This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.mft File: GUwuZp9lV99OPUmk8mW1QReS_6A.mft (raw, json) Hash identifier: ZfHTib8BshtPMj/zBaHuCSnd9qv/bqfR4ZyGuessfuo= Subject key identifier: 6D:C0:1C:A6:CB:20:22:6F:4A:FB:4B:5F:DD:A6:1D:AA:09:35:8B:4F Authority key identifier: 19:4C:2E:66:9F:65:57:DF:4E:3D:49:A4:F2:65:B5:41:17:92:FF:A0 Certificate issuer: /CN=194c2e669f6557df4e3d49a4f265b5411792ffa0 Certificate serial: 019BAEDDCCFDB3D799FA67D57B64F98061AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUwuZp9lV99OPUmk8mW1QReS_6A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.mft Manifest number: 0F21 Signing time: Sun 11 Jan 2026 21:02:09 +0000 Manifest this update: Sun 11 Jan 2026 21:02:09 +0000 Manifest next update: Mon 12 Jan 2026 21:02:09 +0000 Files and hashes: 1: GUwuZp9lV99OPUmk8mW1QReS_6A.crl (hash: FCi/3DnMkJyPug6C4QMJA/vv8IfRwSr2mVneR98Q1Og=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.mft rsync://rpki.ripe.net/repository/DEFAULT/GUwuZp9lV99OPUmk8mW1QReS_6A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:dd:cc:fd:b3:d7:99:fa:67:d5:7b:64:f9:80:61:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=194c2e669f6557df4e3d49a4f265b5411792ffa0 Validity Not Before: Jan 11 21:02:09 2026 GMT Not After : Jan 12 21:02:09 2026 GMT Subject: CN=6dc01ca6cb20226f4afb4b5fdda61daa09358b4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a7:af:ea:70:f0:ca:52:ca:05:f1:c1:d5:aa: 00:0a:56:1f:d3:dd:cb:65:fa:2e:dd:b3:bd:59:5b: 65:4d:fd:d6:d1:50:51:0a:a4:0d:7d:cf:dc:cb:ee: 71:46:b4:3a:49:98:cd:3a:d5:f0:44:87:b9:5e:a3: 22:b5:5a:a0:31:be:ea:d4:f2:f2:8c:2e:15:f0:72: 42:ad:71:aa:49:4c:0c:82:40:9b:31:b3:2e:e7:bf: 4d:02:03:55:61:3c:f7:27:b3:6b:17:53:0a:18:75: 2a:1c:13:b9:40:9e:cf:5d:5c:ed:62:b4:c1:75:e2: d8:3d:3d:49:8e:65:e7:35:7c:24:2a:b7:5e:ef:8b: 34:b4:df:f7:32:a6:16:a9:5f:82:d3:8b:3e:da:fe: 35:5e:1c:73:93:73:69:e9:f9:c5:1f:7d:97:bb:28: ad:70:f8:83:28:2a:f3:c7:b7:94:74:ac:69:f3:03: db:50:18:5b:49:1a:d5:bd:19:c8:df:2b:10:e9:6e: a4:38:93:df:d0:07:c5:fa:fd:97:4b:c4:35:87:aa: cb:75:a2:86:21:b7:1b:12:4e:67:03:01:3a:ee:28: 2f:02:44:40:d0:68:49:dc:b4:22:97:31:30:3f:6d: b9:41:ff:1d:1b:8c:f5:7c:a1:19:d5:44:9d:98:d0: a7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:C0:1C:A6:CB:20:22:6F:4A:FB:4B:5F:DD:A6:1D:AA:09:35:8B:4F X509v3 Authority Key Identifier: keyid:19:4C:2E:66:9F:65:57:DF:4E:3D:49:A4:F2:65:B5:41:17:92:FF:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUwuZp9lV99OPUmk8mW1QReS_6A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:c6:c8:9e:45:5d:3c:a4:16:a9:0c:36:7a:f3:b8:4c:7a:c0: cb:89:06:a9:35:18:7e:8c:a2:d9:1b:b5:c0:0d:dd:c5:2d:9e: 0e:e4:80:06:4c:6c:ca:64:b2:16:0c:b8:34:1c:e0:1b:97:5b: db:85:2a:dd:18:12:d9:a6:b0:0a:90:f2:f2:d7:bf:95:31:05: 82:a8:92:78:44:bb:18:07:f0:d8:b3:c3:65:a1:26:ce:a4:e5: a6:df:f0:c5:19:b7:a9:ee:69:e9:fb:79:5c:3d:e8:9c:91:cf: 34:01:a0:cf:a1:88:47:29:af:b3:af:75:e0:fb:7b:33:5d:42: 27:21:dc:0f:ac:cd:27:0f:9a:ea:50:66:67:08:54:28:0b:8e: 59:b1:b3:47:2f:e6:6a:1a:be:68:80:c7:40:49:a6:23:0d:d0: d2:31:07:1d:47:f8:e3:f7:b4:74:4c:2b:ba:9b:75:a8:92:c2: ee:62:ed:8b:e7:cc:ad:eb:8c:a4:07:1e:f0:49:e6:87:a0:04: de:a5:54:6b:cb:20:13:f1:b0:f3:3d:1d:9c:69:9b:d4:a2:96: 52:4d:52:8d:f3:cf:bb:7d:52:ab:76:f4:68:db:64:fd:75:24: e4:d3:a0:ff:92:cd:f5:0d:ac:8c:ec:37:5c:9b:51:42:a3:7c: 25:41:bb:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuu3cz9s9eZ+mfVe2T5gGGrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NGMyZTY2OWY2NTU3ZGY0ZTNkNDlhNGYyNjViNTQxMTc5 MmZmYTAwHhcNMjYwMTExMjEwMjA5WhcNMjYwMTEyMjEwMjA5WjAzMTEwLwYDVQQD Eyg2ZGMwMWNhNmNiMjAyMjZmNGFmYjRiNWZkZGE2MWRhYTA5MzU4YjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKev6nDwylLKBfHB1aoAClYf093L Zfou3bO9WVtlTf3W0VBRCqQNfc/cy+5xRrQ6SZjNOtXwRIe5XqMitVqgMb7q1PLy jC4V8HJCrXGqSUwMgkCbMbMu579NAgNVYTz3J7NrF1MKGHUqHBO5QJ7PXVztYrTB deLYPT1JjmXnNXwkKrde74s0tN/3MqYWqV+C04s+2v41Xhxzk3Np6fnFH32Xuyit cPiDKCrzx7eUdKxp8wPbUBhbSRrVvRnI3ysQ6W6kOJPf0AfF+v2XS8Q1h6rLdaKG IbcbEk5nAwE67igvAkRA0GhJ3LQilzEwP225Qf8dG4z1fKEZ1USdmNCnDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG3AHKbLICJvSvtLX92mHaoJNYtPMB8GA1UdIwQY MBaAFBlMLmafZVffTj1JpPJltUEXkv+gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1V3dVpwOWxWOTlPUFVtazhtVzFRUmVTXzZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8zNGRmZTAtOTIwNi00MWRmLWJhMDEt YTlmZjdhNTM3NTNhLzEvR1V3dVpwOWxWOTlPUFVtazhtVzFRUmVTXzZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8zNGRmZTAtOTIwNi00MWRmLWJhMDEtYTlmZjdhNTM3NTNh LzEvR1V3dVpwOWxWOTlPUFVtazhtVzFRUmVTXzZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAacbInkVd PKQWqQw2evO4THrAy4kGqTUYfoyi2Ru1wA3dxS2eDuSABkxsymSyFgy4NBzgG5db 24Uq3RgS2aawCpDy8te/lTEFgqiSeES7GAfw2LPDZaEmzqTlpt/wxRm3qe5p6ft5 XD3onJHPNAGgz6GIRymvs6914Pt7M11CJyHcD6zNJw+a6lBmZwhUKAuOWbGzRy/m ahq+aIDHQEmmIw3Q0jEHHUf44/e0dEwrupt1qJLC7mLti+fMreuMpAce8Enmh6AE 3qVUa8sgE/Gw8z0dnGmb1KKWUk1SjfPPu31Sq3b0aNtk/XUk5NOg/5LN9Q2sjOw3 XJtRQqN8JUG7Ww== -----END CERTIFICATE-----Generated at Mon Jan 12 01:07:42 2026 by rpki-client