This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft File: 6gHK_4k1RpEKJfvM64YjVfejcmA.mft (raw, json) Hash identifier: 1oDGC5wgih4vm5CILvcEA+FJ2btPibC+3VptBKvrRzE= Subject key identifier: 34:EB:8F:CF:6B:B6:02:63:FB:0D:D4:4B:CD:4E:55:75:DD:43:F0:B6 Authority key identifier: EA:01:CA:FF:89:35:46:91:0A:25:FB:CC:EB:86:23:55:F7:A3:72:60 Certificate issuer: /CN=ea01caff893546910a25fbcceb862355f7a37260 Certificate serial: 019BB05E0E1D5747B1B3B42A0824074ED681 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft Manifest number: 0EE1 Signing time: Mon 12 Jan 2026 04:01:52 +0000 Manifest this update: Mon 12 Jan 2026 04:01:52 +0000 Manifest next update: Tue 13 Jan 2026 04:01:52 +0000 Files and hashes: 1: 6gHK_4k1RpEKJfvM64YjVfejcmA.crl (hash: yNpE6M82PyEcaVh/Hx8ncfIf16h3oyIRxoePDe29ndk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 02:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b0:5e:0e:1d:57:47:b1:b3:b4:2a:08:24:07:4e:d6:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea01caff893546910a25fbcceb862355f7a37260 Validity Not Before: Jan 12 04:01:52 2026 GMT Not After : Jan 13 04:01:52 2026 GMT Subject: CN=34eb8fcf6bb60263fb0dd44bcd4e5575dd43f0b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:bd:61:c2:9f:47:46:59:c1:af:b1:1c:cf:4d: 57:25:60:d6:bb:ab:ba:67:fc:80:ff:e5:e2:dc:f4: 10:67:99:cc:3e:db:8e:5e:55:57:74:d5:e0:60:5a: 90:9b:d7:89:95:f5:f1:dd:b1:08:0c:ec:5b:ed:e4: ab:11:2f:53:27:28:f8:ae:a3:4d:4c:01:e6:77:0a: 26:d4:6f:2c:8c:46:be:39:52:2b:32:47:0a:ca:da: 70:8c:ea:ad:5c:16:47:ae:c8:63:d2:5f:23:09:c9: 9e:09:91:d7:91:10:61:5e:9f:bf:64:c5:3d:4b:52: ad:57:4e:3c:99:92:33:6c:99:8c:9d:f6:d7:d6:45: 74:ac:67:6c:7d:b1:15:b2:8a:1d:47:92:d6:c0:86: 5e:ba:b0:c8:47:5a:8b:62:ac:58:80:b7:23:6d:ac: 9a:c3:8c:22:28:98:a7:f4:32:18:21:04:40:9f:c3: f4:6c:88:35:71:1a:85:2c:52:cb:37:8f:07:00:c6: df:f0:34:bf:e3:03:ae:f3:48:4b:7f:2f:0d:c5:b3: 0b:ce:73:fe:cb:81:0a:5a:33:b3:36:71:87:c2:e6: 87:0d:b3:d7:23:39:99:cb:e3:76:72:8a:78:f9:64: 4b:13:59:58:ca:cd:06:5d:1c:67:2c:81:01:68:3d: 0d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:EB:8F:CF:6B:B6:02:63:FB:0D:D4:4B:CD:4E:55:75:DD:43:F0:B6 X509v3 Authority Key Identifier: keyid:EA:01:CA:FF:89:35:46:91:0A:25:FB:CC:EB:86:23:55:F7:A3:72:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:67:bd:64:d8:41:d3:59:85:9d:77:da:e1:90:ba:c2:b4:36: f2:e7:22:02:41:fb:b1:64:5c:d1:80:2d:2d:2b:77:45:b9:65: d6:92:d6:e8:b3:f9:57:07:4f:c1:59:9a:ed:b3:b8:32:fe:0d: bf:77:c2:47:b9:98:34:5e:7d:13:1b:29:7d:c2:13:df:05:11: 41:36:6f:6f:1c:f7:36:7c:1e:cc:96:e1:b5:65:fa:2d:f8:a4: 63:f0:44:4b:16:bc:0c:35:79:86:e2:0d:b5:b8:2e:5e:68:43: 82:44:84:62:9e:1c:4f:2e:28:a4:a5:30:80:1f:c5:c6:bd:73: d1:d7:d5:7b:75:4e:f0:16:94:43:6d:32:e0:eb:3b:06:e9:ea: e3:8d:ee:78:c1:98:4a:62:19:6e:b0:ea:68:96:bd:9d:98:ce: 03:2a:df:5f:5a:e5:0c:f3:00:83:32:36:97:28:c5:85:e2:cb: ec:f8:89:75:e5:a5:81:f6:aa:fb:69:4f:59:c5:a4:78:73:46: 25:ee:5b:63:15:37:51:34:1c:a9:63:37:a9:43:6e:ab:47:cf: fc:94:84:45:47:e0:94:7d:5a:dc:20:74:bd:a9:8d:6d:8d:1e: 30:0b:5a:01:d8:21:56:8b:be:46:05:b0:ad:b2:e7:45:9b:f9: 0f:98:95:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuwXg4dV0exs7QqCCQHTtaBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMDFjYWZmODkzNTQ2OTEwYTI1ZmJjY2ViODYyMzU1Zjdh MzcyNjAwHhcNMjYwMTEyMDQwMTUyWhcNMjYwMTEzMDQwMTUyWjAzMTEwLwYDVQQD EygzNGViOGZjZjZiYjYwMjYzZmIwZGQ0NGJjZDRlNTU3NWRkNDNmMGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA071hwp9HRlnBr7Ecz01XJWDWu6u6 Z/yA/+Xi3PQQZ5nMPtuOXlVXdNXgYFqQm9eJlfXx3bEIDOxb7eSrES9TJyj4rqNN TAHmdwom1G8sjEa+OVIrMkcKytpwjOqtXBZHrshj0l8jCcmeCZHXkRBhXp+/ZMU9 S1KtV048mZIzbJmMnfbX1kV0rGdsfbEVsoodR5LWwIZeurDIR1qLYqxYgLcjbaya w4wiKJin9DIYIQRAn8P0bIg1cRqFLFLLN48HAMbf8DS/4wOu80hLfy8NxbMLznP+ y4EKWjOzNnGHwuaHDbPXIzmZy+N2cop4+WRLE1lYys0GXRxnLIEBaD0NAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDTrj89rtgJj+w3US81OVXXdQ/C2MB8GA1UdIwQY MBaAFOoByv+JNUaRCiX7zOuGI1X3o3JgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmdIS180azFScEVLSmZ2TTY0WWpWZmVqY21BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8wYTdlYTItNTAzMC00ZTY0LWJkZDYt MmU5ZWRhMTk5YTc4LzEvNmdIS180azFScEVLSmZ2TTY0WWpWZmVqY21BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8wYTdlYTItNTAzMC00ZTY0LWJkZDYtMmU5ZWRhMTk5YTc4 LzEvNmdIS180azFScEVLSmZ2TTY0WWpWZmVqY21BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdWe9ZNhB 01mFnXfa4ZC6wrQ28uciAkH7sWRc0YAtLSt3Rbll1pLW6LP5VwdPwVma7bO4Mv4N v3fCR7mYNF59ExspfcIT3wURQTZvbxz3NnwezJbhtWX6LfikY/BESxa8DDV5huIN tbguXmhDgkSEYp4cTy4opKUwgB/Fxr1z0dfVe3VO8BaUQ20y4Os7Bunq443ueMGY SmIZbrDqaJa9nZjOAyrfX1rlDPMAgzI2lyjFheLL7PiJdeWlgfaq+2lPWcWkeHNG Je5bYxU3UTQcqWM3qUNuq0fP/JSERUfglH1a3CB0vamNbY0eMAtaAdghVou+RgWw rbLnRZv5D5iVcg== -----END CERTIFICATE-----Generated at Mon Jan 12 06:29:51 2026 by rpki-client