This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft File: 6Ed60hy3iRQzE8QLGfjMACPeiKY.mft (raw, json) Hash identifier: Y9bzxbyfuYHWNT/EZpUC/Ik4vZx07RZP/ZA64CEoQ2o= Subject key identifier: F8:34:5E:0B:C7:BE:B9:BD:12:F7:4E:3C:74:B5:46:FF:42:CF:5F:5C Authority key identifier: E8:47:7A:D2:1C:B7:89:14:33:13:C4:0B:19:F8:CC:00:23:DE:88:A6 Certificate issuer: /CN=e8477ad21cb789143313c40b19f8cc0023de88a6 Certificate serial: 019BF50749CE2812C13CCBB45645A39250A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft Manifest number: 02AE Signing time: Sun 25 Jan 2026 12:00:54 +0000 Manifest this update: Sun 25 Jan 2026 12:00:54 +0000 Manifest next update: Mon 26 Jan 2026 12:00:54 +0000 Files and hashes: 1: 6Ed60hy3iRQzE8QLGfjMACPeiKY.crl (hash: zxAX/YvK5YpjCOUwIbEDSXZm7J2B8CmHVdeK7NlROWw=) 2: K9ovqsNkHrun-AyiDfVXcpSSomk.roa (hash: OJcOgsa/Cof/2dj63icVfURXOJgy3TdipR3e9Z4Re7g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:49:ce:28:12:c1:3c:cb:b4:56:45:a3:92:50:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8477ad21cb789143313c40b19f8cc0023de88a6 Validity Not Before: Jan 25 12:00:54 2026 GMT Not After : Jan 26 12:00:54 2026 GMT Subject: CN=f8345e0bc7beb9bd12f74e3c74b546ff42cf5f5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6a:3c:19:03:4e:00:ae:ae:6d:24:d8:1c:8d: 04:1e:cc:2e:b7:a5:aa:ff:09:a7:cd:a2:26:31:fd: 48:97:be:91:39:2b:e9:7a:74:f8:e6:0d:95:3d:98: 7e:c1:bb:d2:97:66:f6:bc:49:be:44:7e:15:77:76: 13:05:a6:75:4c:78:5f:b6:d2:a0:81:7f:cf:6c:a1: a9:02:23:7b:38:90:bc:d4:39:f2:d3:ee:13:bb:58: 0f:59:19:70:c2:83:03:8d:eb:44:a7:4c:90:bd:84: ce:5a:21:60:e1:90:71:cc:06:66:5f:6d:34:2f:de: a1:de:8c:72:dc:a1:f9:1f:44:46:e8:a9:c8:e4:e6: 0f:82:cc:65:ed:a6:f7:98:f3:2c:d4:3e:69:95:3a: d1:4a:70:c8:a1:ef:a6:76:52:41:eb:73:cc:85:1e: 20:6b:c5:62:f2:aa:8e:47:61:52:d6:f4:eb:73:d6: f5:49:0e:48:c1:98:35:a6:68:cf:ed:70:a4:af:25: b9:c5:a6:36:9d:00:d5:ff:c3:71:4e:01:df:46:d1: e0:82:a7:59:09:8a:62:c5:10:cc:13:4b:2d:b4:89: b5:bc:26:de:93:51:12:42:ed:e7:90:a5:f2:b2:bf: 35:a6:c6:9d:2a:1f:f5:1c:22:03:8a:10:60:61:7e: 3d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:34:5E:0B:C7:BE:B9:BD:12:F7:4E:3C:74:B5:46:FF:42:CF:5F:5C X509v3 Authority Key Identifier: keyid:E8:47:7A:D2:1C:B7:89:14:33:13:C4:0B:19:F8:CC:00:23:DE:88:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:ae:07:43:dc:e9:9e:34:88:b2:03:19:02:d8:f3:04:1b:ed: 4c:16:6b:06:78:78:09:f2:67:1f:7e:e5:60:fb:2e:c3:8c:a3: b2:70:ed:c4:15:ad:28:73:f0:fa:37:f6:e7:c9:69:c3:17:09: 7d:58:ad:9a:f6:4f:6f:5b:52:11:d0:67:64:b0:67:e9:78:ea: 12:de:9a:1a:f0:eb:6b:85:ce:d8:11:91:87:9d:b9:a6:59:f5: 2a:8a:1f:83:2a:fa:ee:8d:e5:82:d6:03:b3:73:3c:21:c4:34: a4:b8:75:e6:47:0b:e1:8e:22:dd:ea:2c:cc:04:3f:67:7e:f1: 37:72:03:1b:b5:94:7b:b2:a4:2f:bd:4b:7c:49:a1:e1:c2:65: e6:91:15:fc:5d:20:36:31:f8:03:8c:b6:4e:ae:8b:19:13:93: 41:b6:3b:7e:4f:42:46:b1:b8:1d:59:47:4c:a6:72:8d:27:e7: 1c:b4:6c:06:57:75:90:8f:fc:09:31:8d:ce:ad:b9:7e:14:ba: 32:d0:79:ba:e9:8f:2e:88:86:d7:4f:5e:e8:d8:f7:13:cc:56: 14:02:d2:ae:83:55:39:e8:97:84:f5:ae:1b:f5:e6:1b:98:55: a8:f4:18:55:70:66:35:42:c8:51:34:3b:4a:26:3d:26:f6:e1: f4:d6:7d:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B0nOKBLBPMu0VkWjklCkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NDc3YWQyMWNiNzg5MTQzMzEzYzQwYjE5ZjhjYzAwMjNk ZTg4YTYwHhcNMjYwMTI1MTIwMDU0WhcNMjYwMTI2MTIwMDU0WjAzMTEwLwYDVQQD EyhmODM0NWUwYmM3YmViOWJkMTJmNzRlM2M3NGI1NDZmZjQyY2Y1ZjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2o8GQNOAK6ubSTYHI0EHswut6Wq /wmnzaImMf1Il76ROSvpenT45g2VPZh+wbvSl2b2vEm+RH4Vd3YTBaZ1THhfttKg gX/PbKGpAiN7OJC81Dny0+4Tu1gPWRlwwoMDjetEp0yQvYTOWiFg4ZBxzAZmX200 L96h3oxy3KH5H0RG6KnI5OYPgsxl7ab3mPMs1D5plTrRSnDIoe+mdlJB63PMhR4g a8Vi8qqOR2FS1vTrc9b1SQ5IwZg1pmjP7XCkryW5xaY2nQDV/8NxTgHfRtHggqdZ CYpixRDME0sttIm1vCbek1ESQu3nkKXysr81psadKh/1HCIDihBgYX49xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPg0XgvHvrm9EvdOPHS1Rv9Cz19cMB8GA1UdIwQY MBaAFOhHetIct4kUMxPECxn4zAAj3oimMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkVkNjBoeTNpUlF6RThRTEdmak1BQ1BlaUtZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi83NDJhMDQtMTdhZi00ZjQwLWExNDAt NjA0NTg0ODk1OTI1LzEvNkVkNjBoeTNpUlF6RThRTEdmak1BQ1BlaUtZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi83NDJhMDQtMTdhZi00ZjQwLWExNDAtNjA0NTg0ODk1OTI1 LzEvNkVkNjBoeTNpUlF6RThRTEdmak1BQ1BlaUtZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdq4HQ9zp njSIsgMZAtjzBBvtTBZrBnh4CfJnH37lYPsuw4yjsnDtxBWtKHPw+jf258lpwxcJ fVitmvZPb1tSEdBnZLBn6XjqEt6aGvDra4XO2BGRh525pln1Koofgyr67o3lgtYD s3M8IcQ0pLh15kcL4Y4i3eoszAQ/Z37xN3IDG7WUe7KkL71LfEmh4cJl5pEV/F0g NjH4A4y2Tq6LGROTQbY7fk9CRrG4HVlHTKZyjSfnHLRsBld1kI/8CTGNzq25fhS6 MtB5uumPLoiG109e6Nj3E8xWFALSroNVOeiXhPWuG/XmG5hVqPQYVXBmNULIUTQ7 SiY9Jvbh9NZ9Fw== -----END CERTIFICATE-----Generated at Sun Jan 25 16:30:03 2026 by rpki-client