This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft File: 6aqxRGEAqPzgPfGddV4GMp7iRxM.mft (raw, json) Hash identifier: LEngsFNsV9ocHCU4LbpfmjxLXe4nZWyXFh5p1Uh4r9w= Subject key identifier: 35:3D:C7:31:27:54:CE:76:08:A1:86:D1:C5:44:B0:74:3E:D8:79:AF Authority key identifier: E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13 Certificate issuer: /CN=e9aab1446100a8fce03df19d755e06329ee24713 Certificate serial: 019BDE7F8FA5CCC264DB208B2C7118FAB9E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft Manifest number: 17F0 Signing time: Wed 21 Jan 2026 03:01:00 +0000 Manifest this update: Wed 21 Jan 2026 03:01:00 +0000 Manifest next update: Thu 22 Jan 2026 03:01:00 +0000 Files and hashes: 1: 6aqxRGEAqPzgPfGddV4GMp7iRxM.crl (hash: HZFNOpEuyQdyAY/RS0NuVlgnA9M0zCzkHiFFU72rjU8=) 2: Dz4qudxOOcrQ8QXmqIMD2XiSzUY.roa (hash: FrWcYiJYGSm1u+Ku7WujbY8jd61FJPRUuxdCXEW2jb8=) 3: JlHGBE70CjYUjMlPy-yN4dzG-cs.roa (hash: eJeCGZHCYQ5pmVVEGiFVOguyq7hsvoBtUeukZnmh3W4=) 4: _GwYJ0PKXJK6fqA4cXd9zGiQJsk.roa (hash: TYTF9XrM81uGdSP5QXPvN15cnh9G39fwkeUY9WQ9Rbg=) 5: dwRGeRiPxu8Ert93hewpcLQlQPs.roa (hash: EAiXOznjLfpEqp6yCwCN/ahYsHXDQcQqsmXEqqAl9Vo=) 6: nSCF5qcvbkhkVZeNhESQPgQzsYw.roa (hash: Y9RP3rduyUtto1z3zNhzoo4HTEI6paw2VNckcRzLK4g=) 7: wyPR3DQqTcPeXSMxj_8q1QvGp98.roa (hash: gpZ7dcu9+au0qJAS/mbf494bt1LZl0k6YCG8tQBUn4A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:de:7f:8f:a5:cc:c2:64:db:20:8b:2c:71:18:fa:b9:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9aab1446100a8fce03df19d755e06329ee24713 Validity Not Before: Jan 21 03:01:00 2026 GMT Not After : Jan 22 03:01:00 2026 GMT Subject: CN=353dc7312754ce7608a186d1c544b0743ed879af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:89:54:af:e1:1f:91:dd:cf:60:cb:86:42:19: 15:e9:bc:81:93:f8:34:cb:2f:07:e7:cf:f0:07:ce: 03:f8:1e:c6:be:0f:61:7a:7d:b3:db:dc:ea:ff:78: 57:de:f4:2e:55:c4:e1:7e:45:fd:67:8e:23:28:44: c9:ea:42:6b:ea:fb:b1:03:2e:19:94:ba:7a:4b:9e: 18:db:4c:1b:cb:e7:6a:86:de:13:ae:bc:40:6e:fd: 58:c5:a2:b9:0f:ae:96:5a:75:5e:a3:47:df:18:ef: c2:59:60:9b:0f:10:68:f0:a7:07:7e:84:e8:ec:f8: c3:c9:ea:73:52:6c:75:87:fc:58:15:7d:ef:7f:45: 50:54:15:65:5f:c8:2f:14:f7:98:7d:ed:f4:2f:99: 74:33:11:ce:e1:4a:f5:d1:29:21:66:02:66:51:f2: e3:6d:13:7e:eb:02:e6:54:51:35:d8:19:b1:05:6e: 26:ad:ad:08:54:99:e7:6e:33:1f:2b:f5:83:a0:c7: 41:95:b4:36:af:19:e1:33:e9:83:18:8c:df:78:1c: 13:cd:7a:cf:89:22:d2:32:0d:ab:65:8a:f0:c7:5f: a0:d1:5d:10:c8:8c:20:48:13:b9:ea:02:95:ca:22: 20:57:93:67:fd:9b:c8:7b:5f:1b:2d:de:49:8c:bd: 66:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:3D:C7:31:27:54:CE:76:08:A1:86:D1:C5:44:B0:74:3E:D8:79:AF X509v3 Authority Key Identifier: keyid:E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:30:3c:bd:c5:ff:c8:91:f8:d9:54:94:fa:3d:2f:d4:c3:59: d5:5a:6c:f6:d1:5a:af:c4:42:c7:fd:b7:9e:5e:0b:73:c2:05: 51:37:c1:29:42:57:e5:5d:42:3d:26:65:ab:30:9f:35:46:4e: 92:11:01:09:b4:d3:3b:bb:9a:7d:cf:cf:8e:e2:9e:0b:87:72: 12:5a:e6:46:70:05:07:92:88:45:8a:e5:55:ba:7b:65:23:8f: 43:e6:bc:ac:b4:eb:31:f5:32:21:cd:ff:c5:cf:58:43:bc:b0: cd:b8:8a:61:01:b8:5a:53:69:9d:3e:01:d6:eb:92:f7:f8:31: 1b:f6:47:ce:75:32:03:0a:7a:f9:ad:fc:ed:17:fa:fe:ce:2e: 28:73:16:48:8e:bf:c0:b5:d3:13:7e:81:89:60:be:ae:79:b8: 80:28:fc:e2:5a:b9:34:27:22:53:e3:4b:cb:2c:e6:81:b1:a6: 3a:45:01:00:f8:09:bc:4e:50:0b:3d:ae:a7:c3:74:df:e8:19: 87:74:a9:96:e3:99:c2:63:4a:57:0e:4c:74:32:09:88:03:9d: 7b:5c:cd:9c:cd:70:3e:a8:6f:ad:81:28:43:b3:77:f8:23:df: 9f:d4:96:b8:17:1e:41:b0:d1:6e:79:20:2b:18:de:3a:bb:57: 2e:1a:eb:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvef4+lzMJk2yCLLHEY+rnlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5YWFiMTQ0NjEwMGE4ZmNlMDNkZjE5ZDc1NWUwNjMyOWVl MjQ3MTMwHhcNMjYwMTIxMDMwMTAwWhcNMjYwMTIyMDMwMTAwWjAzMTEwLwYDVQQD EygzNTNkYzczMTI3NTRjZTc2MDhhMTg2ZDFjNTQ0YjA3NDNlZDg3OWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4lUr+Efkd3PYMuGQhkV6byBk/g0 yy8H58/wB84D+B7Gvg9hen2z29zq/3hX3vQuVcThfkX9Z44jKETJ6kJr6vuxAy4Z lLp6S54Y20wby+dqht4TrrxAbv1YxaK5D66WWnVeo0ffGO/CWWCbDxBo8KcHfoTo 7PjDyepzUmx1h/xYFX3vf0VQVBVlX8gvFPeYfe30L5l0MxHO4Ur10SkhZgJmUfLj bRN+6wLmVFE12BmxBW4mra0IVJnnbjMfK/WDoMdBlbQ2rxnhM+mDGIzfeBwTzXrP iSLSMg2rZYrwx1+g0V0QyIwgSBO56gKVyiIgV5Nn/ZvIe18bLd5JjL1mWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDU9xzEnVM52CKGG0cVEsHQ+2HmvMB8GA1UdIwQY MBaAFOmqsURhAKj84D3xnXVeBjKe4kcTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmFxeFJHRUFxUHpnUGZHZGRWNEdNcDdpUnhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS83MWUwOWMtMjhmMy00ODI1LTgwNmYt YTBkYzM1NGY0Y2EzLzEvNmFxeFJHRUFxUHpnUGZHZGRWNEdNcDdpUnhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS83MWUwOWMtMjhmMy00ODI1LTgwNmYtYTBkYzM1NGY0Y2Ez LzEvNmFxeFJHRUFxUHpnUGZHZGRWNEdNcDdpUnhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnzA8vcX/ yJH42VSU+j0v1MNZ1Vps9tFar8RCx/23nl4Lc8IFUTfBKUJX5V1CPSZlqzCfNUZO khEBCbTTO7uafc/PjuKeC4dyElrmRnAFB5KIRYrlVbp7ZSOPQ+a8rLTrMfUyIc3/ xc9YQ7ywzbiKYQG4WlNpnT4B1uuS9/gxG/ZHznUyAwp6+a387Rf6/s4uKHMWSI6/ wLXTE36BiWC+rnm4gCj84lq5NCciU+NLyyzmgbGmOkUBAPgJvE5QCz2up8N03+gZ h3SpluOZwmNKVw5MdDIJiAOde1zNnM1wPqhvrYEoQ7N3+CPfn9SWuBceQbDRbnkg KxjeOrtXLhrrvQ== -----END CERTIFICATE-----Generated at Wed Jan 21 07:52:25 2026 by rpki-client