This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft File: 6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft (raw, json) Hash identifier: txbN8nqUzrkas8dGoFFwqiv2Dx/7ly+Odj8reD0B5Ws= Subject key identifier: 04:A0:EB:BF:3B:14:0F:2B:C4:94:51:6A:79:AE:2D:EC:8B:FD:C8:C8 Authority key identifier: EA:75:03:B8:3F:A0:9A:75:BC:B9:10:75:40:0F:83:07:A6:67:B8:ED Certificate issuer: /CN=ea7503b83fa09a75bcb91075400f8307a667b8ed Certificate serial: 019BF6510466AC9D1D95948EBD26FB23B41E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft Manifest number: 0EDE Signing time: Sun 25 Jan 2026 18:01:03 +0000 Manifest this update: Sun 25 Jan 2026 18:01:03 +0000 Manifest next update: Mon 26 Jan 2026 18:01:03 +0000 Files and hashes: 1: 6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl (hash: hRcEw+C2IymHaW/FsLqL+/RGfen7eJucV81E5hekv/c=) 2: rnz0AGmhyjc03zeDgVmDHn1Nzi4.roa (hash: XRH72JOXK+p4Pq8ZDCdIn3aOnofnmhSgP4XUJzURHnQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:04:66:ac:9d:1d:95:94:8e:bd:26:fb:23:b4:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea7503b83fa09a75bcb91075400f8307a667b8ed Validity Not Before: Jan 25 18:01:03 2026 GMT Not After : Jan 26 18:01:03 2026 GMT Subject: CN=04a0ebbf3b140f2bc494516a79ae2dec8bfdc8c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d8:6a:82:69:d8:74:3c:32:6d:16:7e:33:51: 53:4d:83:43:5c:04:50:d7:52:6f:7b:20:5d:b6:bb: 46:59:70:96:9b:c7:86:d7:eb:da:ec:97:44:33:42: 8a:0f:14:e3:71:75:ea:90:21:a1:db:61:df:79:85: 6c:fe:15:1c:72:00:04:08:8f:6f:11:b7:77:d3:0b: 25:17:4f:54:1d:0f:31:ba:78:cd:cc:77:7c:19:ac: 94:ae:e1:09:dd:0e:54:24:d4:d6:ac:7f:e7:df:cc: fb:26:64:62:02:7f:f9:47:71:0c:fd:c0:b1:6c:55: 07:07:32:eb:0f:db:75:eb:89:6f:df:7a:3c:69:be: 78:af:1f:f8:73:9f:da:3c:95:47:be:6e:49:a8:4e: 26:bc:b2:a5:7e:2f:86:80:9d:54:b5:91:83:ac:7b: 91:13:3a:bf:29:40:9e:1c:2e:d6:65:41:3d:b1:98: 08:79:08:1c:99:cd:ae:67:85:17:b6:9e:de:bf:33: 0e:bd:d3:ed:78:d9:97:81:d6:0e:50:cb:38:8f:0d: 09:02:ee:d6:3b:41:9e:70:86:87:b7:5f:61:dd:f2: 28:56:c0:cb:a3:bf:ca:c8:59:db:ab:81:a0:b5:db: 36:db:3d:84:0c:4a:f8:3f:a0:57:d8:c5:33:6a:bd: f9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:A0:EB:BF:3B:14:0F:2B:C4:94:51:6A:79:AE:2D:EC:8B:FD:C8:C8 X509v3 Authority Key Identifier: keyid:EA:75:03:B8:3F:A0:9A:75:BC:B9:10:75:40:0F:83:07:A6:67:B8:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:e3:f8:45:d8:ac:3c:1a:21:dc:d4:1a:18:93:f9:f2:fd:62: 22:23:26:5f:54:3d:bc:d8:b9:fa:89:03:95:36:17:ee:8e:72: 37:dd:ed:6a:af:9d:41:4d:52:89:8e:7b:70:33:ee:9a:b9:23: 8d:60:78:e8:1c:d0:49:30:81:32:ea:86:18:07:40:65:76:ae: 40:e6:6e:f8:91:5e:3a:82:bb:e4:96:19:63:d6:f8:0c:33:2b: 44:1d:c7:55:1a:db:9b:7c:de:5f:18:43:10:1d:b1:18:8c:1d: 7e:41:3f:42:42:94:23:56:59:bb:17:57:e9:1f:29:63:63:dc: 43:4c:09:4b:fb:56:42:33:20:e6:2d:91:ee:2c:10:2a:3b:2b: 14:d5:91:e3:f3:bf:5f:8b:d0:0f:44:91:44:e3:83:d1:2d:8f: f6:05:c6:3c:43:70:08:3f:b1:d7:85:d2:de:d2:02:e1:cf:9f: 8e:3a:b8:1e:77:91:9a:7d:0b:60:f3:9f:22:3d:fb:8e:f2:69: ef:d7:03:c3:aa:61:87:50:c7:a1:6e:57:31:f2:e8:29:b6:3a: 0d:9e:e2:a5:f6:cd:a4:e4:0a:9f:0b:64:ed:56:59:db:10:bd: 71:c6:72:46:47:06:b1:8b:43:83:55:74:49:f7:1c:b6:a1:44: 7f:5a:0d:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UQRmrJ0dlZSOvSb7I7QeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhNzUwM2I4M2ZhMDlhNzViY2I5MTA3NTQwMGY4MzA3YTY2 N2I4ZWQwHhcNMjYwMTI1MTgwMTAzWhcNMjYwMTI2MTgwMTAzWjAzMTEwLwYDVQQD EygwNGEwZWJiZjNiMTQwZjJiYzQ5NDUxNmE3OWFlMmRlYzhiZmRjOGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdhqgmnYdDwybRZ+M1FTTYNDXARQ 11JveyBdtrtGWXCWm8eG1+va7JdEM0KKDxTjcXXqkCGh22HfeYVs/hUccgAECI9v Ebd30wslF09UHQ8xunjNzHd8GayUruEJ3Q5UJNTWrH/n38z7JmRiAn/5R3EM/cCx bFUHBzLrD9t164lv33o8ab54rx/4c5/aPJVHvm5JqE4mvLKlfi+GgJ1UtZGDrHuR Ezq/KUCeHC7WZUE9sZgIeQgcmc2uZ4UXtp7evzMOvdPteNmXgdYOUMs4jw0JAu7W O0GecIaHt19h3fIoVsDLo7/KyFnbq4Ggtds22z2EDEr4P6BX2MUzar353QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFASg6787FA8rxJRRanmuLeyL/cjIMB8GA1UdIwQY MBaAFOp1A7g/oJp1vLkQdUAPgwemZ7jtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNm5VRHVELWdtblc4dVJCMVFBLURCNlpudU8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9jNDIxNjAtZDZmNC00ODJjLWJmNjIt NjIxNDBiMjAyZWI0LzEvNm5VRHVELWdtblc4dVJCMVFBLURCNlpudU8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9jNDIxNjAtZDZmNC00ODJjLWJmNjItNjIxNDBiMjAyZWI0 LzEvNm5VRHVELWdtblc4dVJCMVFBLURCNlpudU8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ+P4Rdis PBoh3NQaGJP58v1iIiMmX1Q9vNi5+okDlTYX7o5yN93taq+dQU1SiY57cDPumrkj jWB46BzQSTCBMuqGGAdAZXauQOZu+JFeOoK75JYZY9b4DDMrRB3HVRrbm3zeXxhD EB2xGIwdfkE/QkKUI1ZZuxdX6R8pY2PcQ0wJS/tWQjMg5i2R7iwQKjsrFNWR4/O/ X4vQD0SRROOD0S2P9gXGPENwCD+x14XS3tIC4c+fjjq4HneRmn0LYPOfIj37jvJp 79cDw6phh1DHoW5XMfLoKbY6DZ7ipfbNpOQKnwtk7VZZ2xC9ccZyRkcGsYtDg1V0 SfcctqFEf1oNAA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:33:20 2026 by rpki-client