This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft File: 6Fgzjepq5N27JIUKBwf0OqF5TD8.mft (raw, json) Hash identifier: KjFPmwtIzZNX9axHb9fkRUehEoki9Qo9orZ3M0g1q44= Subject key identifier: 79:14:8E:55:B0:A4:12:6D:56:FE:BC:3D:6A:43:9F:CF:CC:D8:90:A2 Authority key identifier: E8:58:33:8D:EA:6A:E4:DD:BB:24:85:0A:07:07:F4:3A:A1:79:4C:3F Certificate issuer: /CN=e858338dea6ae4ddbb24850a0707f43aa1794c3f Certificate serial: 019BF8766DCBE79A6C76FA7E00342FE74C5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Fgzjepq5N27JIUKBwf0OqF5TD8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft Manifest number: 17B7 Signing time: Mon 26 Jan 2026 04:01:09 +0000 Manifest this update: Mon 26 Jan 2026 04:01:09 +0000 Manifest next update: Tue 27 Jan 2026 04:01:09 +0000 Files and hashes: 1: 6Fgzjepq5N27JIUKBwf0OqF5TD8.crl (hash: pbqRHeMkbaieHYWCL/UzOZsboND2+0IhGeS5YHkv4so=) 2: p1kohFb8KaXP2aXevlAW3obI0Mk.roa (hash: MKXlqSCkYNLylyaZtd9Jo14Ge5qgIHgpKhvpsO+gzd4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.crl rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft rsync://rpki.ripe.net/repository/DEFAULT/6Fgzjepq5N27JIUKBwf0OqF5TD8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:76:6d:cb:e7:9a:6c:76:fa:7e:00:34:2f:e7:4c:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e858338dea6ae4ddbb24850a0707f43aa1794c3f Validity Not Before: Jan 26 04:01:09 2026 GMT Not After : Jan 27 04:01:09 2026 GMT Subject: CN=79148e55b0a4126d56febc3d6a439fcfccd890a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c4:00:d5:c8:58:72:82:36:b6:48:77:cd:cd: 89:cd:65:f3:69:79:54:69:45:6c:ef:33:ea:7c:e9: f4:09:cb:4a:98:1d:a1:77:b3:8d:6f:82:14:98:69: f0:fe:6a:61:37:b1:10:17:19:e9:66:d4:9f:f8:17: 9f:c3:70:7f:2c:a5:26:78:2d:32:6b:e1:43:a1:fa: 98:31:8e:4b:37:74:8d:60:c8:85:7d:86:8f:6f:99: dc:8b:b9:d8:aa:02:bd:68:d1:27:8b:89:f3:74:13: 7f:34:ac:0d:48:06:4a:b3:b1:a0:fb:68:6a:0a:0e: ae:b2:63:d0:49:9e:f8:72:07:d7:7a:a9:2d:e7:1f: 05:9b:88:df:b5:5b:f5:8b:1d:ed:18:47:ef:ea:f3: 3a:ec:6f:29:0c:e4:ce:13:83:67:fd:f6:87:af:b4: 2a:d7:46:24:f1:24:51:ea:52:a4:4f:fa:d2:e8:ce: 0a:9a:d1:31:b2:5a:b7:f1:f7:17:69:a3:c0:e0:76: 6a:a2:3b:2d:c1:0f:e7:c1:c5:00:cd:d1:39:6f:16: 0b:92:ee:f4:ac:1e:61:b4:b7:8f:0c:45:96:84:18: 7a:f4:ae:12:2e:ba:21:d1:b9:64:20:ed:05:2c:22: d5:1c:44:65:00:4f:c2:2f:eb:10:1e:d8:04:12:41: d2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:14:8E:55:B0:A4:12:6D:56:FE:BC:3D:6A:43:9F:CF:CC:D8:90:A2 X509v3 Authority Key Identifier: keyid:E8:58:33:8D:EA:6A:E4:DD:BB:24:85:0A:07:07:F4:3A:A1:79:4C:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Fgzjepq5N27JIUKBwf0OqF5TD8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:f8:18:1d:db:db:26:4b:13:e9:74:36:01:97:05:63:45:f2: 2d:c4:ab:3b:b9:3b:46:a2:cd:4c:55:c7:c8:3a:e1:8a:c0:40: d9:66:45:20:79:3d:39:c7:99:15:d0:41:c1:92:93:67:c4:40: ca:97:42:1d:cd:0c:c5:c3:4d:6f:33:b2:38:af:d9:cb:04:3e: f5:8b:4f:89:42:9e:ed:63:c1:90:b7:61:8e:6f:d6:81:34:ee: ad:bb:30:e2:cf:84:ac:bf:14:d7:92:26:a3:d8:c2:83:74:34: a3:ec:a1:ca:95:24:a1:e7:c8:b7:db:5b:de:e9:fe:b8:1b:1b: 0a:ef:25:76:45:1f:71:a1:4d:78:9c:c7:d9:4c:fd:a3:9a:ce: 6b:82:16:5c:f9:cd:f5:f7:52:f4:38:2c:b2:2b:4b:68:9c:30: 9f:da:13:f3:34:75:82:77:9a:e4:fc:c0:2c:82:d6:eb:3f:fb: ac:92:5a:06:93:71:be:71:0f:e6:c3:26:d3:f0:34:83:a1:4d: 2e:d6:d5:60:d9:e7:d6:48:25:28:e6:ff:b5:68:07:5a:1a:0e: 14:5b:e9:8d:c6:91:51:5a:09:69:13:7b:7e:03:f6:01:a5:4d: 71:79:16:61:53:c0:1d:2f:a9:de:3d:c1:ea:81:aa:11:b5:cd: 1b:a9:8d:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4dm3L55psdvp+ADQv50xbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NTgzMzhkZWE2YWU0ZGRiYjI0ODUwYTA3MDdmNDNhYTE3 OTRjM2YwHhcNMjYwMTI2MDQwMTA5WhcNMjYwMTI3MDQwMTA5WjAzMTEwLwYDVQQD Eyg3OTE0OGU1NWIwYTQxMjZkNTZmZWJjM2Q2YTQzOWZjZmNjZDg5MGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8QA1chYcoI2tkh3zc2JzWXzaXlU aUVs7zPqfOn0CctKmB2hd7ONb4IUmGnw/mphN7EQFxnpZtSf+Befw3B/LKUmeC0y a+FDofqYMY5LN3SNYMiFfYaPb5nci7nYqgK9aNEni4nzdBN/NKwNSAZKs7Gg+2hq Cg6usmPQSZ74cgfXeqkt5x8Fm4jftVv1ix3tGEfv6vM67G8pDOTOE4Nn/faHr7Qq 10Yk8SRR6lKkT/rS6M4KmtExslq38fcXaaPA4HZqojstwQ/nwcUAzdE5bxYLku70 rB5htLePDEWWhBh69K4SLroh0blkIO0FLCLVHERlAE/CL+sQHtgEEkHSWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHkUjlWwpBJtVv68PWpDn8/M2JCiMB8GA1UdIwQY MBaAFOhYM43qauTduySFCgcH9DqheUw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkZnemplcHE1TjI3SklVS0J3ZjBPcUY1VEQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8zNzY2NjItODdlYi00Yzk3LTkzNzMt YTFkY2U2YWQxNTBjLzEvNkZnemplcHE1TjI3SklVS0J3ZjBPcUY1VEQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8zNzY2NjItODdlYi00Yzk3LTkzNzMtYTFkY2U2YWQxNTBj LzEvNkZnemplcHE1TjI3SklVS0J3ZjBPcUY1VEQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZvgYHdvb JksT6XQ2AZcFY0XyLcSrO7k7RqLNTFXHyDrhisBA2WZFIHk9OceZFdBBwZKTZ8RA ypdCHc0MxcNNbzOyOK/ZywQ+9YtPiUKe7WPBkLdhjm/WgTTurbsw4s+ErL8U15Im o9jCg3Q0o+yhypUkoefIt9tb3un+uBsbCu8ldkUfcaFNeJzH2Uz9o5rOa4IWXPnN 9fdS9DgssitLaJwwn9oT8zR1gnea5PzALILW6z/7rJJaBpNxvnEP5sMm0/A0g6FN LtbVYNnn1kglKOb/tWgHWhoOFFvpjcaRUVoJaRN7fgP2AaVNcXkWYVPAHS+p3j3B 6oGqEbXNG6mNlA== -----END CERTIFICATE-----Generated at Mon Jan 26 08:42:51 2026 by rpki-client