This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft File: 6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft (raw, json) Hash identifier: b0OYvyAH99q8xGyjT5iHwt+oczjXpnnewypQ0zX3h7c= Subject key identifier: 53:7C:68:FF:89:06:C5:26:63:85:C7:24:CF:B5:3B:8E:47:CD:7A:AD Authority key identifier: EA:22:AB:6B:BE:42:ED:9C:F3:67:BB:03:17:DF:7E:64:0E:28:36:DC Certificate issuer: /CN=ea22ab6bbe42ed9cf367bb0317df7e640e2836dc Certificate serial: 019BFC8A5E713F3C02F9137C2690B31CAE7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft Manifest number: 0ECD Signing time: Mon 26 Jan 2026 23:01:25 +0000 Manifest this update: Mon 26 Jan 2026 23:01:25 +0000 Manifest next update: Tue 27 Jan 2026 23:01:25 +0000 Files and hashes: 1: 6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl (hash: Y+eC8Q74XNa2ldDnNYujcj2qoL5qVxBLnS93BTEEJ8w=) 2: Km_5u_8-0UPIHvzrlRYqORNlnWI.roa (hash: RcS8loqaddFxoIIrsxiTOHAxHYkLPDkXrY9JTAJObmg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:8a:5e:71:3f:3c:02:f9:13:7c:26:90:b3:1c:ae:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea22ab6bbe42ed9cf367bb0317df7e640e2836dc Validity Not Before: Jan 26 23:01:25 2026 GMT Not After : Jan 27 23:01:25 2026 GMT Subject: CN=537c68ff8906c5266385c724cfb53b8e47cd7aad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:1e:ce:ec:f9:fa:7a:e6:cf:2a:8a:73:87:3c: 9e:36:d9:78:6f:a3:7a:3a:68:8f:7d:4a:40:32:ae: 28:70:bf:6b:81:a9:8f:e9:15:5c:d0:f7:da:20:f6: 7d:98:9c:4f:92:81:a2:44:e1:49:8c:1e:af:0c:d0: a1:6d:40:72:60:a7:55:e4:70:8d:8f:71:12:95:8a: 84:26:f6:b8:b7:71:01:ed:fc:5a:7b:ad:6f:39:28: d8:7e:21:fc:a7:4f:14:8d:0d:5d:5a:be:a0:07:4b: f5:91:b0:10:5f:22:6b:5b:ee:00:57:ac:91:91:f2: d3:96:1e:68:2d:51:68:11:4a:11:1e:c8:c0:4c:a7: 75:cb:a4:63:e7:ca:c8:f2:f3:df:9a:24:8e:14:0f: 1c:f9:18:65:66:b8:6b:a1:af:dd:ae:6b:71:38:d5: ad:08:a2:53:ea:d0:28:94:fc:a3:f3:b5:22:36:b7: 0a:bd:24:94:4c:32:7e:05:84:a6:85:e2:c4:fa:1f: 37:c6:ad:4b:a4:78:63:17:69:b1:26:13:7c:9c:45: 73:90:4c:56:ac:81:bd:6d:ab:c7:b9:ba:80:85:ae: 7d:ff:68:a0:45:3d:f3:82:86:ef:93:41:e0:b1:ca: 13:98:66:c2:b4:ba:4c:4a:c4:f8:cc:5a:41:3b:05: 29:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:7C:68:FF:89:06:C5:26:63:85:C7:24:CF:B5:3B:8E:47:CD:7A:AD X509v3 Authority Key Identifier: keyid:EA:22:AB:6B:BE:42:ED:9C:F3:67:BB:03:17:DF:7E:64:0E:28:36:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:43:6e:0b:9c:a1:56:fc:70:c2:13:53:dd:7a:6b:9d:57:c0: 3d:7a:95:c9:ae:b4:81:bf:58:85:b9:18:05:38:17:16:a1:ee: 0b:5d:a8:80:72:84:f7:5b:64:1d:a8:b6:a3:c7:cd:4e:19:4f: 92:d9:fd:c8:e4:cf:b0:bd:30:7c:d6:69:f0:68:db:f7:f4:1a: 86:2f:5d:37:ea:df:2a:3f:48:ad:ce:8c:69:34:87:e7:0b:02: 47:7f:21:56:d5:55:ad:05:f5:8e:b1:3a:79:a2:7c:6f:4c:a0: c2:ef:f5:ed:2c:08:88:e1:d2:1e:29:a2:57:77:c8:fe:8d:67: d3:cf:76:00:a9:96:24:30:12:af:44:21:ed:95:c9:83:eb:75: da:f6:cd:82:1b:0b:88:5a:fe:d0:e7:2e:d7:31:f9:1c:31:c7: 02:61:74:65:cc:c1:db:91:53:47:09:6f:45:5a:24:28:4f:24: b2:7b:07:d8:05:58:eb:1f:7b:08:59:b4:75:56:2c:a5:89:1b: c9:1a:02:29:12:4f:a0:30:9c:6c:9c:29:55:54:22:d4:7a:32: a2:b8:a0:41:cc:41:7b:c3:5a:88:54:d0:de:5b:c5:75:ed:d0: dd:87:57:f3:93:bd:00:9a:ef:ac:d3:b2:c0:cf:20:77:65:6d: 25:a0:cc:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8il5xPzwC+RN8JpCzHK5+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMjJhYjZiYmU0MmVkOWNmMzY3YmIwMzE3ZGY3ZTY0MGUy ODM2ZGMwHhcNMjYwMTI2MjMwMTI1WhcNMjYwMTI3MjMwMTI1WjAzMTEwLwYDVQQD Eyg1MzdjNjhmZjg5MDZjNTI2NjM4NWM3MjRjZmI1M2I4ZTQ3Y2Q3YWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjR7O7Pn6eubPKopzhzyeNtl4b6N6 OmiPfUpAMq4ocL9rgamP6RVc0PfaIPZ9mJxPkoGiROFJjB6vDNChbUByYKdV5HCN j3ESlYqEJva4t3EB7fxae61vOSjYfiH8p08UjQ1dWr6gB0v1kbAQXyJrW+4AV6yR kfLTlh5oLVFoEUoRHsjATKd1y6Rj58rI8vPfmiSOFA8c+RhlZrhroa/drmtxONWt CKJT6tAolPyj87UiNrcKvSSUTDJ+BYSmheLE+h83xq1LpHhjF2mxJhN8nEVzkExW rIG9bavHubqAha59/2igRT3zgobvk0HgscoTmGbCtLpMSsT4zFpBOwUpFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFN8aP+JBsUmY4XHJM+1O45HzXqtMB8GA1UdIwQY MBaAFOoiq2u+Qu2c82e7AxfffmQOKDbcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmlLcmE3NUM3Wnp6WjdzREY5OS1aQTRvTnR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9hNWEzYTItYWQ1My00NmE1LThmZDUt MDY1ZWQ0ZDg0NDFmLzEvNmlLcmE3NUM3Wnp6WjdzREY5OS1aQTRvTnR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9hNWEzYTItYWQ1My00NmE1LThmZDUtMDY1ZWQ0ZDg0NDFm LzEvNmlLcmE3NUM3Wnp6WjdzREY5OS1aQTRvTnR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1ENuC5yh VvxwwhNT3XprnVfAPXqVya60gb9YhbkYBTgXFqHuC12ogHKE91tkHai2o8fNThlP ktn9yOTPsL0wfNZp8Gjb9/Qahi9dN+rfKj9Irc6MaTSH5wsCR38hVtVVrQX1jrE6 eaJ8b0ygwu/17SwIiOHSHimiV3fI/o1n0892AKmWJDASr0Qh7ZXJg+t12vbNghsL iFr+0Ocu1zH5HDHHAmF0ZczB25FTRwlvRVokKE8ksnsH2AVY6x97CFm0dVYspYkb yRoCKRJPoDCcbJwpVVQi1HoyorigQcxBe8NaiFTQ3lvFde3Q3YdX85O9AJrvrNOy wM8gd2VtJaDMwg== -----END CERTIFICATE-----Generated at Tue Jan 27 02:12:42 2026 by rpki-client