This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.mft File: 6fRRBEShet1zJxRhUpQ0lauruWg.mft (raw, json) Hash identifier: OKRRkOAum2DZx6eOjBNxaVsUeB5RoC15Pl03zdZLAxA= Subject key identifier: 5A:E8:7E:1D:9D:AE:A4:70:86:80:CE:4C:85:41:C6:2A:54:02:0F:22 Authority key identifier: E9:F4:51:04:44:A1:7A:DD:73:27:14:61:52:94:34:95:AB:AB:B9:68 Certificate issuer: /CN=e9f4510444a17add7327146152943495ababb968 Certificate serial: 019BFB096FF073255E1AA4F951780A8631BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6fRRBEShet1zJxRhUpQ0lauruWg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.mft Manifest number: 0F45 Signing time: Mon 26 Jan 2026 16:00:58 +0000 Manifest this update: Mon 26 Jan 2026 16:00:58 +0000 Manifest next update: Tue 27 Jan 2026 16:00:58 +0000 Files and hashes: 1: 6fRRBEShet1zJxRhUpQ0lauruWg.crl (hash: A3XH5cZV05MADm5v71/p4QCmFFsWWV4kxN38vBcOqwU=) 2: CdMLNjkWN_LbBmbtyqVRIvBxVHQ.roa (hash: 86QotpjDcKjFxnBx3ug0BvDhMYnHrgdBwrKCM9Nq8eg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.crl rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.mft rsync://rpki.ripe.net/repository/DEFAULT/6fRRBEShet1zJxRhUpQ0lauruWg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:09:6f:f0:73:25:5e:1a:a4:f9:51:78:0a:86:31:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9f4510444a17add7327146152943495ababb968 Validity Not Before: Jan 26 16:00:58 2026 GMT Not After : Jan 27 16:00:58 2026 GMT Subject: CN=5ae87e1d9daea4708680ce4c8541c62a54020f22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e2:a3:3b:4a:7f:cd:c0:19:ca:1a:a3:c5:da: 5b:42:f5:af:03:96:65:f5:d0:cd:ec:77:da:05:dc: 2b:04:15:d9:7e:9a:b6:21:6f:23:60:2d:13:51:d7: 24:f1:f0:43:ca:f6:9c:9c:b0:01:91:db:0c:e7:f8: 2d:1f:f2:d9:c6:e0:9d:aa:a9:34:4f:e0:85:a2:2e: 94:2f:d0:2b:23:fa:f2:fd:85:4e:c0:0e:07:bc:46: 87:c2:a6:22:76:0e:63:a7:70:74:b0:48:a2:55:b1: 33:fa:8d:65:dc:cd:9a:98:48:46:a5:7c:45:80:5c: e9:48:47:1f:f1:05:f0:9f:58:c0:4b:e2:c6:5a:f4: 4b:14:91:af:92:ce:c9:a2:ed:19:c9:8d:96:84:00: 86:5a:6a:be:0c:d8:27:1f:5a:ed:eb:40:bf:2e:30: 07:36:4b:cf:a2:eb:fd:7f:8c:e8:bc:69:75:da:8b: 6e:ef:32:99:7c:fc:cc:7e:7a:87:65:0a:2d:3b:09: 03:b5:cc:9a:fd:14:81:7c:89:a2:49:98:ad:a1:46: f3:d4:fe:d4:69:7f:7e:d8:eb:4e:79:c8:d5:54:54: a3:ea:70:f6:1e:0a:67:77:3b:7c:47:4a:0f:dd:07: 0f:85:7e:b4:0d:1d:37:a2:97:d5:60:b0:ff:88:a8: 25:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E8:7E:1D:9D:AE:A4:70:86:80:CE:4C:85:41:C6:2A:54:02:0F:22 X509v3 Authority Key Identifier: keyid:E9:F4:51:04:44:A1:7A:DD:73:27:14:61:52:94:34:95:AB:AB:B9:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6fRRBEShet1zJxRhUpQ0lauruWg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:00:ce:da:54:60:4d:1b:e4:2d:72:57:b0:3b:76:de:e0:17: 78:0c:00:a0:55:c9:10:a7:7e:a7:54:b1:e3:7f:c8:f8:19:94: 86:d2:47:be:07:a9:b3:6d:87:61:bf:32:04:61:a4:85:9c:14: ef:9e:fd:1e:08:03:cd:b3:81:cc:74:11:17:23:e9:79:07:85: f0:27:fd:ad:56:0c:b3:9d:ce:24:3f:73:21:c4:e4:77:9a:61: fd:7d:d0:fe:c0:59:2c:90:0b:63:9f:72:13:24:d9:ef:2c:be: dd:41:21:f1:b8:9d:ec:ad:d4:59:1a:f2:48:a7:e6:82:84:0b: 9c:44:8b:cd:87:4e:20:b1:02:a2:c2:79:90:ee:11:2a:e3:b7: c1:64:db:47:a7:8d:8d:27:77:e3:15:ff:d8:33:9d:df:3f:46: c3:de:91:23:8e:74:f2:a0:1f:26:ec:07:35:99:08:fc:1f:81: b8:17:b8:db:25:31:06:77:3e:c8:3d:b9:53:38:61:ea:fc:f0: 85:4e:43:9c:87:de:f3:f0:92:ac:cf:25:f0:2b:f2:e0:5c:3a: 8d:b4:44:b1:81:f3:65:78:43:fb:f8:00:ec:cb:85:d5:6e:ed: f2:dd:b6:28:a3:d8:65:a9:ec:c1:9f:3a:03:35:ac:09:b4:7c: 29:9b:74:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7CW/wcyVeGqT5UXgKhjG7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5ZjQ1MTA0NDRhMTdhZGQ3MzI3MTQ2MTUyOTQzNDk1YWJh YmI5NjgwHhcNMjYwMTI2MTYwMDU4WhcNMjYwMTI3MTYwMDU4WjAzMTEwLwYDVQQD Eyg1YWU4N2UxZDlkYWVhNDcwODY4MGNlNGM4NTQxYzYyYTU0MDIwZjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuKjO0p/zcAZyhqjxdpbQvWvA5Zl 9dDN7HfaBdwrBBXZfpq2IW8jYC0TUdck8fBDyvacnLABkdsM5/gtH/LZxuCdqqk0 T+CFoi6UL9ArI/ry/YVOwA4HvEaHwqYidg5jp3B0sEiiVbEz+o1l3M2amEhGpXxF gFzpSEcf8QXwn1jAS+LGWvRLFJGvks7Jou0ZyY2WhACGWmq+DNgnH1rt60C/LjAH NkvPouv9f4zovGl12otu7zKZfPzMfnqHZQotOwkDtcya/RSBfImiSZitoUbz1P7U aX9+2OtOecjVVFSj6nD2Hgpndzt8R0oP3QcPhX60DR03opfVYLD/iKglnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFrofh2drqRwhoDOTIVBxipUAg8iMB8GA1UdIwQY MBaAFOn0UQREoXrdcycUYVKUNJWrq7loMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmZSUkJFU2hldDF6SnhSaFVwUTBsYXVydVdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC80YTllNWItYWE0MC00ZGMyLThkZWQt YTI3NmVkMGJhMWJjLzEvNmZSUkJFU2hldDF6SnhSaFVwUTBsYXVydVdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC80YTllNWItYWE0MC00ZGMyLThkZWQtYTI3NmVkMGJhMWJj LzEvNmZSUkJFU2hldDF6SnhSaFVwUTBsYXVydVdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWgDO2lRg TRvkLXJXsDt23uAXeAwAoFXJEKd+p1Sx43/I+BmUhtJHvgeps22HYb8yBGGkhZwU 7579HggDzbOBzHQRFyPpeQeF8Cf9rVYMs53OJD9zIcTkd5ph/X3Q/sBZLJALY59y EyTZ7yy+3UEh8bid7K3UWRrySKfmgoQLnESLzYdOILECosJ5kO4RKuO3wWTbR6eN jSd34xX/2DOd3z9Gw96RI4508qAfJuwHNZkI/B+BuBe42yUxBnc+yD25Uzhh6vzw hU5DnIfe8/CSrM8l8Cvy4Fw6jbREsYHzZXhD+/gA7MuF1W7t8t22KKPYZanswZ86 AzWsCbR8KZt0Xw== -----END CERTIFICATE-----Generated at Mon Jan 26 21:11:54 2026 by rpki-client