This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.mft File: 6DNGHp0r2vzCmtkYn7Cs8fM5YKk.mft (raw, json) Hash identifier: DVjXP5UPKpgStsy7/39jkYvc+3XRzbn+tOQo9benFso= Subject key identifier: 69:45:23:0D:EF:24:A1:B8:2E:AA:10:F4:A1:7E:95:0B:DD:ED:AE:A8 Authority key identifier: E8:33:46:1E:9D:2B:DA:FC:C2:9A:D9:18:9F:B0:AC:F1:F3:39:60:A9 Certificate issuer: /CN=e833461e9d2bdafcc29ad9189fb0acf1f33960a9 Certificate serial: 019BF574E9ED2C45F2A4881ACA8BA8CBF4A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.mft Manifest number: 170F Signing time: Sun 25 Jan 2026 14:00:38 +0000 Manifest this update: Sun 25 Jan 2026 14:00:38 +0000 Manifest next update: Mon 26 Jan 2026 14:00:38 +0000 Files and hashes: 1: 6DNGHp0r2vzCmtkYn7Cs8fM5YKk.crl (hash: yHtRvJgM8+FJ5m5VV6fkOjH6Pz8BM3JK9bC4MMvcugQ=) 2: Q-XaXdYNyXwK0mc7YIVoepDORlM.roa (hash: d+yMV8SrvvLaa9ouz0mOIlebIPHpwRPv3zGG1GfdREw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.mft rsync://rpki.ripe.net/repository/DEFAULT/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:74:e9:ed:2c:45:f2:a4:88:1a:ca:8b:a8:cb:f4:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e833461e9d2bdafcc29ad9189fb0acf1f33960a9 Validity Not Before: Jan 25 14:00:38 2026 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=6945230def24a1b82eaa10f4a17e950bddedaea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:75:ee:da:58:6e:c3:f3:86:cc:cb:1a:18:1c: cc:e8:b7:72:66:d6:0e:a7:e1:37:eb:44:d5:ba:9e: c5:c7:54:d2:30:14:df:72:33:a7:22:e0:29:52:3c: c2:d0:b6:3b:b1:34:aa:e9:8f:1c:4b:42:a7:c7:b8: 33:e0:9e:8b:d3:01:5c:7c:66:b3:b5:f3:22:3a:32: 88:53:aa:12:fc:62:5c:fe:73:36:b5:93:58:cc:b7: 65:f9:92:9c:cc:9c:27:e2:a2:6d:db:a6:98:35:89: d3:54:fe:cc:8f:4e:68:3c:75:f2:51:78:f3:3d:fc: 0a:a9:7f:5d:c8:84:ca:70:78:00:15:8e:21:90:ba: 67:d9:73:f1:8a:fa:5e:8d:34:41:0f:18:4b:07:c8: b4:d4:2a:17:e1:e2:f7:45:ff:66:13:99:a7:1e:2e: eb:40:bd:c3:62:92:36:41:4f:95:c6:84:b4:a0:99: a9:ce:3a:65:4d:20:b2:5c:18:59:da:96:d7:52:95: 54:af:b2:d1:c0:fe:16:a2:54:25:fc:4b:89:45:12: 4e:6c:46:0b:ee:33:fc:40:68:5d:bf:a6:7a:63:f7: 09:38:75:37:fc:9a:7d:c9:c8:f3:c0:19:11:dc:f4: 9f:3b:0f:19:f0:41:f6:56:fe:3e:6b:e3:06:d9:1c: 9e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:45:23:0D:EF:24:A1:B8:2E:AA:10:F4:A1:7E:95:0B:DD:ED:AE:A8 X509v3 Authority Key Identifier: keyid:E8:33:46:1E:9D:2B:DA:FC:C2:9A:D9:18:9F:B0:AC:F1:F3:39:60:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:fb:eb:86:22:36:a8:a1:0f:a6:0b:8b:c1:6d:42:3b:95:c5: 17:d7:a0:92:39:c0:d5:3b:6d:88:64:fd:39:b9:a6:cf:ab:e5: b1:8f:ac:ef:0c:82:65:b5:82:af:23:57:74:91:40:27:28:51: b1:96:20:f6:ca:db:0b:2d:48:51:a1:62:53:03:f7:37:cc:c7: c0:db:2e:7a:38:59:3b:69:ab:c8:00:19:a0:a0:12:4b:cc:28: 12:88:bc:cb:7a:f9:9f:f1:06:e3:8b:b1:80:b1:b6:3e:7f:b1: a9:8a:c3:7f:b5:79:4c:4f:9d:58:58:a5:af:ac:cc:01:2a:ba: 8d:7b:45:3c:32:5e:45:d6:0f:97:9a:7f:cc:91:f7:df:2a:10: f9:85:31:31:35:88:5f:53:ca:04:dd:83:93:2b:aa:9c:ee:f7: 2f:6f:67:c0:d2:b6:d4:25:6f:23:43:d2:ac:53:a0:17:01:e4: 42:4e:57:f6:af:eb:46:c9:d7:e4:c6:1d:c5:c1:08:cd:57:e1: f9:d4:e0:6a:84:2f:a9:b8:f6:23:da:83:c1:12:f3:8c:89:f0: 87:6c:40:cc:29:40:a3:27:6c:ca:33:44:dc:a0:cb:da:1e:78: 2a:80:45:db:0a:b3:ef:e1:54:b0:82:03:d6:98:de:3d:70:7d: 5b:50:a3:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dOntLEXypIgayouoy/SoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4MzM0NjFlOWQyYmRhZmNjMjlhZDkxODlmYjBhY2YxZjMz OTYwYTkwHhcNMjYwMTI1MTQwMDM4WhcNMjYwMTI2MTQwMDM4WjAzMTEwLwYDVQQD Eyg2OTQ1MjMwZGVmMjRhMWI4MmVhYTEwZjRhMTdlOTUwYmRkZWRhZWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3Xu2lhuw/OGzMsaGBzM6LdyZtYO p+E360TVup7Fx1TSMBTfcjOnIuApUjzC0LY7sTSq6Y8cS0Knx7gz4J6L0wFcfGaz tfMiOjKIU6oS/GJc/nM2tZNYzLdl+ZKczJwn4qJt26aYNYnTVP7Mj05oPHXyUXjz PfwKqX9dyITKcHgAFY4hkLpn2XPxivpejTRBDxhLB8i01CoX4eL3Rf9mE5mnHi7r QL3DYpI2QU+VxoS0oJmpzjplTSCyXBhZ2pbXUpVUr7LRwP4WolQl/EuJRRJObEYL 7jP8QGhdv6Z6Y/cJOHU3/Jp9ycjzwBkR3PSfOw8Z8EH2Vv4+a+MG2RyeuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGlFIw3vJKG4LqoQ9KF+lQvd7a6oMB8GA1UdIwQY MBaAFOgzRh6dK9r8wprZGJ+wrPHzOWCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkROR0hwMHIydnpDbXRrWW43Q3M4Zk01WUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82NzExOTQtNTFjOC00YmNmLWJkODMt YWVmZThkMTc4ZTZhLzEvNkROR0hwMHIydnpDbXRrWW43Q3M4Zk01WUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS82NzExOTQtNTFjOC00YmNmLWJkODMtYWVmZThkMTc4ZTZh LzEvNkROR0hwMHIydnpDbXRrWW43Q3M4Zk01WUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr/vrhiI2 qKEPpguLwW1CO5XFF9egkjnA1TttiGT9Obmmz6vlsY+s7wyCZbWCryNXdJFAJyhR sZYg9srbCy1IUaFiUwP3N8zHwNsuejhZO2mryAAZoKASS8woEoi8y3r5n/EG44ux gLG2Pn+xqYrDf7V5TE+dWFilr6zMASq6jXtFPDJeRdYPl5p/zJH33yoQ+YUxMTWI X1PKBN2DkyuqnO73L29nwNK21CVvI0PSrFOgFwHkQk5X9q/rRsnX5MYdxcEIzVfh +dTgaoQvqbj2I9qDwRLzjInwh2xAzClAoydsyjNE3KDL2h54KoBF2wqz7+FUsIID 1pjePXB9W1CjNA== -----END CERTIFICATE-----Generated at Sun Jan 25 17:36:45 2026 by rpki-client