This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.mft File: s6t6iYCGh8w9rXug998LrOAZ92M.mft (raw, json) Hash identifier: saQrA7wQxufyJUvjS2G08XotAN51n+D2HmfadbYJIOk= Subject key identifier: 80:D5:28:9B:AF:94:43:36:46:B5:E9:D8:DD:E3:C4:22:6E:27:80:A9 Authority key identifier: B3:AB:7A:89:80:86:87:CC:3D:AD:7B:A0:F7:DF:0B:AC:E0:19:F7:63 Certificate issuer: /CN=b3ab7a89808687cc3dad7ba0f7df0bace019f763 Certificate serial: 019BB584329A4343C0F16F673F37BB3B77ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6t6iYCGh8w9rXug998LrOAZ92M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.mft Manifest number: 17C6 Signing time: Tue 13 Jan 2026 04:01:38 +0000 Manifest this update: Tue 13 Jan 2026 04:01:38 +0000 Manifest next update: Wed 14 Jan 2026 04:01:38 +0000 Files and hashes: 1: s6t6iYCGh8w9rXug998LrOAZ92M.crl (hash: r+zCKarpi+vE5ZjUVJdVfO/NmP7+lE+XF76+tcRu//M=) 2: u65mmO6HRK5seaMFhAXBI1NDzRY.roa (hash: bDLwuznXJEsV9R4nt39n1oPS76JZaY8ubPqpqj3zceQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.mft rsync://rpki.ripe.net/repository/DEFAULT/s6t6iYCGh8w9rXug998LrOAZ92M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 04:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b5:84:32:9a:43:43:c0:f1:6f:67:3f:37:bb:3b:77:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3ab7a89808687cc3dad7ba0f7df0bace019f763 Validity Not Before: Jan 13 04:01:38 2026 GMT Not After : Jan 14 04:01:38 2026 GMT Subject: CN=80d5289baf94433646b5e9d8dde3c4226e2780a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f5:9f:90:79:91:6d:23:77:2d:00:e0:40:66: c4:28:1f:d0:cd:70:e9:ae:75:23:7f:9e:5e:0b:a1: d8:42:8c:8a:f9:b8:70:52:4c:99:f6:c5:56:90:a4: d5:4d:a8:f3:6d:57:de:30:5c:bb:e2:48:30:19:aa: 5c:81:57:9f:64:77:65:4e:0d:e1:66:93:58:ec:a7: 26:e4:25:9d:bd:76:27:9e:20:d6:ba:6d:26:75:45: 77:64:54:c9:34:92:2f:7a:23:11:96:fb:7a:85:02: 82:ea:fd:50:69:5d:33:ac:e6:79:d9:a4:12:89:32: 55:62:8f:af:af:4a:a2:f1:18:f6:73:76:3e:a2:17: 34:2f:0e:94:ad:35:f1:7d:04:41:77:ee:4a:9d:e4: 91:3f:ed:7e:69:32:5f:07:c6:95:fc:51:0f:22:44: 71:bb:23:e6:1e:fe:dc:0c:4f:b2:fa:12:27:c2:82: 1e:57:d4:33:1a:39:3e:c0:2d:dd:71:d7:83:f2:4d: bb:c4:3b:42:52:87:77:7d:9e:72:f9:31:ab:19:65: ba:84:e8:c8:d3:31:a8:d9:ab:0b:f8:4e:3f:71:03: df:a0:6e:42:97:70:2e:28:5a:3c:e6:99:6c:85:6a: 82:6c:95:e5:d5:10:b0:95:2d:19:45:24:a3:1a:b8: d2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:D5:28:9B:AF:94:43:36:46:B5:E9:D8:DD:E3:C4:22:6E:27:80:A9 X509v3 Authority Key Identifier: keyid:B3:AB:7A:89:80:86:87:CC:3D:AD:7B:A0:F7:DF:0B:AC:E0:19:F7:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6t6iYCGh8w9rXug998LrOAZ92M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:43:06:02:6c:f3:b8:4e:bf:e7:51:28:78:cb:c6:10:37:f3: a1:dd:99:0d:63:c2:e2:7f:f0:e5:ed:2f:e2:85:06:4d:ec:e3: e1:ce:40:a0:8a:68:fe:63:3a:f2:48:c8:2a:03:03:fb:a9:37: 36:b8:06:bf:23:0e:bd:e4:da:4b:72:79:9b:b0:03:7b:f8:32: 86:b5:af:71:c5:33:a5:0b:06:e9:53:f2:36:5f:84:11:c8:a7: 98:e3:48:61:16:56:15:d0:39:10:e4:d1:d4:d4:62:82:53:2d: 1e:0e:2c:ec:f1:41:f2:f5:0f:b8:1c:66:1e:a8:28:6f:e8:8b: 31:a2:6f:27:5a:b6:98:30:d2:48:f3:b0:f3:7a:d1:61:cf:0e: 5b:ac:39:96:84:2c:81:d9:eb:70:a0:11:6a:64:d4:34:b7:62: 5e:a3:16:09:02:54:e5:ae:7b:79:7e:be:e1:17:ec:ad:e6:e1: b6:3c:65:8f:d4:b1:26:da:0f:61:be:9a:41:67:b2:4d:5e:52: d3:26:d0:22:4c:59:97:48:e6:d5:64:0d:9d:f8:ce:9f:16:af: 1b:0e:01:74:5c:3c:9a:3c:c8:c9:bb:92:a7:53:c9:36:10:c5: 73:0f:5d:0f:a1:bc:4f:e5:67:0f:87:76:e5:a0:ba:1e:33:d3: ef:26:6e:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZu1hDKaQ0PA8W9nPze7O3ftMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYWI3YTg5ODA4Njg3Y2MzZGFkN2JhMGY3ZGYwYmFjZTAx OWY3NjMwHhcNMjYwMTEzMDQwMTM4WhcNMjYwMTE0MDQwMTM4WjAzMTEwLwYDVQQD Eyg4MGQ1Mjg5YmFmOTQ0MzM2NDZiNWU5ZDhkZGUzYzQyMjZlMjc4MGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vWfkHmRbSN3LQDgQGbEKB/QzXDp rnUjf55eC6HYQoyK+bhwUkyZ9sVWkKTVTajzbVfeMFy74kgwGapcgVefZHdlTg3h ZpNY7Kcm5CWdvXYnniDWum0mdUV3ZFTJNJIveiMRlvt6hQKC6v1QaV0zrOZ52aQS iTJVYo+vr0qi8Rj2c3Y+ohc0Lw6UrTXxfQRBd+5KneSRP+1+aTJfB8aV/FEPIkRx uyPmHv7cDE+y+hInwoIeV9QzGjk+wC3dcdeD8k27xDtCUod3fZ5y+TGrGWW6hOjI 0zGo2asL+E4/cQPfoG5Cl3AuKFo85plshWqCbJXl1RCwlS0ZRSSjGrjSMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIDVKJuvlEM2RrXp2N3jxCJuJ4CpMB8GA1UdIwQY MBaAFLOreomAhofMPa17oPffC6zgGfdjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczZ0NmlZQ0doOHc5clh1Zzk5OExyT0FaOTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS84M2Y5MzktMDVmMS00YWZhLWFhMTAt ODYwNmE3MjRkODkxLzEvczZ0NmlZQ0doOHc5clh1Zzk5OExyT0FaOTJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS84M2Y5MzktMDVmMS00YWZhLWFhMTAtODYwNmE3MjRkODkx LzEvczZ0NmlZQ0doOHc5clh1Zzk5OExyT0FaOTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABkMGAmzz uE6/51EoeMvGEDfzod2ZDWPC4n/w5e0v4oUGTezj4c5AoIpo/mM68kjIKgMD+6k3 NrgGvyMOveTaS3J5m7ADe/gyhrWvccUzpQsG6VPyNl+EEcinmONIYRZWFdA5EOTR 1NRiglMtHg4s7PFB8vUPuBxmHqgob+iLMaJvJ1q2mDDSSPOw83rRYc8OW6w5loQs gdnrcKARamTUNLdiXqMWCQJU5a57eX6+4Rfsrebhtjxlj9SxJtoPYb6aQWeyTV5S 0ybQIkxZl0jm1WQNnfjOnxavGw4BdFw8mjzIybuSp1PJNhDFcw9dD6G8T+VnD4d2 5aC6HjPT7yZurA== -----END CERTIFICATE-----Generated at Tue Jan 13 12:35:32 2026 by rpki-client