This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft File: 6rR29nfNDDKY0oEeYPSOGymzr-8.mft (raw, json) Hash identifier: afHH7Kn1pJ4u5JBIwyrQBsFyfkBgLloEGTXCPeU6h/8= Subject key identifier: 40:B7:0E:72:9F:EB:E6:D8:11:04:67:36:65:D6:D9:CB:FD:E1:EA:E8 Authority key identifier: EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF Certificate issuer: /CN=eab476f677cd0c3298d2811e60f48e1b29b3afef Certificate serial: 019BFD2E68CE97ABEBEB74EFD16B68350E8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft Manifest number: 1630 Signing time: Tue 27 Jan 2026 02:00:35 +0000 Manifest this update: Tue 27 Jan 2026 02:00:35 +0000 Manifest next update: Wed 28 Jan 2026 02:00:35 +0000 Files and hashes: 1: 6rR29nfNDDKY0oEeYPSOGymzr-8.crl (hash: +CcFoNpbAduj9O83ESR94LlpdlLuRbkJ6KaT4O75VAA=) 2: FD6SignaLxU1mMOUn7_cvBf_Yic.roa (hash: Cvxq3OA+d6hTWKtzWj2Wc5SlJWItEo3HQpee1TIc39M=) 3: jwNcE1s-makAFRG_Z0YpC8tgTEA.roa (hash: UWEBlXajJs0PyfeEOQvBkjJjVBwaTr2pthi+ykCI4sk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:2e:68:ce:97:ab:eb:eb:74:ef:d1:6b:68:35:0e:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eab476f677cd0c3298d2811e60f48e1b29b3afef Validity Not Before: Jan 27 02:00:35 2026 GMT Not After : Jan 28 02:00:35 2026 GMT Subject: CN=40b70e729febe6d81104673665d6d9cbfde1eae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f2:44:3b:15:c2:81:66:98:5a:0d:ab:dd:1c: 98:1a:f5:0e:42:f9:eb:df:a7:78:0d:de:fe:60:ee: 94:25:e6:af:70:1f:4d:2b:df:92:22:d9:f2:2a:db: 5d:e8:0a:e4:e4:26:1e:17:b8:5b:ad:72:5a:50:12: 0f:c2:9e:a6:72:db:f7:0d:3f:d2:7e:c1:6f:01:a9: 1a:ce:e8:72:8e:1d:af:fb:83:5c:c9:52:67:df:69: 35:a1:24:c0:2a:64:b3:e4:ac:f2:22:93:ee:92:24: a0:9d:4b:29:6f:e8:97:2a:15:e7:74:dd:ba:f2:6d: 70:87:37:18:aa:df:a3:fa:f2:23:89:dd:f1:3b:2e: e4:95:e1:f7:fe:11:67:5f:dc:b4:1b:be:c6:d9:3f: 6a:2f:7d:c6:77:4b:6e:e7:d0:9d:10:9b:19:8a:73: 7b:54:46:67:67:dc:3a:25:59:a1:f0:9a:68:3a:09: 77:35:0e:2a:62:1f:fa:cc:de:0a:19:52:01:91:21: 45:49:5f:3a:87:e7:6b:c8:f0:20:1f:6e:4f:01:e4: 35:0b:4d:a9:12:68:9f:fc:fd:10:ae:ab:ab:c2:e1: 06:c7:15:a6:13:db:12:82:88:f5:e2:6a:7d:22:08: b6:ec:14:e1:68:cf:f1:8e:3e:ae:23:fa:b3:aa:23: 9c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B7:0E:72:9F:EB:E6:D8:11:04:67:36:65:D6:D9:CB:FD:E1:EA:E8 X509v3 Authority Key Identifier: keyid:EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:dd:7a:b0:b7:23:55:ed:22:86:b2:b2:a0:f9:5a:d2:82:ad: b0:47:62:a8:aa:b2:76:32:26:c1:7a:00:d3:67:18:4c:c2:b5: 44:b8:ae:cc:88:c7:21:90:dd:79:c1:85:1b:f4:0c:9b:9d:e1: a4:fb:e6:ad:1e:3b:a2:81:a8:f7:75:92:68:4a:91:ed:7f:0a: 89:de:24:b5:c8:e2:2b:88:8f:57:8d:49:00:c3:f4:82:34:f6: 23:2a:a5:48:46:7d:b6:05:f6:4b:65:87:98:50:f0:33:53:76: b2:ab:ee:5d:01:70:a1:2d:87:f5:60:fa:aa:cc:af:0e:61:f3: a4:3c:b4:29:55:ec:d0:93:2f:f5:85:f3:c3:df:9f:c2:6a:37: 01:9b:30:b3:f8:8e:99:aa:2f:87:89:e9:0b:c6:c2:e4:bf:99: ca:2c:7c:62:6a:61:ca:af:9a:46:bd:7f:f4:d4:bc:2c:b5:06: e9:6a:f8:15:fd:a4:29:f3:29:31:e8:7d:3c:88:11:14:fb:e6: 44:22:82:86:47:b1:3f:ed:04:4b:d5:b5:74:53:1b:4f:16:59: bf:17:50:8c:a5:3f:ee:d6:70:ef:a7:90:d8:89:c5:a8:4e:14: 21:a6:9d:3a:df:8c:5f:f5:a8:7d:0f:b1:fe:88:13:cb:0c:43: 41:dc:55:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9LmjOl6vr63Tv0WtoNQ6OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYjQ3NmY2NzdjZDBjMzI5OGQyODExZTYwZjQ4ZTFiMjli M2FmZWYwHhcNMjYwMTI3MDIwMDM1WhcNMjYwMTI4MDIwMDM1WjAzMTEwLwYDVQQD Eyg0MGI3MGU3MjlmZWJlNmQ4MTEwNDY3MzY2NWQ2ZDljYmZkZTFlYWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fJEOxXCgWaYWg2r3RyYGvUOQvnr 36d4Dd7+YO6UJeavcB9NK9+SItnyKttd6Ark5CYeF7hbrXJaUBIPwp6mctv3DT/S fsFvAakazuhyjh2v+4NcyVJn32k1oSTAKmSz5KzyIpPukiSgnUspb+iXKhXndN26 8m1whzcYqt+j+vIjid3xOy7kleH3/hFnX9y0G77G2T9qL33Gd0tu59CdEJsZinN7 VEZnZ9w6JVmh8JpoOgl3NQ4qYh/6zN4KGVIBkSFFSV86h+dryPAgH25PAeQ1C02p Emif/P0QrqurwuEGxxWmE9sSgoj14mp9Igi27BThaM/xjj6uI/qzqiOc2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEC3DnKf6+bYEQRnNmXW2cv94eroMB8GA1UdIwQY MBaAFOq0dvZ3zQwymNKBHmD0jhsps6/vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnJSMjluZk5EREtZMG9FZVlQU09HeW16ci04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi82NTdhOTItNjIyMC00NDI1LTg4OTkt MDdmMTk1MGQ4ODk0LzEvNnJSMjluZk5EREtZMG9FZVlQU09HeW16ci04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi82NTdhOTItNjIyMC00NDI1LTg4OTktMDdmMTk1MGQ4ODk0 LzEvNnJSMjluZk5EREtZMG9FZVlQU09HeW16ci04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE916sLcj Ve0ihrKyoPla0oKtsEdiqKqydjImwXoA02cYTMK1RLiuzIjHIZDdecGFG/QMm53h pPvmrR47ooGo93WSaEqR7X8Kid4ktcjiK4iPV41JAMP0gjT2IyqlSEZ9tgX2S2WH mFDwM1N2sqvuXQFwoS2H9WD6qsyvDmHzpDy0KVXs0JMv9YXzw9+fwmo3AZsws/iO maovh4npC8bC5L+Zyix8Ymphyq+aRr1/9NS8LLUG6Wr4Ff2kKfMpMeh9PIgRFPvm RCKChkexP+0ES9W1dFMbTxZZvxdQjKU/7tZw76eQ2InFqE4UIaadOt+MX/WofQ+x /ogTywxDQdxVMQ== -----END CERTIFICATE-----Generated at Tue Jan 27 08:29:50 2026 by rpki-client