This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft File: 6tIKIulI-5ZEEprTAZ8I1PSYH88.mft (raw, json) Hash identifier: FjSoK6jJMBU2tMokGf8vW9yX93LbWl+hyxlJ9C/r7IQ= Subject key identifier: F2:A1:21:F7:DD:E4:78:5A:07:C8:7D:EE:BE:EE:93:02:3B:3E:86:8D Authority key identifier: EA:D2:0A:22:E9:48:FB:96:44:12:9A:D3:01:9F:08:D4:F4:98:1F:CF Certificate issuer: /CN=ead20a22e948fb9644129ad3019f08d4f4981fcf Certificate serial: 019BF462BBE3C895FF66CC7F3E2657A10D9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6tIKIulI-5ZEEprTAZ8I1PSYH88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft Manifest number: 07B5 Signing time: Sun 25 Jan 2026 09:01:09 +0000 Manifest this update: Sun 25 Jan 2026 09:01:09 +0000 Manifest next update: Mon 26 Jan 2026 09:01:09 +0000 Files and hashes: 1: 6tIKIulI-5ZEEprTAZ8I1PSYH88.crl (hash: K+K85kt8klopTmq2nqEplEAJ8EvH7I9Us/69qcexXOo=) 2: tR6bEdV4p_rV62KQTz0kZdQM0Vk.roa (hash: 2nYZqEwDkTmP1cC6Mj3w+oSlvHAM2VmNuzWxihqHoCE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.crl rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft rsync://rpki.ripe.net/repository/DEFAULT/6tIKIulI-5ZEEprTAZ8I1PSYH88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:bb:e3:c8:95:ff:66:cc:7f:3e:26:57:a1:0d:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ead20a22e948fb9644129ad3019f08d4f4981fcf Validity Not Before: Jan 25 09:01:09 2026 GMT Not After : Jan 26 09:01:09 2026 GMT Subject: CN=f2a121f7dde4785a07c87deebeee93023b3e868d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:dd:91:23:71:c6:af:d4:d4:ae:51:50:62:ee: 4f:32:23:90:9a:5f:4e:b4:6f:8c:80:4b:26:c5:bb: f1:d5:55:0d:24:90:dc:c0:39:b0:70:d0:11:ae:8e: d7:cb:2a:ca:0c:d0:f0:fb:26:c3:d5:ea:5a:03:c7: 93:b3:5f:32:74:cf:7d:f0:0a:d1:4c:31:8b:cc:7a: 6b:2b:0f:2d:37:a5:31:5e:4e:8c:12:5b:28:76:dc: 0b:f0:74:dd:92:b0:ae:2d:6a:b2:ed:98:a5:d0:6b: 98:2d:6d:95:f6:a9:d2:42:0c:d5:26:4b:98:05:02: 4e:39:5d:e5:59:71:2e:9e:2d:45:82:a4:aa:bb:47: b7:46:bd:d9:82:fc:ae:26:28:f4:a2:79:87:7a:9a: 3d:70:9b:3d:82:79:cb:cf:ae:d4:05:53:a0:8c:db: e3:8c:17:ec:00:42:f7:ee:4f:e4:a9:c6:83:a6:ab: 1a:7a:54:49:0e:50:28:49:61:ce:93:bf:fb:23:8b: 38:78:5d:37:55:59:e1:d5:b8:01:62:4d:aa:a2:aa: 94:48:41:ae:94:cb:e2:b6:87:c2:20:42:4e:05:e2: 83:b8:00:25:a4:68:8e:b4:cb:99:6c:0e:3e:3a:e0: 7e:5f:f2:28:ca:af:14:4e:fd:34:21:16:a7:09:29: db:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A1:21:F7:DD:E4:78:5A:07:C8:7D:EE:BE:EE:93:02:3B:3E:86:8D X509v3 Authority Key Identifier: keyid:EA:D2:0A:22:E9:48:FB:96:44:12:9A:D3:01:9F:08:D4:F4:98:1F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6tIKIulI-5ZEEprTAZ8I1PSYH88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:67:a9:72:ca:ba:fb:73:13:8c:f7:2b:0d:e9:88:72:98:ac: 27:31:5b:9a:70:2c:d7:5c:7d:96:80:73:08:ef:ed:f9:52:72: 8f:18:94:72:e0:53:f7:a0:3a:3c:ea:5d:4a:4c:4a:13:9c:22: a5:76:e6:56:cf:5b:e1:9b:6e:d1:34:33:a3:ae:90:00:52:0d: 2a:64:dd:70:37:5a:de:77:2d:81:b5:9d:ac:d0:0d:c4:c7:92: 04:e1:8a:c7:ef:a0:61:2c:c3:31:6b:c0:45:7d:ac:53:ce:e5: ec:7b:32:a8:7d:9a:9d:de:70:0f:30:45:45:fa:89:31:30:ec: 45:b6:5c:74:d6:ba:b1:87:a4:ce:ae:74:b8:2c:f8:8b:68:a2: 24:de:a7:93:87:b8:7c:a1:0a:95:14:fa:6d:2f:a5:52:1a:20: 10:de:45:f2:ca:f0:f0:8b:e2:b0:52:f1:3e:1d:0c:69:ed:06: ae:80:53:63:3f:47:73:21:c3:8f:0e:0f:b6:31:03:2d:e4:e9: 80:a5:4f:00:5a:cd:b2:2f:7b:2f:a6:2c:bc:9c:ab:36:5e:fc: ca:fa:71:fa:75:8e:ad:f7:53:5b:38:1d:24:a0:5e:c8:bd:db: 40:1b:b5:0f:a6:ff:e5:5c:cd:34:83:ae:ea:61:88:90:a8:b7: eb:85:ca:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YrvjyJX/Zsx/PiZXoQ2bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhZDIwYTIyZTk0OGZiOTY0NDEyOWFkMzAxOWYwOGQ0ZjQ5 ODFmY2YwHhcNMjYwMTI1MDkwMTA5WhcNMjYwMTI2MDkwMTA5WjAzMTEwLwYDVQQD EyhmMmExMjFmN2RkZTQ3ODVhMDdjODdkZWViZWVlOTMwMjNiM2U4NjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyN2RI3HGr9TUrlFQYu5PMiOQml9O tG+MgEsmxbvx1VUNJJDcwDmwcNARro7XyyrKDNDw+ybD1epaA8eTs18ydM998ArR TDGLzHprKw8tN6UxXk6MElsodtwL8HTdkrCuLWqy7Zil0GuYLW2V9qnSQgzVJkuY BQJOOV3lWXEuni1FgqSqu0e3Rr3ZgvyuJij0onmHepo9cJs9gnnLz67UBVOgjNvj jBfsAEL37k/kqcaDpqsaelRJDlAoSWHOk7/7I4s4eF03VVnh1bgBYk2qoqqUSEGu lMvitofCIEJOBeKDuAAlpGiOtMuZbA4+OuB+X/Ioyq8UTv00IRanCSnbLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPKhIffd5HhaB8h97r7ukwI7PoaNMB8GA1UdIwQY MBaAFOrSCiLpSPuWRBKa0wGfCNT0mB/PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnRJS0l1bEktNVpFRXByVEFaOEkxUFNZSDg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8xN2NhNWYtNDMyNy00YTg4LWI5NzYt YjY0ZmZjZTA2NTgwLzEvNnRJS0l1bEktNVpFRXByVEFaOEkxUFNZSDg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8xN2NhNWYtNDMyNy00YTg4LWI5NzYtYjY0ZmZjZTA2NTgw LzEvNnRJS0l1bEktNVpFRXByVEFaOEkxUFNZSDg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY2epcsq6 +3MTjPcrDemIcpisJzFbmnAs11x9loBzCO/t+VJyjxiUcuBT96A6POpdSkxKE5wi pXbmVs9b4Ztu0TQzo66QAFINKmTdcDda3nctgbWdrNANxMeSBOGKx++gYSzDMWvA RX2sU87l7HsyqH2and5wDzBFRfqJMTDsRbZcdNa6sYekzq50uCz4i2iiJN6nk4e4 fKEKlRT6bS+lUhogEN5F8srw8IvisFLxPh0Mae0GroBTYz9HcyHDjw4PtjEDLeTp gKVPAFrNsi97L6YsvJyrNl78yvpx+nWOrfdTWzgdJKBeyL3bQBu1D6b/5VzNNIOu 6mGIkKi364XKRA== -----END CERTIFICATE-----Generated at Sun Jan 25 19:24:40 2026 by rpki-client