This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft File: m6lLwUk3uws2MjdDVaRGckEEqYE.mft (raw, json) Hash identifier: diUmlymeNiyxKhpyL7EPXehBQgzA6UGbo0sDN4yjedU= Subject key identifier: 43:C8:74:6D:DD:A0:94:BF:9B:75:0E:32:2A:06:23:04:6B:2C:5B:40 Authority key identifier: 9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81 Certificate issuer: /CN=9ba94bc14937bb0b3632374355a446724104a981 Certificate serial: 019BF53EBC07637DF8D132DE807A665676A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft Manifest number: 17D1 Signing time: Sun 25 Jan 2026 13:01:27 +0000 Manifest this update: Sun 25 Jan 2026 13:01:27 +0000 Manifest next update: Mon 26 Jan 2026 13:01:27 +0000 Files and hashes: 1: Am-KOohcL2MqtHNdtJvWFx7LN0g.roa (hash: LCrtT5oylKVJNkSk1MoZh1tTPAUpbotUkU/vpFTgXwg=) 2: Cm2yDKipOZ7sHlbR_Hzzd41nQYs.roa (hash: yWZv7NkDFzKo9TIx/TWSen6p9EYZYREsasP3I0CUfzQ=) 3: UsjKC7eB_MWBtsUBXJK-RFYAYHU.roa (hash: NGEpFjBcwXvxm7QU0HUsjAWpitcU0iExVxH5Fk2JaRc=) 4: bwrK1tRV4AWpwHJl-68qI5x7fgA.roa (hash: QlUI1QZ7/IbZJuu9R1SnsQfMUaEeLYrpJvRYfGmpwoE=) 5: m6lLwUk3uws2MjdDVaRGckEEqYE.crl (hash: 7MzXTZwztgauyiW+ajB4OBjVcc3vitk45wCgOMaSw90=) 6: m84CLuxw2FJsW0scm8tH7sBc9EA.roa (hash: a/eeahQ9DT0uKrtOLoBbEBv5z8d0GRvVUXTkKq6/j6c=) 7: wZoxcNDPJMq3-uyqVaFl1OpOC5s.roa (hash: LWpdYaFu3wCLKYxI/zQHGuILauK3fDO4Dw9ytsYmVLU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:bc:07:63:7d:f8:d1:32:de:80:7a:66:56:76:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ba94bc14937bb0b3632374355a446724104a981 Validity Not Before: Jan 25 13:01:27 2026 GMT Not After : Jan 26 13:01:27 2026 GMT Subject: CN=43c8746ddda094bf9b750e322a0623046b2c5b40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:72:c0:28:84:60:5b:11:34:10:4b:71:5f:ce: 1d:e6:b7:88:16:a6:b5:f6:9a:41:0e:e3:71:f1:4d: e1:e1:2a:81:f3:f8:0e:d1:bd:81:b6:88:d5:d1:da: 52:49:8a:06:84:70:ed:65:34:f9:e8:ca:8b:fe:c1: 42:91:3f:c4:2a:cd:29:b0:01:4d:75:a8:a3:84:41: 53:18:11:a0:e8:0b:81:6b:e3:fb:09:9f:af:58:3e: f3:89:7a:31:e2:05:84:6c:2c:6d:b1:a4:c7:f2:7e: 73:43:4c:ff:bc:8d:68:72:0c:70:83:ca:1a:be:3d: 16:42:bd:a0:f1:94:b0:d9:87:c3:9b:24:7c:ae:f2: 19:52:4e:40:7c:59:81:aa:4a:34:cf:8c:f8:74:32: ee:58:ed:07:16:52:cb:4f:00:e7:d3:48:93:a4:71: 97:3c:71:d7:93:3c:fc:df:57:96:3f:0d:af:54:38: 36:3f:91:a8:49:05:2e:69:84:92:28:86:d1:3d:2f: 8c:c3:54:68:6a:e5:bb:3a:bc:b9:1e:cd:02:e1:e5: 33:01:e6:62:73:62:60:e3:41:f9:e1:ad:13:26:31: e7:66:a8:ae:eb:42:6d:fe:3e:c5:b6:8d:30:94:4c: fd:38:13:fd:24:3f:07:75:1d:ab:ee:e3:83:8d:85: 95:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:C8:74:6D:DD:A0:94:BF:9B:75:0E:32:2A:06:23:04:6B:2C:5B:40 X509v3 Authority Key Identifier: keyid:9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:0b:68:ee:aa:94:da:34:c6:4e:41:f3:ec:80:dd:f0:7c:1f: af:eb:e8:40:18:5f:c3:4b:b1:b0:39:f5:3a:70:bc:44:72:8f: 27:c4:e3:6c:67:51:cd:70:fa:d1:fe:94:f3:2e:3d:b4:ab:9b: bc:e2:41:88:d9:8f:48:b5:d6:e7:33:38:19:cc:a8:7c:cf:e5: d4:84:bf:33:cc:56:ed:cc:27:06:32:b0:4b:17:c5:0a:76:2b: cf:10:ff:1b:57:f8:b7:f5:68:c5:03:ff:d3:12:ea:82:37:52: fd:6b:05:6d:c3:79:3b:41:fa:e4:96:43:51:19:91:1b:58:e7: a3:e6:98:1b:f0:92:ce:bd:b2:af:b9:8d:b9:a3:9f:ce:cd:80: 99:27:a6:24:3b:3e:f2:b2:bf:49:db:1f:af:ef:d7:93:73:be: 99:c6:a2:bd:8d:fe:3f:1c:d8:b3:02:bd:39:b8:00:ac:8b:5d: cc:85:e6:82:2c:fa:61:78:27:ce:c8:01:57:44:45:cf:6f:aa: 28:4a:60:eb:a7:f2:11:7f:27:8e:2f:98:e7:10:d5:1b:01:9d: 10:66:7a:e3:59:32:06:51:ee:50:e7:ab:33:c7:00:42:69:c5: 44:51:39:6d:9d:88:66:1c:54:ad:d3:c4:6f:b7:73:ad:7b:06: 2f:bc:52:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PrwHY3340TLegHpmVnamMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliYTk0YmMxNDkzN2JiMGIzNjMyMzc0MzU1YTQ0NjcyNDEw NGE5ODEwHhcNMjYwMTI1MTMwMTI3WhcNMjYwMTI2MTMwMTI3WjAzMTEwLwYDVQQD Eyg0M2M4NzQ2ZGRkYTA5NGJmOWI3NTBlMzIyYTA2MjMwNDZiMmM1YjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7XLAKIRgWxE0EEtxX84d5reIFqa1 9ppBDuNx8U3h4SqB8/gO0b2BtojV0dpSSYoGhHDtZTT56MqL/sFCkT/EKs0psAFN daijhEFTGBGg6AuBa+P7CZ+vWD7ziXox4gWEbCxtsaTH8n5zQ0z/vI1ocgxwg8oa vj0WQr2g8ZSw2YfDmyR8rvIZUk5AfFmBqko0z4z4dDLuWO0HFlLLTwDn00iTpHGX PHHXkzz831eWPw2vVDg2P5GoSQUuaYSSKIbRPS+Mw1RoauW7Ory5Hs0C4eUzAeZi c2Jg40H54a0TJjHnZqiu60Jt/j7Fto0wlEz9OBP9JD8HdR2r7uODjYWVPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEPIdG3doJS/m3UOMioGIwRrLFtAMB8GA1UdIwQY MBaAFJupS8FJN7sLNjI3Q1WkRnJBBKmBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTZsTHdVazN1d3MyTWpkRFZhUkdja0VFcVlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jYzc4NDMtZDEzNi00ZmZiLThiOTkt ODM2YzMxMmFjOGMyLzEvbTZsTHdVazN1d3MyTWpkRFZhUkdja0VFcVlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9jYzc4NDMtZDEzNi00ZmZiLThiOTktODM2YzMxMmFjOGMy LzEvbTZsTHdVazN1d3MyTWpkRFZhUkdja0VFcVlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnQto7qqU 2jTGTkHz7IDd8Hwfr+voQBhfw0uxsDn1OnC8RHKPJ8TjbGdRzXD60f6U8y49tKub vOJBiNmPSLXW5zM4GcyofM/l1IS/M8xW7cwnBjKwSxfFCnYrzxD/G1f4t/VoxQP/ 0xLqgjdS/WsFbcN5O0H65JZDURmRG1jno+aYG/CSzr2yr7mNuaOfzs2AmSemJDs+ 8rK/Sdsfr+/Xk3O+mcaivY3+PxzYswK9ObgArItdzIXmgiz6YXgnzsgBV0RFz2+q KEpg66fyEX8nji+Y5xDVGwGdEGZ641kyBlHuUOerM8cAQmnFRFE5bZ2IZhxUrdPE b7dzrXsGL7xSvw== -----END CERTIFICATE-----Generated at Sun Jan 25 16:46:36 2026 by rpki-client