This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft File: 6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft (raw, json) Hash identifier: pPQb2dIBSNjjzoraAmJHQEZ74JlYRyx07n2P1TJtbJQ= Subject key identifier: 53:6D:EC:B0:21:C1:6F:ED:D0:0F:74:87:43:7D:5E:38:9E:C7:CC:1F Authority key identifier: E9:1F:27:2B:13:C7:50:14:3C:7E:C8:7E:0C:80:2A:EA:D8:AC:6E:07 Certificate issuer: /CN=e91f272b13c750143c7ec87e0c802aead8ac6e07 Certificate serial: 019BF5E322D408F1B2B96A24834EB1225C82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6R8nKxPHUBQ8fsh-DIAq6tisbgc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft Manifest number: 0D48 Signing time: Sun 25 Jan 2026 16:01:02 +0000 Manifest this update: Sun 25 Jan 2026 16:01:02 +0000 Manifest next update: Mon 26 Jan 2026 16:01:02 +0000 Files and hashes: 1: 6R8nKxPHUBQ8fsh-DIAq6tisbgc.crl (hash: Kv6oEA178dukRyxmGcZHP1Fh6bgaLY4nkZfXUXZAeY0=) 2: m26SchsQ_1UhkfbeCxw77FeJXCA.roa (hash: mdGSAQzmIJX1JB/CEMcZP3KjJ01KoAYsX4zgkL5y148=) 3: q_u69U7c2vxaq4Nl1v5Yc1MyuWg.roa (hash: 5dnA+LcITpNkdUu4xKxisyKSU227fPcdS2OGxJGeL28=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft rsync://rpki.ripe.net/repository/DEFAULT/6R8nKxPHUBQ8fsh-DIAq6tisbgc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:22:d4:08:f1:b2:b9:6a:24:83:4e:b1:22:5c:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e91f272b13c750143c7ec87e0c802aead8ac6e07 Validity Not Before: Jan 25 16:01:02 2026 GMT Not After : Jan 26 16:01:02 2026 GMT Subject: CN=536decb021c16fedd00f7487437d5e389ec7cc1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f3:60:b3:4b:96:22:97:b2:54:a1:91:ea:47: 1b:8a:df:a4:f0:e9:47:cc:ba:e2:4d:3d:2a:45:fb: ba:63:1e:bb:89:12:6d:37:95:57:00:85:01:4e:1b: e6:1d:80:e5:73:cf:2b:64:ac:19:a9:a6:77:43:18: 1b:04:e0:94:d7:16:9e:dd:11:2b:48:aa:b3:c6:8c: d6:c7:e4:6c:21:68:fb:3e:cd:d5:e4:ca:e1:32:50: c3:96:90:b8:f1:23:c0:f3:99:65:58:c9:68:9a:d5: bf:20:55:c7:ed:0f:63:32:47:f8:50:9e:04:b7:43: 12:90:70:a1:7c:9a:6b:73:20:4a:1f:7f:e6:0b:fa: 9e:ce:18:ae:21:5a:20:b9:03:f6:ea:8f:4d:a3:49: a9:fd:cd:ea:b9:5b:68:be:34:2d:34:4e:f5:11:da: bc:97:b8:58:f5:c6:f0:e2:61:4a:b4:cf:cb:f8:8b: 18:b6:95:4a:3c:46:db:4a:e3:39:f8:97:be:3e:c1: a8:7b:7e:d5:df:97:b6:fa:46:17:21:4e:9d:62:3d: 1c:6f:42:33:39:73:81:47:7e:3c:e0:69:24:65:37: 61:2a:94:cc:25:4e:eb:42:8e:16:76:7d:bd:9e:0d: 7f:c9:c1:67:98:2e:b4:da:e0:cf:0a:ed:6b:14:b8: b2:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:6D:EC:B0:21:C1:6F:ED:D0:0F:74:87:43:7D:5E:38:9E:C7:CC:1F X509v3 Authority Key Identifier: keyid:E9:1F:27:2B:13:C7:50:14:3C:7E:C8:7E:0C:80:2A:EA:D8:AC:6E:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6R8nKxPHUBQ8fsh-DIAq6tisbgc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:7d:90:a7:51:04:78:5d:31:b3:c9:b6:e9:6f:a9:22:b5:24: 8d:2e:c2:32:66:52:a1:85:96:29:bb:cb:94:4a:60:26:74:b5: 7f:09:38:e9:cc:df:e5:f6:43:1f:6e:b2:6d:9c:cf:d5:50:cc: 8b:bd:ff:10:64:7f:f7:4b:f9:76:41:fa:e9:8f:3d:09:0b:a3: 08:ee:ad:0d:28:5a:7e:b8:07:c4:26:71:75:6a:f9:bd:70:06: 2d:da:e2:45:1c:6c:47:b1:14:78:61:63:de:9f:c2:8c:64:3a: 4a:29:2b:78:55:12:ce:cb:1f:f5:60:bb:dd:d5:c1:a7:c9:43: 6b:4a:12:bd:01:1c:d7:80:ea:25:3b:a5:68:fa:b5:bc:79:72: f4:5d:d2:98:fa:b9:36:37:71:a8:90:88:a2:53:e9:3b:1e:59: 0b:42:52:5f:66:f5:d7:8b:da:b3:13:d1:52:a5:3f:ba:eb:3b: d6:20:77:43:e8:be:68:3c:ca:c7:85:b0:ae:8b:81:4e:86:aa: 4e:e6:fa:57:1f:5d:42:b5:89:83:0c:51:02:d0:f3:4f:eb:eb: 8e:ba:b4:b1:10:93:86:00:ed:63:6e:cf:aa:c9:26:84:17:4b: c0:77:ce:88:1d:e3:b6:de:1b:97:f3:78:2f:2b:a7:c5:42:e6: 44:92:78:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv14yLUCPGyuWokg06xIlyCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MWYyNzJiMTNjNzUwMTQzYzdlYzg3ZTBjODAyYWVhZDhh YzZlMDcwHhcNMjYwMTI1MTYwMTAyWhcNMjYwMTI2MTYwMTAyWjAzMTEwLwYDVQQD Eyg1MzZkZWNiMDIxYzE2ZmVkZDAwZjc0ODc0MzdkNWUzODllYzdjYzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fNgs0uWIpeyVKGR6kcbit+k8OlH zLriTT0qRfu6Yx67iRJtN5VXAIUBThvmHYDlc88rZKwZqaZ3QxgbBOCU1xae3REr SKqzxozWx+RsIWj7Ps3V5MrhMlDDlpC48SPA85llWMlomtW/IFXH7Q9jMkf4UJ4E t0MSkHChfJprcyBKH3/mC/qezhiuIVoguQP26o9No0mp/c3quVtovjQtNE71Edq8 l7hY9cbw4mFKtM/L+IsYtpVKPEbbSuM5+Je+PsGoe37V35e2+kYXIU6dYj0cb0Iz OXOBR3484GkkZTdhKpTMJU7rQo4Wdn29ng1/ycFnmC602uDPCu1rFLiylwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFNt7LAhwW/t0A90h0N9Xjiex8wfMB8GA1UdIwQY MBaAFOkfJysTx1AUPH7IfgyAKurYrG4HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlI4bkt4UEhVQlE4ZnNoLURJQXE2dGlzYmdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9kNjJkMjItODJmMi00YjIwLWJhYzQt NjAxYTcyNWEwMGY1LzEvNlI4bkt4UEhVQlE4ZnNoLURJQXE2dGlzYmdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9kNjJkMjItODJmMi00YjIwLWJhYzQtNjAxYTcyNWEwMGY1 LzEvNlI4bkt4UEhVQlE4ZnNoLURJQXE2dGlzYmdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVn2Qp1EE eF0xs8m26W+pIrUkjS7CMmZSoYWWKbvLlEpgJnS1fwk46czf5fZDH26ybZzP1VDM i73/EGR/90v5dkH66Y89CQujCO6tDShafrgHxCZxdWr5vXAGLdriRRxsR7EUeGFj 3p/CjGQ6SikreFUSzssf9WC73dXBp8lDa0oSvQEc14DqJTulaPq1vHly9F3SmPq5 NjdxqJCIolPpOx5ZC0JSX2b114vasxPRUqU/uus71iB3Q+i+aDzKx4WwrouBToaq Tub6Vx9dQrWJgwxRAtDzT+vrjrq0sRCThgDtY27PqskmhBdLwHfOiB3jtt4bl/N4 LyunxULmRJJ4mw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:33:06 2026 by rpki-client