This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft File: 6XWS8etB1siTzQ3XK2P8NO5VNTM.mft (raw, json) Hash identifier: kMlxvOukMdOA+DFF357G4rXlH+oIduaxSN+NTKgjjIc= Subject key identifier: B1:B6:E0:5F:42:A7:6B:37:A4:23:32:70:B3:10:A6:0E:26:C9:0D:65 Authority key identifier: E9:75:92:F1:EB:41:D6:C8:93:CD:0D:D7:2B:63:FC:34:EE:55:35:33 Certificate issuer: /CN=e97592f1eb41d6c893cd0dd72b63fc34ee553533 Certificate serial: 019B7DCC3C2B3DF3278543DFAEEF7B40E3AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft Manifest number: 17AC Signing time: Fri 02 Jan 2026 08:21:35 +0000 Manifest this update: Fri 02 Jan 2026 08:21:35 +0000 Manifest next update: Sat 03 Jan 2026 08:21:35 +0000 Files and hashes: 1: 6XWS8etB1siTzQ3XK2P8NO5VNTM.crl (hash: cKKNslvButJbT2MQUkUPWIvfiA8qM3k55NOCi3oWaCo=) 2: ESyG_uYtG5IcanDmyfXRMGONZ1Y.roa (hash: R7QxOEza/Zy8vZPkOSk/PHJrwRu23ZaevpUcd1rTXKk=) 3: sXZEyLDztNjM23Z0NfTDSffhRV4.roa (hash: j1ThO6JX0t+4KZGC5ITUDqv+a2GExzOx5SfNMj5dHwM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.crl rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 08:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cc:3c:2b:3d:f3:27:85:43:df:ae:ef:7b:40:e3:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e97592f1eb41d6c893cd0dd72b63fc34ee553533 Validity Not Before: Jan 2 08:21:35 2026 GMT Not After : Jan 3 08:21:35 2026 GMT Subject: CN=b1b6e05f42a76b37a4233270b310a60e26c90d65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:bd:1b:7e:69:6a:21:c9:23:be:53:62:d6:b3: 98:43:a4:e4:4b:b6:22:eb:ca:25:a7:72:db:4f:3d: 3e:72:61:11:10:06:58:a8:cc:be:46:da:ad:b5:75: c8:45:d9:6e:2e:9a:c5:6c:91:7a:cd:62:37:0d:39: 79:67:7c:a3:99:48:df:ea:1e:ed:17:52:21:6b:d7: 29:e9:f7:59:27:06:6a:3a:3b:52:a1:d5:9a:58:51: 5b:43:f8:34:59:14:b1:f1:a6:c1:a5:93:8e:dd:25: e2:1c:fb:07:b6:66:09:6c:d6:e9:59:cb:1a:dc:b8: ce:11:10:34:2f:27:56:43:8e:9d:ee:3c:21:e5:d9: 7e:a4:3a:cd:21:ea:9c:3c:e9:ce:15:ba:9e:c4:11: f9:09:2d:25:44:4e:a1:d3:01:9c:ea:08:7a:e5:b9: 00:ec:01:a7:23:14:7f:a0:4c:5d:ba:bb:3b:06:70: 20:61:d2:6f:e8:e6:53:39:57:f3:32:b6:2d:fe:f9: e5:5d:ab:5b:b5:7e:ae:8e:a4:45:f7:9f:f6:ee:66: d3:41:03:ba:d8:96:34:54:5a:bd:90:3c:24:ce:7a: c1:bc:35:9b:a2:32:6f:ea:e8:b2:cf:6b:a6:e0:c4: 2e:85:5e:1a:d7:65:14:d5:88:bc:f1:25:51:c6:bd: 92:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:B6:E0:5F:42:A7:6B:37:A4:23:32:70:B3:10:A6:0E:26:C9:0D:65 X509v3 Authority Key Identifier: keyid:E9:75:92:F1:EB:41:D6:C8:93:CD:0D:D7:2B:63:FC:34:EE:55:35:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:a4:84:34:99:80:a9:ad:f9:35:0c:d6:00:25:c4:76:0c:ef: be:c9:ed:f7:88:f4:ab:41:55:9a:ba:5b:5d:1e:de:99:1f:22: 7e:c3:10:32:07:f9:96:97:74:29:6c:34:35:07:1d:bc:f2:39: c8:bb:fd:85:32:11:7c:e0:a3:7e:c4:e9:b9:87:2d:ff:2c:d2: 62:63:9d:f9:22:f0:b4:03:07:62:55:42:58:28:2f:8c:fb:35: 68:30:cf:cb:04:fe:4c:52:e1:49:77:0b:13:ca:95:fc:75:24: 27:ca:e9:4e:49:77:52:db:e1:98:15:03:da:02:e1:b4:cc:84: 9b:47:61:d4:fe:03:f1:85:e3:3b:6f:9a:03:43:0f:77:2b:a0: 0c:81:f0:58:b2:1d:3b:6f:b5:c0:e4:e4:32:47:3e:c8:cf:35: ab:05:37:51:c9:97:5f:7e:7e:28:8f:6c:47:85:79:e3:66:6e: ed:57:30:f6:58:92:f8:00:67:05:b2:62:e7:f5:b8:d0:9b:d7: 76:50:9f:a2:10:81:99:aa:a8:86:29:4f:5e:50:01:6e:c1:21: 07:f2:24:94:7d:08:06:0d:e5:96:68:51:b6:7a:4a:ad:97:50: 1f:f7:3b:2c:94:92:fa:b0:98:41:63:21:70:c4:57:ca:c1:b2: 54:6d:f5:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt9zDwrPfMnhUPfru97QOOvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NzU5MmYxZWI0MWQ2Yzg5M2NkMGRkNzJiNjNmYzM0ZWU1 NTM1MzMwHhcNMjYwMTAyMDgyMTM1WhcNMjYwMTAzMDgyMTM1WjAzMTEwLwYDVQQD EyhiMWI2ZTA1ZjQyYTc2YjM3YTQyMzMyNzBiMzEwYTYwZTI2YzkwZDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg70bfmlqIckjvlNi1rOYQ6TkS7Yi 68olp3LbTz0+cmEREAZYqMy+RtqttXXIRdluLprFbJF6zWI3DTl5Z3yjmUjf6h7t F1Iha9cp6fdZJwZqOjtSodWaWFFbQ/g0WRSx8abBpZOO3SXiHPsHtmYJbNbpWcsa 3LjOERA0LydWQ46d7jwh5dl+pDrNIeqcPOnOFbqexBH5CS0lRE6h0wGc6gh65bkA 7AGnIxR/oExdurs7BnAgYdJv6OZTOVfzMrYt/vnlXatbtX6ujqRF95/27mbTQQO6 2JY0VFq9kDwkznrBvDWbojJv6uiyz2um4MQuhV4a12UU1Yi88SVRxr2S6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLG24F9Cp2s3pCMycLMQpg4myQ1lMB8GA1UdIwQY MBaAFOl1kvHrQdbIk80N1ytj/DTuVTUzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlhXUzhldEIxc2lUelEzWEsyUDhOTzVWTlRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80MjIxN2UtZWFkMC00NmJlLThhZDAt MDVmOTBhZDI0ZjNlLzEvNlhXUzhldEIxc2lUelEzWEsyUDhOTzVWTlRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC80MjIxN2UtZWFkMC00NmJlLThhZDAtMDVmOTBhZDI0ZjNl LzEvNlhXUzhldEIxc2lUelEzWEsyUDhOTzVWTlRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVKSENJmA qa35NQzWACXEdgzvvsnt94j0q0FVmrpbXR7emR8ifsMQMgf5lpd0KWw0NQcdvPI5 yLv9hTIRfOCjfsTpuYct/yzSYmOd+SLwtAMHYlVCWCgvjPs1aDDPywT+TFLhSXcL E8qV/HUkJ8rpTkl3UtvhmBUD2gLhtMyEm0dh1P4D8YXjO2+aA0MPdyugDIHwWLId O2+1wOTkMkc+yM81qwU3UcmXX35+KI9sR4V542Zu7Vcw9liS+ABnBbJi5/W40JvX dlCfohCBmaqohilPXlABbsEhB/IklH0IBg3llmhRtnpKrZdQH/c7LJSS+rCYQWMh cMRXysGyVG31fA== -----END CERTIFICATE-----Generated at Fri Jan 2 17:05:05 2026 by rpki-client