This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft File: IMXuAtLgWGHdkG_gazhE8E03jHM.mft (raw, json) Hash identifier: u7yvaiQIkMma2yzRvOZ8gzBs/kvgRMs9lo4ODywtW6g= Subject key identifier: 4B:76:57:5E:0E:11:16:86:7B:42:4C:2B:CF:AC:E1:3D:51:03:02:EB Authority key identifier: 20:C5:EE:02:D2:E0:58:61:DD:90:6F:E0:6B:38:44:F0:4D:37:8C:73 Certificate issuer: /CN=20c5ee02d2e05861dd906fe06b3844f04d378c73 Certificate serial: 019BFB776DD3CA0A17B55FFDCDC5DE97E527 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft Manifest number: 06B6 Signing time: Mon 26 Jan 2026 18:01:06 +0000 Manifest this update: Mon 26 Jan 2026 18:01:06 +0000 Manifest next update: Tue 27 Jan 2026 18:01:06 +0000 Files and hashes: 1: 8Ljz3seCOU0SNV0gsb7nbyE1us8.roa (hash: 5mxn00L/BkHAVIffiKEwefaUdNGKUinwbPLnGWN/DNs=) 2: HTNIDhfSROtaHMuo_vWuWis3hqY.roa (hash: RQQdIjVdjQlrkYAZGuleXhNiBkw7L08DLK2ngoHAF8E=) 3: IMXuAtLgWGHdkG_gazhE8E03jHM.crl (hash: FQPBiaJUfL2frVZcdWkvLLlIO3nyzFg6iJRCnOYTqMo=) 4: LnCR0arWZWYp2eBdFpI9H-Lvr3Y.roa (hash: Bfa23AAQWStpV7GkB8TThtChQsiaP0XNU0Hs970PLeI=) 5: OMB5Jk9mgdmm1VNa_o3p8h7PRuU.roa (hash: prRMihbXIXK3A+UL2foFns/7v1HOYLiNh02wiqqOfKo=) 6: QWEGxPaeYQn0uBOxZiupBOKlr0U.roa (hash: GLwyZ+wAbuSreUejAWX/k5Bcy9X7pS8PLxayzPw9L8s=) 7: fBVDV8nwXQdpQ_rHZ7agKc1r0QY.roa (hash: MVq6Psg4hS5MltjuluEalJmzG7hJZP0WRHHEPcHhyK0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:77:6d:d3:ca:0a:17:b5:5f:fd:cd:c5:de:97:e5:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20c5ee02d2e05861dd906fe06b3844f04d378c73 Validity Not Before: Jan 26 18:01:06 2026 GMT Not After : Jan 27 18:01:06 2026 GMT Subject: CN=4b76575e0e1116867b424c2bcface13d510302eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:72:62:6b:89:d2:c4:b8:12:83:59:8c:19:25: d7:1e:a1:1b:f3:46:00:f0:fe:93:69:02:ff:50:c3: ff:94:69:b6:d2:a7:73:c7:26:5b:94:61:b5:46:b9: 3d:8d:c1:42:a5:05:47:a5:6b:ee:89:3e:5b:35:1e: 7b:5f:8a:c1:05:77:07:1f:f7:18:eb:e9:89:d8:00: 1a:75:67:58:61:44:e0:04:65:6d:46:fd:6a:6e:3e: 49:51:74:5a:4b:4c:f2:79:e8:20:fa:d8:cc:33:32: 25:a0:fb:d7:0b:5b:7c:27:bf:eb:b3:b6:96:4c:1d: c0:bf:4b:4a:2a:11:7e:e6:52:d8:5b:1b:84:32:8d: 7e:bc:57:16:40:f8:b8:c0:2b:73:d4:df:27:e6:e6: 2a:54:e3:fc:b3:a0:4f:8e:90:32:c0:18:77:b2:57: 1d:b9:7e:e2:be:8e:fe:4c:bb:14:4e:97:f3:d5:40: 52:5f:75:5f:6f:00:5e:de:80:28:83:63:bd:c4:45: a8:69:b4:27:7a:b5:22:c6:f1:2d:99:85:65:02:76: 04:9e:05:f1:26:bf:ea:69:be:ba:8f:1b:14:53:2a: 57:83:d3:b5:45:2c:f1:30:63:ac:6d:f4:b5:a1:fb: 38:10:eb:f7:97:12:a4:7d:ca:30:45:13:cd:64:88: 04:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:76:57:5E:0E:11:16:86:7B:42:4C:2B:CF:AC:E1:3D:51:03:02:EB X509v3 Authority Key Identifier: keyid:20:C5:EE:02:D2:E0:58:61:DD:90:6F:E0:6B:38:44:F0:4D:37:8C:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:a6:e7:a1:f2:68:37:6d:d6:b7:2b:b5:66:59:67:f8:a9:31: a0:0c:8d:f5:68:7d:43:59:02:c0:c3:67:86:fa:e0:1f:d7:aa: 5c:a5:96:ba:61:41:0f:da:ce:f5:81:3e:1f:63:af:14:0e:5f: 93:49:10:97:0b:94:15:55:01:66:63:af:7d:cf:f5:fa:7a:86: 26:62:7c:d7:df:da:ab:c9:52:1d:29:63:d8:14:6e:b4:92:09: 0b:99:dc:44:a2:db:d7:07:8e:db:e7:f2:1f:30:37:ca:3f:37: ba:0a:69:36:d0:ff:07:db:00:6d:cd:a3:f3:8d:09:ac:f9:a6: 0e:e9:66:69:33:56:d9:42:88:8a:f9:33:7c:8d:d3:05:6b:19: cb:18:f8:44:68:74:da:03:9d:79:55:0e:84:2c:df:87:04:a7: 12:e1:80:b1:1a:97:84:60:11:a3:8f:58:b0:93:d7:dc:74:d6: c9:5d:57:81:9e:a8:97:0e:5c:c3:65:45:96:a4:8c:54:b9:cf: ad:4f:e4:3e:f0:d3:35:12:ca:d0:fb:39:11:97:2b:bf:c4:d4: a0:8f:65:d2:0e:9c:26:29:09:b0:c9:28:d2:25:1c:0e:f1:c8: 89:e2:ea:01:b9:7d:35:2c:b2:9d:8c:1f:9a:8b:3e:1d:48:e1: ab:52:4f:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7d23TygoXtV/9zcXel+UnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwYzVlZTAyZDJlMDU4NjFkZDkwNmZlMDZiMzg0NGYwNGQz NzhjNzMwHhcNMjYwMTI2MTgwMTA2WhcNMjYwMTI3MTgwMTA2WjAzMTEwLwYDVQQD Eyg0Yjc2NTc1ZTBlMTExNjg2N2I0MjRjMmJjZmFjZTEzZDUxMDMwMmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnJia4nSxLgSg1mMGSXXHqEb80YA 8P6TaQL/UMP/lGm20qdzxyZblGG1Rrk9jcFCpQVHpWvuiT5bNR57X4rBBXcHH/cY 6+mJ2AAadWdYYUTgBGVtRv1qbj5JUXRaS0zyeegg+tjMMzIloPvXC1t8J7/rs7aW TB3Av0tKKhF+5lLYWxuEMo1+vFcWQPi4wCtz1N8n5uYqVOP8s6BPjpAywBh3slcd uX7ivo7+TLsUTpfz1UBSX3VfbwBe3oAog2O9xEWoabQnerUixvEtmYVlAnYEngXx Jr/qab66jxsUUypXg9O1RSzxMGOsbfS1ofs4EOv3lxKkfcowRRPNZIgE8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEt2V14OERaGe0JMK8+s4T1RAwLrMB8GA1UdIwQY MBaAFCDF7gLS4Fhh3ZBv4Gs4RPBNN4xzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU1YdUF0TGdXR0hka0dfZ2F6aEU4RTAzakhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC85NzkyOTYtZWY3YS00YmFjLThjMTUt Njc3NzEzNTlhMmIzLzEvSU1YdUF0TGdXR0hka0dfZ2F6aEU4RTAzakhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC85NzkyOTYtZWY3YS00YmFjLThjMTUtNjc3NzEzNTlhMmIz LzEvSU1YdUF0TGdXR0hka0dfZ2F6aEU4RTAzakhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdKbnofJo N23Wtyu1Zlln+KkxoAyN9Wh9Q1kCwMNnhvrgH9eqXKWWumFBD9rO9YE+H2OvFA5f k0kQlwuUFVUBZmOvfc/1+nqGJmJ819/aq8lSHSlj2BRutJIJC5ncRKLb1weO2+fy HzA3yj83ugppNtD/B9sAbc2j840JrPmmDulmaTNW2UKIivkzfI3TBWsZyxj4RGh0 2gOdeVUOhCzfhwSnEuGAsRqXhGARo49YsJPX3HTWyV1XgZ6olw5cw2VFlqSMVLnP rU/kPvDTNRLK0Ps5EZcrv8TUoI9l0g6cJikJsMko0iUcDvHIieLqAbl9NSyynYwf mos+HUjhq1JPwA== -----END CERTIFICATE-----Generated at Mon Jan 26 21:53:39 2026 by rpki-client