This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.mft File: 6lUOVOR2bVdl0PPQYd8ddNpViXM.mft (raw, json) Hash identifier: bjTRvYQsaiolfalpBy08ooevx5S0o6CUFu0HM1cztK8= Subject key identifier: 47:0F:C2:59:17:96:5A:F9:D1:6B:51:E4:5B:74:AF:60:52:E7:B0:A3 Authority key identifier: EA:55:0E:54:E4:76:6D:57:65:D0:F3:D0:61:DF:1D:74:DA:55:89:73 Certificate issuer: /CN=ea550e54e4766d5765d0f3d061df1d74da558973 Certificate serial: 019BF53E8D86592EC4086D6027611A478081 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lUOVOR2bVdl0PPQYd8ddNpViXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.mft Manifest number: 0F39 Signing time: Sun 25 Jan 2026 13:01:15 +0000 Manifest this update: Sun 25 Jan 2026 13:01:15 +0000 Manifest next update: Mon 26 Jan 2026 13:01:15 +0000 Files and hashes: 1: 6lUOVOR2bVdl0PPQYd8ddNpViXM.crl (hash: azXb9CtnRt8O+JLT2NWkm99mEy8xF7OTHne+SPitznw=) 2: NCFpucR4-r83kyx2khhJCgLkruU.roa (hash: TaSCKdlQI8N/cQC2z/f6Jx4oLGmqI6E65JRRfPyvaiA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.crl rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.mft rsync://rpki.ripe.net/repository/DEFAULT/6lUOVOR2bVdl0PPQYd8ddNpViXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:8d:86:59:2e:c4:08:6d:60:27:61:1a:47:80:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea550e54e4766d5765d0f3d061df1d74da558973 Validity Not Before: Jan 25 13:01:15 2026 GMT Not After : Jan 26 13:01:15 2026 GMT Subject: CN=470fc25917965af9d16b51e45b74af6052e7b0a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:eb:e3:aa:14:1a:18:1c:22:cb:bb:1b:12:c7: ce:de:35:61:c6:8c:a9:aa:a7:d4:3f:76:cc:48:a4: a7:01:ae:92:8c:70:7b:1c:a5:3a:7c:48:7f:d9:17: 33:97:cc:79:03:36:e3:98:4a:30:d5:3a:88:39:6d: 6c:c5:cd:26:67:f3:97:fa:ae:df:7f:c3:7a:2e:49: 41:18:52:f9:30:a1:bb:97:36:09:eb:7e:65:f3:09: 8c:0b:d3:c4:95:ea:5c:81:be:ac:f1:ea:44:3e:76: ad:cb:46:b6:78:7d:6d:fc:0a:ca:76:ee:d1:d7:b3: bf:2d:78:53:26:12:3a:98:c8:9b:b0:76:b7:83:1d: 65:80:76:c5:e7:13:bc:d5:34:ce:62:7f:b3:d1:72: 83:1a:03:6d:b4:05:5a:c1:f1:65:16:b5:ac:94:ec: 1f:0c:86:bb:b1:2f:ed:51:96:41:20:7d:25:ed:2e: ac:a1:04:be:7d:f4:00:01:6b:87:34:67:24:e0:f3: d0:0d:1e:a7:e9:9c:48:f9:e2:20:df:00:ec:5e:78: 1b:11:a8:f9:9c:a9:85:06:76:bc:0e:42:b0:19:42: 54:8f:6f:58:f8:34:1e:21:95:fb:33:68:a4:ef:85: 99:fe:00:57:7e:90:a3:be:2a:a4:ff:c0:06:4d:3a: a2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:0F:C2:59:17:96:5A:F9:D1:6B:51:E4:5B:74:AF:60:52:E7:B0:A3 X509v3 Authority Key Identifier: keyid:EA:55:0E:54:E4:76:6D:57:65:D0:F3:D0:61:DF:1D:74:DA:55:89:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lUOVOR2bVdl0PPQYd8ddNpViXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:49:e9:fc:f1:44:f0:e5:07:23:49:86:1f:8c:fb:8d:b2:4e: 03:4b:fa:73:37:29:84:f2:55:f5:f2:25:f3:df:b0:84:0b:d7: 99:86:5e:da:1c:1e:5f:28:46:80:d4:81:30:da:6b:2f:0c:6d: e9:c4:4c:a1:e5:7e:30:3d:c1:9f:d2:6d:b2:79:d4:a9:26:60: 2d:ac:4a:9d:e2:d4:d3:8d:e0:3e:3b:fb:6f:c2:d2:5c:81:46: b0:47:ee:85:7b:f8:e2:c4:31:76:a2:3f:66:e9:86:69:03:02: fa:9c:95:d3:46:b2:b3:a2:09:41:2e:df:e1:8e:e5:0c:d5:53: 42:56:39:41:f2:e9:6e:32:66:19:cc:83:61:6d:f2:0e:a1:af: 8b:77:a0:f1:7a:d0:41:2e:5d:36:31:c9:2e:ec:5c:b7:58:f1: dd:2d:73:2e:ae:0f:d4:10:b1:9a:9a:37:7a:82:d2:86:63:0f: 50:12:10:4c:09:52:a6:79:92:9d:de:0d:b6:c5:24:36:22:42: b4:bf:0e:f2:37:d0:f1:8a:44:c2:7e:f1:49:05:19:15:c9:f5: 59:e7:79:c2:84:4a:0d:52:c7:ae:91:71:77:c2:2a:f8:f1:67: 27:f0:8c:ff:03:ec:ac:a2:2d:25:fc:90:8c:ab:24:ac:a4:42: d1:a8:ce:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1Po2GWS7ECG1gJ2EaR4CBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhNTUwZTU0ZTQ3NjZkNTc2NWQwZjNkMDYxZGYxZDc0ZGE1 NTg5NzMwHhcNMjYwMTI1MTMwMTE1WhcNMjYwMTI2MTMwMTE1WjAzMTEwLwYDVQQD Eyg0NzBmYzI1OTE3OTY1YWY5ZDE2YjUxZTQ1Yjc0YWY2MDUyZTdiMGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsevjqhQaGBwiy7sbEsfO3jVhxoyp qqfUP3bMSKSnAa6SjHB7HKU6fEh/2Rczl8x5AzbjmEow1TqIOW1sxc0mZ/OX+q7f f8N6LklBGFL5MKG7lzYJ635l8wmMC9PElepcgb6s8epEPnaty0a2eH1t/ArKdu7R 17O/LXhTJhI6mMibsHa3gx1lgHbF5xO81TTOYn+z0XKDGgNttAVawfFlFrWslOwf DIa7sS/tUZZBIH0l7S6soQS+ffQAAWuHNGck4PPQDR6n6ZxI+eIg3wDsXngbEaj5 nKmFBna8DkKwGUJUj29Y+DQeIZX7M2ik74WZ/gBXfpCjviqk/8AGTTqiTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEcPwlkXllr50WtR5Ft0r2BS57CjMB8GA1UdIwQY MBaAFOpVDlTkdm1XZdDz0GHfHXTaVYlzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmxVT1ZPUjJiVmRsMFBQUVlkOGRkTnBWaVhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82OGY2MzctMzEyMS00MGY3LWI3OGYt OWM5ZjIwOTAzMjlhLzEvNmxVT1ZPUjJiVmRsMFBQUVlkOGRkTnBWaVhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC82OGY2MzctMzEyMS00MGY3LWI3OGYtOWM5ZjIwOTAzMjlh LzEvNmxVT1ZPUjJiVmRsMFBQUVlkOGRkTnBWaVhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh0np/PFE 8OUHI0mGH4z7jbJOA0v6czcphPJV9fIl89+whAvXmYZe2hweXyhGgNSBMNprLwxt 6cRMoeV+MD3Bn9JtsnnUqSZgLaxKneLU043gPjv7b8LSXIFGsEfuhXv44sQxdqI/ ZumGaQMC+pyV00ays6IJQS7f4Y7lDNVTQlY5QfLpbjJmGcyDYW3yDqGvi3eg8XrQ QS5dNjHJLuxct1jx3S1zLq4P1BCxmpo3eoLShmMPUBIQTAlSpnmSnd4NtsUkNiJC tL8O8jfQ8YpEwn7xSQUZFcn1Wed5woRKDVLHrpFxd8Iq+PFnJ/CM/wPsrKItJfyQ jKskrKRC0ajOCg== -----END CERTIFICATE-----Generated at Sun Jan 25 21:11:00 2026 by rpki-client