This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.mft File: 6_OFztCQ2_HQRHNOEqJw7muEHJY.mft (raw, json) Hash identifier: FfLDxiRouY1vOGCOZt9y04gAA7DFZDUYuI9VxwiLryk= Subject key identifier: C2:43:A3:44:49:FB:AF:12:C4:0B:7D:FE:1D:DE:48:32:5A:B5:C8:33 Authority key identifier: EB:F3:85:CE:D0:90:DB:F1:D0:44:73:4E:12:A2:70:EE:6B:84:1C:96 Certificate issuer: /CN=ebf385ced090dbf1d044734e12a270ee6b841c96 Certificate serial: 019BF3195078032682C7AC3DA45800702A49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_OFztCQ2_HQRHNOEqJw7muEHJY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.mft Manifest number: 07A9 Signing time: Sun 25 Jan 2026 03:01:21 +0000 Manifest this update: Sun 25 Jan 2026 03:01:21 +0000 Manifest next update: Mon 26 Jan 2026 03:01:21 +0000 Files and hashes: 1: 6_OFztCQ2_HQRHNOEqJw7muEHJY.crl (hash: gIHqrJy2Oyz+r2WlGu7TG91K0m5FwbxlSshqYPHER4s=) 2: XpRtGgpQMgfYPr6Ae4n-CrXAlUE.roa (hash: NDYAShaJd5oq4XV/s8UZ9bjqNMFDxRAsxUeNLahhptc=) 3: fj5bsSjuUc6EOcUYU_AbknjdJUU.roa (hash: j5vvkFepIgEH6bOjdslOXR9IOh2ESlxcKkI5N8rCJlk=) 4: x4UYcdufAL3ng8pGSqFjgdXSCz4.roa (hash: 2STBeULPzfa883nzmJW1aoNIl1q/BlYpn/a/MGYClPQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.mft rsync://rpki.ripe.net/repository/DEFAULT/6_OFztCQ2_HQRHNOEqJw7muEHJY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:19:50:78:03:26:82:c7:ac:3d:a4:58:00:70:2a:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebf385ced090dbf1d044734e12a270ee6b841c96 Validity Not Before: Jan 25 03:01:21 2026 GMT Not After : Jan 26 03:01:21 2026 GMT Subject: CN=c243a34449fbaf12c40b7dfe1dde48325ab5c833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:29:1b:d1:11:75:f4:a7:45:56:d6:be:88:45: 41:99:57:16:8c:5e:e8:b2:63:7c:96:11:ef:8d:ea: a7:d6:37:80:54:f4:d6:6c:21:a2:4c:6a:a9:ae:86: 22:7c:be:c7:56:7e:9b:dc:78:ce:72:30:b7:3f:f0: 58:35:7c:ce:93:d3:d7:c8:9d:f1:a6:ac:94:56:21: 80:73:4c:58:cd:ac:f3:62:f8:a1:a1:65:5a:65:6a: 49:bb:24:79:9b:83:3a:eb:56:fc:16:cb:4e:c1:aa: c4:37:ec:ce:06:00:cf:2c:f2:ae:af:df:cf:61:25: fa:c4:74:a1:c8:34:57:55:e9:79:f9:a7:aa:83:6e: 29:2c:87:02:ec:29:f2:e4:3d:dd:df:f6:b3:87:d9: fc:b8:74:33:95:f1:c3:db:0b:c0:aa:14:c1:3a:a3: 00:fd:f7:49:0a:b1:5f:64:96:61:39:6c:0c:8b:01: bc:94:00:ec:a6:4b:8b:13:d1:89:29:fa:0c:77:85: d7:94:73:6c:a9:4c:77:6b:fa:4e:92:90:c7:ab:3f: 28:da:8d:9c:be:d7:19:b6:68:39:86:5c:60:76:bc: 16:0e:ef:98:57:d0:dd:92:f7:2b:43:07:22:5c:b1: 0d:8a:08:2e:b6:3b:14:a5:81:67:80:9e:88:63:99: 9a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:43:A3:44:49:FB:AF:12:C4:0B:7D:FE:1D:DE:48:32:5A:B5:C8:33 X509v3 Authority Key Identifier: keyid:EB:F3:85:CE:D0:90:DB:F1:D0:44:73:4E:12:A2:70:EE:6B:84:1C:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_OFztCQ2_HQRHNOEqJw7muEHJY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:d7:0b:ac:3b:4f:11:5e:23:68:c5:90:b7:60:02:91:f7:37: e7:6e:1e:bf:de:ea:69:10:e4:6f:bd:a0:9e:55:61:be:1f:79: 77:61:c6:de:86:06:33:96:ee:42:0b:f5:87:3b:a9:59:96:70: be:90:6e:f1:11:84:65:30:a6:8b:34:60:c8:a8:90:21:cd:08: bb:b9:75:48:0f:ac:a3:37:f5:55:90:46:e8:f6:dc:ba:b5:86: 29:a7:b3:73:d6:bd:34:02:bd:e6:0d:c7:c5:39:77:e6:24:fa: 98:80:60:48:f4:55:92:e9:95:54:be:e9:74:cf:f0:81:cf:dd: de:72:f6:c9:cc:02:4e:92:2a:39:20:14:73:6b:62:8b:c9:a3: 52:8f:dc:7b:b0:64:2c:5c:0e:3b:7d:a2:02:02:f7:e7:95:5a: a4:3e:4c:a8:60:d4:cc:8b:93:c0:07:dc:d6:fe:d3:22:84:09: 70:43:4c:38:c3:b2:a0:99:75:a1:73:b6:39:5a:61:2e:67:4e: e2:b5:4e:0a:64:87:09:9f:4b:c2:e6:67:21:99:a7:ce:73:79: cb:ac:ea:34:e5:80:a6:55:5a:c1:31:7d:36:35:8c:8c:e0:ae: c7:81:53:e5:18:9a:7d:21:89:31:20:9f:26:2c:e4:cb:49:89: 9d:34:8c:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzGVB4AyaCx6w9pFgAcCpJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViZjM4NWNlZDA5MGRiZjFkMDQ0NzM0ZTEyYTI3MGVlNmI4 NDFjOTYwHhcNMjYwMTI1MDMwMTIxWhcNMjYwMTI2MDMwMTIxWjAzMTEwLwYDVQQD EyhjMjQzYTM0NDQ5ZmJhZjEyYzQwYjdkZmUxZGRlNDgzMjVhYjVjODMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmykb0RF19KdFVta+iEVBmVcWjF7o smN8lhHvjeqn1jeAVPTWbCGiTGqproYifL7HVn6b3HjOcjC3P/BYNXzOk9PXyJ3x pqyUViGAc0xYzazzYvihoWVaZWpJuyR5m4M661b8FstOwarEN+zOBgDPLPKur9/P YSX6xHShyDRXVel5+aeqg24pLIcC7Cny5D3d3/azh9n8uHQzlfHD2wvAqhTBOqMA /fdJCrFfZJZhOWwMiwG8lADspkuLE9GJKfoMd4XXlHNsqUx3a/pOkpDHqz8o2o2c vtcZtmg5hlxgdrwWDu+YV9DdkvcrQwciXLENiggutjsUpYFngJ6IY5mabQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMJDo0RJ+68SxAt9/h3eSDJatcgzMB8GA1UdIwQY MBaAFOvzhc7QkNvx0ERzThKicO5rhByWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNl9PRnp0Q1EyX0hRUkhOT0VxSnc3bXVFSEpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8xYTllMTQtN2ZiNC00ODliLTkwYmUt NDY1ZDIyM2IyMzJlLzEvNl9PRnp0Q1EyX0hRUkhOT0VxSnc3bXVFSEpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8xYTllMTQtN2ZiNC00ODliLTkwYmUtNDY1ZDIyM2IyMzJl LzEvNl9PRnp0Q1EyX0hRUkhOT0VxSnc3bXVFSEpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEdcLrDtP EV4jaMWQt2ACkfc3524ev97qaRDkb72gnlVhvh95d2HG3oYGM5buQgv1hzupWZZw vpBu8RGEZTCmizRgyKiQIc0Iu7l1SA+sozf1VZBG6PbcurWGKaezc9a9NAK95g3H xTl35iT6mIBgSPRVkumVVL7pdM/wgc/d3nL2ycwCTpIqOSAUc2tii8mjUo/ce7Bk LFwOO32iAgL355VapD5MqGDUzIuTwAfc1v7TIoQJcENMOMOyoJl1oXO2OVphLmdO 4rVOCmSHCZ9LwuZnIZmnznN5y6zqNOWAplVawTF9NjWMjOCux4FT5RiafSGJMSCf Jizky0mJnTSMJQ== -----END CERTIFICATE-----Generated at Sun Jan 25 09:44:29 2026 by rpki-client