This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft File: 6NHRX1kR1I0cWe7zdPezf3HU678.mft (raw, json) Hash identifier: rwDZuWWE2xZEVdS0N6zQmjYHvKf+G6//JBJcS8IWyOM= Subject key identifier: FE:38:24:C0:A7:52:24:38:26:9D:7C:F8:CB:23:11:7B:25:71:48:BE Authority key identifier: E8:D1:D1:5F:59:11:D4:8D:1C:59:EE:F3:74:F7:B3:7F:71:D4:EB:BF Certificate issuer: /CN=e8d1d15f5911d48d1c59eef374f7b37f71d4ebbf Certificate serial: 019BF53E065B1D4FE749C0B86AB8EC98DA87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6NHRX1kR1I0cWe7zdPezf3HU678.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft Manifest number: 0F86 Signing time: Sun 25 Jan 2026 13:00:41 +0000 Manifest this update: Sun 25 Jan 2026 13:00:41 +0000 Manifest next update: Mon 26 Jan 2026 13:00:41 +0000 Files and hashes: 1: 6NHRX1kR1I0cWe7zdPezf3HU678.crl (hash: kzu6mB3QpgDA89WYi0xO59OFlB1HD+e7gk1OecLJcjs=) 2: vGQ0FlfBg9HurxXzBHSCF8IWFRQ.roa (hash: vG2KyLa3eKD4ni6LSYbmZcxZgH0oTjxPgZTSDvuGGJI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft rsync://rpki.ripe.net/repository/DEFAULT/6NHRX1kR1I0cWe7zdPezf3HU678.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:06:5b:1d:4f:e7:49:c0:b8:6a:b8:ec:98:da:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8d1d15f5911d48d1c59eef374f7b37f71d4ebbf Validity Not Before: Jan 25 13:00:41 2026 GMT Not After : Jan 26 13:00:41 2026 GMT Subject: CN=fe3824c0a7522438269d7cf8cb23117b257148be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:28:d9:f1:d3:97:c5:d2:7e:8b:ba:6d:14:0d: f7:f7:a5:50:09:a0:f7:f0:96:83:fb:4d:3a:9b:50: 1e:29:1e:9b:f8:e9:ae:54:39:99:2e:26:4e:24:39: 49:55:2c:98:1a:ed:b8:99:e1:88:c4:54:4d:5b:11: 57:bc:20:a5:19:d1:4b:8a:11:c3:b9:aa:ff:2e:ce: 27:6b:19:a6:58:20:31:b1:b8:85:49:1a:af:73:7f: b1:d1:a8:5e:bd:04:39:fe:8b:ae:91:9a:45:7d:b4: 91:f7:31:19:53:72:f4:36:6a:d2:22:38:04:e7:57: 66:d7:e6:f8:b0:bf:05:bd:00:35:95:54:11:04:29: 7c:7d:73:7f:a5:9a:71:c8:76:40:28:4d:67:0b:a2: 83:af:22:e6:a3:2f:14:fb:25:31:1f:a9:80:1d:39: d3:59:5e:28:65:93:98:c2:fc:7c:ea:e0:4e:6f:50: e7:dd:20:e5:41:88:4f:14:8d:87:d0:7e:5a:39:3d: 14:19:7e:c5:27:9e:d6:ca:9d:88:ba:02:e4:43:f1: 98:36:8f:c1:ea:5c:55:6b:e2:4e:c9:aa:40:fe:90: 78:54:bf:46:ee:1a:83:f0:71:a0:1f:53:cd:9c:8b: 35:84:39:75:a5:f9:53:90:84:2f:b8:24:76:65:f0: cb:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:38:24:C0:A7:52:24:38:26:9D:7C:F8:CB:23:11:7B:25:71:48:BE X509v3 Authority Key Identifier: keyid:E8:D1:D1:5F:59:11:D4:8D:1C:59:EE:F3:74:F7:B3:7F:71:D4:EB:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6NHRX1kR1I0cWe7zdPezf3HU678.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:3d:de:cb:99:37:1e:3f:89:f8:6b:cc:c9:38:7f:f2:8e:01: 05:a2:fa:6f:af:dd:a1:a8:c6:a3:0c:df:dd:c1:38:5a:2b:48: c7:c6:de:4a:e5:54:98:e3:e6:d2:91:a1:fa:81:41:bc:af:f2: 5f:5e:78:c2:4c:c9:36:2d:7a:33:68:35:25:8b:4d:b7:41:43: 70:aa:01:99:5f:86:45:ba:20:19:e7:28:35:be:98:5f:f5:14: 17:0d:8a:38:e9:c1:b0:9f:1c:cb:9f:94:2c:7f:b8:b0:66:49: 80:df:71:2f:55:29:d1:6b:1e:d3:3f:2a:ad:6f:da:cb:ed:7c: fe:4f:6f:ed:b0:45:cd:d7:0c:4f:3f:16:18:f6:55:a5:6b:d0: 39:16:fa:d0:4b:58:2d:41:b5:f2:c8:3c:26:21:37:d2:49:66: 68:4f:1a:d3:28:8e:e7:21:71:ac:78:96:d2:f1:d7:d1:68:f4: 0f:48:d3:55:52:b2:49:75:34:52:f0:02:f8:17:eb:06:21:2b: 13:81:53:05:a7:d4:3b:4f:40:1a:ae:35:d3:d9:db:97:97:36: 40:ad:a0:c3:09:a6:0a:cf:cf:f8:9d:97:a0:0a:2b:2c:c9:6d: f6:20:8c:e8:bd:14:c3:79:02:1e:4a:3b:ee:58:c7:e2:cb:ad: 00:13:02:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PgZbHU/nScC4arjsmNqHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4ZDFkMTVmNTkxMWQ0OGQxYzU5ZWVmMzc0ZjdiMzdmNzFk NGViYmYwHhcNMjYwMTI1MTMwMDQxWhcNMjYwMTI2MTMwMDQxWjAzMTEwLwYDVQQD EyhmZTM4MjRjMGE3NTIyNDM4MjY5ZDdjZjhjYjIzMTE3YjI1NzE0OGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyjZ8dOXxdJ+i7ptFA3396VQCaD3 8JaD+006m1AeKR6b+OmuVDmZLiZOJDlJVSyYGu24meGIxFRNWxFXvCClGdFLihHD uar/Ls4naxmmWCAxsbiFSRqvc3+x0ahevQQ5/ouukZpFfbSR9zEZU3L0NmrSIjgE 51dm1+b4sL8FvQA1lVQRBCl8fXN/pZpxyHZAKE1nC6KDryLmoy8U+yUxH6mAHTnT WV4oZZOYwvx86uBOb1Dn3SDlQYhPFI2H0H5aOT0UGX7FJ57Wyp2IugLkQ/GYNo/B 6lxVa+JOyapA/pB4VL9G7hqD8HGgH1PNnIs1hDl1pflTkIQvuCR2ZfDLiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP44JMCnUiQ4Jp18+MsjEXslcUi+MB8GA1UdIwQY MBaAFOjR0V9ZEdSNHFnu83T3s39x1Ou/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNk5IUlgxa1IxSTBjV2U3emRQZXpmM0hVNjc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83NzI5ZTQtNmE2ZC00YmM1LTg4ZTEt NjZmOGI2ZTE2YjhhLzEvNk5IUlgxa1IxSTBjV2U3emRQZXpmM0hVNjc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83NzI5ZTQtNmE2ZC00YmM1LTg4ZTEtNjZmOGI2ZTE2Yjhh LzEvNk5IUlgxa1IxSTBjV2U3emRQZXpmM0hVNjc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmz3ey5k3 Hj+J+GvMyTh/8o4BBaL6b6/doajGowzf3cE4WitIx8beSuVUmOPm0pGh+oFBvK/y X154wkzJNi16M2g1JYtNt0FDcKoBmV+GRbogGecoNb6YX/UUFw2KOOnBsJ8cy5+U LH+4sGZJgN9xL1Up0Wse0z8qrW/ay+18/k9v7bBFzdcMTz8WGPZVpWvQORb60EtY LUG18sg8JiE30klmaE8a0yiO5yFxrHiW0vHX0Wj0D0jTVVKySXU0UvAC+BfrBiEr E4FTBafUO09AGq4109nbl5c2QK2gwwmmCs/P+J2XoAorLMlt9iCM6L0Uw3kCHko7 7ljH4sutABMCeg== -----END CERTIFICATE-----Generated at Sun Jan 25 19:06:10 2026 by rpki-client