This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/6KJHWYzDIWAyhBehsQ22f99Z8Q8.mft File: 6KJHWYzDIWAyhBehsQ22f99Z8Q8.mft (raw, json) Hash identifier: OhXYoTbetJLTmnZKlKnZc+fT17ckBSnckZqEj9xxnhY= Subject key identifier: DE:CB:87:28:41:8C:FD:44:E9:04:F5:E5:F2:54:C1:96:0C:66:8C:B0 Authority key identifier: E8:A2:47:59:8C:C3:21:60:32:84:17:A1:B1:0D:B6:7F:DF:59:F1:0F Certificate issuer: /CN=e8a247598cc32160328417a1b10db67fdf59f10f Certificate serial: 019BF57523992136CD2438DCE9E667E82974 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KJHWYzDIWAyhBehsQ22f99Z8Q8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/6KJHWYzDIWAyhBehsQ22f99Z8Q8.mft Manifest number: C4 Signing time: Sun 25 Jan 2026 14:00:53 +0000 Manifest this update: Sun 25 Jan 2026 14:00:53 +0000 Manifest next update: Mon 26 Jan 2026 14:00:53 +0000 Files and hashes: 1: 6KJHWYzDIWAyhBehsQ22f99Z8Q8.crl (hash: h+LUr8ynJzmzzHWB6ic+h9NVd4YHxrQKgdlr8XZAcv0=) 2: yGHbr2ivA9pRP9yvd8p4VSdt5fE.roa (hash: HjBy12YC1Gx1u2mMvJAV9cdmHNtVXZmrkIO3OMSXlIM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/6KJHWYzDIWAyhBehsQ22f99Z8Q8.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/6KJHWYzDIWAyhBehsQ22f99Z8Q8.mft rsync://rpki.ripe.net/repository/DEFAULT/6KJHWYzDIWAyhBehsQ22f99Z8Q8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:23:99:21:36:cd:24:38:dc:e9:e6:67:e8:29:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8a247598cc32160328417a1b10db67fdf59f10f Validity Not Before: Jan 25 14:00:53 2026 GMT Not After : Jan 26 14:00:53 2026 GMT Subject: CN=decb8728418cfd44e904f5e5f254c1960c668cb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8f:8f:0e:3e:54:0f:cd:78:87:c3:fd:f6:21: 51:a0:aa:ea:93:9d:ac:fb:b2:51:d9:59:9c:ec:d0: 30:38:22:70:c6:dc:f0:19:ea:d0:0f:3b:13:da:a9: 5f:44:f8:9b:9d:db:dd:12:f1:0f:3c:4f:6a:71:6b: 10:4b:93:72:19:df:ce:70:09:27:c0:4c:47:b1:65: 3f:1b:0c:63:19:f8:a0:e2:90:0b:7c:ca:71:d7:ea: 37:51:73:67:c6:b6:18:d3:43:4f:77:60:88:2a:e8: b9:2a:8c:13:1d:15:d8:5a:a9:24:23:a1:88:90:12: 45:40:c4:8a:33:dd:25:05:b6:24:7d:e5:cd:7c:f0: 7c:91:a5:67:63:ba:e1:82:62:82:35:4d:29:35:a2: b5:41:b3:a1:96:ad:3b:10:4f:a9:0a:c8:ab:1f:83: d2:f2:b1:d5:f8:be:d7:03:e3:53:c8:21:0a:a8:dd: b7:40:e7:a9:5d:1d:04:57:74:d9:06:ee:74:1f:28: 4c:58:dc:af:bb:d9:c6:5d:a3:cf:10:3f:60:1f:03: 31:a3:19:ce:76:04:d3:c6:a5:e5:a2:57:bd:ee:4e: 72:74:c7:7e:c1:29:b9:aa:e5:65:8d:5c:d6:20:19: 28:ed:13:42:36:5c:e1:c7:89:da:4c:7e:37:93:83: 25:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:CB:87:28:41:8C:FD:44:E9:04:F5:E5:F2:54:C1:96:0C:66:8C:B0 X509v3 Authority Key Identifier: keyid:E8:A2:47:59:8C:C3:21:60:32:84:17:A1:B1:0D:B6:7F:DF:59:F1:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KJHWYzDIWAyhBehsQ22f99Z8Q8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/6KJHWYzDIWAyhBehsQ22f99Z8Q8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/6KJHWYzDIWAyhBehsQ22f99Z8Q8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:d0:62:8c:b9:89:54:a2:08:b9:a4:25:55:56:6d:c9:79:1d: 66:8d:50:fc:df:bc:44:21:8e:c6:ae:a7:f7:49:cd:51:0a:57: 99:3c:68:78:2d:e3:5a:85:3c:43:d0:8d:f4:ff:9e:37:d8:00: 16:68:d7:5e:99:4a:6a:10:55:e2:2c:4c:33:1a:98:68:d9:5d: 43:00:f4:e1:ea:50:27:51:d1:f1:e0:2a:c9:16:3c:dd:fd:bf: 26:b1:99:e7:23:ec:05:21:59:d0:44:59:9e:18:0c:5c:0e:1e: fd:35:57:f8:29:b0:46:53:5b:04:6a:f1:b0:a1:ab:8e:81:3c: b2:2f:82:21:f9:6f:50:5a:cb:15:24:0b:de:8e:4c:f0:cf:dd: 6b:ba:15:b9:e6:a8:9c:64:fc:a4:d5:01:af:1b:fe:3e:07:f7: 25:5b:84:e7:e1:14:b4:fe:23:af:35:7d:8d:31:05:a1:72:a5: c5:55:3b:8f:2e:13:eb:2a:f2:ce:2f:39:e0:3b:ef:b3:e2:cf: 62:75:06:99:3c:ad:3d:c1:78:d8:eb:01:ff:d1:1f:6b:f5:e0: 4e:bb:c3:7d:6d:fd:2d:62:c6:c3:bf:c1:01:33:da:77:ed:f5: e6:f1:ff:26:68:ba:62:f5:4f:af:b9:33:c1:fd:16:e9:c6:74: ba:4e:c5:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dSOZITbNJDjc6eZn6Cl0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4YTI0NzU5OGNjMzIxNjAzMjg0MTdhMWIxMGRiNjdmZGY1 OWYxMGYwHhcNMjYwMTI1MTQwMDUzWhcNMjYwMTI2MTQwMDUzWjAzMTEwLwYDVQQD EyhkZWNiODcyODQxOGNmZDQ0ZTkwNGY1ZTVmMjU0YzE5NjBjNjY4Y2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4+PDj5UD814h8P99iFRoKrqk52s +7JR2Vmc7NAwOCJwxtzwGerQDzsT2qlfRPibndvdEvEPPE9qcWsQS5NyGd/OcAkn wExHsWU/GwxjGfig4pALfMpx1+o3UXNnxrYY00NPd2CIKui5KowTHRXYWqkkI6GI kBJFQMSKM90lBbYkfeXNfPB8kaVnY7rhgmKCNU0pNaK1QbOhlq07EE+pCsirH4PS 8rHV+L7XA+NTyCEKqN23QOepXR0EV3TZBu50HyhMWNyvu9nGXaPPED9gHwMxoxnO dgTTxqXlole97k5ydMd+wSm5quVljVzWIBko7RNCNlzhx4naTH43k4MlywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN7LhyhBjP1E6QT15fJUwZYMZoywMB8GA1UdIwQY MBaAFOiiR1mMwyFgMoQXobENtn/fWfEPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNktKSFdZekRJV0F5aEJlaHNRMjJmOTlaOFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9lYmM1N2QtNWMzZS00YmFkLWI3MGQt ODE5NjgwZGI0MzU4LzEvNktKSFdZekRJV0F5aEJlaHNRMjJmOTlaOFE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9lYmM1N2QtNWMzZS00YmFkLWI3MGQtODE5NjgwZGI0MzU4 LzEvNktKSFdZekRJV0F5aEJlaHNRMjJmOTlaOFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ9BijLmJ VKIIuaQlVVZtyXkdZo1Q/N+8RCGOxq6n90nNUQpXmTxoeC3jWoU8Q9CN9P+eN9gA FmjXXplKahBV4ixMMxqYaNldQwD04epQJ1HR8eAqyRY83f2/JrGZ5yPsBSFZ0ERZ nhgMXA4e/TVX+CmwRlNbBGrxsKGrjoE8si+CIflvUFrLFSQL3o5M8M/da7oVueao nGT8pNUBrxv+Pgf3JVuE5+EUtP4jrzV9jTEFoXKlxVU7jy4T6yryzi854Dvvs+LP YnUGmTytPcF42OsB/9Efa/XgTrvDfW39LWLGw7/BATPad+315vH/Jmi6YvVPr7kz wf0W6cZ0uk7FRA== -----END CERTIFICATE-----Generated at Sun Jan 25 21:11:30 2026 by rpki-client