This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft File: v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft (raw, json) Hash identifier: YfEY1/dk2NsGXLa9Z/fI4fXeqRAqk3dHKF5ZHN4ZALE= Subject key identifier: CC:91:33:D6:01:21:EF:9B:5B:D6:FF:CC:8E:E0:40:B6:83:25:2E:2A Authority key identifier: BF:A0:A3:8F:85:D2:F5:30:53:B8:C8:94:3D:90:17:B0:B8:F7:71:AC Certificate issuer: /CN=bfa0a38f85d2f53053b8c8943d9017b0b8f771ac Certificate serial: 019BF506F165204C3F938E4B5CEC06CCFA38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft Manifest number: 147B Signing time: Sun 25 Jan 2026 12:00:31 +0000 Manifest this update: Sun 25 Jan 2026 12:00:31 +0000 Manifest next update: Mon 26 Jan 2026 12:00:31 +0000 Files and hashes: 1: VynjIVEwblB9H_BmRl1ljWkeWpM.roa (hash: gHCjOMq63YurjqMkoulfc5r5daPJGcP7T3NAkcF7UQo=) 2: v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl (hash: 6K2PAHGvdhktJh0IJWGQG98MJTSlktV7HKnCtwGVoB0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:06:f1:65:20:4c:3f:93:8e:4b:5c:ec:06:cc:fa:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfa0a38f85d2f53053b8c8943d9017b0b8f771ac Validity Not Before: Jan 25 12:00:31 2026 GMT Not After : Jan 26 12:00:31 2026 GMT Subject: CN=cc9133d60121ef9b5bd6ffcc8ee040b683252e2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:0a:f7:7b:9c:78:22:16:f2:c1:ba:5e:df:03: f5:a8:e2:53:34:d4:60:3d:1a:a6:02:38:ed:62:d2: 5d:c4:e4:6e:3d:91:07:9e:b6:10:9f:34:8a:0a:11: a0:4c:5a:b1:5c:3b:7e:72:ad:0d:8e:d2:f6:46:1c: 52:76:45:30:bc:51:bd:18:7d:22:07:41:91:09:14: 9f:0e:9c:e2:7b:0e:c7:7e:70:92:81:f1:26:c2:54: 6c:3c:fc:9f:73:04:e2:ac:de:a5:59:7f:19:0f:a8: 2a:a8:67:ac:44:5a:37:3f:f3:9f:00:52:84:53:e6: dd:1c:63:be:e9:5b:94:10:22:b5:64:fb:af:b2:45: d0:74:57:38:e3:d8:33:8d:96:70:d7:5c:71:85:f5: 84:a4:29:c9:f4:fd:5b:79:67:09:95:47:52:3d:cd: 9c:9d:00:7a:be:99:5f:e7:5f:a0:a6:7d:a6:45:9b: a4:b5:93:d6:6d:40:32:37:ee:5a:7e:47:34:6b:b1: e5:4f:ee:56:df:46:15:0b:dc:98:f3:7e:fe:04:0e: 8d:92:df:40:85:f6:e2:f5:d2:4b:1b:b8:76:dd:87: d1:a0:02:66:6e:cf:1b:e6:4b:f1:13:a8:b4:9e:8e: 00:d6:6c:3d:34:27:08:1a:7b:9a:42:22:b0:ce:cf: 5a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:91:33:D6:01:21:EF:9B:5B:D6:FF:CC:8E:E0:40:B6:83:25:2E:2A X509v3 Authority Key Identifier: keyid:BF:A0:A3:8F:85:D2:F5:30:53:B8:C8:94:3D:90:17:B0:B8:F7:71:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:a4:9b:2c:ca:32:be:ef:28:99:8b:30:9d:a2:54:f3:92:bd: 85:dc:54:f0:d7:a2:c9:44:17:d7:57:cb:ac:18:fc:6f:c5:ae: f9:c4:00:12:d3:37:ac:17:f3:f6:4b:a2:e4:d1:14:d2:12:9a: 13:91:29:3f:be:79:87:fa:0c:e4:51:08:8f:c1:e0:31:3f:9b: 5e:30:0a:33:60:a9:ef:b0:67:80:94:b7:6b:28:a5:99:da:33: e4:ca:8d:80:91:ea:d7:f9:80:13:2d:28:6d:22:04:38:a1:c0: 16:1d:6b:d1:72:29:b8:f9:3e:cd:63:c7:f6:40:8c:ab:bc:89: 73:02:54:f6:85:b4:66:e0:11:e3:c2:ac:a3:79:d1:82:36:1e: 08:81:93:3a:dc:fb:cb:b5:ca:2b:2e:fa:39:a2:1b:2d:62:47: 9b:1d:84:4d:19:25:9a:a7:7f:2f:3f:c9:08:d5:18:c5:b8:0d: 54:be:74:d2:0c:ba:14:f4:1c:f3:e6:83:94:a6:9c:29:c1:43: fa:b9:15:74:69:1a:6a:c0:c2:f8:90:97:da:91:55:46:e8:da: 3f:0e:df:06:11:59:da:2d:5e:48:bc:cf:9e:77:f0:1b:e8:c4: 42:ca:36:54:d3:87:d2:e0:36:c6:e8:6a:3b:60:e0:48:74:e9: b0:9f:f0:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1BvFlIEw/k45LXOwGzPo4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYTBhMzhmODVkMmY1MzA1M2I4Yzg5NDNkOTAxN2IwYjhm NzcxYWMwHhcNMjYwMTI1MTIwMDMxWhcNMjYwMTI2MTIwMDMxWjAzMTEwLwYDVQQD EyhjYzkxMzNkNjAxMjFlZjliNWJkNmZmY2M4ZWUwNDBiNjgzMjUyZTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgr3e5x4Ihbywbpe3wP1qOJTNNRg PRqmAjjtYtJdxORuPZEHnrYQnzSKChGgTFqxXDt+cq0NjtL2RhxSdkUwvFG9GH0i B0GRCRSfDpziew7HfnCSgfEmwlRsPPyfcwTirN6lWX8ZD6gqqGesRFo3P/OfAFKE U+bdHGO+6VuUECK1ZPuvskXQdFc449gzjZZw11xxhfWEpCnJ9P1beWcJlUdSPc2c nQB6vplf51+gpn2mRZuktZPWbUAyN+5afkc0a7HlT+5W30YVC9yY837+BA6Nkt9A hfbi9dJLG7h23YfRoAJmbs8b5kvxE6i0no4A1mw9NCcIGnuaQiKwzs9aEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMyRM9YBIe+bW9b/zI7gQLaDJS4qMB8GA1UdIwQY MBaAFL+go4+F0vUwU7jIlD2QF7C493GsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjZDamo0WFM5VEJUdU1pVVBaQVhzTGozY2F3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi80MDk5ZDctYzNjZS00NzIxLWIwZTkt N2FiMWZhMGJhMzk5LzEvdjZDamo0WFM5VEJUdU1pVVBaQVhzTGozY2F3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi80MDk5ZDctYzNjZS00NzIxLWIwZTktN2FiMWZhMGJhMzk5 LzEvdjZDamo0WFM5VEJUdU1pVVBaQVhzTGozY2F3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFKSbLMoy vu8omYswnaJU85K9hdxU8NeiyUQX11fLrBj8b8Wu+cQAEtM3rBfz9kui5NEU0hKa E5EpP755h/oM5FEIj8HgMT+bXjAKM2Cp77BngJS3ayilmdoz5MqNgJHq1/mAEy0o bSIEOKHAFh1r0XIpuPk+zWPH9kCMq7yJcwJU9oW0ZuAR48Kso3nRgjYeCIGTOtz7 y7XKKy76OaIbLWJHmx2ETRklmqd/Lz/JCNUYxbgNVL500gy6FPQc8+aDlKacKcFD +rkVdGkaasDC+JCX2pFVRujaPw7fBhFZ2i1eSLzPnnfwG+jEQso2VNOH0uA2xuhq O2DgSHTpsJ/wMw== -----END CERTIFICATE-----Generated at Sun Jan 25 21:10:59 2026 by rpki-client