This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft File: 6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft (raw, json) Hash identifier: +j2a29CdpcjZ7htwglu9/VrZ2yjGuCpmXGKBD0UHdT8= Subject key identifier: A5:4C:AC:CD:28:46:CB:66:4E:7E:84:02:73:DA:60:F5:4D:5C:89:EA Authority key identifier: E8:47:E8:87:49:70:42:94:55:2F:EF:54:88:61:11:ED:05:86:EC:24 Certificate issuer: /CN=e847e88749704294552fef54886111ed0586ec24 Certificate serial: 019BF6F5942A69884AC6F8AB6211BC8C1135 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Efoh0lwQpRVL-9UiGER7QWG7CQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft Manifest number: 0579 Signing time: Sun 25 Jan 2026 21:00:47 +0000 Manifest this update: Sun 25 Jan 2026 21:00:47 +0000 Manifest next update: Mon 26 Jan 2026 21:00:47 +0000 Files and hashes: 1: 6Efoh0lwQpRVL-9UiGER7QWG7CQ.crl (hash: lrge4bn+TDgg//Je3clKExzxpR7uhzP8WNIgxd5IxsE=) 2: oZ-NShlT_PL7bWC8iU9jChVS2Vk.roa (hash: FGb9nSTivNu/mVtaJHoZo1Y7HN3bgy2TP4MFuiqpk7g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.crl rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft rsync://rpki.ripe.net/repository/DEFAULT/6Efoh0lwQpRVL-9UiGER7QWG7CQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:94:2a:69:88:4a:c6:f8:ab:62:11:bc:8c:11:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e847e88749704294552fef54886111ed0586ec24 Validity Not Before: Jan 25 21:00:47 2026 GMT Not After : Jan 26 21:00:47 2026 GMT Subject: CN=a54caccd2846cb664e7e840273da60f54d5c89ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a2:11:d9:57:f0:5d:85:c0:fc:75:3f:63:5c: 68:e7:01:b0:16:0d:06:e6:a0:8f:f0:67:47:f6:c6: 36:fd:45:9c:66:87:49:54:a0:ae:19:8a:03:6b:c3: e9:b4:07:5a:47:ea:06:3b:f2:07:e5:ef:1e:8b:6a: 06:7f:60:3b:2c:09:79:8a:57:30:d0:87:ba:77:b1: eb:30:5c:f6:76:2a:37:5c:d1:d2:a8:34:5c:00:b2: ab:f8:a5:b2:1c:71:79:53:bb:e6:27:9b:85:79:1a: 55:54:6b:57:c2:ae:69:6a:c0:92:fa:6e:bf:95:96: 2f:a5:63:ed:cf:cf:21:5b:ed:13:e3:38:82:8b:9d: 1c:d3:b8:59:fd:7b:d1:73:54:da:0d:a7:fa:8d:31: fb:28:8b:99:49:1f:b4:ef:48:fa:dc:0f:06:b8:ef: 04:e8:f3:5f:ca:c8:18:d8:db:b3:19:61:a6:ad:5d: e0:54:19:d3:76:26:fa:72:a8:09:62:95:59:c5:77: 02:2a:db:07:1d:6c:f9:78:0e:11:82:d7:bc:26:92: 05:23:18:90:30:d3:93:d6:34:9a:02:7c:cc:47:46: 10:3f:fc:33:a9:d1:a4:d5:9f:d4:6f:e9:ba:aa:11: bb:5c:d4:ee:e2:cf:3d:ea:ff:7b:9f:34:5f:af:4f: e2:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:4C:AC:CD:28:46:CB:66:4E:7E:84:02:73:DA:60:F5:4D:5C:89:EA X509v3 Authority Key Identifier: keyid:E8:47:E8:87:49:70:42:94:55:2F:EF:54:88:61:11:ED:05:86:EC:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Efoh0lwQpRVL-9UiGER7QWG7CQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:a2:95:4e:04:e6:e6:30:21:94:45:ea:5f:46:be:0b:5a:a3: 61:06:c0:21:b0:e0:18:45:14:61:a9:aa:c6:10:d9:0d:95:41: 85:96:48:98:1a:b6:dc:0c:c5:1f:5c:40:03:cd:2e:b5:b9:d3: 83:e0:03:71:45:e1:82:6f:1a:98:25:8e:9b:6b:c8:93:3b:8a: 23:5a:fa:cc:d0:04:95:8d:f5:b4:1a:07:22:e1:06:65:11:59: 7e:a0:c0:74:12:1f:d0:c1:42:7f:3f:11:88:5b:0d:89:eb:62: af:73:11:f7:1f:2a:cf:22:18:ea:c8:6f:42:0b:fa:9d:c1:6d: bb:cb:24:83:22:c3:74:82:83:9e:63:c1:6d:8e:52:86:53:05: 67:f2:0b:4e:da:a5:6f:24:75:d7:1a:ba:ed:90:10:ca:83:95: de:fb:89:4d:b4:f3:f2:de:60:ba:e4:d8:5b:4f:28:30:a6:03: f6:e5:5e:d7:69:e3:dd:ff:0f:85:89:3a:6d:f3:b4:f5:14:41: 0c:02:2a:9e:27:c1:86:c9:2d:90:1d:83:16:99:4f:25:13:9e: a1:aa:1b:38:9e:6e:bd:27:4b:2e:89:a8:83:c4:41:80:7b:29: 80:90:ff:08:a1:ce:4e:c6:1b:fc:c9:3e:a1:e4:66:17:f1:ce: a8:60:dd:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29ZQqaYhKxvirYhG8jBE1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NDdlODg3NDk3MDQyOTQ1NTJmZWY1NDg4NjExMWVkMDU4 NmVjMjQwHhcNMjYwMTI1MjEwMDQ3WhcNMjYwMTI2MjEwMDQ3WjAzMTEwLwYDVQQD EyhhNTRjYWNjZDI4NDZjYjY2NGU3ZTg0MDI3M2RhNjBmNTRkNWM4OWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKIR2VfwXYXA/HU/Y1xo5wGwFg0G 5qCP8GdH9sY2/UWcZodJVKCuGYoDa8PptAdaR+oGO/IH5e8ei2oGf2A7LAl5ilcw 0Ie6d7HrMFz2dio3XNHSqDRcALKr+KWyHHF5U7vmJ5uFeRpVVGtXwq5pasCS+m6/ lZYvpWPtz88hW+0T4ziCi50c07hZ/XvRc1TaDaf6jTH7KIuZSR+070j63A8GuO8E 6PNfysgY2NuzGWGmrV3gVBnTdib6cqgJYpVZxXcCKtsHHWz5eA4Rgte8JpIFIxiQ MNOT1jSaAnzMR0YQP/wzqdGk1Z/Ub+m6qhG7XNTu4s896v97nzRfr0/iVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKVMrM0oRstmTn6EAnPaYPVNXInqMB8GA1UdIwQY MBaAFOhH6IdJcEKUVS/vVIhhEe0FhuwkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkVmb2gwbHdRcFJWTC05VWlHRVI3UVdHN0NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS83N2Y1MzItMzk4Zi00YWQ4LWIzNDgt YmRhZDdlZjc3NmM0LzEvNkVmb2gwbHdRcFJWTC05VWlHRVI3UVdHN0NRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS83N2Y1MzItMzk4Zi00YWQ4LWIzNDgtYmRhZDdlZjc3NmM0 LzEvNkVmb2gwbHdRcFJWTC05VWlHRVI3UVdHN0NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaqKVTgTm 5jAhlEXqX0a+C1qjYQbAIbDgGEUUYamqxhDZDZVBhZZImBq23AzFH1xAA80utbnT g+ADcUXhgm8amCWOm2vIkzuKI1r6zNAElY31tBoHIuEGZRFZfqDAdBIf0MFCfz8R iFsNietir3MR9x8qzyIY6shvQgv6ncFtu8skgyLDdIKDnmPBbY5ShlMFZ/ILTtql byR11xq67ZAQyoOV3vuJTbTz8t5guuTYW08oMKYD9uVe12nj3f8PhYk6bfO09RRB DAIqnifBhsktkB2DFplPJROeoaobOJ5uvSdLLomog8RBgHspgJD/CKHOTsYb/Mk+ oeRmF/HOqGDdAA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:32:49 2026 by rpki-client