This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft File: 6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft (raw, json) Hash identifier: ymL8TQezw2h+dSIpCyEhB7yunHjYSTYcmmsE3/muiNM= Subject key identifier: 2C:A9:DD:D5:1A:BC:2E:03:7D:B8:97:05:50:63:73:D7:C8:F0:45:7C Authority key identifier: E8:CB:BF:F2:18:A4:37:DF:8F:80:A9:8C:D2:FA:EB:9C:24:18:FD:00 Certificate issuer: /CN=e8cbbff218a437df8f80a98cd2faeb9c2418fd00 Certificate serial: 019BFD6574BD77BB7B5183A3A3C1B57B4D4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Mu_8hikN9-PgKmM0vrrnCQY_QA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft Manifest number: 0840 Signing time: Tue 27 Jan 2026 03:00:43 +0000 Manifest this update: Tue 27 Jan 2026 03:00:43 +0000 Manifest next update: Wed 28 Jan 2026 03:00:43 +0000 Files and hashes: 1: 6Mu_8hikN9-PgKmM0vrrnCQY_QA.crl (hash: vm4MblR4IQh1tyP4CqBeWSnoaGAoxQt6cuXJdf/3CyY=) 2: sXWO_DWD7Ah_vMjGm35nvHivxBc.roa (hash: X3aJAsZQv/GuZjI5kdAfg34ET6Ft+aEdJbJSgzuBpEY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft rsync://rpki.ripe.net/repository/DEFAULT/6Mu_8hikN9-PgKmM0vrrnCQY_QA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 03:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:65:74:bd:77:bb:7b:51:83:a3:a3:c1:b5:7b:4d:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8cbbff218a437df8f80a98cd2faeb9c2418fd00 Validity Not Before: Jan 27 03:00:43 2026 GMT Not After : Jan 28 03:00:43 2026 GMT Subject: CN=2ca9ddd51abc2e037db89705506373d7c8f0457c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:24:05:2e:48:4b:d2:f6:13:e7:7d:b1:53:ad: 83:5f:fe:4e:82:20:58:71:cd:0d:66:ef:af:d8:6e: dd:53:ee:60:d0:60:2a:f0:62:bc:01:e4:77:eb:79: 66:84:34:70:a2:38:bb:8d:54:5d:95:f2:94:0c:b1: 51:14:cb:e3:0e:36:1a:41:7d:7d:08:42:ef:ca:60: 31:b6:11:ad:71:09:cb:61:78:ae:66:f9:7d:28:90: fe:30:91:8e:b5:11:23:7e:f0:7b:f9:8e:d1:b3:11: 05:2f:ab:96:6b:a2:c6:8e:8a:8a:74:2b:23:6e:91: 4a:a3:c4:75:90:2c:b9:f2:1c:11:11:28:5b:89:90: 98:7b:2e:20:e1:52:be:ba:7b:5b:69:ed:a9:33:56: b2:f0:e2:19:1f:28:5c:59:d2:4d:ca:a5:37:c3:b4: a3:f3:24:a8:28:03:c2:14:c8:18:55:b0:31:6b:a3: ee:67:b0:df:d0:b9:f1:74:9d:e6:d5:6a:53:3a:cb: 9d:45:e8:c7:b5:db:21:b8:2c:c0:24:c7:9b:5f:b1: f0:38:6e:cb:d6:af:2a:56:e1:d1:e4:64:03:fa:54: 70:0f:e6:24:a3:e7:52:79:c4:68:71:27:b9:fa:85: 34:75:0a:5c:f3:90:f4:d5:a1:75:36:7d:95:ed:4f: 48:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A9:DD:D5:1A:BC:2E:03:7D:B8:97:05:50:63:73:D7:C8:F0:45:7C X509v3 Authority Key Identifier: keyid:E8:CB:BF:F2:18:A4:37:DF:8F:80:A9:8C:D2:FA:EB:9C:24:18:FD:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Mu_8hikN9-PgKmM0vrrnCQY_QA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:d7:16:70:3b:d5:55:65:d8:97:2a:46:b6:12:b0:24:c7:91: 76:00:a4:43:57:66:af:8f:96:21:6a:fc:8a:0f:71:6f:a2:32: 88:ff:8b:ab:6d:89:58:46:00:b5:5f:c0:e5:3f:2b:95:84:3e: e4:85:d8:9f:85:76:62:7d:75:1d:5b:87:4c:2c:f0:23:c3:d3: 47:e4:ec:6a:5d:ba:db:e0:d2:07:ef:40:c9:e2:53:f6:86:11: ee:ce:44:57:48:07:48:02:de:f4:2a:e3:68:23:dd:24:0b:2d: 7c:5e:af:47:f1:11:7b:65:29:e7:c1:07:cb:9c:52:74:ea:20: d2:08:95:63:76:6d:9e:8f:a7:48:ef:e2:a1:99:56:ab:05:ca: b5:b7:79:86:2c:a4:2d:4d:04:b5:22:ba:d3:6a:14:0c:03:d8: 6e:a0:e3:26:97:f9:22:08:3f:8c:db:3b:be:05:5e:e1:5b:c7: 34:e2:7d:33:85:c2:10:fe:90:3d:24:b6:c2:fd:0a:e9:a3:5d: 26:99:71:d9:06:e1:47:1a:5c:bd:44:a0:3f:d2:5d:aa:65:50: f6:65:74:75:ce:db:91:48:cd:c1:26:2b:76:10:f3:02:81:2f: cc:29:6f:be:57:d6:5a:f9:11:48:38:f3:01:57:a4:9d:60:ba: f0:63:ac:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9ZXS9d7t7UYOjo8G1e01KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4Y2JiZmYyMThhNDM3ZGY4ZjgwYTk4Y2QyZmFlYjljMjQx OGZkMDAwHhcNMjYwMTI3MDMwMDQzWhcNMjYwMTI4MDMwMDQzWjAzMTEwLwYDVQQD EygyY2E5ZGRkNTFhYmMyZTAzN2RiODk3MDU1MDYzNzNkN2M4ZjA0NTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiQFLkhL0vYT532xU62DX/5OgiBY cc0NZu+v2G7dU+5g0GAq8GK8AeR363lmhDRwoji7jVRdlfKUDLFRFMvjDjYaQX19 CELvymAxthGtcQnLYXiuZvl9KJD+MJGOtREjfvB7+Y7RsxEFL6uWa6LGjoqKdCsj bpFKo8R1kCy58hwREShbiZCYey4g4VK+untbae2pM1ay8OIZHyhcWdJNyqU3w7Sj 8ySoKAPCFMgYVbAxa6PuZ7Df0LnxdJ3m1WpTOsudRejHtdshuCzAJMebX7HwOG7L 1q8qVuHR5GQD+lRwD+Yko+dSecRocSe5+oU0dQpc85D01aF1Nn2V7U9I9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCyp3dUavC4DfbiXBVBjc9fI8EV8MB8GA1UdIwQY MBaAFOjLv/IYpDffj4CpjNL665wkGP0AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNk11XzhoaWtOOS1QZ0ttTTB2cnJuQ1FZX1FBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8xZmQ2YmMtNTdlMi00ZjUwLTk4Yjct Y2M3NjM1ZGU2ZTdhLzEvNk11XzhoaWtOOS1QZ0ttTTB2cnJuQ1FZX1FBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8xZmQ2YmMtNTdlMi00ZjUwLTk4YjctY2M3NjM1ZGU2ZTdh LzEvNk11XzhoaWtOOS1QZ0ttTTB2cnJuQ1FZX1FBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPtcWcDvV VWXYlypGthKwJMeRdgCkQ1dmr4+WIWr8ig9xb6IyiP+Lq22JWEYAtV/A5T8rlYQ+ 5IXYn4V2Yn11HVuHTCzwI8PTR+Tsal262+DSB+9AyeJT9oYR7s5EV0gHSALe9Crj aCPdJAstfF6vR/ERe2Up58EHy5xSdOog0giVY3Ztno+nSO/ioZlWqwXKtbd5hiyk LU0EtSK602oUDAPYbqDjJpf5Igg/jNs7vgVe4VvHNOJ9M4XCEP6QPSS2wv0K6aNd Jplx2QbhRxpcvUSgP9JdqmVQ9mV0dc7bkUjNwSYrdhDzAoEvzClvvlfWWvkRSDjz AVeknWC68GOsaQ== -----END CERTIFICATE-----Generated at Tue Jan 27 11:52:29 2026 by rpki-client