This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.mft File: 6k4ChliRLmlpfBhVO5Up89HOQF0.mft (raw, json) Hash identifier: rLpmy+I2orFr8xW5j3LtLhLaif3T51Cdi0l3Gvh+twY= Subject key identifier: 92:9B:A3:A4:85:0B:98:6E:21:AD:88:44:36:DB:A6:94:32:50:33:34 Authority key identifier: EA:4E:02:86:58:91:2E:69:69:7C:18:55:3B:95:29:F3:D1:CE:40:5D Certificate issuer: /CN=ea4e028658912e69697c18553b9529f3d1ce405d Certificate serial: 019BF687FCE6EA6F367C1E99418AB377FBEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6k4ChliRLmlpfBhVO5Up89HOQF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.mft Manifest number: 1132 Signing time: Sun 25 Jan 2026 19:01:05 +0000 Manifest this update: Sun 25 Jan 2026 19:01:05 +0000 Manifest next update: Mon 26 Jan 2026 19:01:05 +0000 Files and hashes: 1: 6k4ChliRLmlpfBhVO5Up89HOQF0.crl (hash: /LE+Bj8uJ3yyLCtNIYakvqBcL6qixMpseLh7fdrJIGs=) 2: vHb2PXbLOQDiEgmgNVeM25O_uYw.roa (hash: A0zzK6+DweI9ov6X0YBv5MoDDd8w4Zw2H0qKl9mjATM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.crl rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.mft rsync://rpki.ripe.net/repository/DEFAULT/6k4ChliRLmlpfBhVO5Up89HOQF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:fc:e6:ea:6f:36:7c:1e:99:41:8a:b3:77:fb:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea4e028658912e69697c18553b9529f3d1ce405d Validity Not Before: Jan 25 19:01:05 2026 GMT Not After : Jan 26 19:01:05 2026 GMT Subject: CN=929ba3a4850b986e21ad884436dba69432503334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:db:ef:a5:81:9e:43:c8:f6:a0:c4:f1:4d:e8: a8:72:08:79:01:54:a0:c5:45:79:42:c1:5b:8f:76: 11:22:ae:3c:06:02:02:00:92:72:1a:c1:f8:d0:05: c6:c7:09:ad:b0:ce:33:b9:e4:40:b9:64:a8:39:21: 1a:54:a9:2a:1c:ec:88:73:ea:7b:7e:d5:02:b9:af: 6f:45:e8:a0:a6:56:f1:d9:d1:24:5c:5b:92:4f:1e: c7:b7:c2:f2:a0:de:bd:0a:34:ea:8a:cf:d0:33:f0: 50:d9:3f:a3:3d:14:51:0b:e4:c3:06:78:67:2b:4b: d7:0b:4e:a9:ac:a4:55:88:58:63:0c:6f:7c:6b:d7: a0:0f:5f:68:de:a0:c6:57:cc:24:a2:b5:b4:2b:1f: 8d:ff:70:4a:f5:54:56:23:02:46:03:75:ef:7d:52: e2:ec:6f:5b:5a:cf:cb:60:5e:6e:5c:61:ae:dc:d8: 24:da:76:98:64:b7:95:59:b9:f9:4d:2d:a5:e8:77: b7:04:0a:9b:36:e2:93:5d:90:3b:a2:10:26:db:15: 02:b2:b4:99:10:88:37:66:fd:bd:23:1a:3a:70:1f: 4c:98:fb:36:5a:fd:21:ee:8f:76:e1:54:af:b5:19: cc:a9:1a:b0:08:2f:14:6f:a8:52:66:66:ea:ab:64: 09:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:9B:A3:A4:85:0B:98:6E:21:AD:88:44:36:DB:A6:94:32:50:33:34 X509v3 Authority Key Identifier: keyid:EA:4E:02:86:58:91:2E:69:69:7C:18:55:3B:95:29:F3:D1:CE:40:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6k4ChliRLmlpfBhVO5Up89HOQF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:76:e8:2d:25:10:a1:09:2d:e2:66:01:51:db:77:d6:37:b9: 68:0e:28:94:23:e8:5b:57:4b:52:ad:81:0f:4b:ae:9e:23:02: 99:d1:26:10:fd:09:db:2a:f9:65:ed:75:b3:6b:b4:4b:6e:5e: dc:e6:fe:7a:b4:61:42:51:16:ad:02:23:b7:d7:a1:9f:59:97: ac:9d:8c:45:99:6e:88:bc:cc:9c:92:16:eb:78:c7:37:4d:89: 64:72:33:31:1d:11:7a:07:8a:e0:20:79:a2:92:d9:e8:35:59: 5c:0e:88:b7:34:40:a2:50:de:7f:7e:0f:0d:3c:d0:ab:4e:a8: 9d:cb:e2:35:21:6d:d5:4d:a0:d8:84:bb:3a:05:06:e8:53:fc: 76:ce:a6:a8:d7:1d:59:b9:8c:ee:6b:d8:e0:09:57:d8:1a:46: 8b:c0:f0:15:79:51:7c:cb:9d:a8:c7:62:1f:6f:67:20:1e:d1: 74:d4:16:05:e4:80:36:fe:47:8c:ae:46:ea:73:d1:3b:db:b6: 46:84:fe:cf:02:15:61:52:29:70:db:14:19:4b:04:ae:ab:b2: ba:cf:dd:1b:05:a0:d9:68:9b:79:e6:60:20:d4:77:2c:ba:c9: a1:80:f7:dd:6a:9a:12:d4:b6:af:2e:a9:4f:74:0a:0b:c5:09: c5:57:e6:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h/zm6m82fB6ZQYqzd/vuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhNGUwMjg2NTg5MTJlNjk2OTdjMTg1NTNiOTUyOWYzZDFj ZTQwNWQwHhcNMjYwMTI1MTkwMTA1WhcNMjYwMTI2MTkwMTA1WjAzMTEwLwYDVQQD Eyg5MjliYTNhNDg1MGI5ODZlMjFhZDg4NDQzNmRiYTY5NDMyNTAzMzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtvvpYGeQ8j2oMTxTeiocgh5AVSg xUV5QsFbj3YRIq48BgICAJJyGsH40AXGxwmtsM4zueRAuWSoOSEaVKkqHOyIc+p7 ftUCua9vReigplbx2dEkXFuSTx7Ht8LyoN69CjTqis/QM/BQ2T+jPRRRC+TDBnhn K0vXC06prKRViFhjDG98a9egD19o3qDGV8wkorW0Kx+N/3BK9VRWIwJGA3XvfVLi 7G9bWs/LYF5uXGGu3Ngk2naYZLeVWbn5TS2l6He3BAqbNuKTXZA7ohAm2xUCsrSZ EIg3Zv29Ixo6cB9MmPs2Wv0h7o924VSvtRnMqRqwCC8Ub6hSZmbqq2QJVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJKbo6SFC5huIa2IRDbbppQyUDM0MB8GA1UdIwQY MBaAFOpOAoZYkS5paXwYVTuVKfPRzkBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNms0Q2hsaVJMbWxwZkJoVk81VXA4OUhPUUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8xNDU2MzEtYjYzZS00ODA5LWI0YWIt YmNlZjllMzIyZjJhLzEvNms0Q2hsaVJMbWxwZkJoVk81VXA4OUhPUUYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8xNDU2MzEtYjYzZS00ODA5LWI0YWItYmNlZjllMzIyZjJh LzEvNms0Q2hsaVJMbWxwZkJoVk81VXA4OUhPUUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlXboLSUQ oQkt4mYBUdt31je5aA4olCPoW1dLUq2BD0uuniMCmdEmEP0J2yr5Ze11s2u0S25e 3Ob+erRhQlEWrQIjt9ehn1mXrJ2MRZluiLzMnJIW63jHN02JZHIzMR0RegeK4CB5 opLZ6DVZXA6ItzRAolDef34PDTzQq06oncviNSFt1U2g2IS7OgUG6FP8ds6mqNcd WbmM7mvY4AlX2BpGi8DwFXlRfMudqMdiH29nIB7RdNQWBeSANv5HjK5G6nPRO9u2 RoT+zwIVYVIpcNsUGUsErquyus/dGwWg2WibeeZgINR3LLrJoYD33WqaEtS2ry6p T3QKC8UJxVfmnw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:34:27 2026 by rpki-client