This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft File: 6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft (raw, json) Hash identifier: NRB1SjI0+v8z4VgRLNcJJ8+EuB3zd1cSPmx4PoOOzr0= Subject key identifier: 3B:4D:D3:36:B4:DC:12:88:C7:7E:4A:29:05:6F:72:6F:BA:6B:9C:76 Authority key identifier: E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9 Certificate issuer: /CN=e8393bd1305f6cc4439192119c605f44bbf09bc9 Certificate serial: 019BF8ACE1E4DED07937D139B3EB320A6286 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft Manifest number: 0AF3 Signing time: Mon 26 Jan 2026 05:00:38 +0000 Manifest this update: Mon 26 Jan 2026 05:00:38 +0000 Manifest next update: Tue 27 Jan 2026 05:00:38 +0000 Files and hashes: 1: 3jEzaTAZGbVsoFwdmjg2hTF2_Wk.roa (hash: wm8kNCk7UferWI+OkWWldWOTGXvk5bckydNDUKDAWvo=) 2: 6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl (hash: lqXfdQza9Y9vOiFhhwcfKRleATaNKeJA89mabrhRN0Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ac:e1:e4:de:d0:79:37:d1:39:b3:eb:32:0a:62:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8393bd1305f6cc4439192119c605f44bbf09bc9 Validity Not Before: Jan 26 05:00:38 2026 GMT Not After : Jan 27 05:00:38 2026 GMT Subject: CN=3b4dd336b4dc1288c77e4a29056f726fba6b9c76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:22:78:f0:e1:37:5d:c0:71:f6:cd:54:e6:18: 2b:73:ed:ef:e9:6b:c6:86:87:4f:93:bd:ca:ce:40: 15:b7:92:af:16:5b:9b:ec:ab:24:f8:f5:fa:5f:28: 6a:63:25:86:49:1a:63:68:b6:13:81:0f:12:29:1b: ff:ed:f4:10:03:9d:cc:bb:05:46:83:00:40:7a:c4: ff:f0:57:6b:8c:e9:9b:00:49:cf:ef:ab:86:73:05: 80:aa:9f:7f:21:d2:96:c9:bf:6d:ed:d4:6a:36:fe: 0a:ed:d8:31:dc:f1:17:be:50:f8:87:0a:a0:44:6b: 97:a1:e6:83:46:22:7f:63:19:96:84:06:4b:8b:2a: a7:b5:c2:a5:a1:8e:6b:fe:fe:4b:16:ef:52:b4:7e: e6:1d:4f:ae:b9:0a:f6:8e:1a:2e:16:6a:6d:ec:22: 73:f9:06:c3:4c:a5:bf:08:01:ef:06:1c:6d:9c:12: 99:cb:6e:6a:9c:1a:6e:ab:b3:3e:1a:88:67:b1:1a: 2d:d3:50:70:d5:1b:08:7c:d7:24:f0:dc:24:e8:ac: 17:6c:20:0c:0c:e0:71:8e:fb:88:cf:45:5b:be:e0: d0:0e:f0:20:5b:6e:34:16:9e:66:f5:ca:30:22:bc: e9:2e:6c:2d:22:19:e5:64:3e:27:c0:50:8f:c0:c7: 1d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:4D:D3:36:B4:DC:12:88:C7:7E:4A:29:05:6F:72:6F:BA:6B:9C:76 X509v3 Authority Key Identifier: keyid:E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:0f:42:c5:8b:83:62:6c:d5:3e:84:8a:f6:31:e7:d0:a7:0c: 15:91:bb:66:22:3e:62:46:17:a0:00:de:48:d8:7c:74:64:88: 0c:c4:72:bd:a2:e7:fa:5b:5c:ff:07:10:55:7e:24:31:13:ee: f8:18:01:62:f3:ff:5e:bd:5e:eb:5b:aa:61:c7:6c:1d:4b:f7: 06:f1:60:06:a6:57:af:f1:88:16:c2:88:0c:79:5a:ca:52:0e: fa:3d:7e:d4:92:98:6c:83:2f:e3:36:0c:3e:bc:a5:67:ba:a5: c9:cf:e0:67:96:ba:30:21:f6:73:85:b6:2e:be:0a:71:d0:fc: b0:c9:57:28:43:e9:1f:ce:30:9a:8f:be:f1:c8:63:8f:eb:95: 23:b8:2d:6b:c8:d9:9c:10:2d:ea:ee:a0:7a:30:a0:c5:52:4b: 3c:a0:be:54:52:a7:1c:5d:35:67:58:ba:97:35:30:7d:da:3f: 06:c8:37:e4:fd:69:6d:ab:ee:05:36:a5:ed:fa:a8:98:3c:c1: 3f:4c:35:d5:3a:5a:e6:10:e3:25:fe:32:43:77:75:0b:3a:43: e1:71:82:7a:50:e4:07:55:af:8b:44:00:28:5f:0a:73:1d:cf: d8:80:a0:49:66:29:ab:ce:23:10:6d:1b:3a:10:d1:28:f8:b5: b9:c2:b9:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rOHk3tB5N9E5s+syCmKGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4MzkzYmQxMzA1ZjZjYzQ0MzkxOTIxMTljNjA1ZjQ0YmJm MDliYzkwHhcNMjYwMTI2MDUwMDM4WhcNMjYwMTI3MDUwMDM4WjAzMTEwLwYDVQQD EygzYjRkZDMzNmI0ZGMxMjg4Yzc3ZTRhMjkwNTZmNzI2ZmJhNmI5Yzc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4iJ48OE3XcBx9s1U5hgrc+3v6WvG hodPk73KzkAVt5KvFlub7Ksk+PX6XyhqYyWGSRpjaLYTgQ8SKRv/7fQQA53MuwVG gwBAesT/8FdrjOmbAEnP76uGcwWAqp9/IdKWyb9t7dRqNv4K7dgx3PEXvlD4hwqg RGuXoeaDRiJ/YxmWhAZLiyqntcKloY5r/v5LFu9StH7mHU+uuQr2jhouFmpt7CJz +QbDTKW/CAHvBhxtnBKZy25qnBpuq7M+GohnsRot01Bw1RsIfNck8Nwk6KwXbCAM DOBxjvuIz0VbvuDQDvAgW240Fp5m9cowIrzpLmwtIhnlZD4nwFCPwMcd8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDtN0za03BKIx35KKQVvcm+6a5x2MB8GA1UdIwQY MBaAFOg5O9EwX2zEQ5GSEZxgX0S78JvJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkRrNzBUQmZiTVJEa1pJUm5HQmZSTHZ3bThrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC80NTgwMTEtNWRlMS00NjgwLTgyNTUt YjA2ZmRhMDFmNDZjLzEvNkRrNzBUQmZiTVJEa1pJUm5HQmZSTHZ3bThrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC80NTgwMTEtNWRlMS00NjgwLTgyNTUtYjA2ZmRhMDFmNDZj LzEvNkRrNzBUQmZiTVJEa1pJUm5HQmZSTHZ3bThrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWw9CxYuD YmzVPoSK9jHn0KcMFZG7ZiI+YkYXoADeSNh8dGSIDMRyvaLn+ltc/wcQVX4kMRPu +BgBYvP/Xr1e61uqYcdsHUv3BvFgBqZXr/GIFsKIDHlaylIO+j1+1JKYbIMv4zYM PrylZ7qlyc/gZ5a6MCH2c4W2Lr4KcdD8sMlXKEPpH84wmo++8chjj+uVI7gta8jZ nBAt6u6gejCgxVJLPKC+VFKnHF01Z1i6lzUwfdo/Bsg35P1pbavuBTal7fqomDzB P0w11Tpa5hDjJf4yQ3d1CzpD4XGCelDkB1Wvi0QAKF8Kcx3P2ICgSWYpq84jEG0b OhDRKPi1ucK5Zw== -----END CERTIFICATE-----Generated at Mon Jan 26 06:24:11 2026 by rpki-client