This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.mft File: 6rBmxuGACj9b0uQG6aYg0qD29lM.mft (raw, json) Hash identifier: myrma17j2/TJtHXaIM1W0Rnp+NlCpGmnfKMcE8vvpbc= Subject key identifier: 32:83:CA:41:49:D3:75:13:35:6C:35:E3:EA:A8:AA:D2:C7:E5:02:CB Authority key identifier: EA:B0:66:C6:E1:80:0A:3F:5B:D2:E4:06:E9:A6:20:D2:A0:F6:F6:53 Certificate issuer: /CN=eab066c6e1800a3f5bd2e406e9a620d2a0f6f653 Certificate serial: 019BF687C53FAC3C8E8B54198BC0319E13A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rBmxuGACj9b0uQG6aYg0qD29lM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.mft Manifest number: 0E7D Signing time: Sun 25 Jan 2026 19:00:51 +0000 Manifest this update: Sun 25 Jan 2026 19:00:51 +0000 Manifest next update: Mon 26 Jan 2026 19:00:51 +0000 Files and hashes: 1: 6rBmxuGACj9b0uQG6aYg0qD29lM.crl (hash: DaF/YaAN8djYpsMakcgOq4fJanylpoPjzhR3GOVeo6g=) 2: y8Oc_jilp32EuFWNU56uzsG240A.roa (hash: m5FeXXz3diMHtUorIoO4JI5zdoSfwpDlGCnUqxC6c0Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.mft rsync://rpki.ripe.net/repository/DEFAULT/6rBmxuGACj9b0uQG6aYg0qD29lM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:c5:3f:ac:3c:8e:8b:54:19:8b:c0:31:9e:13:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eab066c6e1800a3f5bd2e406e9a620d2a0f6f653 Validity Not Before: Jan 25 19:00:51 2026 GMT Not After : Jan 26 19:00:51 2026 GMT Subject: CN=3283ca4149d37513356c35e3eaa8aad2c7e502cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:5e:ac:05:16:28:c5:08:3d:9a:9c:4d:33:69: 42:82:7b:b2:25:62:9b:e7:b8:cb:23:cf:d2:b9:84: b5:84:b2:66:79:b2:59:83:bb:8a:6c:0d:39:8d:a0: a0:77:a3:36:b1:87:20:47:3d:66:02:c6:47:2a:20: 8e:e8:09:9d:56:d8:e7:b5:b3:52:7d:d9:9b:59:32: 5c:c7:a4:b1:cd:42:8c:a5:ca:50:fb:4d:6b:3e:6d: f6:6b:64:fe:f3:cd:18:d9:c5:f4:b9:85:ee:54:6a: cf:86:2c:f2:fb:f7:41:e2:38:f6:7d:83:1a:42:2d: f0:ce:52:92:72:80:16:cb:cc:e2:af:0d:f5:3f:dc: 22:30:a1:61:19:be:e7:40:24:8a:d0:f4:5e:f2:78: 5e:7e:22:73:8b:03:2b:56:ab:03:57:67:86:dd:50: 28:ca:c0:8e:eb:6b:5a:ca:52:36:45:18:b1:b2:90: d4:e0:b6:ef:48:ae:97:4d:31:b9:f5:18:62:22:33: f8:e0:fb:c3:76:d7:4f:69:b2:28:01:b2:dc:11:20: 9c:e2:1f:5e:04:8d:36:c5:b0:6f:17:6a:11:f1:40: 83:23:df:e9:14:6f:82:bc:68:c4:e5:24:d3:82:84: a7:54:91:4f:36:51:19:98:ab:87:96:f0:2c:50:2a: 4d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:83:CA:41:49:D3:75:13:35:6C:35:E3:EA:A8:AA:D2:C7:E5:02:CB X509v3 Authority Key Identifier: keyid:EA:B0:66:C6:E1:80:0A:3F:5B:D2:E4:06:E9:A6:20:D2:A0:F6:F6:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rBmxuGACj9b0uQG6aYg0qD29lM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:d7:c7:f0:e0:ce:9c:a9:bc:a4:c9:dc:42:0d:79:1a:90:94: 05:01:a8:f0:9b:87:ff:91:a8:81:f5:64:80:2d:85:62:52:f8: af:0f:f8:ae:85:20:6c:a0:8f:4a:83:70:63:05:48:0d:77:0f: e5:9b:5b:44:14:9d:56:9d:13:91:85:05:7d:53:49:7c:3a:34: 57:b3:10:4c:e5:fc:2c:f8:84:48:3c:7a:ab:fe:21:6b:06:e3: c1:42:50:8c:5f:49:56:3d:b8:6f:a7:05:2c:a2:85:65:3f:84: 49:79:73:00:e4:77:22:dd:de:01:32:2d:1b:f4:a9:a4:49:a7: 9d:83:76:fb:34:d1:1a:fe:d6:0e:f6:72:32:30:c6:03:33:28: 8f:09:6f:01:86:6f:51:a2:e8:be:05:8d:fa:5d:d8:2e:fe:2e: e2:76:57:d5:18:e2:67:5a:29:5f:df:7b:24:f1:88:93:af:ea: 52:a0:a5:a5:56:27:b7:0b:6a:24:37:ee:bb:66:bf:a6:75:32: a6:10:83:53:db:47:b2:af:83:37:9b:8a:7d:9b:41:ca:be:32: 28:97:00:3f:53:a4:9a:5b:61:b9:c6:df:f1:03:82:18:1d:0f: 60:83:4f:b2:7e:cb:fe:08:c1:c3:00:6e:ec:28:67:24:07:fc: ac:9e:d8:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h8U/rDyOi1QZi8AxnhOgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYjA2NmM2ZTE4MDBhM2Y1YmQyZTQwNmU5YTYyMGQyYTBm NmY2NTMwHhcNMjYwMTI1MTkwMDUxWhcNMjYwMTI2MTkwMDUxWjAzMTEwLwYDVQQD EygzMjgzY2E0MTQ5ZDM3NTEzMzU2YzM1ZTNlYWE4YWFkMmM3ZTUwMmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjl6sBRYoxQg9mpxNM2lCgnuyJWKb 57jLI8/SuYS1hLJmebJZg7uKbA05jaCgd6M2sYcgRz1mAsZHKiCO6AmdVtjntbNS fdmbWTJcx6SxzUKMpcpQ+01rPm32a2T+880Y2cX0uYXuVGrPhizy+/dB4jj2fYMa Qi3wzlKScoAWy8zirw31P9wiMKFhGb7nQCSK0PRe8nhefiJziwMrVqsDV2eG3VAo ysCO62taylI2RRixspDU4LbvSK6XTTG59RhiIjP44PvDdtdPabIoAbLcESCc4h9e BI02xbBvF2oR8UCDI9/pFG+CvGjE5STTgoSnVJFPNlEZmKuHlvAsUCpNFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDKDykFJ03UTNWw14+qoqtLH5QLLMB8GA1UdIwQY MBaAFOqwZsbhgAo/W9LkBummINKg9vZTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnJCbXh1R0FDajliMHVRRzZhWWcwcUQyOWxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi85MWQ2MjktN2QxZi00NWJkLWExZTEt OTMxY2Y3OThlNDEyLzEvNnJCbXh1R0FDajliMHVRRzZhWWcwcUQyOWxNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi85MWQ2MjktN2QxZi00NWJkLWExZTEtOTMxY2Y3OThlNDEy LzEvNnJCbXh1R0FDajliMHVRRzZhWWcwcUQyOWxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArNfH8ODO nKm8pMncQg15GpCUBQGo8JuH/5GogfVkgC2FYlL4rw/4roUgbKCPSoNwYwVIDXcP 5ZtbRBSdVp0TkYUFfVNJfDo0V7MQTOX8LPiESDx6q/4hawbjwUJQjF9JVj24b6cF LKKFZT+ESXlzAOR3It3eATItG/SppEmnnYN2+zTRGv7WDvZyMjDGAzMojwlvAYZv UaLovgWN+l3YLv4u4nZX1RjiZ1opX997JPGIk6/qUqClpVYntwtqJDfuu2a/pnUy phCDU9tHsq+DN5uKfZtByr4yKJcAP1Okmlthucbf8QOCGB0PYINPsn7L/gjBwwBu 7ChnJAf8rJ7YWg== -----END CERTIFICATE-----Generated at Mon Jan 26 03:11:43 2026 by rpki-client