This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/5855da-1cb4-4325-903c-7e021e92ba38/1/T6SrVjZVqRUiJNqbgzr2Nq36DL4.mft File: T6SrVjZVqRUiJNqbgzr2Nq36DL4.mft (raw, json) Hash identifier: eKfjGUaqq7SxlX145LIOtC6oCLxVLj812SaLYCc0MOI= Subject key identifier: 5C:09:1F:B9:32:89:D7:D6:98:57:A2:D3:DB:A1:10:B7:97:2B:64:FC Authority key identifier: 4F:A4:AB:56:36:55:A9:15:22:24:DA:9B:83:3A:F6:36:AD:FA:0C:BE Certificate issuer: /CN=4fa4ab563655a9152224da9b833af636adfa0cbe Certificate serial: 019BF5ACA02432333DCFEC33636718240073 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T6SrVjZVqRUiJNqbgzr2Nq36DL4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/5855da-1cb4-4325-903c-7e021e92ba38/1/T6SrVjZVqRUiJNqbgzr2Nq36DL4.mft Manifest number: 07 Signing time: Sun 25 Jan 2026 15:01:29 +0000 Manifest this update: Sun 25 Jan 2026 15:01:29 +0000 Manifest next update: Mon 26 Jan 2026 15:01:29 +0000 Files and hashes: 1: 8xsBxJRzOoadcm0DdrJ3Vg3opRE.asa (hash: n9nxUGOX/1EnSOvWwvl5Nqo9r6LfqvrkZ6aWm3oj7S0=) 2: T6SrVjZVqRUiJNqbgzr2Nq36DL4.crl (hash: 20DpxqyVJsSrGcbMqvEtvykUxI4MGvpMMOok+RZ4jsA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/5855da-1cb4-4325-903c-7e021e92ba38/1/T6SrVjZVqRUiJNqbgzr2Nq36DL4.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/5855da-1cb4-4325-903c-7e021e92ba38/1/T6SrVjZVqRUiJNqbgzr2Nq36DL4.mft rsync://rpki.ripe.net/repository/DEFAULT/T6SrVjZVqRUiJNqbgzr2Nq36DL4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:a0:24:32:33:3d:cf:ec:33:63:67:18:24:00:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fa4ab563655a9152224da9b833af636adfa0cbe Validity Not Before: Jan 25 15:01:29 2026 GMT Not After : Jan 26 15:01:29 2026 GMT Subject: CN=5c091fb93289d7d69857a2d3dba110b7972b64fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d6:b7:08:be:42:42:99:b1:45:ac:48:49:69: 35:e4:bb:21:0c:f8:b4:4b:45:7c:c6:0a:4f:d0:94: d9:3f:bd:2b:c0:93:2f:c2:e9:aa:54:35:2b:27:ce: 01:f6:a3:fd:76:c7:8a:d6:75:ac:ed:ba:99:d4:81: bd:4f:3e:4e:24:fa:f0:72:6c:cf:40:1a:50:e7:39: b6:37:c3:73:a9:e5:0b:bc:5a:cc:76:da:00:0c:02: 47:6b:4e:61:a7:82:32:fc:e5:1c:5e:4b:1a:77:10: 0f:f9:a2:3f:e5:5e:60:5a:fa:a6:e5:30:57:ce:a5: 34:50:5d:ed:bd:ca:06:dd:7f:59:e6:4c:a9:14:86: 0b:a3:89:0b:4a:05:cf:51:73:23:93:68:64:d8:76: 9d:42:c6:99:ab:fb:1a:0b:a0:83:cc:1d:51:82:c5: b1:33:c6:c1:00:bd:4f:a2:39:fb:af:7b:34:9e:bf: ea:d3:9c:d5:44:fd:3b:81:05:2b:d9:56:a1:35:f7: 44:8e:c1:a4:59:cb:ba:ae:2a:fd:1f:84:40:c2:04: a0:c4:98:9c:ab:41:df:05:ab:0a:ee:72:7a:f5:32: d6:bc:fe:ad:79:f3:9b:35:1f:02:0f:f6:6d:32:4a: cc:49:1f:a1:74:31:fb:82:21:ed:c6:ac:bf:1b:82: d3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:09:1F:B9:32:89:D7:D6:98:57:A2:D3:DB:A1:10:B7:97:2B:64:FC X509v3 Authority Key Identifier: keyid:4F:A4:AB:56:36:55:A9:15:22:24:DA:9B:83:3A:F6:36:AD:FA:0C:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T6SrVjZVqRUiJNqbgzr2Nq36DL4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5855da-1cb4-4325-903c-7e021e92ba38/1/T6SrVjZVqRUiJNqbgzr2Nq36DL4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5855da-1cb4-4325-903c-7e021e92ba38/1/T6SrVjZVqRUiJNqbgzr2Nq36DL4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:47:d1:e8:8b:18:0c:7c:1b:d0:bb:99:98:34:27:8c:91:eb: 38:dd:d6:2d:5b:c0:37:81:c0:1e:27:6a:53:12:98:9f:3f:f1: 3c:17:89:6f:68:5c:9a:cb:96:1a:5a:99:35:78:f6:20:45:a0: ef:f2:09:d7:47:76:e2:32:aa:7e:bc:ec:10:09:e9:12:5b:cb: fd:de:bc:81:38:49:08:b2:46:1e:16:18:a3:99:d1:53:ac:86: 6a:4e:df:79:89:3b:30:35:17:8a:80:d4:ee:e5:f9:b3:7b:32: ca:81:eb:00:0c:94:8d:70:60:61:b2:a7:d8:5e:a6:2d:dc:11: 6a:b6:21:bc:d8:af:26:23:2a:7c:94:ba:7e:24:af:98:c2:27: 59:99:3f:40:cf:ea:d4:01:93:e9:32:e5:64:26:e2:d1:4a:b0: 2e:9f:7f:b1:9c:d7:83:34:b3:ab:42:4d:0d:a0:73:bb:fd:13: 9c:fe:be:c3:ca:1b:69:9a:05:a0:1b:47:c7:38:2d:55:99:e9: 4f:ff:ed:1a:27:0b:50:6a:5b:d8:79:ad:fe:56:5a:eb:9d:f4: 0b:de:01:14:72:ec:ce:c4:e9:b8:c4:72:c1:71:6b:2e:a6:32: 8c:e1:43:cd:f0:ca:3a:71:85:ff:5d:08:65:19:6e:e9:d6:ef: 98:ef:ab:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rKAkMjM9z+wzY2cYJABzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYTRhYjU2MzY1NWE5MTUyMjI0ZGE5YjgzM2FmNjM2YWRm YTBjYmUwHhcNMjYwMTI1MTUwMTI5WhcNMjYwMTI2MTUwMTI5WjAzMTEwLwYDVQQD Eyg1YzA5MWZiOTMyODlkN2Q2OTg1N2EyZDNkYmExMTBiNzk3MmI2NGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnta3CL5CQpmxRaxISWk15LshDPi0 S0V8xgpP0JTZP70rwJMvwumqVDUrJ84B9qP9dseK1nWs7bqZ1IG9Tz5OJPrwcmzP QBpQ5zm2N8NzqeULvFrMdtoADAJHa05hp4Iy/OUcXksadxAP+aI/5V5gWvqm5TBX zqU0UF3tvcoG3X9Z5kypFIYLo4kLSgXPUXMjk2hk2HadQsaZq/saC6CDzB1RgsWx M8bBAL1Pojn7r3s0nr/q05zVRP07gQUr2VahNfdEjsGkWcu6rir9H4RAwgSgxJic q0HfBasK7nJ69TLWvP6tefObNR8CD/ZtMkrMSR+hdDH7giHtxqy/G4LTHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFwJH7kyidfWmFei09uhELeXK2T8MB8GA1UdIwQY MBaAFE+kq1Y2VakVIiTam4M69jat+gy+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDZTclZqWlZxUlVpSk5xYmd6cjJOcTM2REw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81ODU1ZGEtMWNiNC00MzI1LTkwM2Mt N2UwMjFlOTJiYTM4LzEvVDZTclZqWlZxUlVpSk5xYmd6cjJOcTM2REw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi81ODU1ZGEtMWNiNC00MzI1LTkwM2MtN2UwMjFlOTJiYTM4 LzEvVDZTclZqWlZxUlVpSk5xYmd6cjJOcTM2REw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ0fR6IsY DHwb0LuZmDQnjJHrON3WLVvAN4HAHidqUxKYnz/xPBeJb2hcmsuWGlqZNXj2IEWg 7/IJ10d24jKqfrzsEAnpElvL/d68gThJCLJGHhYYo5nRU6yGak7feYk7MDUXioDU 7uX5s3syyoHrAAyUjXBgYbKn2F6mLdwRarYhvNivJiMqfJS6fiSvmMInWZk/QM/q 1AGT6TLlZCbi0UqwLp9/sZzXgzSzq0JNDaBzu/0TnP6+w8obaZoFoBtHxzgtVZnp T//tGicLUGpb2Hmt/lZa6530C94BFHLszsTpuMRywXFrLqYyjOFDzfDKOnGF/10I ZRlu6dbvmO+rfw== -----END CERTIFICATE-----Generated at Sun Jan 25 19:14:04 2026 by rpki-client