This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/6P36cUAM43C3X3N3gEhXTkYnQxs.mft File: 6P36cUAM43C3X3N3gEhXTkYnQxs.mft (raw, json) Hash identifier: VQQigr4pDL+isUH572oZoaD5c5bo8C0zobv0nC3sX6Q= Subject key identifier: 24:4E:16:74:4E:BC:27:45:56:FF:D7:88:B9:CE:5C:F7:73:0F:2F:6E Authority key identifier: E8:FD:FA:71:40:0C:E3:70:B7:5F:73:77:80:48:57:4E:46:27:43:1B Certificate issuer: /CN=e8fdfa71400ce370b75f73778048574e4627431b Certificate serial: 019BF5E3D174AD9E74FCA0AC93F174DB6E5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6P36cUAM43C3X3N3gEhXTkYnQxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/6P36cUAM43C3X3N3gEhXTkYnQxs.mft Manifest number: 0486 Signing time: Sun 25 Jan 2026 16:01:46 +0000 Manifest this update: Sun 25 Jan 2026 16:01:46 +0000 Manifest next update: Mon 26 Jan 2026 16:01:46 +0000 Files and hashes: 1: 6P36cUAM43C3X3N3gEhXTkYnQxs.crl (hash: v3U0R0nGqa1fjaGfMsNs9BvWRfPiakpk5mOXCE3UOBg=) 2: ooscOEIlizWjX7MF_vUlLouGttM.roa (hash: MbEpb6Fu+D3CAov79RuTyeWmbIxOn8Qmu/kJUULRZ/E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/6P36cUAM43C3X3N3gEhXTkYnQxs.crl rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/6P36cUAM43C3X3N3gEhXTkYnQxs.mft rsync://rpki.ripe.net/repository/DEFAULT/6P36cUAM43C3X3N3gEhXTkYnQxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:d1:74:ad:9e:74:fc:a0:ac:93:f1:74:db:6e:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8fdfa71400ce370b75f73778048574e4627431b Validity Not Before: Jan 25 16:01:46 2026 GMT Not After : Jan 26 16:01:46 2026 GMT Subject: CN=244e16744ebc274556ffd788b9ce5cf7730f2f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:80:bc:a7:d4:ae:9e:35:f4:2d:db:49:94:3d: 51:6b:ce:62:55:62:43:57:ed:44:f2:ea:cb:a2:e3: 6e:8a:09:c7:15:93:dd:d3:e8:f9:a4:91:1a:b3:c2: 1a:c0:2e:94:a9:7b:55:43:27:e1:75:08:c9:9b:d4: 8d:75:7b:99:32:71:f5:5a:18:7b:41:28:c5:42:42: a0:f0:06:46:e0:a9:55:77:a6:d7:fa:bf:9d:ae:78: d5:e0:5a:b7:22:07:43:9d:2f:4a:e2:d6:1d:ec:34: f5:d3:ad:db:5e:30:bf:02:4b:42:5c:51:37:60:b5: 21:4c:5c:b6:18:4e:27:3d:40:0f:0b:22:87:09:d8: cf:08:e5:9a:29:69:77:89:f6:7b:4b:b5:44:1f:1b: 9e:9b:9e:81:e8:e5:a0:e8:6c:86:b9:3c:0b:5a:9b: 9f:54:df:99:72:e6:10:61:54:1a:5a:23:82:71:aa: 1c:e0:94:70:b0:d0:59:d6:1a:ba:96:46:9f:4d:f4: d1:00:00:82:23:ea:70:3a:1a:67:8f:6b:23:ff:c0: cd:b0:8e:02:28:8c:57:3f:48:22:20:e4:e9:b5:88: f9:2b:a6:59:ad:7d:66:48:69:ee:a5:2e:3d:12:b5: 98:5f:53:a0:6b:1e:28:f3:7e:80:13:c6:28:11:6f: bb:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:4E:16:74:4E:BC:27:45:56:FF:D7:88:B9:CE:5C:F7:73:0F:2F:6E X509v3 Authority Key Identifier: keyid:E8:FD:FA:71:40:0C:E3:70:B7:5F:73:77:80:48:57:4E:46:27:43:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6P36cUAM43C3X3N3gEhXTkYnQxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/6P36cUAM43C3X3N3gEhXTkYnQxs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/6P36cUAM43C3X3N3gEhXTkYnQxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:cb:e8:a3:7d:a4:66:cc:d7:33:f4:51:b3:c9:79:de:4f:a7: 2d:24:64:b3:da:52:7e:24:b6:3a:f9:40:55:52:71:4c:e8:9f: 14:01:2c:9a:cd:fd:c5:07:ec:79:97:c5:a6:b9:ee:59:73:cd: f4:1c:dc:52:78:94:48:10:9a:5b:a3:d6:a1:e5:bd:36:e3:a0: 88:7a:07:cc:f0:27:9b:fd:7d:a4:b7:9d:8d:1f:5d:09:87:f0: 11:0c:c2:5d:cc:28:b4:f1:56:46:22:61:d8:32:b6:7e:65:4a: 9b:c1:cc:9e:78:e3:06:dc:7d:4a:fa:8a:d3:e2:dc:f6:58:0c: 98:73:19:97:f4:9d:47:99:8a:8d:51:e4:7d:69:1e:14:fd:23: 46:35:97:27:30:e3:29:d4:17:75:ba:aa:65:34:1b:0d:c2:0c: 0b:29:88:6c:d6:cb:0b:5e:37:db:b9:bf:ea:44:6f:b8:ed:d8: cf:6f:ab:04:2c:77:fc:7c:90:41:67:4b:ce:29:f3:fb:e1:d5: 79:07:71:48:35:bf:2d:13:bb:2c:fd:1d:19:f1:95:b5:9c:b8: 0c:f4:b8:2c:c7:f0:48:fa:bf:d6:bb:fd:a3:48:bf:95:27:bd: 87:5e:a8:10:07:8c:e3:83:2c:5b:12:17:19:df:1b:1e:b9:03: 12:c7:cb:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv149F0rZ50/KCsk/F0225aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4ZmRmYTcxNDAwY2UzNzBiNzVmNzM3NzgwNDg1NzRlNDYy NzQzMWIwHhcNMjYwMTI1MTYwMTQ2WhcNMjYwMTI2MTYwMTQ2WjAzMTEwLwYDVQQD EygyNDRlMTY3NDRlYmMyNzQ1NTZmZmQ3ODhiOWNlNWNmNzczMGYyZjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroC8p9SunjX0LdtJlD1Ra85iVWJD V+1E8urLouNuignHFZPd0+j5pJEas8IawC6UqXtVQyfhdQjJm9SNdXuZMnH1Whh7 QSjFQkKg8AZG4KlVd6bX+r+drnjV4Fq3IgdDnS9K4tYd7DT1063bXjC/AktCXFE3 YLUhTFy2GE4nPUAPCyKHCdjPCOWaKWl3ifZ7S7VEHxuem56B6OWg6GyGuTwLWpuf VN+ZcuYQYVQaWiOCcaoc4JRwsNBZ1hq6lkafTfTRAACCI+pwOhpnj2sj/8DNsI4C KIxXP0giIOTptYj5K6ZZrX1mSGnupS49ErWYX1Ogax4o836AE8YoEW+7zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCROFnROvCdFVv/XiLnOXPdzDy9uMB8GA1UdIwQY MBaAFOj9+nFADONwt19zd4BIV05GJ0MbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlAzNmNVQU00M0MzWDNOM2dFaFhUa1luUXhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81NWJlNzUtMGUwYS00MTNlLTg5Y2Mt Mzc4YTNlN2JjMDgzLzEvNlAzNmNVQU00M0MzWDNOM2dFaFhUa1luUXhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81NWJlNzUtMGUwYS00MTNlLTg5Y2MtMzc4YTNlN2JjMDgz LzEvNlAzNmNVQU00M0MzWDNOM2dFaFhUa1luUXhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM8voo32k ZszXM/RRs8l53k+nLSRks9pSfiS2OvlAVVJxTOifFAEsms39xQfseZfFprnuWXPN 9BzcUniUSBCaW6PWoeW9NuOgiHoHzPAnm/19pLedjR9dCYfwEQzCXcwotPFWRiJh 2DK2fmVKm8HMnnjjBtx9SvqK0+Lc9lgMmHMZl/SdR5mKjVHkfWkeFP0jRjWXJzDj KdQXdbqqZTQbDcIMCymIbNbLC14327m/6kRvuO3Yz2+rBCx3/HyQQWdLzinz++HV eQdxSDW/LRO7LP0dGfGVtZy4DPS4LMfwSPq/1rv9o0i/lSe9h16oEAeM44MsWxIX Gd8bHrkDEsfLwQ== -----END CERTIFICATE-----Generated at Sun Jan 25 23:54:36 2026 by rpki-client