This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft File: 6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft (raw, json) Hash identifier: wZs8HyWct8iJ9c+B5sXiZIrs3+8xOCwKAg9bopkRc9w= Subject key identifier: 6D:47:0D:EE:68:12:02:65:D2:CA:48:50:E2:D5:86:12:34:33:77:39 Authority key identifier: E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9 Certificate issuer: /CN=e8393bd1305f6cc4439192119c605f44bbf09bc9 Certificate serial: 019BFE78A41B48BBE453FAB6CB3B8793528B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft Manifest number: 0AF6 Signing time: Tue 27 Jan 2026 08:01:17 +0000 Manifest this update: Tue 27 Jan 2026 08:01:17 +0000 Manifest next update: Wed 28 Jan 2026 08:01:17 +0000 Files and hashes: 1: 3jEzaTAZGbVsoFwdmjg2hTF2_Wk.roa (hash: wm8kNCk7UferWI+OkWWldWOTGXvk5bckydNDUKDAWvo=) 2: 6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl (hash: hAhLgyTVZB32lN5/6rxFmazuuztHZUy5UAWyn+YuF3o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 08:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:78:a4:1b:48:bb:e4:53:fa:b6:cb:3b:87:93:52:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8393bd1305f6cc4439192119c605f44bbf09bc9 Validity Not Before: Jan 27 08:01:17 2026 GMT Not After : Jan 28 08:01:17 2026 GMT Subject: CN=6d470dee68120265d2ca4850e2d5861234337739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:50:40:1d:52:9e:8d:78:b3:9e:71:6b:6f:66: a9:8a:e6:66:55:3f:34:a8:5e:74:84:3f:91:04:fa: e7:08:ae:82:81:b6:76:f2:35:c2:5c:33:f4:48:ee: 72:f5:7f:41:5f:56:47:92:c8:fc:0a:44:e8:72:97: e0:13:b8:27:ad:92:8e:77:9b:60:17:4e:64:a3:b7: c0:a9:4c:46:6a:20:eb:2e:8b:f2:e6:21:83:eb:ab: 98:fa:81:46:63:12:ba:29:da:ff:36:a9:8e:e5:a8: 8f:a8:3c:1f:2e:21:ad:0c:a7:a0:54:47:2b:fe:f1: ac:5e:67:f5:eb:3d:1a:57:de:0b:7f:a2:be:4d:9d: fc:ad:00:a5:fd:22:ec:20:69:fa:bd:66:f0:01:0f: 98:14:ac:67:02:5b:d8:df:7a:56:52:dc:6e:e3:5c: 35:db:90:f7:ea:d6:12:bd:14:e0:bc:5f:86:52:e2: eb:0c:4b:63:4c:79:e4:56:61:9e:74:8d:56:b9:a1: ef:94:16:a0:4a:e1:3c:2d:f3:23:8a:2c:5c:fa:8d: 89:c0:ab:41:07:5d:ce:c6:aa:03:e6:81:39:01:40: fa:a4:f5:cd:b7:a3:18:ea:b0:ab:eb:3a:f8:cb:fc: 24:57:7a:5d:2b:ab:07:e4:aa:1a:a1:ed:49:bd:57: 65:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:47:0D:EE:68:12:02:65:D2:CA:48:50:E2:D5:86:12:34:33:77:39 X509v3 Authority Key Identifier: keyid:E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:67:55:65:bc:6c:9d:ad:6c:44:76:65:4d:ee:e0:7d:eb:e3: 20:3f:55:4b:e5:16:e7:69:08:b3:01:1e:ec:41:90:70:9f:8e: cc:21:3b:52:21:ca:e3:de:62:4c:04:c4:de:35:6f:bf:93:58: 27:4d:12:66:af:b2:41:24:99:e2:cd:17:74:18:fe:d0:3b:cd: d1:01:9c:8a:3b:ac:49:6d:f8:50:71:f8:bf:32:ef:35:42:86: 0d:5e:0b:7b:ec:2c:e8:9b:2f:a9:85:ed:26:00:5a:41:aa:e6: 0f:c6:84:e7:24:a8:c7:30:b2:ca:b2:77:3f:96:c1:40:9c:24: dc:af:eb:b9:d0:9d:6e:f0:e5:ef:a1:78:36:21:3b:f1:b5:2e: 2d:dd:34:6d:af:b8:18:f1:b8:e7:51:ab:94:68:5e:8a:bf:9c: c7:38:ec:16:ef:f7:45:00:13:a5:59:b4:dd:7e:e5:e1:37:6e: 3e:a9:b6:b8:da:89:c8:32:e5:3d:ea:01:4b:56:a3:35:03:5f: 96:bc:63:4e:db:05:b7:6b:79:23:70:19:0b:7f:42:f1:c3:4c: 14:6c:63:56:76:bf:c2:e4:55:50:69:60:26:02:2c:93:18:8a: a3:00:7a:e5:05:e8:1e:06:67:fc:b6:dd:7a:fb:d2:63:f4:9e: d3:15:f6:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+eKQbSLvkU/q2yzuHk1KLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4MzkzYmQxMzA1ZjZjYzQ0MzkxOTIxMTljNjA1ZjQ0YmJm MDliYzkwHhcNMjYwMTI3MDgwMTE3WhcNMjYwMTI4MDgwMTE3WjAzMTEwLwYDVQQD Eyg2ZDQ3MGRlZTY4MTIwMjY1ZDJjYTQ4NTBlMmQ1ODYxMjM0MzM3NzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVBAHVKejXiznnFrb2apiuZmVT80 qF50hD+RBPrnCK6CgbZ28jXCXDP0SO5y9X9BX1ZHksj8CkTocpfgE7gnrZKOd5tg F05ko7fAqUxGaiDrLovy5iGD66uY+oFGYxK6Kdr/NqmO5aiPqDwfLiGtDKegVEcr /vGsXmf16z0aV94Lf6K+TZ38rQCl/SLsIGn6vWbwAQ+YFKxnAlvY33pWUtxu41w1 25D36tYSvRTgvF+GUuLrDEtjTHnkVmGedI1WuaHvlBagSuE8LfMjiixc+o2JwKtB B13OxqoD5oE5AUD6pPXNt6MY6rCr6zr4y/wkV3pdK6sH5Koaoe1JvVdlgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG1HDe5oEgJl0spIUOLVhhI0M3c5MB8GA1UdIwQY MBaAFOg5O9EwX2zEQ5GSEZxgX0S78JvJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkRrNzBUQmZiTVJEa1pJUm5HQmZSTHZ3bThrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC80NTgwMTEtNWRlMS00NjgwLTgyNTUt YjA2ZmRhMDFmNDZjLzEvNkRrNzBUQmZiTVJEa1pJUm5HQmZSTHZ3bThrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC80NTgwMTEtNWRlMS00NjgwLTgyNTUtYjA2ZmRhMDFmNDZj LzEvNkRrNzBUQmZiTVJEa1pJUm5HQmZSTHZ3bThrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM2dVZbxs na1sRHZlTe7gfevjID9VS+UW52kIswEe7EGQcJ+OzCE7UiHK495iTATE3jVvv5NY J00SZq+yQSSZ4s0XdBj+0DvN0QGcijusSW34UHH4vzLvNUKGDV4Le+ws6JsvqYXt JgBaQarmD8aE5ySoxzCyyrJ3P5bBQJwk3K/rudCdbvDl76F4NiE78bUuLd00ba+4 GPG451GrlGheir+cxzjsFu/3RQATpVm03X7l4TduPqm2uNqJyDLlPeoBS1ajNQNf lrxjTtsFt2t5I3AZC39C8cNMFGxjVna/wuRVUGlgJgIskxiKowB65QXoHgZn/Lbd evvSY/Se0xX2jQ== -----END CERTIFICATE-----Generated at Tue Jan 27 13:24:29 2026 by rpki-client