This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.mft File: u6O9sseEb799AIfbRVLus2PfnqU.mft (raw, json) Hash identifier: vSsVmD4vkb4ogV9rYLQoi0F4sDVDlTXjlmVH1KJJq5U= Subject key identifier: 63:1F:B6:D4:EC:FD:40:BE:9C:AE:89:87:FA:D4:9A:06:44:19:FE:FF Authority key identifier: BB:A3:BD:B2:C7:84:6F:BF:7D:00:87:DB:45:52:EE:B3:63:DF:9E:A5 Certificate issuer: /CN=bba3bdb2c7846fbf7d0087db4552eeb363df9ea5 Certificate serial: 019BF6881B887624C100846B99EDDE853B3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u6O9sseEb799AIfbRVLus2PfnqU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.mft Manifest number: 0186 Signing time: Sun 25 Jan 2026 19:01:13 +0000 Manifest this update: Sun 25 Jan 2026 19:01:13 +0000 Manifest next update: Mon 26 Jan 2026 19:01:13 +0000 Files and hashes: 1: I7p2CVdLUND1ZRszmGKzKIrLt74.roa (hash: jiBTRZ5olwGDj0RvfZj3FhxYBTormm6OVToMfN4KMps=) 2: u6O9sseEb799AIfbRVLus2PfnqU.crl (hash: gZqs76uXvGelxiWYvInvFMmUKp1FlE7OHYE9YfTR8CQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.crl rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.mft rsync://rpki.ripe.net/repository/DEFAULT/u6O9sseEb799AIfbRVLus2PfnqU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:88:1b:88:76:24:c1:00:84:6b:99:ed:de:85:3b:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bba3bdb2c7846fbf7d0087db4552eeb363df9ea5 Validity Not Before: Jan 25 19:01:13 2026 GMT Not After : Jan 26 19:01:13 2026 GMT Subject: CN=631fb6d4ecfd40be9cae8987fad49a064419feff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:51:59:fd:b9:d1:3a:b4:6d:30:0e:4f:9c:6e: 22:17:29:ce:64:9c:d5:21:b3:c0:78:64:d6:ae:21: 82:a5:49:b4:1e:2b:61:de:e2:9a:33:4a:df:8a:c8: e2:95:34:64:62:0f:6f:df:b8:08:df:29:5b:7f:28: a3:3e:37:72:51:7f:68:70:85:42:21:90:ce:9a:bd: 78:81:a1:e2:46:f5:bf:d7:bb:b8:d1:b6:98:82:36: 61:59:41:90:28:a0:6d:d3:12:55:8f:38:15:03:69: 35:4b:6a:06:1d:47:04:9d:26:f5:2a:19:8e:40:e2: 06:33:8f:da:5f:e3:6c:60:70:88:46:43:fa:18:91: eb:3b:4a:b4:5d:f8:38:a0:ef:1d:18:1b:3b:9d:85: e2:68:f5:dd:2b:7a:74:86:24:82:cb:32:5f:1d:c3: 6f:e0:10:1f:53:aa:4a:a6:6c:61:89:c8:25:79:fd: b3:79:be:29:34:15:5f:67:5e:56:31:af:c4:68:8b: b4:02:99:15:fc:32:da:32:ce:f7:7f:df:ff:16:43: 63:8e:30:85:80:e9:67:2f:4b:e0:20:cd:64:19:4e: dd:c0:c1:c7:07:65:13:7f:ed:1f:42:93:2d:90:91: 51:2d:84:19:46:01:7c:b0:c5:ba:8c:53:1c:b8:6f: d9:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:1F:B6:D4:EC:FD:40:BE:9C:AE:89:87:FA:D4:9A:06:44:19:FE:FF X509v3 Authority Key Identifier: keyid:BB:A3:BD:B2:C7:84:6F:BF:7D:00:87:DB:45:52:EE:B3:63:DF:9E:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6O9sseEb799AIfbRVLus2PfnqU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:41:ed:04:29:5c:e9:b8:20:c1:3f:dd:f0:6a:11:d9:a8:85: 56:f3:9a:cc:c1:de:2a:0e:f1:0a:aa:7a:69:b1:1b:c1:1d:12: 14:f8:b6:c8:d5:c6:eb:02:45:a9:8e:92:72:f6:f9:ff:e4:4b: 77:dd:b8:ad:46:90:30:c9:9e:0b:05:50:a9:a3:87:04:fe:42: cb:fa:f9:65:e3:b9:c3:3d:29:92:a8:f2:35:cb:c8:e2:9f:c2: 9f:b7:a3:aa:bb:b4:7a:e2:45:3d:3f:39:a9:80:cc:91:c5:36: de:8a:15:bc:56:52:3e:13:62:e4:8c:b2:dd:e4:4e:bd:67:3e: c7:99:b3:b4:91:2e:61:50:ba:6b:ba:6f:47:6a:1c:68:b5:9e: 4a:ab:45:45:78:35:8e:88:5e:64:af:7e:45:11:d0:c5:f7:f6: c6:6c:07:f1:f9:cf:d4:b7:49:0d:20:38:1a:fc:c1:24:31:d8: 95:a2:e0:aa:e8:02:b7:38:60:2c:32:00:3b:47:68:46:cb:5e: 97:7c:f4:3a:12:13:f6:a7:92:00:b9:9d:9c:38:b3:0c:7d:94: 83:96:5e:73:44:ad:22:2c:c3:6e:81:05:2f:ed:ce:14:df:f9: 05:d5:a0:ae:51:4a:2f:31:5a:f4:f7:4b:36:f8:6d:cc:6c:f3: 11:2d:ee:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2iBuIdiTBAIRrme3ehTs9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiYTNiZGIyYzc4NDZmYmY3ZDAwODdkYjQ1NTJlZWIzNjNk ZjllYTUwHhcNMjYwMTI1MTkwMTEzWhcNMjYwMTI2MTkwMTEzWjAzMTEwLwYDVQQD Eyg2MzFmYjZkNGVjZmQ0MGJlOWNhZTg5ODdmYWQ0OWEwNjQ0MTlmZWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFFZ/bnROrRtMA5PnG4iFynOZJzV IbPAeGTWriGCpUm0Hith3uKaM0rfisjilTRkYg9v37gI3ylbfyijPjdyUX9ocIVC IZDOmr14gaHiRvW/17u40baYgjZhWUGQKKBt0xJVjzgVA2k1S2oGHUcEnSb1KhmO QOIGM4/aX+NsYHCIRkP6GJHrO0q0Xfg4oO8dGBs7nYXiaPXdK3p0hiSCyzJfHcNv 4BAfU6pKpmxhicglef2zeb4pNBVfZ15WMa/EaIu0ApkV/DLaMs73f9//FkNjjjCF gOlnL0vgIM1kGU7dwMHHB2UTf+0fQpMtkJFRLYQZRgF8sMW6jFMcuG/ZuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGMfttTs/UC+nK6Jh/rUmgZEGf7/MB8GA1UdIwQY MBaAFLujvbLHhG+/fQCH20VS7rNj356lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTZPOXNzZUViNzk5QUlmYlJWTHVzMlBmbnFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8yNmQxY2ItZTFhNS00OTBjLTgxYmMt YWEzNGQxZmZmMzg3LzEvdTZPOXNzZUViNzk5QUlmYlJWTHVzMlBmbnFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My8yNmQxY2ItZTFhNS00OTBjLTgxYmMtYWEzNGQxZmZmMzg3 LzEvdTZPOXNzZUViNzk5QUlmYlJWTHVzMlBmbnFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK0HtBClc 6bggwT/d8GoR2aiFVvOazMHeKg7xCqp6abEbwR0SFPi2yNXG6wJFqY6Scvb5/+RL d924rUaQMMmeCwVQqaOHBP5Cy/r5ZeO5wz0pkqjyNcvI4p/Cn7ejqru0euJFPT85 qYDMkcU23ooVvFZSPhNi5Iyy3eROvWc+x5mztJEuYVC6a7pvR2ocaLWeSqtFRXg1 joheZK9+RRHQxff2xmwH8fnP1LdJDSA4GvzBJDHYlaLgqugCtzhgLDIAO0doRste l3z0OhIT9qeSALmdnDizDH2Ug5Zec0StIizDboEFL+3OFN/5BdWgrlFKLzFa9PdL NvhtzGzzES3uoQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:34:49 2026 by rpki-client