This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft File: b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft (raw, json) Hash identifier: JrfDeeQS1OEIpNZ2jJePiXR0JUuIYgpshD0pG3EmliU= Subject key identifier: 37:0B:E4:86:F4:29:66:8A:67:A2:9B:C4:88:18:56:10:CA:6A:FB:55 Authority key identifier: 6F:A6:4A:64:7B:D2:A5:55:7F:70:F6:76:AD:CC:76:90:4F:B8:72:AB Certificate issuer: /CN=6fa64a647bd2a5557f70f676adcc76904fb872ab Certificate serial: 019BA18F3AFB3FF4762D0E1C5F7C31287041 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft Manifest number: 0439 Signing time: Fri 09 Jan 2026 07:01:17 +0000 Manifest this update: Fri 09 Jan 2026 07:01:17 +0000 Manifest next update: Sat 10 Jan 2026 07:01:17 +0000 Files and hashes: 1: 1-l1XYb54g6dJ2IJlw79HqDOL1T8.roa (hash: 4KNw2FZJhBfZz/48eB8kUaq/nOVXJqe8YKN+AfMvBMc=) 2: 6Rv-YhkvK1GX0Te8-Dludeyqizk.roa (hash: UKGgcZcFKJuJZXLZiTLAH1hiVg42URiO+gpL2ayx09I=) 3: DFkzO0MNhMNW_pQxEI5P0thppG4.roa (hash: i3uk5uTS1uq8XOzh/UGNedtV1LEwATUEpA6CSHEyV4Y=) 4: M63i7t4WYWQQDzdvsxsD0FnhDM0.roa (hash: /hhr1Y2Fr2l9zEhKAXJKXJb3IP8nSXMJwlawHmCx9tk=) 5: NKFYjT8NOU2nNm75iC1mMdUvWRg.roa (hash: T+3lCMY+jPZeKCOFr2ByuWF+cVwT3gGdpsce+k/SCB4=) 6: TNsgJfRo8T4wYAftDqW5Y2ISiSw.roa (hash: 3A8wQr5AdN0RkrLyZ9wt0wnQNwX319OG4uYDw/IVg1U=) 7: b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.crl (hash: PagN7Tq+r9wbzmiBXWcaH/1TgJ2Jrk42EnCdcyuVUbc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.crl rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 07:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a1:8f:3a:fb:3f:f4:76:2d:0e:1c:5f:7c:31:28:70:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fa64a647bd2a5557f70f676adcc76904fb872ab Validity Not Before: Jan 9 07:01:17 2026 GMT Not After : Jan 10 07:01:17 2026 GMT Subject: CN=370be486f429668a67a29bc488185610ca6afb55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2c:6c:c5:93:65:65:a5:e1:cc:f7:da:d6:f5: 17:23:f0:65:2f:b1:bf:b3:69:80:cd:ee:5f:31:5a: 41:b1:f0:e7:d1:82:8c:ef:fd:8e:32:38:09:07:14: af:f2:50:ef:89:16:1d:b9:84:e9:4b:9f:a3:21:c4: 45:ce:08:41:72:99:d3:5f:20:9e:47:45:82:6f:99: 01:be:d9:d9:50:6d:02:dc:56:c5:c2:5f:ee:77:6f: 35:df:3e:7e:9b:18:71:28:e0:7b:ee:61:d2:b5:4b: ff:55:1f:3b:d3:f5:05:17:4e:8e:6a:a7:83:41:93: 23:a5:57:63:f9:0a:47:6c:3c:79:96:95:d8:8b:47: ac:4d:cb:6d:4c:fe:e3:68:6e:a6:27:58:5f:4c:26: a2:b3:1b:0e:ef:b1:d8:e9:13:c2:18:1c:69:53:15: de:f9:ac:d4:55:b0:fd:21:bf:2d:6d:f4:42:ea:8a: 1b:51:48:0c:21:5a:c0:e4:c0:1a:aa:3d:96:c5:55: f1:95:c6:8b:ee:00:65:0e:d1:29:44:c3:7d:48:0b: 1e:42:4d:56:ce:cb:d8:11:b2:f3:d6:0e:04:14:93: 2c:63:89:d3:ee:66:c8:77:75:6f:23:9d:45:66:03: 61:9c:24:06:77:72:e6:7a:09:1c:2f:6e:59:b4:39: 1a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:0B:E4:86:F4:29:66:8A:67:A2:9B:C4:88:18:56:10:CA:6A:FB:55 X509v3 Authority Key Identifier: keyid:6F:A6:4A:64:7B:D2:A5:55:7F:70:F6:76:AD:CC:76:90:4F:B8:72:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:02:94:21:3b:08:68:47:9e:90:25:3c:b9:65:70:97:60:2f: 3f:79:af:98:be:54:9c:40:64:86:07:31:74:af:ea:1d:d5:f4: 38:1b:6c:04:fe:7c:16:6d:34:76:a7:a1:8d:1d:c9:7a:78:17: 85:6a:e4:54:25:7b:cc:e6:36:86:cf:20:c3:56:5b:b9:58:67: 7d:5d:80:ef:31:50:ff:05:47:c5:20:ee:30:5e:73:c7:ae:4e: cc:03:9e:22:c3:2d:36:1b:df:be:21:e9:36:6f:66:ca:19:d7: b5:96:a0:bd:38:d4:ac:d6:ec:90:f2:bb:c4:63:41:5e:15:9f: c6:de:9d:4c:a1:b6:b5:97:f7:03:fa:e0:8e:13:0a:3f:32:08: 38:3d:f9:f8:99:49:25:ba:6b:23:47:85:8c:2e:97:b4:98:67: 21:73:52:2d:f0:35:fc:d6:68:4c:e5:cd:11:93:92:76:a6:4d: 9b:b8:26:f8:18:d3:cd:2f:9f:07:1d:42:03:87:b6:56:0b:8e: 45:88:49:95:f3:6e:f2:33:25:58:81:d5:01:72:aa:5d:71:8a: e6:3b:66:67:f3:2b:b7:cf:db:32:9d:8f:97:05:fb:e7:01:d7: 93:ce:e0:e1:43:e2:d7:70:5c:c1:85:c9:0e:f7:95:08:3d:57: 88:72:ca:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuhjzr7P/R2LQ4cX3wxKHBBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYTY0YTY0N2JkMmE1NTU3ZjcwZjY3NmFkY2M3NjkwNGZi ODcyYWIwHhcNMjYwMTA5MDcwMTE3WhcNMjYwMTEwMDcwMTE3WjAzMTEwLwYDVQQD EygzNzBiZTQ4NmY0Mjk2NjhhNjdhMjliYzQ4ODE4NTYxMGNhNmFmYjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSxsxZNlZaXhzPfa1vUXI/BlL7G/ s2mAze5fMVpBsfDn0YKM7/2OMjgJBxSv8lDviRYduYTpS5+jIcRFzghBcpnTXyCe R0WCb5kBvtnZUG0C3FbFwl/ud2813z5+mxhxKOB77mHStUv/VR870/UFF06OaqeD QZMjpVdj+QpHbDx5lpXYi0esTcttTP7jaG6mJ1hfTCaisxsO77HY6RPCGBxpUxXe +azUVbD9Ib8tbfRC6oobUUgMIVrA5MAaqj2WxVXxlcaL7gBlDtEpRMN9SAseQk1W zsvYEbLz1g4EFJMsY4nT7mbId3VvI51FZgNhnCQGd3LmegkcL25ZtDkaVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDcL5Ib0KWaKZ6KbxIgYVhDKavtVMB8GA1UdIwQY MBaAFG+mSmR70qVVf3D2dq3MdpBPuHKrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjZaS1pIdlNwVlZfY1BaMnJjeDJrRS00Y3FzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yNThkYWUtNTRmYS00YTMzLWExOWQt ZTkxYjNhYmQxZmU4LzEvYjZaS1pIdlNwVlZfY1BaMnJjeDJrRS00Y3FzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yNThkYWUtNTRmYS00YTMzLWExOWQtZTkxYjNhYmQxZmU4 LzEvYjZaS1pIdlNwVlZfY1BaMnJjeDJrRS00Y3FzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXwKUITsI aEeekCU8uWVwl2AvP3mvmL5UnEBkhgcxdK/qHdX0OBtsBP58Fm00dqehjR3JengX hWrkVCV7zOY2hs8gw1ZbuVhnfV2A7zFQ/wVHxSDuMF5zx65OzAOeIsMtNhvfviHp Nm9myhnXtZagvTjUrNbskPK7xGNBXhWfxt6dTKG2tZf3A/rgjhMKPzIIOD35+JlJ JbprI0eFjC6XtJhnIXNSLfA1/NZoTOXNEZOSdqZNm7gm+BjTzS+fBx1CA4e2VguO RYhJlfNu8jMlWIHVAXKqXXGK5jtmZ/Mrt8/bMp2PlwX75wHXk87g4UPi13BcwYXJ DveVCD1XiHLKhQ== -----END CERTIFICATE-----Generated at Fri Jan 9 16:02:00 2026 by rpki-client