This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.mft File: 6hIZKS2GypY5e4qL0k4IsaiXwaM.mft (raw, json) Hash identifier: MJ1h1m6V262IkoBQs8iPAYTE5beWGvh7sXBrp33KrrU= Subject key identifier: 1E:62:2D:54:93:6C:D2:90:6B:75:42:F0:EB:9F:D2:DC:BF:53:50:C9 Authority key identifier: EA:12:19:29:2D:86:CA:96:39:7B:8A:8B:D2:4E:08:B1:A8:97:C1:A3 Certificate issuer: /CN=ea1219292d86ca96397b8a8bd24e08b1a897c1a3 Certificate serial: 019BF6BEA8C0377D449F1139C22FB36437C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6hIZKS2GypY5e4qL0k4IsaiXwaM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.mft Manifest number: 17F1 Signing time: Sun 25 Jan 2026 20:00:48 +0000 Manifest this update: Sun 25 Jan 2026 20:00:48 +0000 Manifest next update: Mon 26 Jan 2026 20:00:48 +0000 Files and hashes: 1: 6hIZKS2GypY5e4qL0k4IsaiXwaM.crl (hash: QSqTR+SWu36xxziHRDpssZb/nQMfnQO24ctOQDu629w=) 2: tpEBF1Q8z5bSj6OcJb4FTf6df5I.roa (hash: ReUABYJKJ1IomFhNfPbyfpUKq1xXrFx0mGae78sw4IU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.mft rsync://rpki.ripe.net/repository/DEFAULT/6hIZKS2GypY5e4qL0k4IsaiXwaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:a8:c0:37:7d:44:9f:11:39:c2:2f:b3:64:37:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea1219292d86ca96397b8a8bd24e08b1a897c1a3 Validity Not Before: Jan 25 20:00:48 2026 GMT Not After : Jan 26 20:00:48 2026 GMT Subject: CN=1e622d54936cd2906b7542f0eb9fd2dcbf5350c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:68:f1:bd:04:60:f3:a0:25:17:78:43:55:86: 04:a4:91:f6:03:b6:48:59:db:20:48:38:1a:73:50: 9e:fc:59:fd:e1:88:dd:73:2e:f3:d7:cd:85:0a:2f: 5e:15:a8:0f:d1:c7:1f:71:e8:16:db:f9:3b:a9:3f: 4e:38:5c:4b:fc:01:de:45:4c:7f:67:a7:91:1f:dd: 6f:f5:0e:2e:6b:1a:de:d0:76:8c:28:6a:b0:be:66: ab:78:88:aa:5b:8e:85:48:56:4b:44:ce:bf:67:a0: e4:a4:e7:6a:2c:9c:ba:a5:ab:ce:ee:1f:11:5c:1c: b8:7b:5e:a2:aa:44:18:a5:aa:19:68:27:ae:36:13: 27:9f:f0:c0:bb:ca:c8:c1:7d:66:0d:ec:19:36:35: 2c:63:10:1d:ca:95:de:1c:f5:55:19:92:ac:75:da: c4:6d:f9:3c:42:fc:6f:24:88:59:ab:83:6f:4b:e4: 87:36:08:e9:90:3e:d2:0b:f4:eb:5d:19:cc:19:c9: df:6f:87:82:12:17:5b:67:37:0a:d3:f4:c0:df:0c: 02:41:ef:2e:a9:0b:7d:14:f5:ba:97:8f:a2:f8:8e: 17:dd:da:7d:e1:51:ca:da:a6:fd:56:98:e2:3c:15: 99:ea:43:b7:cf:da:68:0d:6b:54:2e:3c:4e:c8:b2: 44:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:62:2D:54:93:6C:D2:90:6B:75:42:F0:EB:9F:D2:DC:BF:53:50:C9 X509v3 Authority Key Identifier: keyid:EA:12:19:29:2D:86:CA:96:39:7B:8A:8B:D2:4E:08:B1:A8:97:C1:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hIZKS2GypY5e4qL0k4IsaiXwaM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:81:53:df:ea:ea:0b:10:ca:7b:8e:1e:20:12:ff:58:b0:99: 39:86:56:40:82:5e:da:38:e3:ee:88:a2:57:12:54:2d:86:22: cc:94:6d:a5:3c:cd:27:48:b1:f3:a9:d6:8a:73:fd:f4:0f:8f: e8:0a:f2:3a:8a:19:01:fb:3f:ea:8c:41:56:f6:8d:58:21:24: d0:f4:18:86:51:01:6a:c7:11:c2:30:34:44:c0:e8:5a:b1:84: 1a:e4:0a:c4:8a:0f:ae:bf:f1:fb:43:f6:37:0f:4e:03:32:fb: 08:66:45:be:59:be:53:7d:dd:a5:4e:d1:75:67:90:a9:cb:a9: a4:04:d3:24:bb:53:6a:b7:0d:f7:d1:0e:52:f8:f1:db:aa:d1: 97:90:65:1e:5e:cc:87:78:2d:ac:47:94:cb:db:a7:dd:e9:1a: 85:8a:f0:86:bc:ba:42:68:02:02:42:9a:70:f6:18:e6:1b:35: bb:b7:8f:f1:fe:02:ae:fb:f3:51:87:bf:45:1f:a9:24:fb:5c: 37:6a:9f:ed:a6:a7:f9:9a:07:da:8a:31:81:54:79:1d:b5:2f: 90:7e:1a:1e:60:56:f1:12:b3:8a:ff:0b:0d:b0:e9:0e:02:f8: f6:8d:81:3e:a4:59:1d:39:db:1a:32:4e:d3:93:3e:ff:2b:fb: e9:89:7c:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vqjAN31EnxE5wi+zZDfIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMTIxOTI5MmQ4NmNhOTYzOTdiOGE4YmQyNGUwOGIxYTg5 N2MxYTMwHhcNMjYwMTI1MjAwMDQ4WhcNMjYwMTI2MjAwMDQ4WjAzMTEwLwYDVQQD EygxZTYyMmQ1NDkzNmNkMjkwNmI3NTQyZjBlYjlmZDJkY2JmNTM1MGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmjxvQRg86AlF3hDVYYEpJH2A7ZI WdsgSDgac1Ce/Fn94Yjdcy7z182FCi9eFagP0ccfcegW2/k7qT9OOFxL/AHeRUx/ Z6eRH91v9Q4uaxre0HaMKGqwvmareIiqW46FSFZLRM6/Z6DkpOdqLJy6pavO7h8R XBy4e16iqkQYpaoZaCeuNhMnn/DAu8rIwX1mDewZNjUsYxAdypXeHPVVGZKsddrE bfk8QvxvJIhZq4NvS+SHNgjpkD7SC/TrXRnMGcnfb4eCEhdbZzcK0/TA3wwCQe8u qQt9FPW6l4+i+I4X3dp94VHK2qb9VpjiPBWZ6kO3z9poDWtULjxOyLJEDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB5iLVSTbNKQa3VC8Ouf0ty/U1DJMB8GA1UdIwQY MBaAFOoSGSkthsqWOXuKi9JOCLGol8GjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmhJWktTMkd5cFk1ZTRxTDBrNElzYWlYd2FNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9jYmIyZTQtODhjMy00Y2MwLTk2NzUt Yzk4YTFiZGU2NDc2LzEvNmhJWktTMkd5cFk1ZTRxTDBrNElzYWlYd2FNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9jYmIyZTQtODhjMy00Y2MwLTk2NzUtYzk4YTFiZGU2NDc2 LzEvNmhJWktTMkd5cFk1ZTRxTDBrNElzYWlYd2FNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUYFT3+rq CxDKe44eIBL/WLCZOYZWQIJe2jjj7oiiVxJULYYizJRtpTzNJ0ix86nWinP99A+P 6AryOooZAfs/6oxBVvaNWCEk0PQYhlEBascRwjA0RMDoWrGEGuQKxIoPrr/x+0P2 Nw9OAzL7CGZFvlm+U33dpU7RdWeQqcuppATTJLtTarcN99EOUvjx26rRl5BlHl7M h3gtrEeUy9un3ekahYrwhry6QmgCAkKacPYY5hs1u7eP8f4CrvvzUYe/RR+pJPtc N2qf7aan+ZoH2ooxgVR5HbUvkH4aHmBW8RKziv8LDbDpDgL49o2BPqRZHTnbGjJO 05M+/yv76Yl85g== -----END CERTIFICATE-----Generated at Mon Jan 26 01:48:20 2026 by rpki-client