This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft File: 6Oz45OybRCqVN0wqPH54Swdhh8w.mft (raw, json) Hash identifier: 303aAXorpUDyBSXo/i4Vf3/Faa4+RlnJEu8pJW+C/do= Subject key identifier: AF:30:0B:65:5F:22:2C:56:42:9C:1C:25:E2:AA:12:A0:7D:31:06:BC Authority key identifier: E8:EC:F8:E4:EC:9B:44:2A:95:37:4C:2A:3C:7E:78:4B:07:61:87:CC Certificate issuer: /CN=e8ecf8e4ec9b442a95374c2a3c7e784b076187cc Certificate serial: 019BF72C9A8F92BE27005A5C1C8F99A33843 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Oz45OybRCqVN0wqPH54Swdhh8w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft Manifest number: 177A Signing time: Sun 25 Jan 2026 22:00:54 +0000 Manifest this update: Sun 25 Jan 2026 22:00:54 +0000 Manifest next update: Mon 26 Jan 2026 22:00:54 +0000 Files and hashes: 1: 6Oz45OybRCqVN0wqPH54Swdhh8w.crl (hash: uO9Z2dNzpkDaI5Yydd7goAsCr5TV93IYN/8CCKRN0OA=) 2: sG7Jxd3j5bPpODxju8fXU3EM93w.roa (hash: bMzMmqgYSEERUbsFyNXWG2WNFtoS/kvz11SCChzG8x8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft rsync://rpki.ripe.net/repository/DEFAULT/6Oz45OybRCqVN0wqPH54Swdhh8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:9a:8f:92:be:27:00:5a:5c:1c:8f:99:a3:38:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8ecf8e4ec9b442a95374c2a3c7e784b076187cc Validity Not Before: Jan 25 22:00:54 2026 GMT Not After : Jan 26 22:00:54 2026 GMT Subject: CN=af300b655f222c56429c1c25e2aa12a07d3106bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:b1:ea:ab:4c:6e:93:a6:7a:3a:6b:79:c2:dc: 04:25:12:43:ee:6c:76:bc:87:44:2a:98:6a:0e:7b: a3:bb:85:81:ea:31:7e:52:cf:cc:b4:b4:91:78:7e: 5b:5a:11:e1:8f:f6:ae:90:10:bf:60:42:00:63:a8: 6a:6d:da:a5:ce:f1:9a:60:76:c4:b1:76:04:60:dc: 03:3c:e4:6e:bd:ee:c3:23:07:45:9f:50:ff:4f:be: 11:de:19:2b:bd:5e:71:2a:81:80:0c:76:51:3b:6a: 59:62:6a:ec:1d:33:91:c8:01:de:d1:95:ae:4c:38: 0b:af:ec:db:2e:e7:ee:cb:8b:3c:1a:b3:b7:4e:b2: 2f:4c:5b:ca:b7:62:e5:e7:60:08:49:18:9e:c6:02: bb:77:03:bd:b4:3d:18:89:c4:df:66:d0:4f:c3:81: d3:fa:7a:c3:f9:88:02:25:a9:45:e0:2c:ac:a7:d8: f2:d1:15:2f:fe:41:87:cf:33:0c:73:25:6b:9e:40: 18:0d:6f:b2:d0:a2:0d:8b:33:d9:5b:7e:7c:44:ba: e4:55:03:f4:fa:f2:7f:b4:8b:7e:69:30:fc:f0:55: 95:d4:19:f4:97:a8:12:f6:b3:88:c2:5d:e6:24:75: c1:4e:5b:a9:1a:6e:cf:9e:d9:de:b9:9e:9a:c4:8c: 87:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:30:0B:65:5F:22:2C:56:42:9C:1C:25:E2:AA:12:A0:7D:31:06:BC X509v3 Authority Key Identifier: keyid:E8:EC:F8:E4:EC:9B:44:2A:95:37:4C:2A:3C:7E:78:4B:07:61:87:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Oz45OybRCqVN0wqPH54Swdhh8w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:a3:9e:78:a8:d3:5d:93:22:b0:b6:23:27:13:b8:e2:7a:58: 88:cf:03:34:af:40:6f:78:8b:f1:d5:00:d1:b4:b0:1a:c2:ae: 25:98:bf:fa:9b:61:c5:00:ae:bc:13:53:22:2a:ef:a0:25:74: 63:4d:50:1d:36:df:97:a4:e2:f5:3a:d7:68:0a:70:93:47:d3: c6:e5:5e:0f:b7:fe:69:a6:77:81:83:63:d1:2c:88:e7:40:f4: d0:e4:c3:90:46:6d:a4:36:61:6d:17:06:e0:c6:14:ac:81:14: 93:de:ba:52:b2:93:10:c3:f3:9b:f0:27:b5:ac:9f:5b:a3:6d: 53:f6:f1:0e:ac:c4:ea:0c:93:85:32:8a:dd:a2:d6:c7:47:ac: 98:1d:90:ab:c1:7b:18:de:7f:0f:4a:ed:33:97:6c:76:bf:d9: 57:3e:cd:a8:68:64:6b:f8:ed:20:49:68:90:ff:4b:29:a9:f6: 84:e5:02:40:e7:b0:5c:c9:03:cb:37:64:1c:ec:38:2c:20:e6: 92:0d:c5:c9:47:77:3d:12:77:25:aa:cd:6c:94:41:1d:78:bf: a4:86:f5:f9:6a:13:36:95:f0:a0:34:8f:16:c0:a4:0a:85:95: c1:62:86:1e:77:46:d6:64:a0:71:9f:9a:5c:42:58:f5:55:31: e5:17:66:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LJqPkr4nAFpcHI+ZozhDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4ZWNmOGU0ZWM5YjQ0MmE5NTM3NGMyYTNjN2U3ODRiMDc2 MTg3Y2MwHhcNMjYwMTI1MjIwMDU0WhcNMjYwMTI2MjIwMDU0WjAzMTEwLwYDVQQD EyhhZjMwMGI2NTVmMjIyYzU2NDI5YzFjMjVlMmFhMTJhMDdkMzEwNmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6rHqq0xuk6Z6Omt5wtwEJRJD7mx2 vIdEKphqDnuju4WB6jF+Us/MtLSReH5bWhHhj/aukBC/YEIAY6hqbdqlzvGaYHbE sXYEYNwDPORuve7DIwdFn1D/T74R3hkrvV5xKoGADHZRO2pZYmrsHTORyAHe0ZWu TDgLr+zbLufuy4s8GrO3TrIvTFvKt2Ll52AISRiexgK7dwO9tD0YicTfZtBPw4HT +nrD+YgCJalF4Cysp9jy0RUv/kGHzzMMcyVrnkAYDW+y0KINizPZW358RLrkVQP0 +vJ/tIt+aTD88FWV1Bn0l6gS9rOIwl3mJHXBTlupGm7PntneuZ6axIyHnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK8wC2VfIixWQpwcJeKqEqB9MQa8MB8GA1UdIwQY MBaAFOjs+OTsm0QqlTdMKjx+eEsHYYfMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNk96NDVPeWJSQ3FWTjB3cVBINTRTd2RoaDh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS81ZTgwYjQtY2IxNi00YTM1LWI0Mjkt MjI5YWU5ZjcyOGQ2LzEvNk96NDVPeWJSQ3FWTjB3cVBINTRTd2RoaDh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS81ZTgwYjQtY2IxNi00YTM1LWI0MjktMjI5YWU5ZjcyOGQ2 LzEvNk96NDVPeWJSQ3FWTjB3cVBINTRTd2RoaDh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATKOeeKjT XZMisLYjJxO44npYiM8DNK9Ab3iL8dUA0bSwGsKuJZi/+pthxQCuvBNTIirvoCV0 Y01QHTbfl6Ti9TrXaApwk0fTxuVeD7f+aaZ3gYNj0SyI50D00OTDkEZtpDZhbRcG 4MYUrIEUk966UrKTEMPzm/AntayfW6NtU/bxDqzE6gyThTKK3aLWx0esmB2Qq8F7 GN5/D0rtM5dsdr/ZVz7NqGhka/jtIElokP9LKan2hOUCQOewXMkDyzdkHOw4LCDm kg3FyUd3PRJ3JarNbJRBHXi/pIb1+WoTNpXwoDSPFsCkCoWVwWKGHndG1mSgcZ+a XEJY9VUx5Rdm0w== -----END CERTIFICATE-----Generated at Mon Jan 26 01:33:02 2026 by rpki-client