This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft File: 6ch0aZeAldiv9jJygEuy810UkQM.mft (raw, json) Hash identifier: Qd5UNd4p0iMXT0Csz5xLnf3R58cfFg18xWjQjg/GV1g= Subject key identifier: 9A:00:51:8F:DD:73:9F:80:AB:CB:C1:FB:76:D4:36:07:71:A5:3E:E2 Authority key identifier: E9:C8:74:69:97:80:95:D8:AF:F6:32:72:80:4B:B2:F3:5D:14:91:03 Certificate issuer: /CN=e9c87469978095d8aff63272804bb2f35d149103 Certificate serial: 019B797F9A6DCC5381DADB80303D127578F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ch0aZeAldiv9jJygEuy810UkQM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft Manifest number: 0AE3 Signing time: Thu 01 Jan 2026 12:19:24 +0000 Manifest this update: Thu 01 Jan 2026 12:19:24 +0000 Manifest next update: Fri 02 Jan 2026 12:19:24 +0000 Files and hashes: 1: 6ch0aZeAldiv9jJygEuy810UkQM.crl (hash: HSvk+j78SLJHYH5ceWpXxv7jXtQFMNKJXPkVMKqm6Jc=) 2: BEQDOaKgH--LO7ihPK2vX0JDMls.roa (hash: tvAegj+0Iydiva9Z3FDFD+kyGp51OtWh/BIQnjeJEqI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.crl rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft rsync://rpki.ripe.net/repository/DEFAULT/6ch0aZeAldiv9jJygEuy810UkQM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:9a:6d:cc:53:81:da:db:80:30:3d:12:75:78:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9c87469978095d8aff63272804bb2f35d149103 Validity Not Before: Jan 1 12:19:24 2026 GMT Not After : Jan 2 12:19:24 2026 GMT Subject: CN=9a00518fdd739f80abcbc1fb76d4360771a53ee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:29:77:20:7b:38:e2:22:40:ba:09:4e:48:ee: fb:28:04:dc:1f:ae:c7:b9:43:53:d5:ed:33:b2:e5: 80:16:45:65:82:bc:5e:31:9c:e5:61:20:8e:c0:c9: 5b:c1:9b:c1:85:40:5a:c2:27:b3:36:8a:da:00:db: 33:8a:a9:fd:d3:ed:1f:7a:e1:ad:87:a2:43:6a:73: 76:cc:82:87:3f:ee:4a:35:e7:ac:22:df:54:67:c9: 12:01:01:7a:5f:d6:0d:7d:6a:52:35:1e:f4:63:bd: d2:ae:f2:14:3c:0f:8e:bf:6b:1c:e7:5d:e0:67:11: d9:c3:b7:0d:c9:26:89:8a:c6:83:54:7d:b2:9d:08: f2:52:73:84:8c:4f:a0:e3:6b:69:b3:8b:68:23:df: d6:52:88:27:72:66:92:26:25:f6:20:b1:31:26:ac: cd:7c:33:7a:f5:83:41:24:1b:1f:23:ad:e8:b4:0d: a6:71:0d:a8:69:f5:8d:84:e2:4e:8c:00:2c:e2:91: 88:06:dc:ec:ba:f4:8e:5e:2b:ad:e8:b6:79:1a:09: 19:1b:fe:b8:83:ef:bf:58:7f:33:a7:e8:2e:a4:02: 0a:ac:cb:19:0b:38:a8:9b:fb:82:3f:c3:67:3e:11: 9a:5f:da:26:4f:9b:02:c3:cd:b2:49:4b:1c:ef:58: 53:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:00:51:8F:DD:73:9F:80:AB:CB:C1:FB:76:D4:36:07:71:A5:3E:E2 X509v3 Authority Key Identifier: keyid:E9:C8:74:69:97:80:95:D8:AF:F6:32:72:80:4B:B2:F3:5D:14:91:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ch0aZeAldiv9jJygEuy810UkQM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:cf:0c:0a:2c:e6:35:e3:d8:a3:24:9a:cf:ac:50:66:f5:36: 4d:bb:ef:fd:50:24:3b:38:f3:40:e7:49:9b:e8:e3:49:a0:34: c3:ac:ec:90:54:ba:58:d0:8b:70:e9:a5:a1:36:8d:dc:be:fe: 42:64:12:16:d6:79:4e:bd:96:06:f9:df:41:2d:e8:80:26:34: 6e:aa:70:a2:80:09:64:a0:86:8f:75:df:b2:7d:b4:ef:44:cc: 64:de:cf:cb:65:dc:51:00:a0:d8:f6:bc:fb:25:05:34:40:4d: b5:32:f8:be:70:2f:2a:89:05:5a:43:5b:5f:62:cb:13:91:dd: dc:e2:67:3b:db:cd:84:83:8f:01:d1:01:f4:c6:db:bf:02:7b: c5:a9:ae:63:09:e5:d9:de:b0:46:23:d3:4f:7f:1f:66:77:56: 0f:0f:9c:9b:9c:27:c1:d5:71:6a:b9:ee:d2:1a:74:17:39:b0: 2e:5a:f4:5e:f2:e9:7f:e8:21:66:d1:e3:df:a7:59:80:76:73: 42:8d:0c:0c:ae:47:a9:97:e7:fd:64:a1:d7:c6:76:78:f5:76: f8:84:c8:e2:19:e8:a0:27:12:14:02:97:07:ad:ba:d3:22:92: 20:57:3a:d0:de:2e:fc:82:c5:64:6e:a5:73:65:f6:32:47:f9: 34:76:56:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt5f5ptzFOB2tuAMD0SdXjyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5Yzg3NDY5OTc4MDk1ZDhhZmY2MzI3MjgwNGJiMmYzNWQx NDkxMDMwHhcNMjYwMTAxMTIxOTI0WhcNMjYwMTAyMTIxOTI0WjAzMTEwLwYDVQQD Eyg5YTAwNTE4ZmRkNzM5ZjgwYWJjYmMxZmI3NmQ0MzYwNzcxYTUzZWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSl3IHs44iJAuglOSO77KATcH67H uUNT1e0zsuWAFkVlgrxeMZzlYSCOwMlbwZvBhUBawiezNoraANsziqn90+0feuGt h6JDanN2zIKHP+5KNeesIt9UZ8kSAQF6X9YNfWpSNR70Y73SrvIUPA+Ov2sc513g ZxHZw7cNySaJisaDVH2ynQjyUnOEjE+g42tps4toI9/WUogncmaSJiX2ILExJqzN fDN69YNBJBsfI63otA2mcQ2oafWNhOJOjAAs4pGIBtzsuvSOXiut6LZ5GgkZG/64 g++/WH8zp+gupAIKrMsZCziom/uCP8NnPhGaX9omT5sCw82ySUsc71hTJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJoAUY/dc5+Aq8vB+3bUNgdxpT7iMB8GA1UdIwQY MBaAFOnIdGmXgJXYr/YycoBLsvNdFJEDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmNoMGFaZUFsZGl2OWpKeWdFdXk4MTBVa1FNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC85YWQ5ZGMtYjg0Yy00YTU5LWJiMWMt MGNjM2I0Y2FmNjgzLzEvNmNoMGFaZUFsZGl2OWpKeWdFdXk4MTBVa1FNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC85YWQ5ZGMtYjg0Yy00YTU5LWJiMWMtMGNjM2I0Y2FmNjgz LzEvNmNoMGFaZUFsZGl2OWpKeWdFdXk4MTBVa1FNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVM8MCizm NePYoySaz6xQZvU2Tbvv/VAkOzjzQOdJm+jjSaA0w6zskFS6WNCLcOmloTaN3L7+ QmQSFtZ5Tr2WBvnfQS3ogCY0bqpwooAJZKCGj3Xfsn2070TMZN7Py2XcUQCg2Pa8 +yUFNEBNtTL4vnAvKokFWkNbX2LLE5Hd3OJnO9vNhIOPAdEB9MbbvwJ7xamuYwnl 2d6wRiPTT38fZndWDw+cm5wnwdVxarnu0hp0FzmwLlr0XvLpf+ghZtHj36dZgHZz Qo0MDK5HqZfn/WSh18Z2ePV2+ITI4hnooCcSFAKXB6260yKSIFc60N4u/ILFZG6l c2X2Mkf5NHZWoQ== -----END CERTIFICATE-----Generated at Thu Jan 1 17:31:34 2026 by rpki-client