This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft File: 6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft (raw, json) Hash identifier: jezvHAdwMDJNoPv+n3K1uKVO2PqpSgaxGDc+e7az87c= Subject key identifier: 98:C2:B8:3C:9B:CD:44:D1:A5:69:38:3E:99:66:1A:58:AE:A4:A3:94 Authority key identifier: E8:96:50:57:F4:AA:09:9B:0A:91:9F:3F:0B:D4:A6:48:8E:30:C3:48 Certificate issuer: /CN=e8965057f4aa099b0a919f3f0bd4a6488e30c348 Certificate serial: 019BF6BF380562573ADCC0EB05EE381AC497 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 20:01:25 +0000 Manifest this update: Sun 25 Jan 2026 20:01:25 +0000 Manifest next update: Mon 26 Jan 2026 20:01:25 +0000 Files and hashes: 1: 6JZQV_SqCZsKkZ8_C9SmSI4ww0g.crl (hash: +g9t8OvDZ7QVeuBgivIstadAFILljMr1ghL2PbIRNkY=) 2: HICvEHKXiwO8tUnXw2THhezIHTg.roa (hash: m259oPsH+iF/F010gAj+3VHPjH7EbopMEIXrwuwaC7A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.crl rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft rsync://rpki.ripe.net/repository/DEFAULT/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:38:05:62:57:3a:dc:c0:eb:05:ee:38:1a:c4:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8965057f4aa099b0a919f3f0bd4a6488e30c348 Validity Not Before: Jan 25 20:01:25 2026 GMT Not After : Jan 26 20:01:25 2026 GMT Subject: CN=98c2b83c9bcd44d1a569383e99661a58aea4a394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:54:7d:07:7b:84:6a:3c:f5:74:e2:eb:e2:9c: 55:65:84:fa:3c:65:6d:0d:03:05:07:54:e0:3c:d1: 1b:fd:5c:a4:b4:f5:57:4c:47:99:a9:17:aa:74:a0: 88:e0:7d:0d:90:e9:ed:c9:31:b6:20:e9:92:55:35: 4d:ba:28:72:cf:4a:a3:5c:3b:5a:7f:d8:61:e1:65: 83:08:38:5b:92:b7:0f:3b:01:64:87:0f:af:03:c1: 85:8d:f7:0b:6f:38:0e:20:54:07:ad:83:85:93:f4: 54:da:4f:3b:0e:d7:87:41:0d:31:ee:64:60:12:1d: 39:d5:6d:63:da:d4:16:fd:47:da:58:de:e1:41:21: 36:4c:47:f3:00:da:9f:17:51:39:66:d1:10:5e:fe: 6c:94:7b:81:1c:31:ee:6b:ba:92:4a:68:ad:4a:58: 99:44:95:12:d7:06:bc:fb:68:59:d4:55:72:0a:b1: 0b:f4:ee:03:d2:71:8e:49:db:f9:89:b8:9c:18:e5: ae:92:94:cf:54:88:1b:57:60:d2:81:0f:47:52:ef: d6:5c:55:53:1b:0f:a0:43:a1:29:b9:37:9d:bd:81: 0e:c3:2e:3e:bf:cc:02:35:10:10:5e:dc:4b:f7:6e: 32:62:33:e3:da:4f:73:89:6a:9c:3d:18:f8:9a:61: 40:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:C2:B8:3C:9B:CD:44:D1:A5:69:38:3E:99:66:1A:58:AE:A4:A3:94 X509v3 Authority Key Identifier: keyid:E8:96:50:57:F4:AA:09:9B:0A:91:9F:3F:0B:D4:A6:48:8E:30:C3:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:cf:02:29:de:44:67:6a:79:0b:fc:8f:84:13:83:13:c0:a5: 66:da:84:0c:ec:a3:29:6d:69:fa:82:53:06:99:f1:1d:89:b5: 82:70:b6:62:b5:5d:d1:3e:97:f6:6c:1b:ae:82:eb:c9:db:e5: 2b:f2:e2:57:8c:d4:45:22:58:50:2e:31:de:70:e9:b7:26:25: c4:30:f4:60:ab:75:56:45:e1:49:37:e6:26:33:1d:18:29:19: dd:dc:50:59:a9:e5:72:19:79:46:ff:55:e9:3c:42:dd:af:47: 00:94:9d:a5:f0:20:ed:31:51:d2:32:a1:fb:e2:07:a5:74:de: 48:31:8b:27:75:64:08:81:11:02:53:be:5f:50:c4:af:be:50: cd:ae:86:bf:06:74:a9:08:da:2a:a5:ad:3f:5c:34:7c:16:8a: c4:3b:59:01:3e:5a:df:e6:44:89:24:23:6b:ae:c5:fa:6d:81: a7:4f:68:bb:25:4c:8c:61:c4:82:bf:30:bd:f6:8a:f7:43:60: cf:ff:96:70:81:ea:08:29:3f:51:31:c4:39:8a:6a:fe:b0:87: b0:22:ff:d9:36:72:47:f8:94:37:a4:96:e3:cf:90:1f:43:d6: aa:3f:b9:17:b1:03:f0:f5:d7:e8:bd:ca:4c:bc:2d:85:24:b4: 04:17:0d:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vzgFYlc63MDrBe44GsSXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4OTY1MDU3ZjRhYTA5OWIwYTkxOWYzZjBiZDRhNjQ4OGUz MGMzNDgwHhcNMjYwMTI1MjAwMTI1WhcNMjYwMTI2MjAwMTI1WjAzMTEwLwYDVQQD Eyg5OGMyYjgzYzliY2Q0NGQxYTU2OTM4M2U5OTY2MWE1OGFlYTRhMzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlR9B3uEajz1dOLr4pxVZYT6PGVt DQMFB1TgPNEb/VyktPVXTEeZqReqdKCI4H0NkOntyTG2IOmSVTVNuihyz0qjXDta f9hh4WWDCDhbkrcPOwFkhw+vA8GFjfcLbzgOIFQHrYOFk/RU2k87DteHQQ0x7mRg Eh051W1j2tQW/UfaWN7hQSE2TEfzANqfF1E5ZtEQXv5slHuBHDHua7qSSmitSliZ RJUS1wa8+2hZ1FVyCrEL9O4D0nGOSdv5ibicGOWukpTPVIgbV2DSgQ9HUu/WXFVT Gw+gQ6EpuTedvYEOwy4+v8wCNRAQXtxL924yYjPj2k9ziWqcPRj4mmFAaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJjCuDybzUTRpWk4PplmGliupKOUMB8GA1UdIwQY MBaAFOiWUFf0qgmbCpGfPwvUpkiOMMNIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkpaUVZfU3FDWnNLa1o4X0M5U21TSTR3dzBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS85NjM5YjItYTlkYS00MzczLWI2NTEt ODYzN2FiZjczMWYzLzEvNkpaUVZfU3FDWnNLa1o4X0M5U21TSTR3dzBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS85NjM5YjItYTlkYS00MzczLWI2NTEtODYzN2FiZjczMWYz LzEvNkpaUVZfU3FDWnNLa1o4X0M5U21TSTR3dzBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcM8CKd5E Z2p5C/yPhBODE8ClZtqEDOyjKW1p+oJTBpnxHYm1gnC2YrVd0T6X9mwbroLrydvl K/LiV4zURSJYUC4x3nDptyYlxDD0YKt1VkXhSTfmJjMdGCkZ3dxQWanlchl5Rv9V 6TxC3a9HAJSdpfAg7TFR0jKh++IHpXTeSDGLJ3VkCIERAlO+X1DEr75Qza6GvwZ0 qQjaKqWtP1w0fBaKxDtZAT5a3+ZEiSQja67F+m2Bp09ouyVMjGHEgr8wvfaK90Ng z/+WcIHqCCk/UTHEOYpq/rCHsCL/2TZyR/iUN6SW48+QH0PWqj+5F7ED8PXX6L3K TLwthSS0BBcNLQ== -----END CERTIFICATE-----Generated at Mon Jan 26 00:20:44 2026 by rpki-client