This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft File: 6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft (raw, json) Hash identifier: WU5LHHT4wz9pOIJgqGeoC49nNG0vTB+NwyGXKP67miA= Subject key identifier: 13:FD:E6:90:71:A4:CC:1A:11:6B:D7:23:14:E8:14:A9:72:0D:55:40 Authority key identifier: E8:F4:09:02:A0:03:D8:FE:6F:7C:77:42:EB:47:D7:0B:50:AD:E0:36 Certificate issuer: /CN=e8f40902a003d8fe6f7c7742eb47d70b50ade036 Certificate serial: 019BD80FE626B024756109E5671B181E4C58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6PQJAqAD2P5vfHdC60fXC1Ct4DY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft Manifest number: 17DB Signing time: Mon 19 Jan 2026 21:01:19 +0000 Manifest this update: Mon 19 Jan 2026 21:01:19 +0000 Manifest next update: Tue 20 Jan 2026 21:01:19 +0000 Files and hashes: 1: 6PQJAqAD2P5vfHdC60fXC1Ct4DY.crl (hash: e2G2sHW54iP2saMwMY4a1jxNTsYJSFVwEx4/kk76BOE=) 2: TC9K931IzwUdFmAUvzTbFXIZADA.roa (hash: UXVxdmIaXGeZhlCpGUNMtQmCisj0HfLJfUz0lrC+bHM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.crl rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft rsync://rpki.ripe.net/repository/DEFAULT/6PQJAqAD2P5vfHdC60fXC1Ct4DY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d8:0f:e6:26:b0:24:75:61:09:e5:67:1b:18:1e:4c:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8f40902a003d8fe6f7c7742eb47d70b50ade036 Validity Not Before: Jan 19 21:01:19 2026 GMT Not After : Jan 20 21:01:19 2026 GMT Subject: CN=13fde69071a4cc1a116bd72314e814a9720d5540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f1:ad:f4:55:ad:00:27:99:68:69:fb:5d:bd: ab:bc:83:d1:e7:e5:af:42:00:c4:a6:83:d2:89:a9: d5:32:70:56:a0:95:79:95:12:be:67:1f:c0:19:e3: f0:d4:05:3f:43:4e:d7:e4:78:b2:7e:70:84:9e:50: ec:7f:e4:9f:01:b1:ed:df:75:73:5f:cb:69:99:0e: 68:d9:73:9b:b4:23:fa:26:43:f5:8b:82:69:eb:fe: 93:a0:12:78:78:6f:72:67:18:44:73:da:3b:94:d7: 3c:75:2a:91:ce:72:39:a7:31:ba:a7:fb:d3:1f:5b: cb:2d:3c:e7:de:0f:d7:d7:61:9e:7a:5b:21:68:6f: 4d:2f:fa:89:27:b0:22:35:86:bf:9f:fe:f1:65:2e: ab:f2:26:4e:97:05:5e:76:02:0d:58:37:e5:d6:f1: 3a:ff:c7:3d:a3:26:d6:3a:47:d1:4e:79:ae:e6:e6: 80:33:79:19:a0:d6:88:d7:c9:b0:76:91:b8:78:d5: 00:c9:b1:5b:19:99:f0:86:a5:f1:70:8c:e4:16:80: 4b:f3:69:6b:60:86:0c:4d:40:84:83:13:7d:0d:16: fb:b8:bc:85:0b:06:88:0a:1f:43:7f:af:d8:79:49: e0:51:19:f5:8a:e9:4f:08:40:c5:7c:19:4f:c2:3c: 1a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:FD:E6:90:71:A4:CC:1A:11:6B:D7:23:14:E8:14:A9:72:0D:55:40 X509v3 Authority Key Identifier: keyid:E8:F4:09:02:A0:03:D8:FE:6F:7C:77:42:EB:47:D7:0B:50:AD:E0:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6PQJAqAD2P5vfHdC60fXC1Ct4DY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:81:e3:d1:92:f8:9c:f8:0d:49:09:91:da:c5:1f:89:84:cf: 4c:d8:27:f8:1f:d5:ce:13:66:71:af:da:18:8c:79:1a:ff:d4: 05:fc:0d:14:94:bd:f5:20:12:c4:1f:d7:42:96:56:09:9a:ff: 33:11:b9:ff:89:69:7c:1b:0d:de:53:85:c6:ec:aa:21:84:1b: e5:cb:a7:3b:81:64:f5:55:0a:d9:26:6f:a2:39:00:60:95:dd: 19:40:32:bc:20:3f:69:b8:fe:c7:d3:a5:3b:d4:29:a7:47:d8: 1b:c6:76:58:af:cc:6f:71:83:5c:a7:a5:37:26:63:c4:b3:18: a6:24:3c:6b:09:2c:e4:36:4d:bf:96:80:02:0d:47:47:d1:c1: 81:c1:b4:4d:47:dc:4e:57:a1:14:2d:0e:e2:a6:94:d6:2e:e8: 71:ae:a8:57:17:33:10:fc:58:14:c2:f0:ef:1e:ec:5e:24:8e: 3c:9b:b4:43:66:a2:33:a0:a1:5b:d5:73:c3:c5:a3:83:74:aa: 5c:9b:b5:47:49:80:6b:2a:72:bf:aa:a0:f8:56:2c:d9:39:75: da:b5:91:bf:17:30:dd:0b:b7:f0:7e:a7:3e:22:a6:d6:ca:39: 38:56:e9:14:65:91:13:0b:1c:9b:b5:52:e3:c0:7c:81:b6:eb: 74:d4:d7:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvYD+YmsCR1YQnlZxsYHkxYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4ZjQwOTAyYTAwM2Q4ZmU2ZjdjNzc0MmViNDdkNzBiNTBh ZGUwMzYwHhcNMjYwMTE5MjEwMTE5WhcNMjYwMTIwMjEwMTE5WjAzMTEwLwYDVQQD EygxM2ZkZTY5MDcxYTRjYzFhMTE2YmQ3MjMxNGU4MTRhOTcyMGQ1NTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvGt9FWtACeZaGn7Xb2rvIPR5+Wv QgDEpoPSianVMnBWoJV5lRK+Zx/AGePw1AU/Q07X5HiyfnCEnlDsf+SfAbHt33Vz X8tpmQ5o2XObtCP6JkP1i4Jp6/6ToBJ4eG9yZxhEc9o7lNc8dSqRznI5pzG6p/vT H1vLLTzn3g/X12GeelshaG9NL/qJJ7AiNYa/n/7xZS6r8iZOlwVedgINWDfl1vE6 /8c9oybWOkfRTnmu5uaAM3kZoNaI18mwdpG4eNUAybFbGZnwhqXxcIzkFoBL82lr YIYMTUCEgxN9DRb7uLyFCwaICh9Df6/YeUngURn1iulPCEDFfBlPwjwaIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBP95pBxpMwaEWvXIxToFKlyDVVAMB8GA1UdIwQY MBaAFOj0CQKgA9j+b3x3QutH1wtQreA2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlBRSkFxQUQyUDV2ZkhkQzYwZlhDMUN0NERZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny85NDI1YzYtYzQ5NS00ODc4LWE4ZjMt N2E3OGM4YzRlMDUxLzEvNlBRSkFxQUQyUDV2ZkhkQzYwZlhDMUN0NERZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny85NDI1YzYtYzQ5NS00ODc4LWE4ZjMtN2E3OGM4YzRlMDUx LzEvNlBRSkFxQUQyUDV2ZkhkQzYwZlhDMUN0NERZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADoHj0ZL4 nPgNSQmR2sUfiYTPTNgn+B/VzhNmca/aGIx5Gv/UBfwNFJS99SASxB/XQpZWCZr/ MxG5/4lpfBsN3lOFxuyqIYQb5cunO4Fk9VUK2SZvojkAYJXdGUAyvCA/abj+x9Ol O9Qpp0fYG8Z2WK/Mb3GDXKelNyZjxLMYpiQ8awks5DZNv5aAAg1HR9HBgcG0TUfc TlehFC0O4qaU1i7oca6oVxczEPxYFMLw7x7sXiSOPJu0Q2aiM6ChW9Vzw8Wjg3Sq XJu1R0mAaypyv6qg+FYs2Tl12rWRvxcw3Qu38H6nPiKm1so5OFbpFGWREwscm7VS 48B8gbbrdNTXyg== -----END CERTIFICATE-----Generated at Tue Jan 20 01:00:59 2026 by rpki-client