This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft File: 6oRgBs-LnjiPMUUTWAklAs7METY.mft (raw, json) Hash identifier: 3DGtNftVlj6aEXKaOTgEEp0A/+76OQuURc/EXeIG5ks= Subject key identifier: 65:EB:72:12:85:3A:4C:6F:BF:74:BC:2C:68:34:0D:C8:E7:08:D1:1E Authority key identifier: EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36 Certificate issuer: /CN=ea846006cf8b9e388f31451358092502cecc1136 Certificate serial: 019BF34FE92770C7F89B03A8F9AE7CA7C6A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft Manifest number: 0FEB Signing time: Sun 25 Jan 2026 04:00:58 +0000 Manifest this update: Sun 25 Jan 2026 04:00:58 +0000 Manifest next update: Mon 26 Jan 2026 04:00:58 +0000 Files and hashes: 1: 0l3jXxOUk3ox5jeThu6HwEBTnYM.roa (hash: ezdpUMz8+l2SPN4UZ7KF4uUE3cAvIShKrnmcjhRrPT8=) 2: 2bvqhGwQ0lPcBuBDG9_LfRJJmS0.roa (hash: CH2b5UD+d3clq2chE/+n6piPoX52uVJBt2iOc7QC1hY=) 3: 6oRgBs-LnjiPMUUTWAklAs7METY.crl (hash: cZ+l95hhS/fL0akCK1Gj3m8+FEscNL6SztqpODazFPI=) 4: hvVtewn6w22bnIW8yznhNvKtiF4.roa (hash: m3PFir5NovTfkiQPZLXiwU+9sgPb6SDjnc3/rkv8wo8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:4f:e9:27:70:c7:f8:9b:03:a8:f9:ae:7c:a7:c6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea846006cf8b9e388f31451358092502cecc1136 Validity Not Before: Jan 25 04:00:58 2026 GMT Not After : Jan 26 04:00:58 2026 GMT Subject: CN=65eb7212853a4c6fbf74bc2c68340dc8e708d11e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f5:ff:eb:d8:8a:01:35:b6:53:26:55:84:5f: 7b:59:cc:28:f8:dc:b0:28:13:7f:b3:69:32:d3:b5: ba:c6:9a:c0:45:3b:36:44:6e:ec:1f:b5:b6:0f:c2: d7:3f:90:de:34:bf:14:63:4d:60:43:80:05:87:f9: 2d:cf:5d:86:de:c1:71:a9:db:14:d4:d3:f6:41:a5: 33:a5:4c:14:d3:48:f8:48:ba:c4:80:2a:0c:24:c5: 6e:8d:ed:f2:27:b1:76:79:fb:ae:df:47:73:0c:37: cb:bc:68:04:93:50:87:66:99:a2:d1:1a:22:e1:89: 1b:9e:81:b1:99:c5:27:b3:dc:0e:57:36:c1:bc:09: 5e:a4:70:d7:6f:f8:e4:34:fe:17:6a:3c:d9:f6:96: a3:33:ca:d3:e6:71:3a:33:4a:87:dd:16:a5:db:77: 31:43:3d:5a:1a:5b:f6:0a:75:62:07:3c:b1:95:fd: b0:b8:85:9c:76:1b:0f:95:47:d4:16:00:af:3b:3e: 41:b5:f3:bc:82:0d:e0:6b:29:b2:78:e1:06:27:40: b8:59:88:45:3e:97:d2:6d:f2:cc:f6:e5:c4:68:83: 58:30:e6:37:51:93:56:0d:ac:94:40:24:17:b2:43: 45:fd:9b:67:08:af:ef:09:82:7d:e6:05:e8:88:3e: 04:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:EB:72:12:85:3A:4C:6F:BF:74:BC:2C:68:34:0D:C8:E7:08:D1:1E X509v3 Authority Key Identifier: keyid:EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e3:0e:61:e5:90:35:a5:20:df:06:da:13:07:3d:64:14:a0:39: 94:58:3b:14:c3:c8:ad:68:7b:71:d5:69:4f:3f:d3:a6:82:0d: 29:c9:5a:3a:03:43:d0:9d:36:1f:6a:70:55:52:48:76:3f:51: bc:4b:d8:59:31:8c:68:0d:e0:10:a5:90:f0:00:71:fc:5d:7a: 5c:8a:0b:24:be:bf:85:af:3c:14:ab:41:94:ad:4a:19:7f:f8: ad:f9:e0:6b:f0:d6:a1:f8:17:f6:ec:d8:04:65:7b:97:55:c0: 37:6d:32:d6:f5:24:18:eb:21:3b:a8:03:dd:ec:f1:a4:4c:c4: de:01:2e:a4:4a:61:53:c8:d3:f6:f7:af:31:aa:0b:ac:71:4c: a7:68:1f:59:9a:98:8a:d0:99:44:d3:4b:31:c5:6a:a3:db:6d: be:87:56:a2:05:e4:e6:15:78:c4:06:49:06:ea:90:ed:05:60: dc:10:db:d3:f8:47:3a:b5:62:a0:ea:26:1f:94:22:ee:13:89: 33:e3:54:76:15:1c:f8:df:9a:bd:57:36:21:8c:dd:fd:3b:18: 16:6d:06:af:20:2e:2c:7f:da:42:55:6a:ff:a1:e7:08:80:c5: b2:fe:da:38:73:6f:7b:75:ed:7c:4c:4b:22:20:99:58:27:50: c9:4a:6a:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzT+kncMf4mwOo+a58p8agMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhODQ2MDA2Y2Y4YjllMzg4ZjMxNDUxMzU4MDkyNTAyY2Vj YzExMzYwHhcNMjYwMTI1MDQwMDU4WhcNMjYwMTI2MDQwMDU4WjAzMTEwLwYDVQQD Eyg2NWViNzIxMjg1M2E0YzZmYmY3NGJjMmM2ODM0MGRjOGU3MDhkMTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPX/69iKATW2UyZVhF97Wcwo+Nyw KBN/s2ky07W6xprARTs2RG7sH7W2D8LXP5DeNL8UY01gQ4AFh/ktz12G3sFxqdsU 1NP2QaUzpUwU00j4SLrEgCoMJMVuje3yJ7F2efuu30dzDDfLvGgEk1CHZpmi0Roi 4YkbnoGxmcUns9wOVzbBvAlepHDXb/jkNP4XajzZ9pajM8rT5nE6M0qH3Ral23cx Qz1aGlv2CnViBzyxlf2wuIWcdhsPlUfUFgCvOz5BtfO8gg3gaymyeOEGJ0C4WYhF PpfSbfLM9uXEaINYMOY3UZNWDayUQCQXskNF/ZtnCK/vCYJ95gXoiD4EYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGXrchKFOkxvv3S8LGg0DcjnCNEeMB8GA1UdIwQY MBaAFOqEYAbPi544jzFFE1gJJQLOzBE2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNm9SZ0JzLUxuamlQTVVVVFdBa2xBczdNRVRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8yMWNkNzctMWVjYS00NmI5LTlhYmEt Zjc0Y2NjYzRlMGExLzEvNm9SZ0JzLUxuamlQTVVVVFdBa2xBczdNRVRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi8yMWNkNzctMWVjYS00NmI5LTlhYmEtZjc0Y2NjYzRlMGEx LzEvNm9SZ0JzLUxuamlQTVVVVFdBa2xBczdNRVRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4w5h5ZA1 pSDfBtoTBz1kFKA5lFg7FMPIrWh7cdVpTz/TpoINKclaOgND0J02H2pwVVJIdj9R vEvYWTGMaA3gEKWQ8ABx/F16XIoLJL6/ha88FKtBlK1KGX/4rfnga/DWofgX9uzY BGV7l1XAN20y1vUkGOshO6gD3ezxpEzE3gEupEphU8jT9vevMaoLrHFMp2gfWZqY itCZRNNLMcVqo9ttvodWogXk5hV4xAZJBuqQ7QVg3BDb0/hHOrVioOomH5Qi7hOJ M+NUdhUc+N+avVc2IYzd/TsYFm0GryAuLH/aQlVq/6HnCIDFsv7aOHNve3XtfExL IiCZWCdQyUpqAA== -----END CERTIFICATE-----Generated at Sun Jan 25 16:19:02 2026 by rpki-client