This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft File: S6_0itEUWxAMeD-3r7bzAovY804.mft (raw, json) Hash identifier: g+AnoVjezW1EnYGCO40juP34jfkbBZaskhiOc/ZeO8o= Subject key identifier: A0:FF:28:AF:FE:A2:AE:2B:99:13:DD:0C:C7:BD:AB:3C:39:B9:AC:3B Authority key identifier: 4B:AF:F4:8A:D1:14:5B:10:0C:78:3F:B7:AF:B6:F3:02:8B:D8:F3:4E Certificate issuer: /CN=4baff48ad1145b100c783fb7afb6f3028bd8f34e Certificate serial: 019BF80849207E0D17D4AB8AF0423FF9751B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft Manifest number: 0F22 Signing time: Mon 26 Jan 2026 02:00:51 +0000 Manifest this update: Mon 26 Jan 2026 02:00:51 +0000 Manifest next update: Tue 27 Jan 2026 02:00:51 +0000 Files and hashes: 1: S6_0itEUWxAMeD-3r7bzAovY804.crl (hash: eFqA0m4kt/znc0znKoppuDwDTTLM6SzBL0ilGOEOagE=) 2: tzRdx4BT786qNcQZeRMNg_SKiRI.roa (hash: T/qoi141JqlXpa6Bw1J2VzP/DVBAdA7o+aP6DP3caPQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.crl rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:49:20:7e:0d:17:d4:ab:8a:f0:42:3f:f9:75:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4baff48ad1145b100c783fb7afb6f3028bd8f34e Validity Not Before: Jan 26 02:00:51 2026 GMT Not After : Jan 27 02:00:51 2026 GMT Subject: CN=a0ff28affea2ae2b9913dd0cc7bdab3c39b9ac3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:79:6e:0d:bc:df:5c:d6:ba:07:25:e9:d7:9e: b0:43:0c:76:f4:d3:ad:37:14:47:1f:8d:54:40:51: a4:c9:6e:98:30:ca:c0:02:c9:e1:71:c6:61:d9:03: e1:67:fa:82:70:87:1e:62:12:0a:9a:39:d3:47:e3: 1b:15:be:64:16:08:86:6c:40:b3:b5:1b:7f:83:9c: 9b:f5:39:26:5c:e0:75:88:56:cf:c5:97:a9:0d:ca: 2f:af:cd:75:40:7c:58:71:4d:88:49:c0:a9:e7:7d: b1:75:5b:c0:6e:29:8b:2d:89:99:a8:6c:27:f3:d2: db:f3:5f:a7:c8:ad:0a:c5:27:07:a8:b2:56:2e:c1: c6:e7:f5:c4:e7:0b:30:cd:f2:09:88:c0:26:96:f4: 3a:f8:f3:b2:f9:d9:3d:75:c2:c0:36:c8:ba:57:8b: c7:db:d0:24:13:07:d3:4d:53:00:41:7b:41:92:0f: ca:2e:79:0b:c9:f8:1c:6d:ba:a3:ef:cc:72:d0:b4: 06:24:82:a1:27:f6:1d:5d:ac:40:58:22:71:9f:3b: 80:01:a0:5e:0b:63:a4:c9:c6:79:9e:e0:88:0b:80: 91:1f:4d:28:97:86:40:74:06:c3:31:7b:29:ac:3c: 54:93:6f:e8:4c:9f:19:5e:43:2e:07:ae:2b:3c:00: 13:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:FF:28:AF:FE:A2:AE:2B:99:13:DD:0C:C7:BD:AB:3C:39:B9:AC:3B X509v3 Authority Key Identifier: keyid:4B:AF:F4:8A:D1:14:5B:10:0C:78:3F:B7:AF:B6:F3:02:8B:D8:F3:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:43:8c:7e:7e:92:df:85:45:6b:de:ad:8c:17:96:6c:fe:9c: b3:4c:ba:59:7b:f0:32:e2:09:71:54:f9:ac:3e:cf:55:02:79: 4a:99:2f:ce:6c:59:4a:fe:00:9d:e7:d0:d1:ef:7e:73:48:ff: ce:79:63:48:4c:8b:c5:13:20:0e:9c:d9:00:10:d2:4c:30:d8: 19:ea:08:ca:25:f5:d3:d2:f3:9c:b5:62:db:90:64:ec:4b:11: 65:ca:43:77:5e:43:e2:e3:1c:ef:69:4e:67:a4:43:02:82:3a: 21:95:b4:89:b4:3a:2e:66:d8:b2:dd:5e:18:c2:1f:f2:ba:a7: 3f:02:12:fe:7c:bb:48:80:6e:17:d7:8e:ef:26:26:8d:a6:0f: 78:1b:86:62:c7:8c:b3:76:bc:5a:0e:01:26:39:9a:1b:e0:eb: 9d:6e:9b:c8:ed:f5:a2:0c:f3:50:71:fa:7b:5e:8b:67:5c:e3: 63:9e:af:79:60:18:66:12:b1:32:d1:3f:e7:c4:9a:1a:57:54: 22:c8:9d:cd:09:be:6c:f8:78:4e:a2:7f:de:05:42:2d:b0:93: f6:11:b7:93:0d:9c:81:79:b9:dd:98:20:59:15:d2:0a:f9:3c: 22:ca:c6:c5:34:45:fe:7a:6d:e9:03:c8:58:a8:f8:36:9b:07: d9:45:ba:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CEkgfg0X1KuK8EI/+XUbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiYWZmNDhhZDExNDViMTAwYzc4M2ZiN2FmYjZmMzAyOGJk OGYzNGUwHhcNMjYwMTI2MDIwMDUxWhcNMjYwMTI3MDIwMDUxWjAzMTEwLwYDVQQD EyhhMGZmMjhhZmZlYTJhZTJiOTkxM2RkMGNjN2JkYWIzYzM5YjlhYzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHluDbzfXNa6ByXp156wQwx29NOt NxRHH41UQFGkyW6YMMrAAsnhccZh2QPhZ/qCcIceYhIKmjnTR+MbFb5kFgiGbECz tRt/g5yb9TkmXOB1iFbPxZepDcovr811QHxYcU2IScCp532xdVvAbimLLYmZqGwn 89Lb81+nyK0KxScHqLJWLsHG5/XE5wswzfIJiMAmlvQ6+POy+dk9dcLANsi6V4vH 29AkEwfTTVMAQXtBkg/KLnkLyfgcbbqj78xy0LQGJIKhJ/YdXaxAWCJxnzuAAaBe C2OkycZ5nuCIC4CRH00ol4ZAdAbDMXsprDxUk2/oTJ8ZXkMuB64rPAATHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKD/KK/+oq4rmRPdDMe9qzw5uaw7MB8GA1UdIwQY MBaAFEuv9IrRFFsQDHg/t6+28wKL2PNOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzZfMGl0RVVXeEFNZUQtM3I3YnpBb3ZZODA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9lNGZmYzUtZmI4ZC00YzQwLThiNzMt YmZlYjdjZWEyMDlkLzEvUzZfMGl0RVVXeEFNZUQtM3I3YnpBb3ZZODA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9lNGZmYzUtZmI4ZC00YzQwLThiNzMtYmZlYjdjZWEyMDlk LzEvUzZfMGl0RVVXeEFNZUQtM3I3YnpBb3ZZODA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqEOMfn6S 34VFa96tjBeWbP6cs0y6WXvwMuIJcVT5rD7PVQJ5SpkvzmxZSv4AnefQ0e9+c0j/ znljSEyLxRMgDpzZABDSTDDYGeoIyiX109LznLVi25Bk7EsRZcpDd15D4uMc72lO Z6RDAoI6IZW0ibQ6LmbYst1eGMIf8rqnPwIS/ny7SIBuF9eO7yYmjaYPeBuGYseM s3a8Wg4BJjmaG+DrnW6byO31ogzzUHH6e16LZ1zjY56veWAYZhKxMtE/58SaGldU IsidzQm+bPh4TqJ/3gVCLbCT9hG3kw2cgXm53ZggWRXSCvk8IsrGxTRF/npt6QPI WKj4NpsH2UW6bw== -----END CERTIFICATE-----Generated at Mon Jan 26 11:10:05 2026 by rpki-client