This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft File: 6oss0R-FmHiYVHRQySF4Efzeoos.mft (raw, json) Hash identifier: DNEPXKsy94x1ijUDz01Ak5dtpiEXkL3UwAD6XAFeuUA= Subject key identifier: 3A:2C:5A:53:21:01:D7:4B:1C:10:88:3A:D3:C7:A8:EC:05:D3:0E:BB Authority key identifier: EA:8B:2C:D1:1F:85:98:78:98:54:74:50:C9:21:78:11:FC:DE:A2:8B Certificate issuer: /CN=ea8b2cd11f85987898547450c9217811fcdea28b Certificate serial: 019C1F4D052AFFC3343FCE4E4B918A0FB560 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6oss0R-FmHiYVHRQySF4Efzeoos.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft Manifest number: 11A3 Signing time: Mon 02 Feb 2026 17:01:07 +0000 Manifest this update: Mon 02 Feb 2026 17:01:07 +0000 Manifest next update: Tue 03 Feb 2026 17:01:07 +0000 Files and hashes: 1: 6oss0R-FmHiYVHRQySF4Efzeoos.crl (hash: ZNVTnLE7dIj6GxwH5QCKZohUDr+YbkvpLtzRq76RNkQ=) 2: upaT00PjhI5nNd4ZXYb_aGz7FKQ.roa (hash: 2Rk/P9oSpdtf8edjp9QJY+dBNX8kPTP7ILwi67bXY+8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft rsync://rpki.ripe.net/repository/DEFAULT/6oss0R-FmHiYVHRQySF4Efzeoos.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 15:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1f:4d:05:2a:ff:c3:34:3f:ce:4e:4b:91:8a:0f:b5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea8b2cd11f85987898547450c9217811fcdea28b Validity Not Before: Feb 2 17:01:07 2026 GMT Not After : Feb 3 17:01:07 2026 GMT Subject: CN=3a2c5a532101d74b1c10883ad3c7a8ec05d30ebb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a3:17:c8:ae:11:02:5b:42:39:6f:1e:c5:9a: f5:d3:a2:f2:37:0c:dc:91:50:30:c8:cb:52:4d:c7: 43:44:2d:50:a6:52:96:31:9b:d2:c1:4d:d8:d7:a8: 1a:05:c5:11:42:6f:d5:d7:cc:ad:a8:e9:46:41:22: 55:b8:76:ec:17:4b:df:8a:ed:c9:7a:68:9d:85:76: 12:76:33:ed:c5:f1:83:b9:48:82:38:c5:1d:24:fc: c8:f2:73:fe:45:83:d4:0c:b9:52:a0:42:17:b4:2f: aa:7d:b2:ab:df:67:5c:bf:50:9a:e6:99:36:85:db: aa:3c:8f:6e:bd:c1:d5:6a:27:b6:3a:a3:1e:3e:71: 83:f5:f0:e4:39:1c:a0:0c:18:78:dc:9a:bf:8f:2a: 08:97:2a:23:57:7e:37:16:00:36:ce:4f:37:80:a0: 8a:a1:a8:6f:18:76:14:ec:9e:c0:a3:02:62:1b:05: 9e:6b:e6:78:7b:6a:d3:ea:ab:76:39:f1:9a:1b:5f: a3:b2:91:59:b4:db:a4:48:41:ce:5b:4d:53:fb:28: 42:51:f7:81:36:b7:03:2f:11:58:ea:eb:7c:4b:be: 59:91:a6:f1:e3:d8:f5:5b:1a:ea:b7:ae:35:48:6d: 1a:1e:fc:ea:3a:2c:84:63:58:dc:07:2b:b3:44:b3: fc:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:2C:5A:53:21:01:D7:4B:1C:10:88:3A:D3:C7:A8:EC:05:D3:0E:BB X509v3 Authority Key Identifier: keyid:EA:8B:2C:D1:1F:85:98:78:98:54:74:50:C9:21:78:11:FC:DE:A2:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oss0R-FmHiYVHRQySF4Efzeoos.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:f6:a9:e7:45:7d:86:c1:49:41:95:f2:e7:2a:ae:b9:d5:c4: 5e:ca:c6:f2:4e:c6:93:92:6b:02:c9:78:20:72:c5:48:4c:35: 80:38:f6:9e:b3:d8:12:97:44:3a:ee:9e:e3:d5:42:d6:92:51: 4f:87:b5:35:06:d3:68:ab:aa:c5:d2:07:1d:48:fc:ba:ba:34: ce:d7:39:c4:8b:db:b8:bb:c5:58:0f:6b:47:0f:81:90:7d:3f: 83:83:b4:d0:30:e3:e6:6c:9d:ab:66:07:60:2a:46:84:b1:63: 81:50:a3:30:45:44:6c:ae:63:48:bf:09:82:60:60:03:52:21: 6c:c2:32:96:31:83:5f:af:17:a3:4a:ff:67:cf:2e:86:95:a5: a9:19:07:31:f0:db:55:e9:e3:2c:86:b6:ea:43:6e:33:c2:ae: e9:39:a5:a6:a3:ee:a4:f0:bd:de:99:62:9f:b7:2f:4a:3f:41: 74:12:07:55:44:07:c0:9c:f5:0d:cd:bb:29:8c:47:0f:a2:6e: ae:43:79:9f:15:b0:8a:38:04:63:31:79:c8:5c:a1:0e:e4:5d: 84:d3:47:c8:db:aa:36:c8:f2:b5:b0:20:75:45:e2:33:98:1e: 24:04:68:56:f6:10:31:68:2e:15:cc:8d:78:38:b8:41:f5:55: d9:b7:cc:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwfTQUq/8M0P85OS5GKD7VgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhOGIyY2QxMWY4NTk4Nzg5ODU0NzQ1MGM5MjE3ODExZmNk ZWEyOGIwHhcNMjYwMjAyMTcwMTA3WhcNMjYwMjAzMTcwMTA3WjAzMTEwLwYDVQQD EygzYTJjNWE1MzIxMDFkNzRiMWMxMDg4M2FkM2M3YThlYzA1ZDMwZWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaMXyK4RAltCOW8exZr106LyNwzc kVAwyMtSTcdDRC1QplKWMZvSwU3Y16gaBcURQm/V18ytqOlGQSJVuHbsF0vfiu3J emidhXYSdjPtxfGDuUiCOMUdJPzI8nP+RYPUDLlSoEIXtC+qfbKr32dcv1Ca5pk2 hduqPI9uvcHVaie2OqMePnGD9fDkORygDBh43Jq/jyoIlyojV343FgA2zk83gKCK oahvGHYU7J7AowJiGwWea+Z4e2rT6qt2OfGaG1+jspFZtNukSEHOW01T+yhCUfeB NrcDLxFY6ut8S75Zkabx49j1Wxrqt641SG0aHvzqOiyEY1jcByuzRLP8nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDosWlMhAddLHBCIOtPHqOwF0w67MB8GA1UdIwQY MBaAFOqLLNEfhZh4mFR0UMkheBH83qKLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNm9zczBSLUZtSGlZVkhSUXlTRjRFZnplb29zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8xZmY3ZWEtYmMxMy00YjU0LTg5OGQt MWQxY2QyMTUyNzVkLzEvNm9zczBSLUZtSGlZVkhSUXlTRjRFZnplb29zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi8xZmY3ZWEtYmMxMy00YjU0LTg5OGQtMWQxY2QyMTUyNzVk LzEvNm9zczBSLUZtSGlZVkhSUXlTRjRFZnplb29zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArPap50V9 hsFJQZXy5yquudXEXsrG8k7Gk5JrAsl4IHLFSEw1gDj2nrPYEpdEOu6e49VC1pJR T4e1NQbTaKuqxdIHHUj8uro0ztc5xIvbuLvFWA9rRw+BkH0/g4O00DDj5mydq2YH YCpGhLFjgVCjMEVEbK5jSL8JgmBgA1IhbMIyljGDX68Xo0r/Z88uhpWlqRkHMfDb VenjLIa26kNuM8Ku6TmlpqPupPC93plin7cvSj9BdBIHVUQHwJz1Dc27KYxHD6Ju rkN5nxWwijgEYzF5yFyhDuRdhNNHyNuqNsjytbAgdUXiM5geJARoVvYQMWguFcyN eDi4QfVV2bfMbQ== -----END CERTIFICATE-----Generated at Tue Feb 3 00:20:08 2026 by rpki-client