This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.mft File: aP4jOevgl_9pirMOW2PswhoqI6s.mft (raw, json) Hash identifier: UFy3I9bfQyQR1XEtlhDq/HsiTtpgrXZLtJd53/qYy9g= Subject key identifier: C6:B7:9B:54:3B:0F:5A:0F:30:8B:7F:E6:3E:88:E2:E3:5F:C1:35:46 Authority key identifier: 68:FE:23:39:EB:E0:97:FF:69:8A:B3:0E:5B:63:EC:C2:1A:2A:23:AB Certificate issuer: /CN=68fe2339ebe097ff698ab30e5b63ecc21a2a23ab Certificate serial: 019BF5E3B9EEB1FB99D21CCB3CF6379AB10F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aP4jOevgl_9pirMOW2PswhoqI6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.mft Manifest number: 06B1 Signing time: Sun 25 Jan 2026 16:01:40 +0000 Manifest this update: Sun 25 Jan 2026 16:01:40 +0000 Manifest next update: Mon 26 Jan 2026 16:01:40 +0000 Files and hashes: 1: aP4jOevgl_9pirMOW2PswhoqI6s.crl (hash: iF/Coxs1wC1Sjx5HIHJ0B+Pzk+48Jex06uIJbQBQ/AY=) 2: qK1qsq6SydRQsph0pcOe7ljWypU.roa (hash: GQsQePKWU4sUFb7047+SEDBy9k0n6p9UubN0V6aD1Oo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.crl rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.mft rsync://rpki.ripe.net/repository/DEFAULT/aP4jOevgl_9pirMOW2PswhoqI6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:b9:ee:b1:fb:99:d2:1c:cb:3c:f6:37:9a:b1:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68fe2339ebe097ff698ab30e5b63ecc21a2a23ab Validity Not Before: Jan 25 16:01:40 2026 GMT Not After : Jan 26 16:01:40 2026 GMT Subject: CN=c6b79b543b0f5a0f308b7fe63e88e2e35fc13546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:7c:22:14:d8:83:a3:83:f0:3c:5c:88:06:63: 30:02:cc:ad:f7:f7:99:b1:23:13:6e:4f:40:95:d2: 34:db:f9:53:03:10:2f:71:fe:8f:1f:9c:83:7b:0b: 29:ca:ea:a6:52:5d:91:db:68:26:3c:aa:8a:05:b6: 6c:52:fb:1b:d4:48:cc:94:95:28:3c:c9:0d:11:ad: b6:ed:3c:2d:47:c2:9b:83:a7:67:46:34:73:ef:7e: 7a:cd:14:aa:ec:be:f5:06:28:18:c2:69:db:f4:a8: e1:7e:7b:83:cf:bf:01:01:c2:a0:ad:f2:15:7d:3f: 49:bd:01:86:85:27:5e:a5:33:16:a0:70:46:0c:26: 8d:24:dc:1b:a8:43:79:8d:b5:06:c1:73:44:f6:4f: 5c:10:d9:7b:2d:19:0b:bf:e8:95:d8:43:07:29:a2: bf:bd:44:3a:b0:6d:89:f6:5b:00:2b:a6:6d:57:6f: df:61:8d:2a:32:c7:1b:3e:87:82:99:bc:48:a4:91: 33:83:f1:37:ab:e9:4b:b9:a2:bf:a9:fe:53:2e:81: b6:2a:da:4e:88:90:7a:4a:df:72:36:21:d8:59:65: c1:5b:e3:76:70:26:6f:73:41:4a:1f:6c:ee:c7:e0: 12:a2:2b:61:42:a9:06:dd:2c:68:66:1d:1f:cf:62: 3d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:B7:9B:54:3B:0F:5A:0F:30:8B:7F:E6:3E:88:E2:E3:5F:C1:35:46 X509v3 Authority Key Identifier: keyid:68:FE:23:39:EB:E0:97:FF:69:8A:B3:0E:5B:63:EC:C2:1A:2A:23:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aP4jOevgl_9pirMOW2PswhoqI6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:3c:48:e8:cc:c1:77:24:b0:fe:b8:5f:b0:38:23:89:c1:2e: 21:4e:ba:28:2e:b2:64:dc:a8:eb:4b:13:ff:c8:64:87:ff:85: 30:0f:5b:22:74:a7:00:b7:9d:e4:cd:2d:c4:75:ee:2a:81:a0: 39:8b:ac:4b:23:43:87:30:21:2f:3f:1b:cb:af:fb:3e:ea:97: 9e:f9:a0:ba:ab:90:c9:bd:12:6e:cb:da:b2:28:bd:67:02:20: 00:5d:0a:7d:bd:64:ab:ef:3e:1f:c8:15:e7:d3:7a:24:75:a6: 11:1e:90:b8:57:6c:91:1e:95:af:0e:20:8a:08:1b:82:ae:62: 51:4e:dc:e8:a7:7a:6d:0f:be:04:a0:00:28:56:f1:30:45:f8: 74:fc:43:f7:f2:d8:33:79:35:25:2e:cb:08:67:76:65:55:eb: ef:29:74:bd:c5:36:f8:a3:95:92:7a:a5:84:5e:c2:5a:74:0c: ea:71:84:fc:d7:f1:2c:6b:b0:4e:5b:69:21:b5:38:ad:78:4c: 2c:2a:24:82:13:59:49:6e:01:e6:b4:57:5b:12:c1:8c:e1:f5: 54:e7:e9:83:3a:d3:08:18:fd:92:01:33:bf:a2:3b:43:a2:3c: ea:17:d5:10:1f:1c:41:8c:38:38:8b:e8:d8:a5:35:d8:3b:82: 7c:da:50:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv147nusfuZ0hzLPPY3mrEPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4ZmUyMzM5ZWJlMDk3ZmY2OThhYjMwZTViNjNlY2MyMWEy YTIzYWIwHhcNMjYwMTI1MTYwMTQwWhcNMjYwMTI2MTYwMTQwWjAzMTEwLwYDVQQD EyhjNmI3OWI1NDNiMGY1YTBmMzA4YjdmZTYzZTg4ZTJlMzVmYzEzNTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53wiFNiDo4PwPFyIBmMwAsyt9/eZ sSMTbk9AldI02/lTAxAvcf6PH5yDewspyuqmUl2R22gmPKqKBbZsUvsb1EjMlJUo PMkNEa227TwtR8Kbg6dnRjRz7356zRSq7L71BigYwmnb9KjhfnuDz78BAcKgrfIV fT9JvQGGhSdepTMWoHBGDCaNJNwbqEN5jbUGwXNE9k9cENl7LRkLv+iV2EMHKaK/ vUQ6sG2J9lsAK6ZtV2/fYY0qMscbPoeCmbxIpJEzg/E3q+lLuaK/qf5TLoG2KtpO iJB6St9yNiHYWWXBW+N2cCZvc0FKH2zux+ASoithQqkG3SxoZh0fz2I9ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMa3m1Q7D1oPMIt/5j6I4uNfwTVGMB8GA1UdIwQY MBaAFGj+Iznr4Jf/aYqzDltj7MIaKiOrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVA0ak9ldmdsXzlwaXJNT1cyUHN3aG9xSTZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9lN2UwZDgtY2YyYi00ZTE1LWFmMjct ZWVhOGFmMTQzNGQ5LzEvYVA0ak9ldmdsXzlwaXJNT1cyUHN3aG9xSTZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9lN2UwZDgtY2YyYi00ZTE1LWFmMjctZWVhOGFmMTQzNGQ5 LzEvYVA0ak9ldmdsXzlwaXJNT1cyUHN3aG9xSTZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxTxI6MzB dySw/rhfsDgjicEuIU66KC6yZNyo60sT/8hkh/+FMA9bInSnALed5M0txHXuKoGg OYusSyNDhzAhLz8by6/7PuqXnvmguquQyb0Sbsvasii9ZwIgAF0Kfb1kq+8+H8gV 59N6JHWmER6QuFdskR6Vrw4giggbgq5iUU7c6Kd6bQ++BKAAKFbxMEX4dPxD9/LY M3k1JS7LCGd2ZVXr7yl0vcU2+KOVknqlhF7CWnQM6nGE/NfxLGuwTltpIbU4rXhM LCokghNZSW4B5rRXWxLBjOH1VOfpgzrTCBj9kgEzv6I7Q6I86hfVEB8cQYw4OIvo 2KU12DuCfNpQ5g== -----END CERTIFICATE-----Generated at Mon Jan 26 00:18:47 2026 by rpki-client