This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.mft File: c6G3ZmRxfipNLlzyveO5cxkH-MI.mft (raw, json) Hash identifier: fOEZbeiMmNGZIsGYfhecuiqsXdkZRXr9CDAEbaeuuYU= Subject key identifier: A5:1A:E8:66:5C:29:01:F6:BB:29:39:26:B4:B9:B8:FB:61:7D:05:3C Authority key identifier: 73:A1:B7:66:64:71:7E:2A:4D:2E:5C:F2:BD:E3:B9:73:19:07:F8:C2 Certificate issuer: /CN=73a1b76664717e2a4d2e5cf2bde3b9731907f8c2 Certificate serial: 019BF79A63365BFFF564AC05CFE3DF6E212B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c6G3ZmRxfipNLlzyveO5cxkH-MI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.mft Manifest number: 17E9 Signing time: Mon 26 Jan 2026 00:00:48 +0000 Manifest this update: Mon 26 Jan 2026 00:00:48 +0000 Manifest next update: Tue 27 Jan 2026 00:00:48 +0000 Files and hashes: 1: XxtWaMM5sBfFC2sC8FpjDL8Ge7Y.roa (hash: HWIQrBtT9vbpCee5Xkd6bp75O2LIMTf2r4JmS0NQHJ4=) 2: c6G3ZmRxfipNLlzyveO5cxkH-MI.crl (hash: yz+d5yTWOXW/41GQb8cTOkfnY80P8Ln1rdeobRsWTIA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.crl rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.mft rsync://rpki.ripe.net/repository/DEFAULT/c6G3ZmRxfipNLlzyveO5cxkH-MI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:63:36:5b:ff:f5:64:ac:05:cf:e3:df:6e:21:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73a1b76664717e2a4d2e5cf2bde3b9731907f8c2 Validity Not Before: Jan 26 00:00:48 2026 GMT Not After : Jan 27 00:00:48 2026 GMT Subject: CN=a51ae8665c2901f6bb293926b4b9b8fb617d053c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:df:7c:ab:b2:cc:36:24:9a:23:9d:d4:31:a1: c8:84:ca:93:1c:f4:ed:ac:b4:1a:f3:03:bc:da:6e: 9f:b3:df:d8:97:0c:88:1d:f7:bb:d1:fc:d1:6f:0d: bd:a3:ec:00:b7:f9:d7:8a:ec:e5:6c:3e:ed:0b:32: 4b:d5:ea:78:06:56:59:5e:1f:3c:13:18:3c:15:6d: 65:7b:d8:7e:9f:0d:f9:41:53:5a:3b:f3:59:79:96: db:be:4f:76:2f:04:cc:ff:35:bd:f1:e2:a5:e0:cd: d8:50:67:1f:32:64:47:86:ab:f6:60:95:7e:3d:dc: 40:1b:d4:99:de:d7:39:66:f7:45:05:36:1c:b1:59: 8c:a5:b6:e4:54:2b:9a:03:37:30:0f:b8:ef:eb:57: f3:ad:53:13:0d:23:7a:b6:e6:7b:2c:67:7c:88:2c: c4:e1:0e:17:d3:92:0b:46:d0:ea:f1:52:06:ed:21: d1:1c:5e:80:96:54:2d:0b:62:d6:03:52:fe:30:36: 0a:d7:69:2a:85:56:bf:25:c4:03:f1:45:25:c0:45: f8:4a:f8:ed:76:0d:3a:f2:da:37:0c:26:8b:a8:53: e5:6d:cc:89:9e:a8:23:4a:ad:06:92:c7:25:fd:a6: 32:dc:54:52:17:27:13:b0:d3:93:c8:bc:b0:d5:73: 7c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:1A:E8:66:5C:29:01:F6:BB:29:39:26:B4:B9:B8:FB:61:7D:05:3C X509v3 Authority Key Identifier: keyid:73:A1:B7:66:64:71:7E:2A:4D:2E:5C:F2:BD:E3:B9:73:19:07:F8:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6G3ZmRxfipNLlzyveO5cxkH-MI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:e6:09:a8:18:f2:db:33:aa:58:ee:2d:f6:5b:df:64:53:06: 20:fd:3c:1e:8a:98:1d:15:96:66:d8:cd:07:03:9c:03:67:36: 05:7b:d9:c0:39:8c:d6:4b:70:60:c7:e4:1c:94:94:2d:9d:7c: 72:29:3a:4b:c5:cf:f9:3b:22:f9:03:ec:29:79:1f:be:9a:73: 1c:86:6b:30:85:0a:48:7b:81:9d:7e:29:d7:47:28:19:a5:d7: 16:b4:e3:0f:a6:ec:38:10:71:c0:79:69:8f:54:0e:cd:e7:80: 5b:0e:64:46:ba:18:c0:f4:e8:c5:43:04:22:9d:75:f0:9b:bf: b6:84:99:65:86:8a:5c:c0:ea:4d:da:96:cd:81:2e:0b:b6:9d: 3d:d2:bb:2e:4f:88:f8:ba:b4:5d:c9:fd:54:c5:78:9a:e4:af: 6d:13:9e:64:4a:a0:14:ab:37:07:49:32:fb:c1:f6:f9:f7:0e: 9f:c7:6a:b2:fe:ed:be:6e:f8:bc:9d:c1:1e:9f:09:f3:c7:13: cd:5b:e0:c8:56:ce:a6:4e:de:4b:0b:6c:26:6d:02:db:2d:f7: e5:76:bb:8c:be:07:3a:0d:a8:bf:d1:f0:8d:d8:3d:66:b4:00: e8:bf:db:c6:4e:9b:23:44:d2:7b:f3:be:f1:de:22:e7:ac:50: 7d:8a:b7:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mmM2W//1ZKwFz+PfbiErMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczYTFiNzY2NjQ3MTdlMmE0ZDJlNWNmMmJkZTNiOTczMTkw N2Y4YzIwHhcNMjYwMTI2MDAwMDQ4WhcNMjYwMTI3MDAwMDQ4WjAzMTEwLwYDVQQD EyhhNTFhZTg2NjVjMjkwMWY2YmIyOTM5MjZiNGI5YjhmYjYxN2QwNTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArt98q7LMNiSaI53UMaHIhMqTHPTt rLQa8wO82m6fs9/YlwyIHfe70fzRbw29o+wAt/nXiuzlbD7tCzJL1ep4BlZZXh88 Exg8FW1le9h+nw35QVNaO/NZeZbbvk92LwTM/zW98eKl4M3YUGcfMmRHhqv2YJV+ PdxAG9SZ3tc5ZvdFBTYcsVmMpbbkVCuaAzcwD7jv61fzrVMTDSN6tuZ7LGd8iCzE 4Q4X05ILRtDq8VIG7SHRHF6AllQtC2LWA1L+MDYK12kqhVa/JcQD8UUlwEX4Svjt dg068to3DCaLqFPlbcyJnqgjSq0Gkscl/aYy3FRSFycTsNOTyLyw1XN8mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKUa6GZcKQH2uyk5JrS5uPthfQU8MB8GA1UdIwQY MBaAFHOht2ZkcX4qTS5c8r3juXMZB/jCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzZHM1ptUnhmaXBOTGx6eXZlTzVjeGtILU1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8zZDI0MTUtODEzMy00MGEwLTlkOGMt YTYzMTlhYjE3OWJmLzEvYzZHM1ptUnhmaXBOTGx6eXZlTzVjeGtILU1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8zZDI0MTUtODEzMy00MGEwLTlkOGMtYTYzMTlhYjE3OWJm LzEvYzZHM1ptUnhmaXBOTGx6eXZlTzVjeGtILU1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYeYJqBjy 2zOqWO4t9lvfZFMGIP08HoqYHRWWZtjNBwOcA2c2BXvZwDmM1ktwYMfkHJSULZ18 cik6S8XP+Tsi+QPsKXkfvppzHIZrMIUKSHuBnX4p10coGaXXFrTjD6bsOBBxwHlp j1QOzeeAWw5kRroYwPToxUMEIp118Ju/toSZZYaKXMDqTdqWzYEuC7adPdK7Lk+I +Lq0Xcn9VMV4muSvbROeZEqgFKs3B0ky+8H2+fcOn8dqsv7tvm74vJ3BHp8J88cT zVvgyFbOpk7eSwtsJm0C2y335Xa7jL4HOg2ov9Hwjdg9ZrQA6L/bxk6bI0TSe/O+ 8d4i56xQfYq3Cw== -----END CERTIFICATE-----Generated at Mon Jan 26 04:59:02 2026 by rpki-client