This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft
File: 6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft (raw, json)
Hash identifier: br0md/IWkAoZ5B0ipcnubzU2UNCS4aDakBDUoy/rP3Q=
Subject key identifier: 1A:07:31:76:F4:27:FC:00:F7:8D:D9:3E:BB:9E:9C:FC:BE:C5:E1:25
Authority key identifier: EA:0F:5B:22:1F:6A:F3:20:98:F3:06:4D:68:25:1B:61:78:92:AC:92
Certificate issuer: /CN=ea0f5b221f6af32098f3064d68251b617892ac92
Certificate serial: 019BF53E8C485C3892FE1D2369C6C7445746
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft
Manifest number: 0D36
Signing time: Sun 25 Jan 2026 13:01:15 +0000
Manifest this update: Sun 25 Jan 2026 13:01:15 +0000
Manifest next update: Mon 26 Jan 2026 13:01:15 +0000
Files and hashes: 1: 6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl (hash: otNf98RmKMrIjNtnHvgISrQ99k6+f7z2psoB3ds74hs=)
2: J2qzFsI09RGWX0TQW_Ik7AKbbQM.roa (hash: lUuNT1eBBa+JpXs3fEVcImBW6pOF6M9gLS5SJiJaWOc=)
3: T5t2lrc6vZSWtfpj81F8OW76GS0.roa (hash: yORkG5zj/0zcAQ3RthIBP3CwZBqbHhAwf4IAuGcnaRQ=)
4: _ciy-lTi4OPOE4H7jBh6iVeSzM0.roa (hash: UoO0miY2aliagEe8/7pX67pSC1+YIe4R/lR+1wd4LX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:3e:8c:48:5c:38:92:fe:1d:23:69:c6:c7:44:57:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea0f5b221f6af32098f3064d68251b617892ac92
Validity
Not Before: Jan 25 13:01:15 2026 GMT
Not After : Jan 26 13:01:15 2026 GMT
Subject: CN=1a073176f427fc00f78dd93ebb9e9cfcbec5e125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ce:f5:9b:e3:95:d6:38:ea:32:82:5f:cd:25:
f9:de:45:2a:33:83:d7:d5:47:82:8a:db:14:25:24:
9a:40:1c:3c:a6:61:52:bf:54:a4:c8:c5:a2:f3:ea:
05:fa:b4:b7:fe:7b:cd:4c:4b:1e:34:75:81:1c:a9:
be:e6:97:f2:a3:0d:2e:97:8b:a7:2c:4e:52:dd:f2:
57:04:f8:f7:a3:6f:e0:b4:0c:9a:b0:44:ba:b2:fb:
1f:d7:e5:c6:bb:90:04:58:1d:5c:45:89:ec:91:c8:
e6:e8:64:6d:43:27:cb:ba:32:72:6a:30:de:06:3f:
47:95:57:00:d8:79:cb:3b:49:b2:6f:c5:82:41:6d:
ea:ea:c9:0e:28:6f:c9:75:39:72:49:66:35:f4:b8:
92:da:23:30:a5:29:cd:52:4b:74:fa:ef:6e:bb:5f:
6b:21:cc:f3:e3:fd:de:c5:2a:b8:88:b6:75:76:04:
13:64:28:f2:0b:52:28:f1:9e:44:64:a8:c4:1f:5a:
9c:8a:89:96:86:54:6b:19:4b:82:ba:13:97:9b:58:
8b:cf:89:4c:ef:f4:3f:5d:cf:71:d0:74:7b:55:21:
1a:77:b3:e3:64:9e:80:f9:a4:8f:f1:08:a5:cb:5f:
93:da:3b:fc:06:93:74:96:28:30:67:a1:da:a9:a9:
95:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:07:31:76:F4:27:FC:00:F7:8D:D9:3E:BB:9E:9C:FC:BE:C5:E1:25
X509v3 Authority Key Identifier:
keyid:EA:0F:5B:22:1F:6A:F3:20:98:F3:06:4D:68:25:1B:61:78:92:AC:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:f9:c6:70:45:c5:77:af:f7:16:0c:49:30:9b:6f:ee:c9:0a:
52:47:0a:90:24:48:84:98:a9:b6:8c:1e:99:12:97:6f:8a:19:
36:6f:c7:86:68:23:69:1a:e0:8f:5c:5e:08:2b:fe:fc:79:02:
49:f6:7f:95:c7:d1:43:44:53:70:07:26:66:8f:60:71:e5:6d:
4c:5c:33:73:ef:c1:f3:d4:8a:84:98:f8:3b:0a:7a:3e:e9:b6:
9b:1e:1a:da:c6:51:c2:80:1e:a2:8d:a5:ce:4e:9a:28:8b:f1:
8a:cc:43:e0:1c:43:b7:b3:bb:65:cc:3e:e7:3a:5f:33:46:bb:
03:28:d0:8b:70:f0:3c:26:b4:f0:ac:a4:3e:0d:00:f7:9b:2a:
ae:a8:34:e6:1e:13:a9:c1:d5:de:0c:82:fc:c0:91:9e:09:ac:
42:3a:2f:d6:6a:d5:54:c8:0a:ee:f3:3d:13:7e:ec:ba:de:94:
c5:8d:c9:62:e0:6b:c9:94:df:e1:72:45:43:c5:b8:53:51:3d:
dc:47:2c:d0:33:5e:60:f3:37:12:98:04:09:64:35:b8:a1:0a:
8a:ca:b1:01:1a:38:1d:58:81:40:11:eb:ce:10:e1:58:ab:a2:
41:e9:55:5d:ac:48:63:80:90:4f:a0:f3:82:ed:82:06:2e:7e:
f2:31:30:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv1PoxIXDiS/h0jacbHRFdGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMGY1YjIyMWY2YWYzMjA5OGYzMDY0ZDY4MjUxYjYxNzg5
MmFjOTIwHhcNMjYwMTI1MTMwMTE1WhcNMjYwMTI2MTMwMTE1WjAzMTEwLwYDVQQD
EygxYTA3MzE3NmY0MjdmYzAwZjc4ZGQ5M2ViYjllOWNmY2JlYzVlMTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzM71m+OV1jjqMoJfzSX53kUqM4PX
1UeCitsUJSSaQBw8pmFSv1SkyMWi8+oF+rS3/nvNTEseNHWBHKm+5pfyow0ul4un
LE5S3fJXBPj3o2/gtAyasES6svsf1+XGu5AEWB1cRYnskcjm6GRtQyfLujJyajDe
Bj9HlVcA2HnLO0myb8WCQW3q6skOKG/JdTlySWY19LiS2iMwpSnNUkt0+u9uu19r
Iczz4/3exSq4iLZ1dgQTZCjyC1Io8Z5EZKjEH1qciomWhlRrGUuCuhOXm1iLz4lM
7/Q/Xc9x0HR7VSEad7PjZJ6A+aSP8Qily1+T2jv8BpN0ligwZ6HaqamVYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBoHMXb0J/wA943ZPruenPy+xeElMB8GA1UdIwQY
MBaAFOoPWyIfavMgmPMGTWglG2F4kqySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmc5YkloOXE4eUNZOHdaTmFDVWJZWGlTckpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9lODUzYWItZjQ3MC00OTI4LWJjNjgt
NTdlOTBjNTZhMGUyLzEvNmc5YkloOXE4eUNZOHdaTmFDVWJZWGlTckpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9lODUzYWItZjQ3MC00OTI4LWJjNjgtNTdlOTBjNTZhMGUy
LzEvNmc5YkloOXE4eUNZOHdaTmFDVWJZWGlTckpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOPnGcEXF
d6/3FgxJMJtv7skKUkcKkCRIhJiptowemRKXb4oZNm/HhmgjaRrgj1xeCCv+/HkC
SfZ/lcfRQ0RTcAcmZo9gceVtTFwzc+/B89SKhJj4Owp6Pum2mx4a2sZRwoAeoo2l
zk6aKIvxisxD4BxDt7O7Zcw+5zpfM0a7AyjQi3DwPCa08KykPg0A95sqrqg05h4T
qcHV3gyC/MCRngmsQjov1mrVVMgK7vM9E37sut6UxY3JYuBryZTf4XJFQ8W4U1E9
3Ecs0DNeYPM3EpgECWQ1uKEKisqxARo4HViBQBHrzhDhWKuiQelVXaxIY4CQT6Dz
gu2CBi5+8jEw2w==
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:57:27 2026 by rpki-client