This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft File: 6T7pptFATGHrGbArAtdNqDpmM9o.mft (raw, json) Hash identifier: nrq07GAeDkEHf7NdydyoOMLA+oJOJc2O1FwE+Bh4Ug8= Subject key identifier: BD:E2:49:40:2C:9B:A5:48:6F:18:E8:57:5A:2F:4E:CD:E4:5E:85:B9 Authority key identifier: E9:3E:E9:A6:D1:40:4C:61:EB:19:B0:2B:02:D7:4D:A8:3A:66:33:DA Certificate issuer: /CN=e93ee9a6d1404c61eb19b02b02d74da83a6633da Certificate serial: 019BFC1C5C2929C71CBB51E2765806F2EF32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6T7pptFATGHrGbArAtdNqDpmM9o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft Manifest number: 02F1 Signing time: Mon 26 Jan 2026 21:01:15 +0000 Manifest this update: Mon 26 Jan 2026 21:01:15 +0000 Manifest next update: Tue 27 Jan 2026 21:01:15 +0000 Files and hashes: 1: 6T7pptFATGHrGbArAtdNqDpmM9o.crl (hash: h0bTIeyUn3pxXbp7Fb/ezVXnSaKKcO+P0Am3K2AnibY=) 2: aZnRHxW5PVhcTWQfAiwj8BEmoD4.roa (hash: C3FEhE9zrGO1uX5TJRCXxFkvyY4vNtfAgcn0ttqcftY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft rsync://rpki.ripe.net/repository/DEFAULT/6T7pptFATGHrGbArAtdNqDpmM9o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:1c:5c:29:29:c7:1c:bb:51:e2:76:58:06:f2:ef:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e93ee9a6d1404c61eb19b02b02d74da83a6633da Validity Not Before: Jan 26 21:01:15 2026 GMT Not After : Jan 27 21:01:15 2026 GMT Subject: CN=bde249402c9ba5486f18e8575a2f4ecde45e85b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:bc:33:67:a9:06:ba:4b:a1:a9:4f:ad:af:df: 4e:a5:0f:ad:2b:82:74:91:a6:07:1f:ae:72:55:f1: db:43:f4:df:24:53:e9:ad:5a:49:b5:27:70:3f:d6: 72:4c:93:00:55:64:f4:6d:4b:8d:63:69:91:19:90: 86:9b:82:95:b3:f3:07:83:d8:e6:1f:7c:7e:cd:32: 7b:26:64:83:58:d3:64:c2:e2:93:02:0e:6d:65:3a: 4e:06:d8:71:f0:ed:c1:f4:d3:89:78:c2:df:ac:76: 45:6c:46:56:16:12:a5:b6:12:92:3f:0e:8f:2b:dc: 67:2e:1f:b7:4b:3c:52:93:1a:9c:0f:11:8f:a0:60: 72:1c:09:b6:73:94:2d:d0:1b:59:7c:15:4f:19:22: 2e:bf:3a:54:c8:cc:74:64:df:65:40:e5:2d:11:a0: 88:03:f9:73:30:01:ea:f4:ed:ad:8a:02:0b:e3:f9: 12:c9:f1:43:47:c5:ab:53:f7:8b:26:60:c4:22:7f: 74:03:0a:93:dc:67:05:bb:d6:60:74:55:d2:01:02: 31:26:88:86:2f:c3:0d:58:67:5c:bd:37:32:37:b4: bd:a6:3f:aa:d0:b0:02:4d:c0:b9:fd:df:71:42:7d: a5:04:79:49:70:94:7b:d1:77:ff:25:b6:89:97:60: d4:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:E2:49:40:2C:9B:A5:48:6F:18:E8:57:5A:2F:4E:CD:E4:5E:85:B9 X509v3 Authority Key Identifier: keyid:E9:3E:E9:A6:D1:40:4C:61:EB:19:B0:2B:02:D7:4D:A8:3A:66:33:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T7pptFATGHrGbArAtdNqDpmM9o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:0e:6d:7b:2d:ea:45:26:cd:3e:b9:3c:90:f8:22:38:27:4f: 94:74:78:b2:16:08:7f:a6:50:2d:82:29:98:75:54:b6:b4:9b: 48:39:21:7e:d8:86:9e:18:d5:cb:09:a0:8c:77:65:d9:81:ec: f0:c7:01:e4:6f:7f:6e:3e:55:1b:2e:c2:44:9e:cf:74:d1:45: 02:00:e1:b6:ca:a5:2e:b4:7f:23:52:c7:2d:64:f8:89:c0:9a: 6d:73:98:ea:7c:c8:23:c8:61:2b:d9:b0:4b:cf:fb:23:70:40: ed:1b:9a:88:23:66:cc:1a:25:42:bf:9a:46:ae:48:c5:0e:c5: 1d:d5:8b:2c:0e:55:e3:86:b8:4d:87:78:87:04:32:4d:8a:42: 7a:ad:d5:c4:61:26:8b:57:79:7d:c5:55:c0:56:52:af:bf:03: 49:48:ea:7b:41:ee:22:9c:4d:37:79:7b:4a:14:ea:c5:c9:2a: ef:63:dc:4f:eb:c9:e7:44:15:36:db:12:4e:4f:20:a5:33:dc: e8:ae:b3:75:36:e5:c7:43:0a:b9:3c:34:7e:71:20:26:76:0c: b9:b0:ba:dc:b1:8a:ad:63:85:7f:fa:1c:53:98:da:21:d7:8f: e9:f1:03:43:ed:e0:06:cd:89:e7:4b:87:fb:ac:07:78:7f:7a: e1:8a:c3:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8HFwpKcccu1HidlgG8u8yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5M2VlOWE2ZDE0MDRjNjFlYjE5YjAyYjAyZDc0ZGE4M2E2 NjMzZGEwHhcNMjYwMTI2MjEwMTE1WhcNMjYwMTI3MjEwMTE1WjAzMTEwLwYDVQQD EyhiZGUyNDk0MDJjOWJhNTQ4NmYxOGU4NTc1YTJmNGVjZGU0NWU4NWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7wzZ6kGukuhqU+tr99OpQ+tK4J0 kaYHH65yVfHbQ/TfJFPprVpJtSdwP9ZyTJMAVWT0bUuNY2mRGZCGm4KVs/MHg9jm H3x+zTJ7JmSDWNNkwuKTAg5tZTpOBthx8O3B9NOJeMLfrHZFbEZWFhKlthKSPw6P K9xnLh+3SzxSkxqcDxGPoGByHAm2c5Qt0BtZfBVPGSIuvzpUyMx0ZN9lQOUtEaCI A/lzMAHq9O2tigIL4/kSyfFDR8WrU/eLJmDEIn90AwqT3GcFu9ZgdFXSAQIxJoiG L8MNWGdcvTcyN7S9pj+q0LACTcC5/d9xQn2lBHlJcJR70Xf/JbaJl2DUNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL3iSUAsm6VIbxjoV1ovTs3kXoW5MB8GA1UdIwQY MBaAFOk+6abRQExh6xmwKwLXTag6ZjPaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlQ3cHB0RkFUR0hyR2JBckF0ZE5xRHBtTTlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC80NTA4YzQtMzMyYi00MDNjLTlmNTYt ZGI5MDU5MTNjYjg3LzEvNlQ3cHB0RkFUR0hyR2JBckF0ZE5xRHBtTTlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC80NTA4YzQtMzMyYi00MDNjLTlmNTYtZGI5MDU5MTNjYjg3 LzEvNlQ3cHB0RkFUR0hyR2JBckF0ZE5xRHBtTTlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARA5tey3q RSbNPrk8kPgiOCdPlHR4shYIf6ZQLYIpmHVUtrSbSDkhftiGnhjVywmgjHdl2YHs 8McB5G9/bj5VGy7CRJ7PdNFFAgDhtsqlLrR/I1LHLWT4icCabXOY6nzII8hhK9mw S8/7I3BA7RuaiCNmzBolQr+aRq5IxQ7FHdWLLA5V44a4TYd4hwQyTYpCeq3VxGEm i1d5fcVVwFZSr78DSUjqe0HuIpxNN3l7ShTqxckq72PcT+vJ50QVNtsSTk8gpTPc 6K6zdTblx0MKuTw0fnEgJnYMubC63LGKrWOFf/ocU5jaIdeP6fEDQ+3gBs2J50uH +6wHeH964YrDIw== -----END CERTIFICATE-----Generated at Tue Jan 27 02:52:26 2026 by rpki-client