This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft File: 6Ed60hy3iRQzE8QLGfjMACPeiKY.mft (raw, json) Hash identifier: Sh2PrJt7QADx6uEyo1ftGl88ZMm/eTaYn3ZHWKAYcMU= Subject key identifier: 25:7A:0B:B2:99:BB:D7:4F:6B:06:26:CF:BD:B9:6D:DD:EF:1A:17:45 Authority key identifier: E8:47:7A:D2:1C:B7:89:14:33:13:C4:0B:19:F8:CC:00:23:DE:88:A6 Certificate issuer: /CN=e8477ad21cb789143313c40b19f8cc0023de88a6 Certificate serial: 019BFD6555B33259BDA67FFE59994AD11D19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft Manifest number: 02B3 Signing time: Tue 27 Jan 2026 03:00:35 +0000 Manifest this update: Tue 27 Jan 2026 03:00:35 +0000 Manifest next update: Wed 28 Jan 2026 03:00:35 +0000 Files and hashes: 1: 6Ed60hy3iRQzE8QLGfjMACPeiKY.crl (hash: YLDwXc8BAMCUhaS5xLJ0NR4NRiR0A/HpGB+j1rzt0+4=) 2: xEzLiuXT72IlmSlpaZ1gDZgUcxA.roa (hash: MBkLJQWV2ZtMDdoyyRqknXzBBdtAikrUJIMeCoM/Wfw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:65:55:b3:32:59:bd:a6:7f:fe:59:99:4a:d1:1d:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8477ad21cb789143313c40b19f8cc0023de88a6 Validity Not Before: Jan 27 03:00:35 2026 GMT Not After : Jan 28 03:00:35 2026 GMT Subject: CN=257a0bb299bbd74f6b0626cfbdb96dddef1a1745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f8:8f:3f:4f:ce:b6:20:62:73:97:b7:63:80: f2:49:5f:78:53:63:ae:9b:00:03:5d:9b:2b:a7:f7: 4a:b5:6d:03:a5:78:8f:fd:2f:ba:85:20:5d:cb:4f: 9f:b9:86:c7:7f:dc:d6:e3:a4:a4:cf:6d:49:f5:bb: 88:37:81:d0:a0:72:81:62:03:08:b6:ca:f9:7c:c0: 0d:aa:ec:a3:8a:ae:28:c1:ae:77:d2:5d:4a:82:4d: be:94:11:42:dc:80:97:58:c7:a6:d0:a4:d1:d1:44: 0f:4f:7a:2a:68:68:de:66:dd:ba:8c:72:1a:ba:af: 45:5d:73:dc:59:7e:5d:b4:40:f8:23:ce:8b:41:52: cf:d6:33:08:f9:d6:17:54:ba:2e:4b:c4:11:df:59: 4e:27:83:28:b5:d5:b6:31:3f:86:09:4e:b7:40:0f: c5:ae:80:cb:4a:21:53:31:70:de:28:1c:18:94:fd: 0c:5f:86:36:52:fb:40:e6:51:91:cb:80:3d:97:42: 37:cc:14:2a:01:8b:fd:1d:fa:81:50:e4:2c:94:ae: 3b:9d:03:67:20:49:59:c9:70:97:0f:54:37:cb:0e: f4:bc:77:42:9a:e0:33:eb:5f:41:ca:12:2e:2f:b8: 06:05:33:1b:d5:b7:fe:13:58:60:7b:4a:e8:3b:40: 83:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:7A:0B:B2:99:BB:D7:4F:6B:06:26:CF:BD:B9:6D:DD:EF:1A:17:45 X509v3 Authority Key Identifier: keyid:E8:47:7A:D2:1C:B7:89:14:33:13:C4:0B:19:F8:CC:00:23:DE:88:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:69:e1:fb:9b:b1:de:0d:1f:bf:c7:c0:41:86:70:a4:5c:14: 67:6b:c6:cd:53:85:e2:82:eb:b2:d0:c9:35:37:6d:cc:b5:0d: 85:fb:1e:e6:c0:b9:d9:cf:70:1d:cf:7b:86:6d:cf:97:ab:50: 11:cf:24:a6:c9:b2:3e:ae:e0:ee:38:db:f9:69:28:b2:3f:89: eb:84:0f:e5:7d:d2:ec:8a:92:38:c9:86:ba:0b:7a:75:1f:dc: e1:e4:1c:82:87:10:a7:c3:18:39:58:28:a1:b8:b3:2c:49:fe: d5:36:b8:9b:aa:e3:d0:44:78:9d:04:24:d7:72:31:2e:8d:e6: 3a:b9:c4:ae:2a:e6:d4:80:37:28:24:4e:4c:ba:01:ca:6d:3a: 0c:92:a1:53:af:ce:7b:5a:2e:b8:3d:cc:3f:bd:94:31:d7:72: b0:60:a2:cf:b4:f5:f4:86:80:ee:24:9c:7a:df:25:3c:92:7a: 1c:11:cb:4d:2f:17:a5:00:12:df:47:03:ff:69:58:35:46:4a: 85:e1:7e:47:92:ea:31:75:bd:09:13:a3:b5:f7:1c:a0:8d:51: 4a:f8:97:00:20:03:ec:39:34:02:5a:96:3e:3f:51:a1:c1:5d: e3:a7:1e:87:28:e2:c9:6e:f5:28:72:7a:a1:50:15:7e:97:8e: d8:ac:0e:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9ZVWzMlm9pn/+WZlK0R0ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NDc3YWQyMWNiNzg5MTQzMzEzYzQwYjE5ZjhjYzAwMjNk ZTg4YTYwHhcNMjYwMTI3MDMwMDM1WhcNMjYwMTI4MDMwMDM1WjAzMTEwLwYDVQQD EygyNTdhMGJiMjk5YmJkNzRmNmIwNjI2Y2ZiZGI5NmRkZGVmMWExNzQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fiPP0/OtiBic5e3Y4DySV94U2Ou mwADXZsrp/dKtW0DpXiP/S+6hSBdy0+fuYbHf9zW46Skz21J9buIN4HQoHKBYgMI tsr5fMANquyjiq4owa530l1Kgk2+lBFC3ICXWMem0KTR0UQPT3oqaGjeZt26jHIa uq9FXXPcWX5dtED4I86LQVLP1jMI+dYXVLouS8QR31lOJ4MotdW2MT+GCU63QA/F roDLSiFTMXDeKBwYlP0MX4Y2UvtA5lGRy4A9l0I3zBQqAYv9HfqBUOQslK47nQNn IElZyXCXD1Q3yw70vHdCmuAz619ByhIuL7gGBTMb1bf+E1hge0roO0CD7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCV6C7KZu9dPawYmz725bd3vGhdFMB8GA1UdIwQY MBaAFOhHetIct4kUMxPECxn4zAAj3oimMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkVkNjBoeTNpUlF6RThRTEdmak1BQ1BlaUtZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi83NDJhMDQtMTdhZi00ZjQwLWExNDAt NjA0NTg0ODk1OTI1LzEvNkVkNjBoeTNpUlF6RThRTEdmak1BQ1BlaUtZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi83NDJhMDQtMTdhZi00ZjQwLWExNDAtNjA0NTg0ODk1OTI1 LzEvNkVkNjBoeTNpUlF6RThRTEdmak1BQ1BlaUtZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW2nh+5ux 3g0fv8fAQYZwpFwUZ2vGzVOF4oLrstDJNTdtzLUNhfse5sC52c9wHc97hm3Pl6tQ Ec8kpsmyPq7g7jjb+Wkosj+J64QP5X3S7IqSOMmGugt6dR/c4eQcgocQp8MYOVgo obizLEn+1Ta4m6rj0ER4nQQk13IxLo3mOrnErirm1IA3KCROTLoBym06DJKhU6/O e1ouuD3MP72UMddysGCiz7T19IaA7iScet8lPJJ6HBHLTS8XpQAS30cD/2lYNUZK heF+R5LqMXW9CROjtfccoI1RSviXACAD7Dk0AlqWPj9RocFd46cehyjiyW71KHJ6 oVAVfpeO2KwOqA== -----END CERTIFICATE-----Generated at Tue Jan 27 05:37:29 2026 by rpki-client