This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.mft File: W6vKoQozYHLrwIIKbfC_pNxc_ao.mft (raw, json) Hash identifier: co9k6Dg1p0SnxdLj6q+uPuejlkUHG1kjpNI60nZ64Jk= Subject key identifier: 2B:3E:84:AA:29:8D:59:9B:84:2C:8C:CE:81:EC:3A:F6:FF:C0:C4:04 Authority key identifier: 5B:AB:CA:A1:0A:33:60:72:EB:C0:82:0A:6D:F0:BF:A4:DC:5C:FD:AA Certificate issuer: /CN=5babcaa10a336072ebc0820a6df0bfa4dc5cfdaa Certificate serial: 019BF462DBAD955101797E92035D52B128AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W6vKoQozYHLrwIIKbfC_pNxc_ao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.mft Manifest number: 0BC0 Signing time: Sun 25 Jan 2026 09:01:18 +0000 Manifest this update: Sun 25 Jan 2026 09:01:18 +0000 Manifest next update: Mon 26 Jan 2026 09:01:18 +0000 Files and hashes: 1: W6vKoQozYHLrwIIKbfC_pNxc_ao.crl (hash: gY9IFPTkfUbx6bVa7lgWsbgmJteiRNz5RTZal79GTrA=) 2: hANHew_LKnwXLhQEqSyCSLozpjo.roa (hash: dvAoBldq4IsXBYE3jIxDiPUa2vvECDMQ4VTSUJ1/ngo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.mft rsync://rpki.ripe.net/repository/DEFAULT/W6vKoQozYHLrwIIKbfC_pNxc_ao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:db:ad:95:51:01:79:7e:92:03:5d:52:b1:28:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5babcaa10a336072ebc0820a6df0bfa4dc5cfdaa Validity Not Before: Jan 25 09:01:18 2026 GMT Not After : Jan 26 09:01:18 2026 GMT Subject: CN=2b3e84aa298d599b842c8cce81ec3af6ffc0c404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:13:21:b3:b0:60:bc:b9:55:53:c0:3a:7e:89: 98:73:90:ea:ba:ef:da:a1:96:c5:ff:fd:ba:a6:73: ba:a0:a4:e4:82:06:31:5a:54:d8:c7:2c:7e:07:8c: 21:db:53:4c:41:03:9e:ef:23:07:7f:24:90:39:96: 72:6f:b9:5f:87:29:1c:d5:44:98:53:fe:f9:c8:14: 2c:b4:0d:f3:4a:69:7c:0b:90:86:72:c1:57:69:a5: 36:fd:90:ac:11:55:d5:67:d6:c9:2d:bc:c9:3e:11: 2c:76:f0:f8:64:77:bf:d4:57:92:2b:1b:9b:1f:33: 43:26:b9:25:e4:47:c6:a4:01:c3:69:b3:f2:63:10: e2:ed:88:65:19:b6:24:03:ee:9f:c7:cf:cd:a3:41: 43:d3:56:bc:97:65:b3:14:f5:aa:61:61:0e:d4:75: 65:14:11:75:21:9b:03:dd:8a:48:c4:8f:b2:97:11: f3:7b:5c:b4:f3:28:76:14:38:c2:02:73:f2:46:6d: d5:44:d6:be:93:5e:7a:09:0b:89:4f:e6:2a:a5:fc: 70:14:b6:46:a7:5c:f7:84:a1:c9:fd:18:f0:24:08: b4:90:9d:4f:f1:2d:eb:20:48:af:34:be:5d:89:1e: 83:bb:89:d3:4f:78:ad:73:2b:d7:22:61:8e:8e:01: 34:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:3E:84:AA:29:8D:59:9B:84:2C:8C:CE:81:EC:3A:F6:FF:C0:C4:04 X509v3 Authority Key Identifier: keyid:5B:AB:CA:A1:0A:33:60:72:EB:C0:82:0A:6D:F0:BF:A4:DC:5C:FD:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W6vKoQozYHLrwIIKbfC_pNxc_ao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:bf:89:d8:e5:4b:8e:a3:cb:1f:05:fa:74:cc:b6:ec:69:61: e3:d1:66:40:18:8a:e5:e4:ca:14:13:2d:9f:8c:07:da:f5:38: a0:16:8c:0e:c7:17:5b:d0:89:6a:f8:fd:e0:28:f4:cd:2b:e0: a7:f4:a0:4f:72:23:67:98:9d:de:42:19:ca:c9:88:a9:c8:f1: 46:fe:8b:a1:b5:9f:b3:c6:69:29:ed:24:37:97:e3:aa:6c:6b: ff:42:5e:f8:a3:13:de:13:72:94:d1:7b:fe:fe:cd:72:52:8b: 0f:d2:fd:b4:04:35:cc:f0:82:ab:b2:66:b6:31:f4:53:3d:c6: 8a:9e:a6:be:18:ca:13:0e:cc:b6:6d:31:1a:d1:19:89:7f:34: 9f:0f:35:d9:d7:d9:ab:2d:6c:69:f6:aa:1e:51:d6:ba:1f:ea: f3:8e:9a:40:1c:3f:e2:b7:82:cd:3f:39:14:f1:75:28:c8:a6: 84:e4:66:ff:86:c7:f7:77:54:eb:b8:f9:61:05:2f:ba:e4:60: cf:68:8e:f9:02:d1:eb:6e:e5:18:54:f7:6e:7c:41:d5:1b:28: 4d:84:13:82:4f:e0:96:c2:68:a3:55:cb:33:06:79:fb:f5:76: 52:e6:13:65:a0:b5:70:83:cb:61:b5:e1:bf:e9:d3:56:23:d4: 0e:f3:b3:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YtutlVEBeX6SA11SsSisMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViYWJjYWExMGEzMzYwNzJlYmMwODIwYTZkZjBiZmE0ZGM1 Y2ZkYWEwHhcNMjYwMTI1MDkwMTE4WhcNMjYwMTI2MDkwMTE4WjAzMTEwLwYDVQQD EygyYjNlODRhYTI5OGQ1OTliODQyYzhjY2U4MWVjM2FmNmZmYzBjNDA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xMhs7BgvLlVU8A6fomYc5Dquu/a oZbF//26pnO6oKTkggYxWlTYxyx+B4wh21NMQQOe7yMHfySQOZZyb7lfhykc1USY U/75yBQstA3zSml8C5CGcsFXaaU2/ZCsEVXVZ9bJLbzJPhEsdvD4ZHe/1FeSKxub HzNDJrkl5EfGpAHDabPyYxDi7YhlGbYkA+6fx8/No0FD01a8l2WzFPWqYWEO1HVl FBF1IZsD3YpIxI+ylxHze1y08yh2FDjCAnPyRm3VRNa+k156CQuJT+YqpfxwFLZG p1z3hKHJ/RjwJAi0kJ1P8S3rIEivNL5diR6Du4nTT3itcyvXImGOjgE0sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCs+hKopjVmbhCyMzoHsOvb/wMQEMB8GA1UdIwQY MBaAFFuryqEKM2By68CCCm3wv6TcXP2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzZ2S29Rb3pZSExyd0lJS2JmQ19wTnhjX2FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC84YzcyNDctODU5Mi00NGFlLTgyYjEt MTAwZTViNjVlNjcyLzEvVzZ2S29Rb3pZSExyd0lJS2JmQ19wTnhjX2FvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC84YzcyNDctODU5Mi00NGFlLTgyYjEtMTAwZTViNjVlNjcy LzEvVzZ2S29Rb3pZSExyd0lJS2JmQ19wTnhjX2FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC7+J2OVL jqPLHwX6dMy27Glh49FmQBiK5eTKFBMtn4wH2vU4oBaMDscXW9CJavj94Cj0zSvg p/SgT3IjZ5id3kIZysmIqcjxRv6LobWfs8ZpKe0kN5fjqmxr/0Je+KMT3hNylNF7 /v7NclKLD9L9tAQ1zPCCq7JmtjH0Uz3Gip6mvhjKEw7Mtm0xGtEZiX80nw812dfZ qy1safaqHlHWuh/q846aQBw/4reCzT85FPF1KMimhORm/4bH93dU67j5YQUvuuRg z2iO+QLR627lGFT3bnxB1RsoTYQTgk/glsJoo1XLMwZ5+/V2UuYTZaC1cIPLYbXh v+nTViPUDvOz5w== -----END CERTIFICATE-----Generated at Sun Jan 25 16:45:47 2026 by rpki-client