This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft File: 6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft (raw, json) Hash identifier: SgZzoTcyFA2s1pmknR4JGKN+NBD++41HRbIvF0KddlM= Subject key identifier: 13:79:49:C2:5B:BD:49:55:E8:FA:25:7B:8E:9F:BE:18:5D:0D:53:A0 Authority key identifier: E8:F4:09:02:A0:03:D8:FE:6F:7C:77:42:EB:47:D7:0B:50:AD:E0:36 Certificate issuer: /CN=e8f40902a003d8fe6f7c7742eb47d70b50ade036 Certificate serial: 019BF6F55F3DAE13A4EEFC0BF37473D3616A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6PQJAqAD2P5vfHdC60fXC1Ct4DY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft Manifest number: 17EB Signing time: Sun 25 Jan 2026 21:00:34 +0000 Manifest this update: Sun 25 Jan 2026 21:00:34 +0000 Manifest next update: Mon 26 Jan 2026 21:00:34 +0000 Files and hashes: 1: 6PQJAqAD2P5vfHdC60fXC1Ct4DY.crl (hash: 3H+BEKHPVp8UtuosdHVQ43E64BcUwLRnILWAQGm2bWo=) 2: TC9K931IzwUdFmAUvzTbFXIZADA.roa (hash: UXVxdmIaXGeZhlCpGUNMtQmCisj0HfLJfUz0lrC+bHM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.crl rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft rsync://rpki.ripe.net/repository/DEFAULT/6PQJAqAD2P5vfHdC60fXC1Ct4DY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:5f:3d:ae:13:a4:ee:fc:0b:f3:74:73:d3:61:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8f40902a003d8fe6f7c7742eb47d70b50ade036 Validity Not Before: Jan 25 21:00:34 2026 GMT Not After : Jan 26 21:00:34 2026 GMT Subject: CN=137949c25bbd4955e8fa257b8e9fbe185d0d53a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fc:5a:5d:a5:c2:fc:9e:b1:69:14:93:d9:62: a8:af:1a:15:96:a7:fd:53:71:cc:0a:ed:4d:04:12: 8c:0c:4b:ab:b1:ef:a9:91:61:2d:ce:5d:04:e4:56: 5a:c4:84:8b:35:fc:b9:84:80:32:5f:ef:b5:aa:da: 19:02:91:71:0e:a1:be:3b:25:68:b1:2d:bc:8c:9d: 1d:12:da:cf:7c:3b:b7:7d:75:60:bc:0a:c4:0c:c4: e7:ba:27:fd:ef:54:cf:68:e1:02:d1:16:c7:f2:7f: 7d:55:c4:3f:27:71:ba:3f:a3:99:23:12:5a:d5:f1: 1f:d4:05:39:be:f8:a1:ba:93:5b:7d:29:1d:3c:58: 75:be:62:e3:32:4d:a2:e9:31:e8:d5:98:47:a2:3b: a7:23:49:22:49:83:d1:9a:d2:2f:d2:f5:5a:df:3a: 91:a8:43:ef:a5:b0:f1:40:5e:2b:11:44:db:cc:b8: 06:68:a0:be:0d:39:0b:e4:6e:99:67:44:b1:52:57: fd:ea:d1:85:b5:56:61:41:1a:34:d5:9b:d6:16:54: de:b9:e0:d9:38:66:f7:56:44:df:3e:f3:36:3f:73: 31:cf:84:84:8d:f5:ee:41:6d:75:43:cc:17:49:2b: 0b:b6:3f:37:95:b3:06:76:66:dd:5f:29:34:cd:16: ec:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:79:49:C2:5B:BD:49:55:E8:FA:25:7B:8E:9F:BE:18:5D:0D:53:A0 X509v3 Authority Key Identifier: keyid:E8:F4:09:02:A0:03:D8:FE:6F:7C:77:42:EB:47:D7:0B:50:AD:E0:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6PQJAqAD2P5vfHdC60fXC1Ct4DY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:f4:9e:e6:38:53:27:8c:ee:20:58:30:18:e8:95:0f:4c:3b: 69:e1:6c:26:84:62:68:41:77:f4:ab:e3:8d:f6:78:d4:24:84: a3:dd:11:82:74:b5:8e:53:62:61:0d:79:a0:43:98:c7:72:8a: 85:99:c7:7a:9c:2d:87:b1:d0:52:f0:89:68:d5:62:76:86:c0: 9e:12:34:36:ec:d6:20:93:0f:ed:c1:23:c0:e8:83:89:bb:fc: 83:c5:0f:a9:5a:61:de:21:d4:2a:a0:95:95:9f:9e:54:c2:d4: af:ff:1e:2e:3e:b1:75:8a:51:23:22:4d:f7:48:b4:49:7d:9a: 2f:f8:aa:7c:17:cd:e0:f0:46:ea:97:e9:e0:62:07:e8:11:a2: a0:3f:53:2f:4d:70:b1:b5:8a:00:a8:09:da:d4:76:f6:8c:c7: 0e:73:af:0e:b9:79:27:58:f0:e8:38:2e:7e:d4:ef:14:97:bb: cf:f8:57:93:d1:98:7b:ab:99:55:c5:e6:b6:70:b8:ba:c8:a0: d1:eb:ac:f7:da:a6:da:2a:17:41:02:54:e0:aa:4a:65:3c:c2: 09:80:81:20:48:6c:ae:81:ca:cb:f7:ed:a5:9e:6b:5e:bf:d6: aa:8e:d2:5e:21:b2:4d:02:5c:2e:3f:a6:b7:6e:28:24:99:c9: a6:bb:6a:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29V89rhOk7vwL83Rz02FqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4ZjQwOTAyYTAwM2Q4ZmU2ZjdjNzc0MmViNDdkNzBiNTBh ZGUwMzYwHhcNMjYwMTI1MjEwMDM0WhcNMjYwMTI2MjEwMDM0WjAzMTEwLwYDVQQD EygxMzc5NDljMjViYmQ0OTU1ZThmYTI1N2I4ZTlmYmUxODVkMGQ1M2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPxaXaXC/J6xaRST2WKorxoVlqf9 U3HMCu1NBBKMDEurse+pkWEtzl0E5FZaxISLNfy5hIAyX++1qtoZApFxDqG+OyVo sS28jJ0dEtrPfDu3fXVgvArEDMTnuif971TPaOEC0RbH8n99VcQ/J3G6P6OZIxJa 1fEf1AU5vvihupNbfSkdPFh1vmLjMk2i6THo1ZhHojunI0kiSYPRmtIv0vVa3zqR qEPvpbDxQF4rEUTbzLgGaKC+DTkL5G6ZZ0SxUlf96tGFtVZhQRo01ZvWFlTeueDZ OGb3VkTfPvM2P3Mxz4SEjfXuQW11Q8wXSSsLtj83lbMGdmbdXyk0zRbsKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBN5ScJbvUlV6Pole46fvhhdDVOgMB8GA1UdIwQY MBaAFOj0CQKgA9j+b3x3QutH1wtQreA2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlBRSkFxQUQyUDV2ZkhkQzYwZlhDMUN0NERZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny85NDI1YzYtYzQ5NS00ODc4LWE4ZjMt N2E3OGM4YzRlMDUxLzEvNlBRSkFxQUQyUDV2ZkhkQzYwZlhDMUN0NERZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny85NDI1YzYtYzQ5NS00ODc4LWE4ZjMtN2E3OGM4YzRlMDUx LzEvNlBRSkFxQUQyUDV2ZkhkQzYwZlhDMUN0NERZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOvSe5jhT J4zuIFgwGOiVD0w7aeFsJoRiaEF39KvjjfZ41CSEo90RgnS1jlNiYQ15oEOYx3KK hZnHepwth7HQUvCJaNVidobAnhI0NuzWIJMP7cEjwOiDibv8g8UPqVph3iHUKqCV lZ+eVMLUr/8eLj6xdYpRIyJN90i0SX2aL/iqfBfN4PBG6pfp4GIH6BGioD9TL01w sbWKAKgJ2tR29ozHDnOvDrl5J1jw6DguftTvFJe7z/hXk9GYe6uZVcXmtnC4usig 0eus99qm2ioXQQJU4KpKZTzCCYCBIEhsroHKy/ftpZ5rXr/Wqo7SXiGyTQJcLj+m t24oJJnJprtqVQ== -----END CERTIFICATE-----Generated at Mon Jan 26 03:32:59 2026 by rpki-client