This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft File: m6lLwUk3uws2MjdDVaRGckEEqYE.mft (raw, json) Hash identifier: E0dc1QJxFMQ1jDFnnJOvGjszguHHHp3LFSQHDGo2/3g= Subject key identifier: 95:96:6B:09:03:08:17:AB:89:B9:80:65:7F:E6:0B:B3:AE:22:79:F1 Authority key identifier: 9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81 Certificate issuer: /CN=9ba94bc14937bb0b3632374355a446724104a981 Certificate serial: 019BE0007FD4BFB2B01C67F22B0A60A62B7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft Manifest number: 17C6 Signing time: Wed 21 Jan 2026 10:01:27 +0000 Manifest this update: Wed 21 Jan 2026 10:01:27 +0000 Manifest next update: Thu 22 Jan 2026 10:01:27 +0000 Files and hashes: 1: Am-KOohcL2MqtHNdtJvWFx7LN0g.roa (hash: LCrtT5oylKVJNkSk1MoZh1tTPAUpbotUkU/vpFTgXwg=) 2: Cm2yDKipOZ7sHlbR_Hzzd41nQYs.roa (hash: yWZv7NkDFzKo9TIx/TWSen6p9EYZYREsasP3I0CUfzQ=) 3: UsjKC7eB_MWBtsUBXJK-RFYAYHU.roa (hash: NGEpFjBcwXvxm7QU0HUsjAWpitcU0iExVxH5Fk2JaRc=) 4: bwrK1tRV4AWpwHJl-68qI5x7fgA.roa (hash: QlUI1QZ7/IbZJuu9R1SnsQfMUaEeLYrpJvRYfGmpwoE=) 5: m6lLwUk3uws2MjdDVaRGckEEqYE.crl (hash: 3eTY/PMebno4yN2AIUeloSofQsMy31gDQRaCTqav4iA=) 6: m84CLuxw2FJsW0scm8tH7sBc9EA.roa (hash: a/eeahQ9DT0uKrtOLoBbEBv5z8d0GRvVUXTkKq6/j6c=) 7: wZoxcNDPJMq3-uyqVaFl1OpOC5s.roa (hash: LWpdYaFu3wCLKYxI/zQHGuILauK3fDO4Dw9ytsYmVLU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:00:7f:d4:bf:b2:b0:1c:67:f2:2b:0a:60:a6:2b:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ba94bc14937bb0b3632374355a446724104a981 Validity Not Before: Jan 21 10:01:27 2026 GMT Not After : Jan 22 10:01:27 2026 GMT Subject: CN=95966b09030817ab89b980657fe60bb3ae2279f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:26:0a:d6:b6:2b:de:d6:90:d4:2c:2c:a9:9f: 40:c2:d5:ed:18:39:e4:62:89:5d:a1:60:de:5c:a8: 32:c4:69:db:ad:ca:6b:a5:dc:7d:45:ec:23:0f:8d: e5:33:4a:5f:1d:b1:8e:94:a4:69:fb:f8:25:81:d5: 3c:33:c8:a5:c6:69:49:32:c2:f7:64:07:69:ac:d0: 57:e5:24:00:26:3b:b7:3e:bd:da:c3:7d:a8:87:fa: 77:19:f9:c0:e4:53:97:02:ac:01:c8:2a:b8:93:c6: cb:28:d5:6c:cb:e7:47:30:cf:c2:81:7a:5a:06:ac: ef:9e:2d:62:5d:82:d1:63:d7:ff:3d:2f:6b:0e:fd: ae:39:c2:47:88:e8:47:a6:a9:1e:a3:fd:58:ad:5b: 22:34:90:83:98:b5:73:dc:10:63:4b:b6:18:23:65: af:6e:69:88:1e:a2:a0:f0:50:41:86:9b:4d:27:9f: 42:5c:28:f8:c7:d8:53:9f:af:f1:bd:1c:61:9c:d9: 90:7c:d9:b5:ac:82:c1:4e:41:2e:b5:5d:b6:7b:2b: 26:ab:fd:e7:11:b7:6b:0a:f3:09:ff:55:5c:ea:16: e0:e9:e0:46:66:4c:80:ba:49:e9:83:b1:52:b6:7f: ce:05:62:ae:28:9d:09:af:e9:bd:b6:76:94:b5:91: b5:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:96:6B:09:03:08:17:AB:89:B9:80:65:7F:E6:0B:B3:AE:22:79:F1 X509v3 Authority Key Identifier: keyid:9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:d2:eb:76:2e:25:8d:1d:3a:d8:4a:9b:23:b4:4e:5a:12:7b: 24:37:63:7a:f5:47:d4:b6:37:c0:28:87:0a:20:90:fb:49:f8: cb:46:d8:13:a0:f3:bd:e1:f9:ce:79:77:d4:58:fe:1c:54:c3: c3:5f:3d:d7:a4:72:44:08:c4:1c:9a:ab:a6:af:57:57:d0:d4: 64:aa:13:80:35:eb:c5:85:24:cc:69:6f:40:a0:ba:1f:3c:ad: 28:06:a3:f0:55:59:c5:af:2e:94:11:d8:bb:65:fd:b5:89:5d: db:de:5b:64:5e:46:d1:c1:94:de:fa:99:a5:2e:52:da:0f:78: 11:4d:f1:3f:13:47:df:fe:00:f5:e8:b7:38:68:46:ad:c9:8f: cb:57:1c:c3:1d:d5:01:3d:38:59:79:77:b0:d8:1b:af:aa:9b: 69:0c:df:22:4f:07:50:95:51:e7:f1:32:bd:a6:ce:28:9f:42: 32:35:f2:e7:8d:73:d6:a0:18:ce:d5:c4:91:c0:22:2c:ec:20: a9:d4:93:99:71:8e:28:c5:c6:9e:4e:d1:d1:07:07:6c:28:22: 34:7c:0f:09:db:ba:68:4e:b5:67:43:f2:ca:d3:2f:ee:de:71: 28:29:38:4b:d9:b6:e0:9b:f0:b6:d5:db:0e:0b:de:51:c2:b8: 92:3e:19:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvgAH/Uv7KwHGfyKwpgpit8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliYTk0YmMxNDkzN2JiMGIzNjMyMzc0MzU1YTQ0NjcyNDEw NGE5ODEwHhcNMjYwMTIxMTAwMTI3WhcNMjYwMTIyMTAwMTI3WjAzMTEwLwYDVQQD Eyg5NTk2NmIwOTAzMDgxN2FiODliOTgwNjU3ZmU2MGJiM2FlMjI3OWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiYK1rYr3taQ1CwsqZ9AwtXtGDnk YoldoWDeXKgyxGnbrcprpdx9RewjD43lM0pfHbGOlKRp+/glgdU8M8ilxmlJMsL3 ZAdprNBX5SQAJju3Pr3aw32oh/p3GfnA5FOXAqwByCq4k8bLKNVsy+dHMM/CgXpa Bqzvni1iXYLRY9f/PS9rDv2uOcJHiOhHpqkeo/1YrVsiNJCDmLVz3BBjS7YYI2Wv bmmIHqKg8FBBhptNJ59CXCj4x9hTn6/xvRxhnNmQfNm1rILBTkEutV22eysmq/3n EbdrCvMJ/1Vc6hbg6eBGZkyAuknpg7FStn/OBWKuKJ0Jr+m9tnaUtZG1pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJWWawkDCBeribmAZX/mC7OuInnxMB8GA1UdIwQY MBaAFJupS8FJN7sLNjI3Q1WkRnJBBKmBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTZsTHdVazN1d3MyTWpkRFZhUkdja0VFcVlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jYzc4NDMtZDEzNi00ZmZiLThiOTkt ODM2YzMxMmFjOGMyLzEvbTZsTHdVazN1d3MyTWpkRFZhUkdja0VFcVlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9jYzc4NDMtZDEzNi00ZmZiLThiOTktODM2YzMxMmFjOGMy LzEvbTZsTHdVazN1d3MyTWpkRFZhUkdja0VFcVlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbdLrdi4l jR062EqbI7ROWhJ7JDdjevVH1LY3wCiHCiCQ+0n4y0bYE6DzveH5znl31Fj+HFTD w18916RyRAjEHJqrpq9XV9DUZKoTgDXrxYUkzGlvQKC6HzytKAaj8FVZxa8ulBHY u2X9tYld295bZF5G0cGU3vqZpS5S2g94EU3xPxNH3/4A9ei3OGhGrcmPy1ccwx3V AT04WXl3sNgbr6qbaQzfIk8HUJVR5/EyvabOKJ9CMjXy541z1qAYztXEkcAiLOwg qdSTmXGOKMXGnk7R0QcHbCgiNHwPCdu6aE61Z0PyytMv7t5xKCk4S9m24JvwttXb DgveUcK4kj4ZIQ== -----END CERTIFICATE-----Generated at Wed Jan 21 14:44:14 2026 by rpki-client