This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft File: R6guVXeaHqTvmWf4IdXMBbe9mek.mft (raw, json) Hash identifier: t9ak7HY3/bDrF87dR9GooHsQAuMHdFqafXZ76BOQ9Lw= Subject key identifier: 1B:17:7D:80:9A:29:88:B1:3E:92:2E:F3:69:23:B8:E8:5F:2E:12:F8 Authority key identifier: 47:A8:2E:55:77:9A:1E:A4:EF:99:67:F8:21:D5:CC:05:B7:BD:99:E9 Certificate issuer: /CN=47a82e55779a1ea4ef9967f821d5cc05b7bd99e9 Certificate serial: 019BFC8AB77D3581E2E783BAB3F692DAF0DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft Manifest number: 17EB Signing time: Mon 26 Jan 2026 23:01:47 +0000 Manifest this update: Mon 26 Jan 2026 23:01:47 +0000 Manifest next update: Tue 27 Jan 2026 23:01:47 +0000 Files and hashes: 1: Nq9p6JOG9d1MPZ5qd-sAijdFSJ0.roa (hash: yO2lwMxsUQ5IOFH/LC6sgXWOkjPeUa5h0hHMk+SpB7A=) 2: R6guVXeaHqTvmWf4IdXMBbe9mek.crl (hash: k0oVbysh5HtYakIf3famcpeI1PFz3oyeyi5bb/nFbyI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.crl rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 23:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:8a:b7:7d:35:81:e2:e7:83:ba:b3:f6:92:da:f0:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47a82e55779a1ea4ef9967f821d5cc05b7bd99e9 Validity Not Before: Jan 26 23:01:47 2026 GMT Not After : Jan 27 23:01:47 2026 GMT Subject: CN=1b177d809a2988b13e922ef36923b8e85f2e12f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fc:af:6b:55:41:ee:77:c6:a8:72:0d:51:ee: 41:14:50:72:3f:75:da:ce:db:c3:1c:9d:f0:f9:a3: d1:b6:c6:af:23:f1:5a:5e:ea:dd:0d:89:8b:31:35: b2:5f:ec:f9:2a:dc:8b:df:0f:f3:82:03:f9:64:8c: 4a:91:ad:95:37:97:30:6d:85:4c:53:ed:20:c2:76: 79:e1:d7:8a:28:11:9e:76:61:1f:1a:40:06:07:eb: be:23:23:db:74:51:5c:0c:c7:e6:04:88:d6:10:54: 50:44:ee:8e:d4:07:f3:d2:6d:3b:d3:f2:a2:fd:ef: 21:8a:f3:d7:07:53:38:15:b9:55:b7:d1:be:78:17: 17:fe:43:46:95:78:cc:f7:03:9b:4e:a3:9e:84:9d: 86:82:01:54:c7:8d:45:94:1c:7e:8a:2e:ce:f1:22: a5:e2:eb:8e:b1:a7:62:68:ff:df:b1:7a:3c:2f:f1: 97:61:ad:f4:5b:bc:f8:a9:dc:59:2f:d4:4a:2f:4e: 18:da:83:6c:7d:1a:c9:75:8a:c6:75:dd:4e:07:58: f4:fe:4c:57:30:1b:12:bf:2b:a8:03:13:e6:2e:80: ee:b9:6f:52:dd:73:40:aa:db:de:bb:1e:72:83:74: 23:f2:9f:0c:9d:49:9e:a8:af:cd:98:86:6a:1e:83: a3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:17:7D:80:9A:29:88:B1:3E:92:2E:F3:69:23:B8:E8:5F:2E:12:F8 X509v3 Authority Key Identifier: keyid:47:A8:2E:55:77:9A:1E:A4:EF:99:67:F8:21:D5:CC:05:B7:BD:99:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:91:b9:9a:5e:8c:8c:3c:e4:90:9b:f0:78:5c:5c:f7:af:43: c0:c6:02:3f:c5:a5:34:ca:7e:e1:42:3d:7f:2d:88:a1:0e:24: 7c:dc:44:10:63:ba:39:02:2d:72:1c:67:50:e7:53:4d:97:02: 36:40:6f:a8:11:10:0d:11:59:96:e4:30:75:fe:fe:c5:8a:08: 28:3a:8a:13:f7:ea:dc:46:39:f4:7f:43:46:05:46:b1:13:e6: 60:8d:e5:06:b0:65:b7:a2:b2:10:ae:f1:38:36:70:91:56:d1: be:77:7c:d3:80:fb:3c:10:26:79:ef:76:6d:c3:0f:b5:6e:24: d6:74:4d:24:e0:ea:54:1a:41:cf:c5:06:b2:19:33:7c:91:b6: 89:c2:04:da:da:b3:12:f5:d9:3e:f5:f1:30:aa:98:93:9f:fe: c7:7d:09:3a:72:d2:94:42:04:49:9b:7b:cd:f3:cb:3e:56:0b: 24:85:37:b6:18:9d:5b:ee:5f:d7:24:c2:de:28:87:db:45:d6: 5b:31:1a:f2:c2:b4:07:1e:db:95:c4:24:46:cc:e1:c1:59:7b: b0:e8:39:94:bf:76:06:98:3f:4f:5c:6b:4c:35:f4:d0:62:b3: 27:e0:53:d4:e5:3a:b1:47:fb:f9:30:e5:a1:42:31:72:e3:cf: e7:4b:3f:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8ird9NYHi54O6s/aS2vDbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3YTgyZTU1Nzc5YTFlYTRlZjk5NjdmODIxZDVjYzA1Yjdi ZDk5ZTkwHhcNMjYwMTI2MjMwMTQ3WhcNMjYwMTI3MjMwMTQ3WjAzMTEwLwYDVQQD EygxYjE3N2Q4MDlhMjk4OGIxM2U5MjJlZjM2OTIzYjhlODVmMmUxMmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvyva1VB7nfGqHINUe5BFFByP3Xa ztvDHJ3w+aPRtsavI/FaXurdDYmLMTWyX+z5KtyL3w/zggP5ZIxKka2VN5cwbYVM U+0gwnZ54deKKBGedmEfGkAGB+u+IyPbdFFcDMfmBIjWEFRQRO6O1Afz0m070/Ki /e8hivPXB1M4FblVt9G+eBcX/kNGlXjM9wObTqOehJ2GggFUx41FlBx+ii7O8SKl 4uuOsadiaP/fsXo8L/GXYa30W7z4qdxZL9RKL04Y2oNsfRrJdYrGdd1OB1j0/kxX MBsSvyuoAxPmLoDuuW9S3XNAqtveux5yg3Qj8p8MnUmeqK/NmIZqHoOjGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBsXfYCaKYixPpIu82kjuOhfLhL4MB8GA1UdIwQY MBaAFEeoLlV3mh6k75ln+CHVzAW3vZnpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjZndVZYZWFIcVR2bVdmNElkWE1CYmU5bWVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS81OWFmYWItZTBhOC00MmQwLTg3M2It NjAwNWMwMTExZjFlLzEvUjZndVZYZWFIcVR2bVdmNElkWE1CYmU5bWVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS81OWFmYWItZTBhOC00MmQwLTg3M2ItNjAwNWMwMTExZjFl LzEvUjZndVZYZWFIcVR2bVdmNElkWE1CYmU5bWVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXJG5ml6M jDzkkJvweFxc969DwMYCP8WlNMp+4UI9fy2IoQ4kfNxEEGO6OQItchxnUOdTTZcC NkBvqBEQDRFZluQwdf7+xYoIKDqKE/fq3EY59H9DRgVGsRPmYI3lBrBlt6KyEK7x ODZwkVbRvnd804D7PBAmee92bcMPtW4k1nRNJODqVBpBz8UGshkzfJG2icIE2tqz EvXZPvXxMKqYk5/+x30JOnLSlEIESZt7zfPLPlYLJIU3thidW+5f1yTC3iiH20XW WzEa8sK0Bx7blcQkRszhwVl7sOg5lL92Bpg/T1xrTDX00GKzJ+BT1OU6sUf7+TDl oUIxcuPP50s/bQ== -----END CERTIFICATE-----Generated at Tue Jan 27 08:29:13 2026 by rpki-client