This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.mft File: x6gkb3CuGOc25OU5gUgNWGFq8ug.mft (raw, json) Hash identifier: RN4E/7iqBj9GirW7547d3TphBYb5kQfOAkrvvl8cEMk= Subject key identifier: DB:1E:BF:31:0D:E4:2D:B2:E3:C2:69:ED:29:D8:C5:5E:18:2E:6D:44 Authority key identifier: C7:A8:24:6F:70:AE:18:E7:36:E4:E5:39:81:48:0D:58:61:6A:F2:E8 Certificate issuer: /CN=c7a8246f70ae18e736e4e53981480d58616af2e8 Certificate serial: 019BFC53198535D94921227FBC3D0653D56C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6gkb3CuGOc25OU5gUgNWGFq8ug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.mft Manifest number: 11A8 Signing time: Mon 26 Jan 2026 22:01:03 +0000 Manifest this update: Mon 26 Jan 2026 22:01:03 +0000 Manifest next update: Tue 27 Jan 2026 22:01:03 +0000 Files and hashes: 1: WNvdK2G6VGfovAlyzdy5qA0oBTc.roa (hash: T/wqo/8dAPv9d0Xqoe1ZG886rDX3diZQucP4pDiIbtI=) 2: x6gkb3CuGOc25OU5gUgNWGFq8ug.crl (hash: FOsNlnW6HbSC2L5QoxUXVcq8cjxEGMmLrv0kocVRdew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.mft rsync://rpki.ripe.net/repository/DEFAULT/x6gkb3CuGOc25OU5gUgNWGFq8ug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:53:19:85:35:d9:49:21:22:7f:bc:3d:06:53:d5:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7a8246f70ae18e736e4e53981480d58616af2e8 Validity Not Before: Jan 26 22:01:03 2026 GMT Not After : Jan 27 22:01:03 2026 GMT Subject: CN=db1ebf310de42db2e3c269ed29d8c55e182e6d44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:53:5f:60:af:ba:1f:98:79:1d:17:e4:06:13: f0:55:18:c2:4b:7e:fc:1e:13:73:0e:bc:c5:f0:96: 1e:d1:27:ba:eb:1c:0e:d7:68:3b:19:ad:05:55:60: 70:88:3f:92:b9:89:3b:ee:6a:ec:5b:46:7c:81:92: 6e:c8:43:95:79:e2:5d:aa:ec:13:59:2d:26:27:c3: 37:cd:b9:c3:c7:72:cd:a2:99:77:40:79:77:6f:4a: 69:c4:b6:9c:38:3e:54:5b:35:09:2b:7e:a1:b5:6a: f6:0e:41:90:94:48:b8:be:8b:62:fe:d1:d3:23:34: d8:0c:7a:ac:9d:d8:15:a0:89:f1:70:2e:9b:a7:37: 86:ec:b1:4f:2b:4e:9c:51:3f:8d:96:a8:e4:c2:5c: de:3e:62:6a:92:bd:6a:d9:42:f0:8f:35:04:6a:50: 8d:b6:7c:2a:a0:94:fd:65:b0:48:36:a9:b4:ac:a5: 35:06:12:fa:6f:c7:11:f3:af:24:3e:91:3d:8b:59: fd:90:68:0c:bc:32:fa:79:b8:b4:59:7e:2e:28:53: 19:f7:98:00:e2:de:d7:63:b0:bb:62:01:94:15:0e: 42:e9:1f:31:63:fc:b5:a5:20:c3:77:e1:43:df:d3: 63:ad:ed:41:41:e5:e3:f8:a8:0b:73:58:9e:c5:e1: 37:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:1E:BF:31:0D:E4:2D:B2:E3:C2:69:ED:29:D8:C5:5E:18:2E:6D:44 X509v3 Authority Key Identifier: keyid:C7:A8:24:6F:70:AE:18:E7:36:E4:E5:39:81:48:0D:58:61:6A:F2:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6gkb3CuGOc25OU5gUgNWGFq8ug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:85:66:1b:44:f0:4b:16:02:75:3d:44:0d:47:c1:03:f7:18: f3:3d:4f:40:95:57:76:f7:67:88:83:58:f1:e2:f8:e0:26:a5: e5:a0:02:4a:35:0a:e8:28:b9:f0:74:79:04:ba:41:48:79:22: 01:29:74:79:07:d5:e7:a9:39:2f:c6:0f:c1:b2:a7:34:97:2d: 8b:38:e1:3d:b8:39:ae:f1:c5:5e:c0:81:22:c4:7f:96:f0:dd: 87:92:9d:9e:b2:c1:2a:da:cd:69:3c:8e:a8:0a:21:a9:15:fe: 27:52:20:65:ac:c5:b6:4c:09:eb:01:cf:8a:28:ec:bd:c1:73: 45:22:ab:78:99:d6:7c:06:fa:38:ec:6e:6e:2a:ea:f8:f4:f7: 06:c0:d8:b8:e3:f7:31:3d:36:f7:4c:2e:aa:09:b1:34:94:a7: d7:c8:3d:7d:e9:b1:15:25:1c:6d:0f:d9:8f:d8:12:09:61:92: 82:14:9a:3d:d5:39:59:b2:f0:93:7b:c2:a0:23:8c:61:36:94: 27:af:db:f5:99:e0:34:17:5d:0c:cc:c7:db:ca:9b:90:90:bc: c4:eb:b0:b1:3f:b9:e3:a2:3a:3f:38:a1:b7:f9:96:ce:51:9e: 5e:66:61:23:e7:e7:f6:ff:ee:96:11:7d:d9:54:36:0d:9e:c0: e5:ed:d2:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8UxmFNdlJISJ/vD0GU9VsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3YTgyNDZmNzBhZTE4ZTczNmU0ZTUzOTgxNDgwZDU4NjE2 YWYyZTgwHhcNMjYwMTI2MjIwMTAzWhcNMjYwMTI3MjIwMTAzWjAzMTEwLwYDVQQD EyhkYjFlYmYzMTBkZTQyZGIyZTNjMjY5ZWQyOWQ4YzU1ZTE4MmU2ZDQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlNfYK+6H5h5HRfkBhPwVRjCS378 HhNzDrzF8JYe0Se66xwO12g7Ga0FVWBwiD+SuYk77mrsW0Z8gZJuyEOVeeJdquwT WS0mJ8M3zbnDx3LNopl3QHl3b0ppxLacOD5UWzUJK36htWr2DkGQlEi4voti/tHT IzTYDHqsndgVoInxcC6bpzeG7LFPK06cUT+NlqjkwlzePmJqkr1q2ULwjzUEalCN tnwqoJT9ZbBINqm0rKU1BhL6b8cR868kPpE9i1n9kGgMvDL6ebi0WX4uKFMZ95gA 4t7XY7C7YgGUFQ5C6R8xY/y1pSDDd+FD39Njre1BQeXj+KgLc1iexeE3RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNsevzEN5C2y48Jp7SnYxV4YLm1EMB8GA1UdIwQY MBaAFMeoJG9wrhjnNuTlOYFIDVhhavLoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDZna2IzQ3VHT2MyNU9VNWdVZ05XR0ZxOHVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9hZDU2M2UtNWNiZS00ZTE1LTgyNGQt ZTNkMjg2ZDIwZTUyLzEveDZna2IzQ3VHT2MyNU9VNWdVZ05XR0ZxOHVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9hZDU2M2UtNWNiZS00ZTE1LTgyNGQtZTNkMjg2ZDIwZTUy LzEveDZna2IzQ3VHT2MyNU9VNWdVZ05XR0ZxOHVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATYVmG0Tw SxYCdT1EDUfBA/cY8z1PQJVXdvdniINY8eL44Cal5aACSjUK6Ci58HR5BLpBSHki ASl0eQfV56k5L8YPwbKnNJctizjhPbg5rvHFXsCBIsR/lvDdh5KdnrLBKtrNaTyO qAohqRX+J1IgZazFtkwJ6wHPiijsvcFzRSKreJnWfAb6OOxubirq+PT3BsDYuOP3 MT0290wuqgmxNJSn18g9femxFSUcbQ/Zj9gSCWGSghSaPdU5WbLwk3vCoCOMYTaU J6/b9ZngNBddDMzH28qbkJC8xOuwsT+546I6Pziht/mWzlGeXmZhI+fn9v/ulhF9 2VQ2DZ7A5e3S3w== -----END CERTIFICATE-----Generated at Tue Jan 27 01:28:39 2026 by rpki-client