This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft File: 6aqxRGEAqPzgPfGddV4GMp7iRxM.mft (raw, json) Hash identifier: px9Jj223+NwacehA5p6ayszKqdtq2vg+o+ZrygW9qLs= Subject key identifier: DF:E0:51:5E:39:00:A6:2B:20:29:AC:12:23:57:DF:06:0E:63:57:D0 Authority key identifier: E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13 Certificate issuer: /CN=e9aab1446100a8fce03df19d755e06329ee24713 Certificate serial: 019BF3BDD58EF74FCE4F4CC7D6BC7A04E228 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft Manifest number: 17FB Signing time: Sun 25 Jan 2026 06:01:02 +0000 Manifest this update: Sun 25 Jan 2026 06:01:02 +0000 Manifest next update: Mon 26 Jan 2026 06:01:02 +0000 Files and hashes: 1: 6aqxRGEAqPzgPfGddV4GMp7iRxM.crl (hash: HODaVzycxRf//fyrkXfiCuxZDWCY7g5lwPzIisl5EMI=) 2: Dz4qudxOOcrQ8QXmqIMD2XiSzUY.roa (hash: FrWcYiJYGSm1u+Ku7WujbY8jd61FJPRUuxdCXEW2jb8=) 3: JlHGBE70CjYUjMlPy-yN4dzG-cs.roa (hash: eJeCGZHCYQ5pmVVEGiFVOguyq7hsvoBtUeukZnmh3W4=) 4: _GwYJ0PKXJK6fqA4cXd9zGiQJsk.roa (hash: TYTF9XrM81uGdSP5QXPvN15cnh9G39fwkeUY9WQ9Rbg=) 5: dwRGeRiPxu8Ert93hewpcLQlQPs.roa (hash: EAiXOznjLfpEqp6yCwCN/ahYsHXDQcQqsmXEqqAl9Vo=) 6: nSCF5qcvbkhkVZeNhESQPgQzsYw.roa (hash: Y9RP3rduyUtto1z3zNhzoo4HTEI6paw2VNckcRzLK4g=) 7: wyPR3DQqTcPeXSMxj_8q1QvGp98.roa (hash: gpZ7dcu9+au0qJAS/mbf494bt1LZl0k6YCG8tQBUn4A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:bd:d5:8e:f7:4f:ce:4f:4c:c7:d6:bc:7a:04:e2:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9aab1446100a8fce03df19d755e06329ee24713 Validity Not Before: Jan 25 06:01:02 2026 GMT Not After : Jan 26 06:01:02 2026 GMT Subject: CN=dfe0515e3900a62b2029ac122357df060e6357d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f9:74:a0:84:27:0b:cb:6f:62:56:b4:63:60: 53:93:e6:d1:bb:11:ad:40:c6:14:d4:4e:96:d3:e6: f0:e7:82:72:42:2f:e0:b8:68:f3:39:55:74:98:c6: 19:dc:29:2b:d2:99:bf:06:b7:ad:fa:e2:39:be:38: ba:9a:e6:65:8d:c4:d1:ee:25:21:5e:da:35:e2:d4: 34:78:4a:24:e5:ce:03:66:96:73:f3:e5:a9:13:af: d7:8c:86:cf:6b:28:24:68:d2:a7:0a:03:8d:d9:99: 94:c8:66:bf:aa:62:69:33:77:4a:84:ea:19:73:4b: 27:d6:9e:1c:f0:72:85:86:6e:27:f0:95:ad:39:3b: 97:00:cc:32:c4:c1:38:39:d0:0a:48:ee:22:f3:cc: 6a:a7:82:fb:47:e4:81:2b:5b:f0:21:12:6a:2e:03: 85:56:f0:9e:35:e5:42:54:5a:cd:e1:4a:60:11:98: 63:21:d3:9a:0f:22:75:b2:d3:c0:c0:dc:e7:4c:a5: 69:14:ee:0b:a0:fc:78:e3:98:d5:c1:50:5f:ea:80: 87:6e:f8:17:f1:bf:71:3f:22:5f:f1:d1:04:d3:e4: 53:18:0a:ae:07:8b:a4:69:75:8d:e1:ad:b4:9d:eb: 23:ec:14:13:ab:12:e0:d5:61:9a:b1:d1:dc:11:35: 62:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:E0:51:5E:39:00:A6:2B:20:29:AC:12:23:57:DF:06:0E:63:57:D0 X509v3 Authority Key Identifier: keyid:E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:4b:7d:d2:2a:31:21:22:55:03:c2:ba:d7:60:34:78:8f:54: b0:50:ed:2d:ef:43:69:53:b2:53:a1:b3:6f:0b:b8:7c:ef:83: cd:91:63:85:06:ed:95:1e:b5:6c:6e:be:53:05:22:29:01:0b: 3d:69:de:e2:8c:5d:8e:72:67:70:03:27:91:d8:7c:51:35:7d: e5:5b:38:db:46:e4:8c:21:c1:c4:33:64:d0:50:99:a1:4c:f9: 63:b5:c1:6d:0c:29:96:27:98:55:e3:b6:59:4c:8f:0d:c5:5b: 4e:a5:15:87:63:0c:ab:25:e3:1f:a7:c6:d1:e1:cf:17:68:9a: b5:20:32:e5:ae:77:7e:e0:46:69:c5:88:08:40:d5:b4:22:73: 1a:8e:03:96:6d:f3:14:ad:e0:f2:fc:66:c3:a2:0d:b0:b9:47: 8a:19:88:09:20:59:bf:b1:ab:de:80:31:fd:7d:90:67:16:4b: f7:26:17:92:c4:11:10:b1:6e:cf:20:84:bd:4b:ce:8e:0e:2f: 82:6c:8c:5d:45:1d:76:97:ad:bb:3b:ee:ec:f9:b1:3e:4f:e3: d3:9e:b5:b7:b9:81:12:3b:80:1b:83:ef:12:fa:88:75:45:e2: ee:38:e3:f4:31:b5:78:25:d2:27:cd:02:a8:d1:b7:a1:91:5e: 90:fc:95:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzvdWO90/OT0zH1rx6BOIoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5YWFiMTQ0NjEwMGE4ZmNlMDNkZjE5ZDc1NWUwNjMyOWVl MjQ3MTMwHhcNMjYwMTI1MDYwMTAyWhcNMjYwMTI2MDYwMTAyWjAzMTEwLwYDVQQD EyhkZmUwNTE1ZTM5MDBhNjJiMjAyOWFjMTIyMzU3ZGYwNjBlNjM1N2QwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvl0oIQnC8tvYla0Y2BTk+bRuxGt QMYU1E6W0+bw54JyQi/guGjzOVV0mMYZ3Ckr0pm/Bret+uI5vji6muZljcTR7iUh Xto14tQ0eEok5c4DZpZz8+WpE6/XjIbPaygkaNKnCgON2ZmUyGa/qmJpM3dKhOoZ c0sn1p4c8HKFhm4n8JWtOTuXAMwyxME4OdAKSO4i88xqp4L7R+SBK1vwIRJqLgOF VvCeNeVCVFrN4UpgEZhjIdOaDyJ1stPAwNznTKVpFO4LoPx445jVwVBf6oCHbvgX 8b9xPyJf8dEE0+RTGAquB4ukaXWN4a20nesj7BQTqxLg1WGasdHcETVifQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN/gUV45AKYrICmsEiNX3wYOY1fQMB8GA1UdIwQY MBaAFOmqsURhAKj84D3xnXVeBjKe4kcTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmFxeFJHRUFxUHpnUGZHZGRWNEdNcDdpUnhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS83MWUwOWMtMjhmMy00ODI1LTgwNmYt YTBkYzM1NGY0Y2EzLzEvNmFxeFJHRUFxUHpnUGZHZGRWNEdNcDdpUnhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS83MWUwOWMtMjhmMy00ODI1LTgwNmYtYTBkYzM1NGY0Y2Ez LzEvNmFxeFJHRUFxUHpnUGZHZGRWNEdNcDdpUnhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIEt90iox ISJVA8K612A0eI9UsFDtLe9DaVOyU6Gzbwu4fO+DzZFjhQbtlR61bG6+UwUiKQEL PWne4oxdjnJncAMnkdh8UTV95Vs420bkjCHBxDNk0FCZoUz5Y7XBbQwplieYVeO2 WUyPDcVbTqUVh2MMqyXjH6fG0eHPF2iatSAy5a53fuBGacWICEDVtCJzGo4Dlm3z FK3g8vxmw6INsLlHihmICSBZv7Gr3oAx/X2QZxZL9yYXksQRELFuzyCEvUvOjg4v gmyMXUUddpetuzvu7PmxPk/j0561t7mBEjuAG4PvEvqIdUXi7jjj9DG1eCXSJ80C qNG3oZFekPyVbg== -----END CERTIFICATE-----Generated at Sun Jan 25 14:50:22 2026 by rpki-client