This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.mft File: apN9la67vmK5DyTepNZjFwpmWew.mft (raw, json) Hash identifier: fegvi9B7dfGmZjxbWqYDE4vkONtzuy0/OD+4wlnyZPg= Subject key identifier: C9:ED:63:C7:97:AB:EC:FB:64:06:19:E6:D9:6E:18:98:CC:85:29:59 Authority key identifier: 6A:93:7D:95:AE:BB:BE:62:B9:0F:24:DE:A4:D6:63:17:0A:66:59:EC Certificate issuer: /CN=6a937d95aebbbe62b90f24dea4d663170a6659ec Certificate serial: 019BFDD3DAA3CD14C0CCE728F0A7E2F63636 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apN9la67vmK5DyTepNZjFwpmWew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.mft Manifest number: 0EBB Signing time: Tue 27 Jan 2026 05:01:18 +0000 Manifest this update: Tue 27 Jan 2026 05:01:18 +0000 Manifest next update: Wed 28 Jan 2026 05:01:18 +0000 Files and hashes: 1: apN9la67vmK5DyTepNZjFwpmWew.crl (hash: LpGRkiagJ/3hEmQqElPgWTOkKR0HbfHexCi5ik+cKa8=) 2: atbvOkPcslJHbkU3uvvlUOmO5QA.roa (hash: m8lm+LEVDg93zlIOjeA/ZuskWIypJuSv0WG7IFYzhxg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.mft rsync://rpki.ripe.net/repository/DEFAULT/apN9la67vmK5DyTepNZjFwpmWew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:d3:da:a3:cd:14:c0:cc:e7:28:f0:a7:e2:f6:36:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a937d95aebbbe62b90f24dea4d663170a6659ec Validity Not Before: Jan 27 05:01:18 2026 GMT Not After : Jan 28 05:01:18 2026 GMT Subject: CN=c9ed63c797abecfb640619e6d96e1898cc852959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:57:94:63:a5:31:1c:d5:81:42:4a:1b:f9:12: 03:38:0e:38:52:2e:0f:f5:9a:54:7a:aa:37:45:a6: 5d:c5:d4:75:7c:2d:0b:43:f4:67:1c:c0:6f:b9:08: 5c:0b:c1:95:0a:1e:4a:96:6e:57:fe:55:2f:f6:a1: cb:8b:f1:71:8a:2e:4d:b4:c7:ef:fa:65:fd:54:ed: 88:0f:55:30:07:7a:21:fd:d3:40:ba:35:7d:4a:49: ee:c5:ae:a1:b9:f0:d9:2b:db:a8:e7:63:30:f4:22: 36:67:5c:4a:95:8d:e3:69:d0:07:c0:15:86:1f:9c: 13:dc:48:f1:3f:fd:d2:ca:f4:14:71:57:0c:52:d8: 24:ed:04:6b:14:1b:10:0d:5b:fb:61:c7:fd:22:a8: 11:4f:7c:83:78:c3:8a:0d:0c:7c:11:c0:a6:1b:1f: 44:79:92:30:c4:d6:bd:28:06:86:83:8c:0c:76:21: 85:b4:ca:17:25:4a:77:75:db:30:3d:ad:f5:12:9f: da:6b:39:aa:07:c0:ba:e7:2b:a5:e6:c4:7e:ef:8b: 52:1b:15:ed:c8:d3:4f:f3:3f:21:0f:7b:ef:c4:e3: a7:3b:40:4c:6f:09:10:02:35:b2:20:b4:83:ff:d8: ce:25:9a:a4:fa:e7:bf:2b:5a:7e:f9:8d:3b:91:14: 8a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:ED:63:C7:97:AB:EC:FB:64:06:19:E6:D9:6E:18:98:CC:85:29:59 X509v3 Authority Key Identifier: keyid:6A:93:7D:95:AE:BB:BE:62:B9:0F:24:DE:A4:D6:63:17:0A:66:59:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apN9la67vmK5DyTepNZjFwpmWew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:f4:43:b8:ff:f7:08:f5:e6:0e:5a:c5:72:6b:48:a3:67:c3: 3d:34:13:c7:15:1a:41:0f:c1:74:ee:29:3c:04:28:36:77:52: de:d8:af:21:a4:1a:d0:7f:5a:40:7b:41:16:74:e7:9e:95:4a: df:93:77:40:a9:b2:37:04:47:32:04:52:8d:aa:6e:43:b3:a8: 24:0a:98:cc:0b:ed:0e:fb:09:dc:c1:9b:07:1c:1c:0c:96:f2: bc:33:7d:12:85:0c:6a:0f:3d:8b:8a:b1:63:41:5d:49:a4:57: 0c:2a:06:77:55:f8:ce:db:5c:0c:a6:f2:d7:54:71:f2:64:ec: 80:b1:56:17:de:4d:8b:ae:bb:57:41:79:ea:ff:ca:2b:74:a2: 20:23:0a:57:7f:f4:35:7f:a2:39:99:8f:84:a2:f5:7d:a0:44: 61:a6:31:3c:38:ee:d2:76:5e:08:a8:6f:10:13:b3:c5:26:a0: 50:28:30:6d:44:d0:85:6e:95:c9:1a:a5:bc:9b:fe:b5:25:9d: 03:58:de:ec:03:e3:27:f3:de:fb:a5:6b:6f:73:10:10:d2:83: 45:a8:a7:b8:fd:71:00:5e:0a:4f:bb:08:12:89:38:fc:45:31: 48:7d:41:f3:6f:10:03:be:79:60:60:9a:de:ee:ad:33:10:7c: 38:53:e8:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv909qjzRTAzOco8Kfi9jY2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhOTM3ZDk1YWViYmJlNjJiOTBmMjRkZWE0ZDY2MzE3MGE2 NjU5ZWMwHhcNMjYwMTI3MDUwMTE4WhcNMjYwMTI4MDUwMTE4WjAzMTEwLwYDVQQD EyhjOWVkNjNjNzk3YWJlY2ZiNjQwNjE5ZTZkOTZlMTg5OGNjODUyOTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1eUY6UxHNWBQkob+RIDOA44Ui4P 9ZpUeqo3RaZdxdR1fC0LQ/RnHMBvuQhcC8GVCh5Klm5X/lUv9qHLi/Fxii5NtMfv +mX9VO2ID1UwB3oh/dNAujV9Sknuxa6hufDZK9uo52Mw9CI2Z1xKlY3jadAHwBWG H5wT3EjxP/3SyvQUcVcMUtgk7QRrFBsQDVv7Ycf9IqgRT3yDeMOKDQx8EcCmGx9E eZIwxNa9KAaGg4wMdiGFtMoXJUp3ddswPa31Ep/aazmqB8C65yul5sR+74tSGxXt yNNP8z8hD3vvxOOnO0BMbwkQAjWyILSD/9jOJZqk+ue/K1p++Y07kRSKnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMntY8eXq+z7ZAYZ5tluGJjMhSlZMB8GA1UdIwQY MBaAFGqTfZWuu75iuQ8k3qTWYxcKZlnsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXBOOWxhNjd2bUs1RHlUZXBOWmpGd3BtV2V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS82YzVjZDItMTkyMC00NTY0LWJjMmMt OTQxNzdmOGQ4NzdjLzEvYXBOOWxhNjd2bUs1RHlUZXBOWmpGd3BtV2V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS82YzVjZDItMTkyMC00NTY0LWJjMmMtOTQxNzdmOGQ4Nzdj LzEvYXBOOWxhNjd2bUs1RHlUZXBOWmpGd3BtV2V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAefRDuP/3 CPXmDlrFcmtIo2fDPTQTxxUaQQ/BdO4pPAQoNndS3tivIaQa0H9aQHtBFnTnnpVK 35N3QKmyNwRHMgRSjapuQ7OoJAqYzAvtDvsJ3MGbBxwcDJbyvDN9EoUMag89i4qx Y0FdSaRXDCoGd1X4zttcDKby11Rx8mTsgLFWF95Ni667V0F56v/KK3SiICMKV3/0 NX+iOZmPhKL1faBEYaYxPDju0nZeCKhvEBOzxSagUCgwbUTQhW6VyRqlvJv+tSWd A1je7APjJ/Pe+6Vrb3MQENKDRainuP1xAF4KT7sIEok4/EUxSH1B828QA755YGCa 3u6tMxB8OFPooA== -----END CERTIFICATE-----Generated at Tue Jan 27 07:16:53 2026 by rpki-client