This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft File: u6Nc-KtvPqoq663Z4jc97AiTYl4.mft (raw, json) Hash identifier: 8Cyc5yemFqAeUh5N72AUudE/KyQOwtReehYqVO00v2Q= Subject key identifier: 2E:C1:A8:AA:0A:9B:4C:3E:8A:1D:93:E5:9F:4C:AA:A5:61:4F:93:0F Authority key identifier: BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E Certificate issuer: /CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e Certificate serial: 019BF4629D263C7C6DD4E6FF4A7E45F85FD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft Manifest number: 15B6 Signing time: Sun 25 Jan 2026 09:01:01 +0000 Manifest this update: Sun 25 Jan 2026 09:01:01 +0000 Manifest next update: Mon 26 Jan 2026 09:01:01 +0000 Files and hashes: 1: 6XbZ2xpI7l6Fwo5nUGJ8LcI12BM.roa (hash: oIH5kZRy4QQWIkNsi+TOmhTdqOjqPl4X4VEu5ZY7rrc=) 2: 6yY85OHD-46vFhP-wtPZWs3MeCY.roa (hash: hOno4SiXgMirUzFVpAXsEoPlI4QIn/ikV8WWQvXsoXg=) 3: 8McrGRfEqcovWnRSpklEmiBGADA.roa (hash: xszqUKxiKaCx1G5C+PDbNWuR86U3w6LgZy01FF25iiY=) 4: BooqKG4SsYSQxh6PGW72NBqbtuw.roa (hash: TU0xZxrNhYVeehRBPFf+LnBXvIDYoAVW0L6Hmfayq5M=) 5: Dib_4B7-59g2qlFon4U52XelorA.roa (hash: 7rKsJnSr5QX2uVe31jye987BgbcYNd7z/lfjZmUFdDY=) 6: J2-fb4bt2CtctBmzmfC8H8k0-Zo.roa (hash: PhWWvX6X2tLUSE0WxzAfwrSrZ7vyehY98guTk5gmtdI=) 7: Td85PzLGixLgYgdBT3GS17rfwTQ.roa (hash: ZtLYgrcf2o9oO80ckMCQ8oe+MvEY9qGa8/wSqJ2K4VY=) 8: bpUtIFcpj0wFmx0CClP1L0TgIfY.roa (hash: JpwXWXow0nu1gKjNId4RQPrmV9a8gFVj5DrvmpBJ7Ac=) 9: dkSZC1vcgEsyqm56yAJmonI1P1E.roa (hash: Wn8sFewfyDAMaX3VNG1l/GCgIijws7/FwmZlH3//5Vk=) 10: eH8mEFUxJaD15bIkdrb0eoEm43Q.roa (hash: iVNXmnAd/Aq9qGpFjFCXba0ETiSTvXsmOGBSWpVw4y4=) 11: u6Nc-KtvPqoq663Z4jc97AiTYl4.crl (hash: jRD7MIlHdrADPiWxnSXTAZTm4jhWQi8mNNO3I+gtMO4=) 12: vJiRTEd6tTiZDm_JR7rLwIox0zw.roa (hash: IYF63rRulzFNBpbGnH/dDmLviCvKmUvwCJNoi515Gao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:9d:26:3c:7c:6d:d4:e6:ff:4a:7e:45:f8:5f:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e Validity Not Before: Jan 25 09:01:01 2026 GMT Not After : Jan 26 09:01:01 2026 GMT Subject: CN=2ec1a8aa0a9b4c3e8a1d93e59f4caaa5614f930f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6d:05:83:02:9b:5b:06:28:f2:4a:63:51:e0: 8a:8b:86:78:b2:55:66:d8:1d:f7:3c:f1:30:62:43: 65:a7:31:cf:d0:18:7b:88:d5:7a:c4:ad:c3:b8:2e: 14:b6:34:b7:92:20:0f:4d:a1:5b:b5:73:dd:78:d4: 43:ba:e8:b7:19:e9:4a:27:c5:a0:d7:f6:52:ae:bf: c1:8a:ec:4e:64:d5:f4:25:5d:1a:ba:35:6d:5d:69: 3f:1a:04:fc:ba:23:92:ea:b8:cd:4b:d3:55:60:ed: d6:c6:e0:6f:86:bb:31:3e:a0:90:44:9c:b3:67:bf: 70:e4:66:e5:cf:ae:52:1a:4b:39:1d:d9:36:91:e1: 02:c4:1d:9e:27:eb:f4:4f:5b:59:28:34:be:a7:32: 7d:9b:43:dc:d5:db:29:ca:27:64:cf:ec:42:6d:c3: 70:8a:9c:31:1a:00:96:5c:a3:38:46:76:9b:6e:22: 6d:9a:b0:5d:cb:d1:dc:ad:b5:2c:ed:40:1f:1a:94: be:ec:d5:51:ca:de:22:9c:41:c0:d0:ff:b0:08:dd: 7f:38:d6:72:c8:3b:ce:d5:48:cc:a2:af:ea:b3:13: 6c:4d:da:5e:30:93:a6:5e:df:50:ca:41:25:20:bb: 87:51:a0:f9:d7:62:c2:1d:3a:5b:cf:a1:f4:2f:38: e6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:C1:A8:AA:0A:9B:4C:3E:8A:1D:93:E5:9F:4C:AA:A5:61:4F:93:0F X509v3 Authority Key Identifier: keyid:BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:18:60:a8:8b:05:b9:51:82:2a:e5:fc:f5:96:7a:05:39:32: f3:bf:fc:b2:ad:6c:74:0a:a2:9c:31:e2:d1:52:cc:e8:2a:16: 74:b4:a0:43:0c:4b:a5:63:66:cb:9b:12:e4:38:cb:ce:dd:95: bf:64:97:9b:c7:71:3a:85:fe:07:40:b2:2a:3d:94:46:11:5f: d6:02:c6:9f:fc:6e:d5:22:00:39:fe:da:0e:50:29:62:a6:58: 73:fe:b9:2e:fd:6f:cd:34:97:eb:6e:31:c0:a6:bc:bc:ee:9a: 13:ed:02:71:6e:4a:a9:5f:e1:ae:5d:db:7d:cb:f2:2a:cf:5b: 06:3c:2c:d8:05:d6:97:d7:9d:56:a0:88:09:5c:d9:9e:62:c4: 48:4b:cc:39:ff:28:18:2d:dc:08:a3:a8:86:8c:3c:4f:90:3e: 45:dc:e8:2c:87:24:7b:89:9b:59:8c:74:ed:ed:2b:d0:65:cb: 77:0d:a2:c9:97:df:93:2a:70:1b:94:dd:b1:8f:f9:a5:7f:ba: b4:0d:ca:42:44:89:ac:0b:31:7e:b8:4d:6f:5f:4e:f1:f5:f3: 0d:fb:52:8b:2c:a7:3e:af:03:09:ba:a1:b3:45:b4:7b:60:66: 64:b6:c8:50:da:98:c9:4e:91:f7:b9:b6:c3:9b:8d:2d:e7:75: 70:05:11:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0Yp0mPHxt1Ob/Sn5F+F/SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiYTM1Y2Y4YWI2ZjNlYWEyYWViYWRkOWUyMzczZGVjMDg5 MzYyNWUwHhcNMjYwMTI1MDkwMTAxWhcNMjYwMTI2MDkwMTAxWjAzMTEwLwYDVQQD EygyZWMxYThhYTBhOWI0YzNlOGExZDkzZTU5ZjRjYWFhNTYxNGY5MzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyG0FgwKbWwYo8kpjUeCKi4Z4slVm 2B33PPEwYkNlpzHP0Bh7iNV6xK3DuC4UtjS3kiAPTaFbtXPdeNRDuui3GelKJ8Wg 1/ZSrr/BiuxOZNX0JV0aujVtXWk/GgT8uiOS6rjNS9NVYO3WxuBvhrsxPqCQRJyz Z79w5Gblz65SGks5Hdk2keECxB2eJ+v0T1tZKDS+pzJ9m0Pc1dspyidkz+xCbcNw ipwxGgCWXKM4RnabbiJtmrBdy9HcrbUs7UAfGpS+7NVRyt4inEHA0P+wCN1/ONZy yDvO1UjMoq/qsxNsTdpeMJOmXt9QykElILuHUaD512LCHTpbz6H0LzjmFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC7BqKoKm0w+ih2T5Z9MqqVhT5MPMB8GA1UdIwQY MBaAFLujXPirbz6qKuut2eI3PewIk2JeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMt NTk3YjZlMjQ5MmFiLzEvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMtNTk3YjZlMjQ5MmFi LzEvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHRhgqIsF uVGCKuX89ZZ6BTky87/8sq1sdAqinDHi0VLM6CoWdLSgQwxLpWNmy5sS5DjLzt2V v2SXm8dxOoX+B0CyKj2URhFf1gLGn/xu1SIAOf7aDlApYqZYc/65Lv1vzTSX624x wKa8vO6aE+0CcW5KqV/hrl3bfcvyKs9bBjws2AXWl9edVqCICVzZnmLESEvMOf8o GC3cCKOohow8T5A+RdzoLIcke4mbWYx07e0r0GXLdw2iyZffkypwG5TdsY/5pX+6 tA3KQkSJrAsxfrhNb19O8fXzDftSiyynPq8DCbqhs0W0e2BmZLbIUNqYyU6R97m2 w5uNLed1cAUR7Q== -----END CERTIFICATE-----Generated at Sun Jan 25 12:36:10 2026 by rpki-client