This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft File: q6gfB6STo-ZDdS5mvYFG9Xca34g.mft (raw, json) Hash identifier: qAblrB+9PbxSKpRngz/i5aTXtSmGAbZRAfs/N5U2bOg= Subject key identifier: 67:05:7E:80:73:6F:30:C6:72:E4:CC:C7:DB:0E:41:D1:B7:8A:9E:77 Authority key identifier: AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88 Certificate issuer: /CN=aba81f07a493a3e643752e66bd8146f5771adf88 Certificate serial: 019BFBAE377DB722D8DB2D810DA057CDF6B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft Manifest number: 17C6 Signing time: Mon 26 Jan 2026 19:00:57 +0000 Manifest this update: Mon 26 Jan 2026 19:00:57 +0000 Manifest next update: Tue 27 Jan 2026 19:00:57 +0000 Files and hashes: 1: KVyFy8VhCmWDFDfi6hznjqY-CiM.roa (hash: gxDIq6BgrSNUPikORcjw6F0p9+XkSRUjM2gZnMVK/i4=) 2: mHnLIzDp0K0uZ34p1Ju5C7yV-Jc.roa (hash: ndDoF5lyW5EcQE2tsppbm+3E+OkI4cfheb+pzHW2skk=) 3: q6gfB6STo-ZDdS5mvYFG9Xca34g.crl (hash: BVO++aKKA5u2q/XNDaDj21xUOwTt0d8m6teQgyWP8w8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:ae:37:7d:b7:22:d8:db:2d:81:0d:a0:57:cd:f6:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aba81f07a493a3e643752e66bd8146f5771adf88 Validity Not Before: Jan 26 19:00:57 2026 GMT Not After : Jan 27 19:00:57 2026 GMT Subject: CN=67057e80736f30c672e4ccc7db0e41d1b78a9e77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:92:44:45:c1:04:03:dd:f4:ca:96:af:c5:15: c2:01:b5:ed:ed:b7:45:89:6a:7f:28:22:30:ba:d5: 69:e4:88:f1:57:7c:db:38:9e:d1:61:f5:8a:28:08: 8b:ff:3a:eb:b5:22:1f:1b:51:fb:af:6e:b1:e6:17: 03:33:80:f1:f6:3d:b6:b1:87:ae:f6:60:5c:e5:5f: a8:af:ca:e1:e4:3c:ef:6a:92:a3:2b:18:b7:04:e0: af:4e:82:dd:60:98:0f:b8:60:54:96:38:d1:28:26: f1:1c:d5:75:08:94:64:6c:67:e0:54:13:ab:74:2d: a4:77:30:32:b1:a7:65:9d:74:2a:ef:d1:aa:5d:82: f2:05:45:0f:e3:b8:7b:27:da:09:b2:70:1b:39:bd: c8:84:35:95:30:6d:21:dc:81:c6:2c:04:cb:ca:22: f7:02:7b:18:01:4a:af:78:d2:9e:f1:0f:0a:6a:ac: 4d:bd:8d:9e:2f:67:e9:71:61:1b:62:ad:35:27:61: d9:76:fa:de:34:a2:42:80:cc:cd:41:34:3d:16:39: 46:f3:5c:00:e8:70:2e:92:f0:0a:84:5a:0b:21:d9: 8b:be:f1:82:8f:3b:8d:06:29:15:8a:99:89:8f:4f: 09:d1:3d:86:58:78:03:ff:61:56:3a:23:84:4b:48: f8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:05:7E:80:73:6F:30:C6:72:E4:CC:C7:DB:0E:41:D1:B7:8A:9E:77 X509v3 Authority Key Identifier: keyid:AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:19:1e:84:72:71:bb:95:6d:31:c6:5c:01:aa:a1:f1:4c:e2: 9c:e7:49:90:c1:5c:43:0d:f3:55:41:53:0d:49:a3:30:2b:58: 53:0c:45:9c:c3:b2:1b:e5:f7:92:8e:5e:05:bf:21:1b:78:fc: 1e:dd:ac:ba:22:58:63:cf:1e:ae:fa:ab:b1:42:8a:a0:4e:75: d8:6b:6e:ce:e9:82:e4:a9:0a:e6:b3:f5:50:84:70:42:61:06: a2:49:57:19:30:dc:ee:26:b9:12:8a:87:4d:0b:53:a1:8f:17: 96:e9:ce:0c:90:69:88:d7:e0:44:0c:39:44:91:32:8d:dd:a3: c2:6b:4b:1b:08:14:70:3a:44:42:04:a9:82:ba:8d:49:9b:72: 81:4a:42:1e:1c:4e:dc:74:66:24:c3:8b:d1:3a:0e:d9:a8:8f: cb:ed:c9:b3:55:c1:08:86:51:a7:e8:68:63:28:ce:40:b6:21: 94:6d:1f:ef:ad:b5:05:e6:82:1a:eb:dc:be:ba:5f:3d:15:cc: 61:eb:37:32:cf:6e:21:4c:72:97:8f:5d:4a:c6:46:92:34:a3: b2:d5:47:f1:38:18:6f:85:72:42:d9:ac:f2:54:57:3e:12:8a: 0d:1c:f1:f5:92:49:86:d1:aa:dd:3f:0c:0f:a4:36:5f:82:80: 6f:2f:93:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7rjd9tyLY2y2BDaBXzfa2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiYTgxZjA3YTQ5M2EzZTY0Mzc1MmU2NmJkODE0NmY1Nzcx YWRmODgwHhcNMjYwMTI2MTkwMDU3WhcNMjYwMTI3MTkwMDU3WjAzMTEwLwYDVQQD Eyg2NzA1N2U4MDczNmYzMGM2NzJlNGNjYzdkYjBlNDFkMWI3OGE5ZTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJJERcEEA930ypavxRXCAbXt7bdF iWp/KCIwutVp5IjxV3zbOJ7RYfWKKAiL/zrrtSIfG1H7r26x5hcDM4Dx9j22sYeu 9mBc5V+or8rh5DzvapKjKxi3BOCvToLdYJgPuGBUljjRKCbxHNV1CJRkbGfgVBOr dC2kdzAysadlnXQq79GqXYLyBUUP47h7J9oJsnAbOb3IhDWVMG0h3IHGLATLyiL3 AnsYAUqveNKe8Q8KaqxNvY2eL2fpcWEbYq01J2HZdvreNKJCgMzNQTQ9FjlG81wA 6HAukvAKhFoLIdmLvvGCjzuNBikVipmJj08J0T2GWHgD/2FWOiOES0j4kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGcFfoBzbzDGcuTMx9sOQdG3ip53MB8GA1UdIwQY MBaAFKuoHwekk6PmQ3UuZr2BRvV3Gt+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTZnZkI2U1RvLVpEZFM1bXZZRkc5WGNhMzRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC84NGUyY2UtMWVhYy00ZTEyLWFjNTgt NTFjM2NjY2U3MmRmLzEvcTZnZkI2U1RvLVpEZFM1bXZZRkc5WGNhMzRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC84NGUyY2UtMWVhYy00ZTEyLWFjNTgtNTFjM2NjY2U3MmRm LzEvcTZnZkI2U1RvLVpEZFM1bXZZRkc5WGNhMzRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQRkehHJx u5VtMcZcAaqh8UzinOdJkMFcQw3zVUFTDUmjMCtYUwxFnMOyG+X3ko5eBb8hG3j8 Ht2suiJYY88ervqrsUKKoE512GtuzumC5KkK5rP1UIRwQmEGoklXGTDc7ia5EoqH TQtToY8XlunODJBpiNfgRAw5RJEyjd2jwmtLGwgUcDpEQgSpgrqNSZtygUpCHhxO 3HRmJMOL0ToO2aiPy+3Js1XBCIZRp+hoYyjOQLYhlG0f7621BeaCGuvcvrpfPRXM Yes3Ms9uIUxyl49dSsZGkjSjstVH8TgYb4VyQtms8lRXPhKKDRzx9ZJJhtGq3T8M D6Q2X4KAby+TAg== -----END CERTIFICATE-----Generated at Tue Jan 27 00:09:54 2026 by rpki-client