:11:ca:b9:c6:15:6e:95:e8: 0b:d9:62:7b:74:9a:6f:9a:97:93:25:b8:d2:40:6b: 99:c6:c6:4e:8d:39:5a:b7:09:24:77:4e:15:6d:e7: 2e:51:4d:54:d0:47:84:b0:81:b8:df:15:2d:64:ad: 3b:05:9b:f1:9d:dd:b4:ab:a7:e5:de:ac:3f:69:49: 72:23:4e:73:92:ea:80:71:83:84:e7:a3:23:13:0e: 09:f2:81:8c:fb:cd:ee:38:bd:02:89:86:cc:e8:7a: c0:b8:bf:17:2b:ed:b5:98:1d:1d:3f:05:fd:63:e0: c3:af:32:41:5e:81:52:5a:a1:f2:f1:95:32:c1:33: 73:1f:8b:8b:46:62:5d:88:34:c1:5a:ca:f6:68:a1: 26:71:31:ca:13:41:35:5c:ba:cc:fd:ee:ba:c1:d5: 95:0f:66:ea:dc:13:1b:4a:19:fd:1e:6c:7b:5a:86: fa:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:C0:B5:27:95:1B:98:AB:01:C8:91:64:2C:47:97:AD:A0:3F:99:C0 X509v3 Authority Key Identifier: keyid:A6:CB:68:24:66:50:BD:58:C2:2A:2A:E0:0A:D0:66:17:8A:81:EB:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pstoJGZQvVjCKirgCtBmF4qB628.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:c8:50:00:1b:00:32:df:81:52:38:a5:1a:26:fa:f9:57:75: 39:58:17:b9:f5:ef:c8:f7:bd:c2:63:02:9c:e7:58:a0:e5:c3: 33:5c:e8:33:27:4d:aa:86:0f:f6:c2:81:f6:7a:32:a4:21:1a: 3a:90:e2:37:08:c1:cd:48:86:a7:65:9c:9f:35:6b:7a:3d:20: 1b:91:53:6e:07:c9:92:c3:56:16:06:dd:0f:a6:04:f2:7c:29: 91:25:de:52:a4:5f:3a:37:2f:ce:9e:95:00:d9:bd:da:4e:18: b8:1f:42:79:87:84:37:2f:a8:36:f4:90:f9:5e:54:e7:15:cc: d4:d2:b2:06:e6:54:ef:01:3f:f1:92:02:9b:2a:44:9d:51:02: 12:5e:ab:b6:02:28:89:eb:72:73:59:74:fe:bf:25:7a:24:d1: 92:3b:eb:ea:26:eb:fc:79:80:48:eb:6d:14:0d:31:79:8a:fc: 9b:92:5b:68:66:50:db:a1:2b:7b:bd:80:3a:d0:bd:53:b8:09: bf:57:a9:c2:04:9f:13:12:4f:5c:98:7f:b7:65:46:80:5c:43: d4:26:f9:d7:2f:46:6c:03:37:e3:70:05:25:d6:ba:38:f5:b0: d4:59:23:82:8c:6a:02:7c:03:2a:a2:2d:20:ce:1d:62:1b:29: 06:26:f4:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5UcnZxDoiEH2pQY/WtXGYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2Y2I2ODI0NjY1MGJkNThjMjJhMmFlMDBhZDA2NjE3OGE4 MWViNmYwHhcNMjYwMTI2MDgwMDQ1WhcNMjYwMTI3MDgwMDQ1WjAzMTEwLwYDVQQD Eyg2ZGMwYjUyNzk1MWI5OGFiMDFjODkxNjQyYzQ3OTdhZGEwM2Y5OWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrQNZJupe0jYnRpbJW4gDV1CpMDO vTTXwgl3Th5w3V3KKOHroaLYbBEgbyOLolVjTmm988k27DZHCz1JThal/+mtlkeD HL5znzWRdIuoAEhBEcq5xhVulegL2WJ7dJpvmpeTJbjSQGuZxsZOjTlatwkkd04V becuUU1U0EeEsIG43xUtZK07BZvxnd20q6fl3qw/aUlyI05zkuqAcYOE56MjEw4J 8oGM+83uOL0CiYbM6HrAuL8XK+21mB0dPwX9Y+DDrzJBXoFSWqHy8ZUywTNzH4uL RmJdiDTBWsr2aKEmcTHKE0E1XLrM/e66wdWVD2bq3BMbShn9Hmx7Wob6lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG3AtSeVG5irAciRZCxHl62gP5nAMB8GA1UdIwQY MBaAFKbLaCRmUL1Ywioq4ArQZheKgetvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHN0b0pHWlF2VmpDS2lyZ0N0Qm1GNHFCNjI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9iNjBkNTAtNTUyYS00NGFmLThiYTUt MzZlNGZiNTZmZGI0LzEvcHN0b0pHWlF2VmpDS2lyZ0N0Qm1GNHFCNjI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9iNjBkNTAtNTUyYS00NGFmLThiYTUtMzZlNGZiNTZmZGI0 LzEvcHN0b0pHWlF2VmpDS2lyZ0N0Qm1GNHFCNjI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZshQABsA Mt+BUjilGib6+Vd1OVgXufXvyPe9wmMCnOdYoOXDM1zoMydNqoYP9sKB9noypCEa OpDiNwjBzUiGp2WcnzVrej0gG5FTbgfJksNWFgbdD6YE8nwpkSXeUqRfOjcvzp6V ANm92k4YuB9CeYeENy+oNvSQ+V5U5xXM1NKyBuZU7wE/8ZICmypEnVECEl6rtgIo ietyc1l0/r8leiTRkjvr6ibr/HmASOttFA0xeYr8m5JbaGZQ26Ere72AOtC9U7gJ v1epwgSfExJPXJh/t2VGgFxD1Cb51y9GbAM343AFJda6OPWw1FkjgoxqAnwDKqIt IM4dYhspBib03Q== -----END CERTIFICATE-----Generated at Mon Jan 26 18:41:58 2026 by rpki-client