This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft File: 6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft (raw, json) Hash identifier: 6VwN09GzcGmK4mGYhBOz0ZVJC36DarYmQCBSYQe+lGM= Subject key identifier: 80:D7:99:10:A6:4A:92:16:C9:E0:9F:DA:24:72:ED:7A:33:7D:C9:2A Authority key identifier: EA:A5:AB:E9:F7:30:43:83:19:8B:A1:FF:A5:92:79:0E:CF:2C:3C:EB Certificate issuer: /CN=eaa5abe9f7304383198ba1ffa592790ecf2c3ceb Certificate serial: 019BF8E3DD20D95C3D623056943B9F0F9D73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft Manifest number: 0CA2 Signing time: Mon 26 Jan 2026 06:00:41 +0000 Manifest this update: Mon 26 Jan 2026 06:00:41 +0000 Manifest next update: Tue 27 Jan 2026 06:00:41 +0000 Files and hashes: 1: 6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.crl (hash: apYRXCBF52G9ss1Uw/wbYIHF/wiRltLjBV4rG2spPdc=) 2: x_ow3qxhfOMLBRjgBidD1PQTkzs.roa (hash: tTO9VSPgrTRCs8qsXCJT8F1FGJbKaVUFEepw4YEza7k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:e3:dd:20:d9:5c:3d:62:30:56:94:3b:9f:0f:9d:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaa5abe9f7304383198ba1ffa592790ecf2c3ceb Validity Not Before: Jan 26 06:00:41 2026 GMT Not After : Jan 27 06:00:41 2026 GMT Subject: CN=80d79910a64a9216c9e09fda2472ed7a337dc92a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:39:8f:54:fd:68:18:7b:bf:42:d9:a0:b6:a6: 8e:33:80:03:b2:97:58:c2:45:a6:7d:78:8b:cd:f8: b2:ca:c1:e4:54:64:9d:35:b4:05:72:0a:08:8f:eb: 56:4d:83:bf:63:f9:7e:05:5f:c9:c2:70:27:47:a8: 6a:1b:0b:7c:c2:f6:8b:93:6c:b4:da:99:3e:51:6e: cf:cc:c3:ed:de:7c:0f:24:fa:9f:e9:ef:18:55:0c: 6b:70:47:64:54:7f:9f:b6:ff:3f:ad:2b:bb:ab:96: 6f:0b:ce:f0:fa:80:ff:5a:21:61:40:79:0c:f8:72: ec:47:d1:0c:07:19:f9:f4:da:36:b4:9b:01:40:65: 09:e0:c4:3e:99:2f:d9:66:fb:c3:19:65:b8:07:d8: cf:7b:50:92:83:e4:a1:b7:98:52:76:77:8c:9d:d1: d0:07:84:5b:17:d4:4d:70:77:49:8e:8a:9d:c1:51: 83:5d:fb:30:d0:e5:bd:d2:97:f2:cd:ac:cc:c4:77: bf:cd:82:1a:33:38:09:b7:ae:26:a1:39:d2:80:33: 8f:eb:71:80:54:a3:c5:86:93:82:e5:a1:4f:d2:1e: 77:31:de:e3:57:7b:95:a1:34:ca:23:ae:13:96:00: 8a:0f:3b:5b:8a:1f:42:85:06:e4:17:19:c4:cf:2a: c8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:D7:99:10:A6:4A:92:16:C9:E0:9F:DA:24:72:ED:7A:33:7D:C9:2A X509v3 Authority Key Identifier: keyid:EA:A5:AB:E9:F7:30:43:83:19:8B:A1:FF:A5:92:79:0E:CF:2C:3C:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:7f:2f:92:1e:c2:cd:73:b6:fe:f2:3c:fa:1d:4d:80:09:6c: de:9d:99:96:69:51:da:13:98:29:12:7b:31:5e:f7:b0:fd:cd: 07:2e:41:35:c2:b2:ba:19:63:66:48:63:75:05:d4:88:25:87: 3f:2f:20:90:fe:53:0a:7f:0b:6e:07:4e:46:5e:b6:76:f4:c2: d0:f1:97:a8:f3:39:54:15:0d:cf:45:c7:41:bd:5d:c5:a6:ca: 05:cd:8d:5c:12:3b:ae:ad:09:9f:30:70:32:60:96:f9:92:6b: 94:97:66:8f:b9:2c:2a:0a:19:02:ac:d7:df:8d:65:28:c1:6d: d1:b8:17:a6:24:a4:41:ba:f6:c3:02:47:6e:0e:bf:44:a8:42: ed:e4:6c:6f:f5:2e:9f:08:36:0b:10:c0:7b:c7:95:2a:d9:58: 7d:f1:09:7f:11:0a:65:d7:0f:b4:08:a4:b4:ab:19:f5:a0:15: b5:76:ca:15:c5:c2:14:8a:ce:ab:3a:23:11:6f:5b:16:4d:87: 83:ff:6c:42:ce:a3:78:b7:d5:ca:87:25:f8:13:40:d3:42:35: 17:99:1c:13:d6:11:6d:83:18:93:cd:48:43:5b:69:4f:fc:ff: 82:42:be:20:36:0c:a3:b3:7d:5f:38:f1:74:50:3a:f1:51:0a: 7a:b1:fe:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4490g2Vw9YjBWlDufD51zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYTVhYmU5ZjczMDQzODMxOThiYTFmZmE1OTI3OTBlY2Yy YzNjZWIwHhcNMjYwMTI2MDYwMDQxWhcNMjYwMTI3MDYwMDQxWjAzMTEwLwYDVQQD Eyg4MGQ3OTkxMGE2NGE5MjE2YzllMDlmZGEyNDcyZWQ3YTMzN2RjOTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTmPVP1oGHu/QtmgtqaOM4ADspdY wkWmfXiLzfiyysHkVGSdNbQFcgoIj+tWTYO/Y/l+BV/JwnAnR6hqGwt8wvaLk2y0 2pk+UW7PzMPt3nwPJPqf6e8YVQxrcEdkVH+ftv8/rSu7q5ZvC87w+oD/WiFhQHkM +HLsR9EMBxn59No2tJsBQGUJ4MQ+mS/ZZvvDGWW4B9jPe1CSg+Sht5hSdneMndHQ B4RbF9RNcHdJjoqdwVGDXfsw0OW90pfyzazMxHe/zYIaMzgJt64moTnSgDOP63GA VKPFhpOC5aFP0h53Md7jV3uVoTTKI64TlgCKDztbih9ChQbkFxnEzyrIGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIDXmRCmSpIWyeCf2iRy7XozfckqMB8GA1UdIwQY MBaAFOqlq+n3MEODGYuh/6WSeQ7PLDzrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnFXcjZmY3dRNE1aaTZIX3BaSjVEczhzUE9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9mYjJhYTEtMDA0Yi00OWM0LWFhNDEt YzlkZTIyYjkxNmNhLzEvNnFXcjZmY3dRNE1aaTZIX3BaSjVEczhzUE9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9mYjJhYTEtMDA0Yi00OWM0LWFhNDEtYzlkZTIyYjkxNmNh LzEvNnFXcjZmY3dRNE1aaTZIX3BaSjVEczhzUE9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYX8vkh7C zXO2/vI8+h1NgAls3p2ZlmlR2hOYKRJ7MV73sP3NBy5BNcKyuhljZkhjdQXUiCWH Py8gkP5TCn8LbgdORl62dvTC0PGXqPM5VBUNz0XHQb1dxabKBc2NXBI7rq0JnzBw MmCW+ZJrlJdmj7ksKgoZAqzX341lKMFt0bgXpiSkQbr2wwJHbg6/RKhC7eRsb/Uu nwg2CxDAe8eVKtlYffEJfxEKZdcPtAiktKsZ9aAVtXbKFcXCFIrOqzojEW9bFk2H g/9sQs6jeLfVyocl+BNA00I1F5kcE9YRbYMYk81IQ1tpT/z/gkK+IDYMo7N9Xzjx dFA68VEKerH+BA== -----END CERTIFICATE-----Generated at Mon Jan 26 07:45:24 2026 by rpki-client