This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft File: H6_KU6xU5X5SwBATiiEnlMZw4M0.mft (raw, json) Hash identifier: ATnL6FY+2rk2VMI4/ALxHtBYty92SMxpQiphsEnZANI= Subject key identifier: 08:C5:F5:4C:E6:D0:8C:F2:FE:8C:F4:AB:EC:A0:5D:F5:DB:4D:F2:D9 Authority key identifier: 1F:AF:CA:53:AC:54:E5:7E:52:C0:10:13:8A:21:27:94:C6:70:E0:CD Certificate issuer: /CN=1fafca53ac54e57e52c010138a212794c670e0cd Certificate serial: 019BF6BECF6C7D5D4D2C56C45A3F2280A0A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft Manifest number: 0841 Signing time: Sun 25 Jan 2026 20:00:58 +0000 Manifest this update: Sun 25 Jan 2026 20:00:58 +0000 Manifest next update: Mon 26 Jan 2026 20:00:58 +0000 Files and hashes: 1: H6_KU6xU5X5SwBATiiEnlMZw4M0.crl (hash: cdK50uz0b2mt/8V3PXJas/HkteanmkVTwfoTUI6KjRo=) 2: c4GD0N5ffflgM4WSJFRdKaORXEg.roa (hash: ANDRx+abOUWpKzoyrqtGua8LAFv82Wy6OwjQEBpNXbg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.crl rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:cf:6c:7d:5d:4d:2c:56:c4:5a:3f:22:80:a0:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fafca53ac54e57e52c010138a212794c670e0cd Validity Not Before: Jan 25 20:00:58 2026 GMT Not After : Jan 26 20:00:58 2026 GMT Subject: CN=08c5f54ce6d08cf2fe8cf4abeca05df5db4df2d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:20:6a:96:0c:d0:2b:ee:91:91:72:ed:a5:3e: cf:b5:e5:23:9a:3f:32:74:df:40:35:1d:98:97:b6: 88:ad:ca:9f:fc:e4:4f:b3:3f:53:56:ea:a4:b8:03: bd:45:a7:a4:03:3e:ee:32:38:fb:23:0e:c3:68:de: 1d:8d:09:54:2b:03:32:2f:5b:72:a2:e3:8c:c0:0a: 5f:58:25:02:d5:f8:c2:c4:6b:a4:83:52:10:98:a9: f6:02:8b:c8:62:11:19:8a:df:33:46:43:9e:92:fc: c8:38:09:3e:f5:55:dd:41:0e:bd:32:ae:26:9b:6f: 64:3a:48:b2:b4:5d:5a:8b:2c:e6:78:95:de:83:73: 07:c1:11:24:1a:07:5c:82:41:92:4d:a8:d7:06:49: fe:33:69:f0:1f:91:4e:16:2b:b3:25:25:29:9b:d5: a6:53:2c:4a:b7:e5:13:66:af:2d:23:e7:9a:d9:8d: 39:a1:0e:f1:fb:a2:fe:84:64:a0:ba:79:5a:44:91: a7:5b:71:62:58:be:26:4c:b6:08:9b:35:b2:ba:4c: 67:8b:4f:c9:1c:ed:4d:30:d5:c1:1a:63:ba:7b:59: d0:27:0e:9c:7e:3e:27:83:82:a6:1b:ee:a1:8c:0f: 72:75:78:dc:6b:f0:03:f9:ce:56:cc:c1:5d:fa:7d: ef:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:C5:F5:4C:E6:D0:8C:F2:FE:8C:F4:AB:EC:A0:5D:F5:DB:4D:F2:D9 X509v3 Authority Key Identifier: keyid:1F:AF:CA:53:AC:54:E5:7E:52:C0:10:13:8A:21:27:94:C6:70:E0:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:a7:52:a5:21:b4:f9:dd:47:8c:fd:d4:40:98:38:4c:eb:74: 49:6a:f2:93:d6:3d:dd:3c:e5:d2:26:a7:6e:87:7b:33:fc:dc: 59:8a:f3:29:25:5e:c4:dd:e8:5a:84:98:2e:f1:90:34:eb:70: 66:66:85:a8:ef:20:72:23:a5:2f:51:1f:cd:22:db:ed:77:a8: f4:dd:1c:52:48:bd:a0:66:01:82:b5:62:58:35:f4:f0:e6:2d: a0:1c:db:eb:de:95:1f:d4:f8:a6:9b:b4:a0:af:bf:d3:bc:03: e3:88:a9:53:6b:3d:8f:dc:17:2d:3e:53:27:14:c3:e8:73:f9: cb:c9:05:38:d3:b5:1b:a6:b9:60:fc:5b:d0:33:a8:c5:a4:24: 71:01:64:34:d4:7d:f2:fd:2a:3f:72:3d:63:3c:6d:3c:3a:71: b2:1d:8f:8d:99:3f:3d:b4:41:49:9d:27:89:b4:ae:da:b1:a0: 34:a4:91:75:1a:58:e9:28:e0:e4:7c:09:93:ca:1c:10:ce:06: df:3c:b7:e0:57:31:41:f9:9b:45:d4:e1:c4:6f:da:53:08:df: ae:e6:ff:33:e1:df:91:07:e0:a9:81:a4:ea:4f:79:bd:36:e5: 47:20:4c:32:98:df:25:ea:d4:ae:3c:da:2a:96:43:24:d2:14: bc:38:93:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vs9sfV1NLFbEWj8igKCgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmYWZjYTUzYWM1NGU1N2U1MmMwMTAxMzhhMjEyNzk0YzY3 MGUwY2QwHhcNMjYwMTI1MjAwMDU4WhcNMjYwMTI2MjAwMDU4WjAzMTEwLwYDVQQD EygwOGM1ZjU0Y2U2ZDA4Y2YyZmU4Y2Y0YWJlY2EwNWRmNWRiNGRmMmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSBqlgzQK+6RkXLtpT7PteUjmj8y dN9ANR2Yl7aIrcqf/ORPsz9TVuqkuAO9RaekAz7uMjj7Iw7DaN4djQlUKwMyL1ty ouOMwApfWCUC1fjCxGukg1IQmKn2AovIYhEZit8zRkOekvzIOAk+9VXdQQ69Mq4m m29kOkiytF1aiyzmeJXeg3MHwREkGgdcgkGSTajXBkn+M2nwH5FOFiuzJSUpm9Wm UyxKt+UTZq8tI+ea2Y05oQ7x+6L+hGSgunlaRJGnW3FiWL4mTLYImzWyukxni0/J HO1NMNXBGmO6e1nQJw6cfj4ng4KmG+6hjA9ydXjca/AD+c5WzMFd+n3vWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAjF9Uzm0Izy/oz0q+ygXfXbTfLZMB8GA1UdIwQY MBaAFB+vylOsVOV+UsAQE4ohJ5TGcODNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDZfS1U2eFU1WDVTd0JBVGlpRW5sTVp3NE0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83NjhlMjktMjRjNS00ZmE3LTliMzYt Yzk5NWQyZWM5ZTk0LzEvSDZfS1U2eFU1WDVTd0JBVGlpRW5sTVp3NE0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS83NjhlMjktMjRjNS00ZmE3LTliMzYtYzk5NWQyZWM5ZTk0 LzEvSDZfS1U2eFU1WDVTd0JBVGlpRW5sTVp3NE0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKqdSpSG0 +d1HjP3UQJg4TOt0SWryk9Y93Tzl0ianbod7M/zcWYrzKSVexN3oWoSYLvGQNOtw ZmaFqO8gciOlL1EfzSLb7Xeo9N0cUki9oGYBgrViWDX08OYtoBzb696VH9T4ppu0 oK+/07wD44ipU2s9j9wXLT5TJxTD6HP5y8kFONO1G6a5YPxb0DOoxaQkcQFkNNR9 8v0qP3I9YzxtPDpxsh2PjZk/PbRBSZ0nibSu2rGgNKSRdRpY6Sjg5HwJk8ocEM4G 3zy34FcxQfmbRdThxG/aUwjfrub/M+HfkQfgqYGk6k95vTblRyBMMpjfJerUrjza KpZDJNIUvDiTJA== -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:54 2026 by rpki-client