This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft File: 6sLBr9S97JgFBvoH33yGYtVU-kY.mft (raw, json) Hash identifier: pGcc8qTOoRHGStXkdw0x2V+gmdTrLCC3W8H4k5f9BUA= Subject key identifier: AF:9B:3C:B7:FD:C7:6A:97:1A:8A:4A:AA:17:9C:78:AF:55:BB:BE:9B Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46 Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46 Certificate serial: 019BF72DA515C1777B724572BD0443AB7CA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft Manifest number: 121E Signing time: Sun 25 Jan 2026 22:02:02 +0000 Manifest this update: Sun 25 Jan 2026 22:02:02 +0000 Manifest next update: Mon 26 Jan 2026 22:02:02 +0000 Files and hashes: 1: 1-4XTHBoNFNr1l-5DlJv7kCOEAsg.roa (hash: kxVoHYAy1StJ1GWwbeUY54WsYp9aXThsq2UtgssAUdE=) 2: 6sLBr9S97JgFBvoH33yGYtVU-kY.crl (hash: CzyB4UMJyRJiap9hpMQ2UAt4OomlK8fStnyXYUK2TtU=) 3: 8suHpidG1fhuELuUk5b3-OweTPg.roa (hash: 1eHJkoJhddFda4qCfEu1aQasvyxw+vlSo8SFBBVgpqU=) 4: FUuTK2fFAsqRcCumhRtIZo91RHY.roa (hash: sL7JcIGdywrGzv3v04y8pkGzCLFmkDsGBJu4wKma/MI=) 5: LXIlN5E_-7FwagFmPTLTkaa9y5c.roa (hash: 6fdLU7tUE6uJypDCFnhQj74QKiyWE5+++0HOzxZo/Ls=) 6: SiI2SweNuMw3Zh5hN0AodnHSZK4.roa (hash: Ja7prbcEfWRWN6iJlFWBHvB00+46h6yhrgI24su9Th0=) 7: UzApq6EOLSmo_f-FmHtKYMlNkG8.roa (hash: uaHU4qHF04fH5UL/VGo93ZAzSiASc8qoSn8SilcNKx8=) 8: Znfa73p9gykO0gBaOY96RVDKTWg.roa (hash: JqvrbwmWqW5i30K6jcxmqvrUWP4xj/VonoHZXAOdti8=) 9: dMLf7oZA2glUWPaPF66AFPs0ZGA.roa (hash: vhl1uNOJ5DqCqIxVZTtmK9gZafgqapXEKNDgMZ+kKHE=) 10: e-PI40mcmW_4qj2wj51dZytuRJ4.roa (hash: IWJbxQ32owD5Lwd1nR2dmmdsgfysZX9pSs6x+OurREE=) 11: rCtSQ7fOIAO3hF-dZmFyOrblm2s.roa (hash: JkQ7BSC0RdZovffT+QwWvb+UrSCXmLKi6BtijI7KA5c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:a5:15:c1:77:7b:72:45:72:bd:04:43:ab:7c:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46 Validity Not Before: Jan 25 22:02:02 2026 GMT Not After : Jan 26 22:02:02 2026 GMT Subject: CN=af9b3cb7fdc76a971a8a4aaa179c78af55bbbe9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:9f:48:12:13:52:ab:63:08:5d:9a:0f:a6:b2: d9:0b:65:7e:87:f1:90:7b:b8:51:b0:bd:97:56:77: 23:d9:7f:08:0f:35:50:bf:af:c3:43:6c:83:e4:7a: 3b:c2:98:b0:41:fd:17:5a:55:33:0a:ef:82:e1:6a: cb:2a:21:cd:84:c4:a0:9a:b4:87:02:12:63:17:2e: dd:5f:fd:60:66:15:1c:ab:2d:10:0b:8c:df:90:0b: 53:1a:af:51:65:cd:bd:f0:f1:f9:21:96:ec:47:50: b9:7b:c5:34:d1:4c:ad:b7:82:84:ce:07:db:c0:ba: 1d:45:2b:40:41:bd:ee:de:34:4c:5d:69:29:4d:52: ba:eb:c8:00:91:e1:48:eb:a9:a8:fe:02:68:73:91: 78:93:7f:3f:7d:63:3c:a1:09:23:8d:fe:38:a3:e5: d6:b8:08:18:58:99:bf:2d:56:58:0d:71:2e:86:bc: 53:63:9d:d9:5d:5e:c2:cc:1a:03:ac:8f:ae:3e:47: 44:5b:d5:2f:a6:19:63:0a:3f:bd:3b:27:84:12:9e: 7c:02:fa:2f:af:c5:f9:e4:d0:78:12:7a:59:80:03: 59:c3:dc:c4:4e:78:32:6e:6a:ac:3b:57:c5:47:c7: f9:42:4f:5b:f7:12:70:4c:81:ce:58:2f:d2:2b:ce: 90:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:9B:3C:B7:FD:C7:6A:97:1A:8A:4A:AA:17:9C:78:AF:55:BB:BE:9B X509v3 Authority Key Identifier: keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:61:b0:93:e3:68:a6:8d:65:1c:ab:fe:ab:eb:88:aa:b5:74: 9f:40:0a:d8:0c:d3:b6:0f:28:94:2b:78:4e:0f:4f:6f:c1:7c: 0a:d8:d0:6a:d2:b9:58:df:2e:39:15:21:5d:f8:3d:eb:65:b1: 2f:9a:ff:9a:2b:5f:40:7f:a5:a2:46:ca:d4:71:fe:c1:4d:4a: 00:18:5f:c9:f7:38:2b:d8:91:7e:e2:51:28:50:e1:c9:2f:6a: 3e:46:9d:a4:8e:97:1d:72:85:d8:3d:4d:91:87:ce:21:8a:77: 1c:38:55:72:bb:65:1d:af:08:0f:c7:54:3d:4a:d7:2c:85:25: c6:68:b4:8c:a1:ad:75:68:b5:ec:de:e0:70:f2:c7:20:f5:18: 91:4e:a5:d6:93:b7:a3:93:cb:62:23:99:6b:97:a9:46:48:1e: 6e:a4:18:09:72:2f:22:23:08:04:ac:b0:e7:e8:79:cf:f1:f1: e0:9e:c2:22:27:85:4c:d2:bf:2f:63:b7:13:fd:16:90:4d:93: fd:09:3d:85:48:ff:11:b1:5f:ed:9d:3b:e9:f7:e9:cd:08:9f: d1:4f:e4:89:e3:a4:98:a0:74:f9:d8:fc:b7:7a:9f:cc:4e:07: 6e:66:12:3f:6e:38:c4:f2:f6:cb:79:d3:a0:04:fa:89:ba:9b: c3:cd:0e:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LaUVwXd7ckVyvQRDq3yhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYzJjMWFmZDRiZGVjOTgwNTA2ZmEwN2RmN2M4NjYyZDU1 NGZhNDYwHhcNMjYwMTI1MjIwMjAyWhcNMjYwMTI2MjIwMjAyWjAzMTEwLwYDVQQD EyhhZjliM2NiN2ZkYzc2YTk3MWE4YTRhYWExNzljNzhhZjU1YmJiZTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+59IEhNSq2MIXZoPprLZC2V+h/GQ e7hRsL2XVncj2X8IDzVQv6/DQ2yD5Ho7wpiwQf0XWlUzCu+C4WrLKiHNhMSgmrSH AhJjFy7dX/1gZhUcqy0QC4zfkAtTGq9RZc298PH5IZbsR1C5e8U00Uytt4KEzgfb wLodRStAQb3u3jRMXWkpTVK668gAkeFI66mo/gJoc5F4k38/fWM8oQkjjf44o+XW uAgYWJm/LVZYDXEuhrxTY53ZXV7CzBoDrI+uPkdEW9UvphljCj+9OyeEEp58Avov r8X55NB4EnpZgANZw9zETngybmqsO1fFR8f5Qk9b9xJwTIHOWC/SK86Q9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK+bPLf9x2qXGopKqheceK9Vu76bMB8GA1UdIwQY MBaAFOrCwa/UveyYBQb6B998hmLVVPpGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnNMQnI5Uzk3SmdGQnZvSDMzeUdZdFZVLWtZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS81ODlhNmItNGQ3ZS00MDEyLWEwZmMt YzBjZWIwMzdhZDQyLzEvNnNMQnI5Uzk3SmdGQnZvSDMzeUdZdFZVLWtZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS81ODlhNmItNGQ3ZS00MDEyLWEwZmMtYzBjZWIwMzdhZDQy LzEvNnNMQnI5Uzk3SmdGQnZvSDMzeUdZdFZVLWtZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKmGwk+No po1lHKv+q+uIqrV0n0AK2AzTtg8olCt4Tg9Pb8F8CtjQatK5WN8uORUhXfg962Wx L5r/mitfQH+lokbK1HH+wU1KABhfyfc4K9iRfuJRKFDhyS9qPkadpI6XHXKF2D1N kYfOIYp3HDhVcrtlHa8ID8dUPUrXLIUlxmi0jKGtdWi17N7gcPLHIPUYkU6l1pO3 o5PLYiOZa5epRkgebqQYCXIvIiMIBKyw5+h5z/Hx4J7CIieFTNK/L2O3E/0WkE2T /Qk9hUj/EbFf7Z076ffpzQif0U/kieOkmKB0+dj8t3qfzE4HbmYSP244xPL2y3nT oAT6ibqbw80Onw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:12:05 2026 by rpki-client