This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/a0b605-56fb-4cba-8ddc-b585417910eb/1/B6GfRqF7nUhp32ZJPPsF19golKY.mft File: B6GfRqF7nUhp32ZJPPsF19golKY.mft (raw, json) Hash identifier: Y135l1/DIxG3ZIw58nic0RGbDDqdHFxj/z1MdCybI1A= Subject key identifier: 12:47:1F:E5:AE:7C:19:FC:48:B7:F3:EB:6E:FF:40:75:4B:63:70:8D Authority key identifier: 07:A1:9F:46:A1:7B:9D:48:69:DF:66:49:3C:FB:05:D7:D8:28:94:A6 Certificate issuer: /CN=07a19f46a17b9d4869df66493cfb05d7d82894a6 Certificate serial: 019BF6BE814EBB4188F90D0D12C07EAEDC74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6GfRqF7nUhp32ZJPPsF19golKY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/a0b605-56fb-4cba-8ddc-b585417910eb/1/B6GfRqF7nUhp32ZJPPsF19golKY.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 20:00:38 +0000 Manifest this update: Sun 25 Jan 2026 20:00:38 +0000 Manifest next update: Mon 26 Jan 2026 20:00:38 +0000 Files and hashes: 1: B6GfRqF7nUhp32ZJPPsF19golKY.crl (hash: NDAc9rrZPP66/ydAKe4/XN/9gMpBfe7+rWbUHUjAw3o=) 2: z0RxzKUmGvdiXVqo5YVLQIA15ao.roa (hash: +26ezE/PG8fzSDohvHnBiXyXfPXqiwQfhlM6I+79ozE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/a0b605-56fb-4cba-8ddc-b585417910eb/1/B6GfRqF7nUhp32ZJPPsF19golKY.crl rsync://rpki.ripe.net/repository/DEFAULT/98/a0b605-56fb-4cba-8ddc-b585417910eb/1/B6GfRqF7nUhp32ZJPPsF19golKY.mft rsync://rpki.ripe.net/repository/DEFAULT/B6GfRqF7nUhp32ZJPPsF19golKY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:81:4e:bb:41:88:f9:0d:0d:12:c0:7e:ae:dc:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07a19f46a17b9d4869df66493cfb05d7d82894a6 Validity Not Before: Jan 25 20:00:38 2026 GMT Not After : Jan 26 20:00:38 2026 GMT Subject: CN=12471fe5ae7c19fc48b7f3eb6eff40754b63708d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:79:38:39:72:98:24:e2:af:85:c4:a8:6d:76: f0:be:5b:fd:a1:f0:4f:b6:49:86:75:39:61:1e:c8: da:71:b0:b7:9a:92:31:53:28:55:30:b1:e1:90:5d: 06:bb:4c:53:8e:bc:e8:ef:20:c0:1d:cb:7d:94:79: b8:24:af:70:a9:d6:e7:77:7c:79:a8:c8:63:ad:4d: 94:27:af:29:87:a9:a9:c8:62:01:e6:60:19:00:7f: 1b:ca:d0:0f:ac:63:fa:01:7e:2b:df:bb:35:95:54: b5:5e:25:b2:59:af:08:83:84:06:e2:5a:42:3b:1b: fd:7e:a1:1a:ff:48:d3:e1:32:b4:a8:df:62:b1:7c: 45:68:4c:2e:77:90:d0:38:c1:39:3a:20:51:c6:d7: 97:d7:e6:55:f5:58:e8:f2:16:68:fc:cb:44:ca:ed: ab:2f:e2:8b:07:3a:89:98:f6:3a:0f:45:c6:36:15: 58:d7:d3:c7:b2:a9:c3:da:5b:a9:22:45:1a:be:0a: 5c:78:65:73:23:72:17:1d:7b:0b:8c:85:99:71:8a: 25:3f:6c:84:cd:bc:76:8c:1f:dc:d1:56:35:09:1a: 10:73:46:53:4f:db:79:b2:0b:d4:10:ed:e2:c5:ea: a6:73:95:8d:b0:01:09:e2:ce:7f:99:ab:1f:28:ac: d7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:47:1F:E5:AE:7C:19:FC:48:B7:F3:EB:6E:FF:40:75:4B:63:70:8D X509v3 Authority Key Identifier: keyid:07:A1:9F:46:A1:7B:9D:48:69:DF:66:49:3C:FB:05:D7:D8:28:94:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6GfRqF7nUhp32ZJPPsF19golKY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a0b605-56fb-4cba-8ddc-b585417910eb/1/B6GfRqF7nUhp32ZJPPsF19golKY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a0b605-56fb-4cba-8ddc-b585417910eb/1/B6GfRqF7nUhp32ZJPPsF19golKY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:8a:44:63:67:0c:59:13:d8:16:58:2a:6e:24:6e:8d:e3:1a: 33:40:20:a9:75:43:33:09:81:66:89:25:46:a3:19:52:e0:e5: 32:67:19:68:40:fa:0b:6f:6c:9c:10:b8:bc:68:07:fb:20:ff: f2:6e:15:5d:4e:cb:77:72:22:ef:a0:c9:35:2b:ec:74:85:e9: a4:56:b3:fe:ba:a7:b5:78:68:b1:fd:ef:e3:f3:66:bb:ee:e8: a9:8c:a0:83:60:1d:86:0a:0c:2c:ce:2b:c2:f7:94:9b:d7:eb: 4c:ed:be:c2:07:f1:8a:b4:87:85:be:8f:47:5e:00:84:bb:34: 63:c2:cd:3c:c5:3d:6a:16:2a:56:ca:6c:55:a5:f4:00:78:53: ac:b0:a5:a7:28:25:77:29:68:c0:3c:14:97:e6:82:1a:f4:6e: 90:ab:86:61:26:66:67:4c:77:0c:7a:4f:26:1a:b3:a3:bd:46: c9:94:ad:9f:38:14:9a:37:88:a6:1f:62:57:a4:b4:55:98:e3: 15:1f:85:ba:b8:d9:0b:a8:24:a6:4b:de:ea:88:ed:cd:85:da: c5:f3:a7:6f:ba:88:f9:b6:aa:e2:d5:85:a2:97:b4:86:d3:a1: 4c:34:c2:4a:7b:56:c9:82:be:1f:e7:77:6d:7c:8f:ee:18:33: 94:fc:49:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2voFOu0GI+Q0NEsB+rtx0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3YTE5ZjQ2YTE3YjlkNDg2OWRmNjY0OTNjZmIwNWQ3ZDgy ODk0YTYwHhcNMjYwMTI1MjAwMDM4WhcNMjYwMTI2MjAwMDM4WjAzMTEwLwYDVQQD EygxMjQ3MWZlNWFlN2MxOWZjNDhiN2YzZWI2ZWZmNDA3NTRiNjM3MDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznk4OXKYJOKvhcSobXbwvlv9ofBP tkmGdTlhHsjacbC3mpIxUyhVMLHhkF0Gu0xTjrzo7yDAHct9lHm4JK9wqdbnd3x5 qMhjrU2UJ68ph6mpyGIB5mAZAH8bytAPrGP6AX4r37s1lVS1XiWyWa8Ig4QG4lpC Oxv9fqEa/0jT4TK0qN9isXxFaEwud5DQOME5OiBRxteX1+ZV9Vjo8hZo/MtEyu2r L+KLBzqJmPY6D0XGNhVY19PHsqnD2lupIkUavgpceGVzI3IXHXsLjIWZcYolP2yE zbx2jB/c0VY1CRoQc0ZTT9t5sgvUEO3ixeqmc5WNsAEJ4s5/masfKKzXqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBJHH+WufBn8SLfz627/QHVLY3CNMB8GA1UdIwQY MBaAFAehn0ahe51Iad9mSTz7BdfYKJSmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjZHZlJxRjduVWhwMzJaSlBQc0YxOWdvbEtZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9hMGI2MDUtNTZmYi00Y2JhLThkZGMt YjU4NTQxNzkxMGViLzEvQjZHZlJxRjduVWhwMzJaSlBQc0YxOWdvbEtZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9hMGI2MDUtNTZmYi00Y2JhLThkZGMtYjU4NTQxNzkxMGVi LzEvQjZHZlJxRjduVWhwMzJaSlBQc0YxOWdvbEtZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApYpEY2cM WRPYFlgqbiRujeMaM0AgqXVDMwmBZoklRqMZUuDlMmcZaED6C29snBC4vGgH+yD/ 8m4VXU7Ld3Ii76DJNSvsdIXppFaz/rqntXhosf3v4/Nmu+7oqYygg2AdhgoMLM4r wveUm9frTO2+wgfxirSHhb6PR14AhLs0Y8LNPMU9ahYqVspsVaX0AHhTrLClpygl dylowDwUl+aCGvRukKuGYSZmZ0x3DHpPJhqzo71GyZStnzgUmjeIph9iV6S0VZjj FR+FurjZC6gkpkve6ojtzYXaxfOnb7qI+baq4tWFope0htOhTDTCSntWyYK+H+d3 bXyP7hgzlPxJwA== -----END CERTIFICATE-----Generated at Sun Jan 25 23:38:36 2026 by rpki-client