This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft File: v6bpb8p6J4PLlyHrti3htTbBY6k.mft (raw, json) Hash identifier: GKaU8LRLXPlJajvYDtgkGJCzCwx5PvZDmoJiV9TZMEo= Subject key identifier: EA:35:5C:78:6F:CA:83:74:83:03:2C:56:6E:89:01:96:C5:4D:81:33 Authority key identifier: BF:A6:E9:6F:CA:7A:27:83:CB:97:21:EB:B6:2D:E1:B5:36:C1:63:A9 Certificate issuer: /CN=bfa6e96fca7a2783cb9721ebb62de1b536c163a9 Certificate serial: 019BF61A095A9FAD2CF8FAD63782A4EA55EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft Manifest number: 0F99 Signing time: Sun 25 Jan 2026 17:01:00 +0000 Manifest this update: Sun 25 Jan 2026 17:01:00 +0000 Manifest next update: Mon 26 Jan 2026 17:01:00 +0000 Files and hashes: 1: GQ7W42EsElCP2Qj0UZVoRC5t9II.roa (hash: /UuepQO5GWEwYKHxizYeXgs9DYCR+SoHKZBIXXza2Jk=) 2: v6bpb8p6J4PLlyHrti3htTbBY6k.crl (hash: z7uG4i5iR80Onfrrnmv9ODJ2N+P6gn/49/jAJ+V4vKA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.crl rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:1a:09:5a:9f:ad:2c:f8:fa:d6:37:82:a4:ea:55:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfa6e96fca7a2783cb9721ebb62de1b536c163a9 Validity Not Before: Jan 25 17:01:00 2026 GMT Not After : Jan 26 17:01:00 2026 GMT Subject: CN=ea355c786fca837483032c566e890196c54d8133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:81:d0:0f:01:1a:18:b1:c1:02:7b:33:35:6f: 98:94:72:72:43:6a:3c:8a:56:6e:4e:87:1d:00:08: be:31:f4:96:46:f8:5b:d9:12:5e:37:99:c5:38:7b: 7d:bb:2e:03:46:09:00:da:d4:6f:41:c8:d1:f3:7c: a8:32:50:a7:dc:a1:7f:9a:30:4e:c8:51:d3:2b:6b: 96:39:e4:04:31:98:2f:5a:36:d6:06:7e:0a:bd:b0: 6e:ac:1f:64:3c:db:f7:30:79:ee:4b:29:b3:93:6e: 74:12:1b:4a:b7:bb:60:58:b0:29:7a:b8:81:5f:d9: f0:44:5f:ca:33:90:52:00:cf:90:ad:e8:62:ba:39: 6a:2a:9c:44:2e:25:cd:35:48:59:79:2f:7c:ef:19: d0:1e:92:35:0f:14:f9:c0:ba:73:b7:d1:39:a1:84: 52:19:f9:46:62:6f:c3:db:d2:2b:b7:45:7e:55:f2: d7:65:23:14:ae:57:d7:b0:89:37:1d:b9:38:68:4f: 7b:35:74:7c:54:90:3b:e5:36:cf:47:89:66:fc:4a: 05:3a:8e:c0:5b:05:28:24:54:47:0b:6c:4d:ba:6d: 19:e0:80:1e:8b:a4:c6:fb:1d:f2:29:c8:87:e7:89: cb:14:cd:13:b2:ad:34:b0:18:ed:33:40:fe:8e:4a: 17:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:35:5C:78:6F:CA:83:74:83:03:2C:56:6E:89:01:96:C5:4D:81:33 X509v3 Authority Key Identifier: keyid:BF:A6:E9:6F:CA:7A:27:83:CB:97:21:EB:B6:2D:E1:B5:36:C1:63:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:1e:d0:ce:ac:11:46:a0:05:2b:85:36:a2:13:d8:bd:20:e7: 03:98:3c:c8:b1:96:7a:c9:cc:56:c2:18:bc:78:f3:63:cc:44: 6a:53:14:1b:e1:00:55:df:97:3e:1d:09:9b:58:56:43:54:0c: 87:78:2c:c5:01:14:4b:a7:16:09:80:c1:7e:63:10:9f:a4:03: 7f:06:f0:a4:1a:0d:62:f8:d6:77:87:b9:e8:24:f6:55:41:9c: ad:d5:24:b4:49:3c:58:ac:3b:90:62:fc:7e:3d:50:b5:eb:b5: 63:85:de:11:50:14:80:b9:00:47:4a:4e:a0:53:4b:85:22:99: 58:96:fc:48:b2:26:ea:06:7d:ac:63:3c:65:b3:66:13:45:42: b1:7c:3f:0e:91:ae:0f:96:f5:60:a1:d0:33:f1:9b:e8:ac:5e: 46:3b:af:c5:30:f5:2d:d5:00:14:a8:d9:61:79:1a:93:ea:08: 5c:38:44:fc:23:f5:37:95:df:dd:7a:d6:0a:cd:60:b7:29:26: d5:b5:ac:26:f8:f1:2a:41:b7:18:e2:d5:a2:c0:5c:ad:9c:19: 99:15:23:5f:b2:c0:aa:20:40:d6:93:e6:db:6e:55:80:b4:76: e0:80:c8:89:75:99:10:b6:4b:3d:5e:37:81:ff:8f:bb:df:ee: 6a:2a:b2:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2Gglan60s+PrWN4Kk6lXrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYTZlOTZmY2E3YTI3ODNjYjk3MjFlYmI2MmRlMWI1MzZj MTYzYTkwHhcNMjYwMTI1MTcwMTAwWhcNMjYwMTI2MTcwMTAwWjAzMTEwLwYDVQQD EyhlYTM1NWM3ODZmY2E4Mzc0ODMwMzJjNTY2ZTg5MDE5NmM1NGQ4MTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoHQDwEaGLHBAnszNW+YlHJyQ2o8 ilZuTocdAAi+MfSWRvhb2RJeN5nFOHt9uy4DRgkA2tRvQcjR83yoMlCn3KF/mjBO yFHTK2uWOeQEMZgvWjbWBn4KvbBurB9kPNv3MHnuSymzk250EhtKt7tgWLAperiB X9nwRF/KM5BSAM+QrehiujlqKpxELiXNNUhZeS987xnQHpI1DxT5wLpzt9E5oYRS GflGYm/D29Irt0V+VfLXZSMUrlfXsIk3Hbk4aE97NXR8VJA75TbPR4lm/EoFOo7A WwUoJFRHC2xNum0Z4IAei6TG+x3yKciH54nLFM0Tsq00sBjtM0D+jkoXJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOo1XHhvyoN0gwMsVm6JAZbFTYEzMB8GA1UdIwQY MBaAFL+m6W/KeieDy5ch67Yt4bU2wWOpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjZicGI4cDZKNFBMbHlIcnRpM2h0VGJCWTZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84NTZlYTQtZGU1YS00ZjExLTgyMjgt ODdiZjZmZGJlMTkzLzEvdjZicGI4cDZKNFBMbHlIcnRpM2h0VGJCWTZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi84NTZlYTQtZGU1YS00ZjExLTgyMjgtODdiZjZmZGJlMTkz LzEvdjZicGI4cDZKNFBMbHlIcnRpM2h0VGJCWTZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHh7QzqwR RqAFK4U2ohPYvSDnA5g8yLGWesnMVsIYvHjzY8xEalMUG+EAVd+XPh0Jm1hWQ1QM h3gsxQEUS6cWCYDBfmMQn6QDfwbwpBoNYvjWd4e56CT2VUGcrdUktEk8WKw7kGL8 fj1Qteu1Y4XeEVAUgLkAR0pOoFNLhSKZWJb8SLIm6gZ9rGM8ZbNmE0VCsXw/DpGu D5b1YKHQM/Gb6KxeRjuvxTD1LdUAFKjZYXkak+oIXDhE/CP1N5Xf3XrWCs1gtykm 1bWsJvjxKkG3GOLVosBcrZwZmRUjX7LAqiBA1pPm225VgLR24IDIiXWZELZLPV43 gf+Pu9/uaiqydQ== -----END CERTIFICATE-----Generated at Sun Jan 25 23:34:42 2026 by rpki-client