This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b6824a-da61-4cb3-aa78-a0e2410f01e9/1/6W0H10zRSlpDn0g3WMQk260zl3o.mft File: 6W0H10zRSlpDn0g3WMQk260zl3o.mft (raw, json) Hash identifier: U4i/T/dK98IFeHWNoabQ5oKYbd+yPOwLavncgjzDmL4= Subject key identifier: 3C:34:4E:3F:8D:32:33:35:42:AA:82:03:F3:FE:C1:17:85:44:74:C2 Authority key identifier: E9:6D:07:D7:4C:D1:4A:5A:43:9F:48:37:58:C4:24:DB:AD:33:97:7A Certificate issuer: /CN=e96d07d74cd14a5a439f483758c424dbad33977a Certificate serial: 019BF8AD2286FB43BEDE082ADAEF7A1F042D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W0H10zRSlpDn0g3WMQk260zl3o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b6824a-da61-4cb3-aa78-a0e2410f01e9/1/6W0H10zRSlpDn0g3WMQk260zl3o.mft Manifest number: 114B Signing time: Mon 26 Jan 2026 05:00:54 +0000 Manifest this update: Mon 26 Jan 2026 05:00:54 +0000 Manifest next update: Tue 27 Jan 2026 05:00:54 +0000 Files and hashes: 1: 6W0H10zRSlpDn0g3WMQk260zl3o.crl (hash: /4c9ujmFII+YP22E55goTF5lirH1ByrGtlETmikTQyI=) 2: SNgL8rvjJqg2aFiXrEkC_Vir6sI.roa (hash: srcSZ4EZA95vUyoU1thiVbrEjrxydwLoH54pZVsz5Vw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b6824a-da61-4cb3-aa78-a0e2410f01e9/1/6W0H10zRSlpDn0g3WMQk260zl3o.crl rsync://rpki.ripe.net/repository/DEFAULT/71/b6824a-da61-4cb3-aa78-a0e2410f01e9/1/6W0H10zRSlpDn0g3WMQk260zl3o.mft rsync://rpki.ripe.net/repository/DEFAULT/6W0H10zRSlpDn0g3WMQk260zl3o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:22:86:fb:43:be:de:08:2a:da:ef:7a:1f:04:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e96d07d74cd14a5a439f483758c424dbad33977a Validity Not Before: Jan 26 05:00:54 2026 GMT Not After : Jan 27 05:00:54 2026 GMT Subject: CN=3c344e3f8d32333542aa8203f3fec117854474c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:12:10:88:9c:61:1c:c8:76:c5:9c:ae:65:2d: 14:7d:89:b2:65:b8:d1:63:4b:47:09:12:9c:aa:b4: 9a:47:cd:da:da:2e:89:81:b9:d9:57:48:08:27:dd: eb:4e:9f:10:3d:6f:62:f3:fb:c5:c2:78:e1:48:24: e5:85:38:f5:5f:84:1c:74:43:4b:88:07:65:9f:6c: b6:cf:65:cc:10:a6:ea:fd:d3:3c:6d:80:cd:b5:8e: c1:c3:b5:74:2d:c5:4c:53:fe:27:6c:40:44:ff:e6: da:72:aa:d0:a9:7b:6d:41:2a:a1:4b:33:95:7e:17: a0:e9:0a:a9:b7:e9:73:44:be:4b:de:f2:c2:14:64: e1:d9:38:8d:ec:05:85:1c:34:f8:c7:64:84:cf:3d: db:9c:07:d1:df:f6:8d:06:e5:cf:02:7f:85:dd:bb: c1:9e:cf:64:2d:29:b3:72:28:7d:20:d6:d2:89:de: 37:7d:43:96:4a:9e:22:1e:33:49:4b:fd:cb:90:f4: db:0b:20:69:b4:ee:bc:f2:06:35:9b:2e:09:44:11: 55:38:20:6d:f5:23:d1:13:4e:22:eb:65:f8:a4:af: 8b:f6:8f:60:53:b9:da:64:c0:26:eb:d7:bc:cd:9d: a0:32:ea:cc:21:af:2e:44:2e:d5:40:71:d6:f6:42: 7d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:34:4E:3F:8D:32:33:35:42:AA:82:03:F3:FE:C1:17:85:44:74:C2 X509v3 Authority Key Identifier: keyid:E9:6D:07:D7:4C:D1:4A:5A:43:9F:48:37:58:C4:24:DB:AD:33:97:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W0H10zRSlpDn0g3WMQk260zl3o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6824a-da61-4cb3-aa78-a0e2410f01e9/1/6W0H10zRSlpDn0g3WMQk260zl3o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6824a-da61-4cb3-aa78-a0e2410f01e9/1/6W0H10zRSlpDn0g3WMQk260zl3o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:10:3e:e2:92:4a:1e:40:f0:69:de:4a:a3:b3:9d:18:64:51: c3:1f:0b:b3:43:24:13:23:31:68:b3:50:df:b2:df:39:24:85: 59:7d:39:ef:c1:da:a8:ae:a7:06:0c:0b:e7:a7:c6:d0:f3:79: a0:9b:82:0c:6a:df:5c:13:69:5f:04:f6:eb:99:1c:3b:83:7f: 76:8c:63:03:ca:a9:f4:0d:b3:d2:f4:4f:9a:ce:1d:1c:94:e8: 2a:18:e1:47:4b:55:8a:5d:86:26:2d:16:d5:e3:da:23:f0:40: f6:c8:8c:73:47:2d:e0:52:38:89:cd:3e:6a:12:dd:82:d6:4f: a1:55:2f:3c:5a:58:b8:54:16:36:24:e1:d0:8f:52:0e:ab:01: 0e:9d:fe:ba:d8:5a:a8:f4:4a:2a:9e:00:be:27:7c:b9:94:58: a3:cb:c1:3c:31:a6:77:6b:d5:42:b4:d7:cb:cf:43:8f:58:6a: c2:3b:61:f1:6b:1b:5a:c3:6c:c9:af:bd:eb:c8:8c:d2:74:b7: 61:99:f1:76:0a:fb:83:1f:ae:62:78:95:2e:d5:85:3e:54:48: 79:23:4e:f3:1d:5a:f4:cb:1c:0a:4f:0a:39:06:4c:a7:7e:7a: 19:ec:50:b2:13:a0:df:9a:2e:b1:33:23:25:70:b5:df:dc:94: af:d3:33:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rSKG+0O+3ggq2u96HwQtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NmQwN2Q3NGNkMTRhNWE0MzlmNDgzNzU4YzQyNGRiYWQz Mzk3N2EwHhcNMjYwMTI2MDUwMDU0WhcNMjYwMTI3MDUwMDU0WjAzMTEwLwYDVQQD EygzYzM0NGUzZjhkMzIzMzM1NDJhYTgyMDNmM2ZlYzExNzg1NDQ3NGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRIQiJxhHMh2xZyuZS0UfYmyZbjR Y0tHCRKcqrSaR83a2i6JgbnZV0gIJ93rTp8QPW9i8/vFwnjhSCTlhTj1X4QcdENL iAdln2y2z2XMEKbq/dM8bYDNtY7Bw7V0LcVMU/4nbEBE/+bacqrQqXttQSqhSzOV fheg6Qqpt+lzRL5L3vLCFGTh2TiN7AWFHDT4x2SEzz3bnAfR3/aNBuXPAn+F3bvB ns9kLSmzcih9INbSid43fUOWSp4iHjNJS/3LkPTbCyBptO688gY1my4JRBFVOCBt 9SPRE04i62X4pK+L9o9gU7naZMAm69e8zZ2gMurMIa8uRC7VQHHW9kJ9RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDw0Tj+NMjM1QqqCA/P+wReFRHTCMB8GA1UdIwQY MBaAFOltB9dM0UpaQ59IN1jEJNutM5d6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlcwSDEwelJTbHBEbjBnM1dNUWsyNjB6bDNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9iNjgyNGEtZGE2MS00Y2IzLWFhNzgt YTBlMjQxMGYwMWU5LzEvNlcwSDEwelJTbHBEbjBnM1dNUWsyNjB6bDNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9iNjgyNGEtZGE2MS00Y2IzLWFhNzgtYTBlMjQxMGYwMWU5 LzEvNlcwSDEwelJTbHBEbjBnM1dNUWsyNjB6bDNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmhA+4pJK HkDwad5Ko7OdGGRRwx8Ls0MkEyMxaLNQ37LfOSSFWX0578HaqK6nBgwL56fG0PN5 oJuCDGrfXBNpXwT265kcO4N/doxjA8qp9A2z0vRPms4dHJToKhjhR0tVil2GJi0W 1ePaI/BA9siMc0ct4FI4ic0+ahLdgtZPoVUvPFpYuFQWNiTh0I9SDqsBDp3+utha qPRKKp4Avid8uZRYo8vBPDGmd2vVQrTXy89Dj1hqwjth8WsbWsNsya+968iM0nS3 YZnxdgr7gx+uYniVLtWFPlRIeSNO8x1a9MscCk8KOQZMp356GexQshOg35ousTMj JXC139yUr9MzRw== -----END CERTIFICATE-----Generated at Mon Jan 26 07:50:04 2026 by rpki-client