This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft File: 71g2hkZMUz1BUryi7fOgG0h-6pI.mft (raw, json) Hash identifier: Qq+kYvFl65xmR6+ClIPgug8HDepfCi3yuV0Nd07h0t4= Subject key identifier: 82:FE:2C:31:15:ED:82:6C:8B:1C:C4:0A:6A:D7:89:F3:6A:9C:6B:96 Authority key identifier: EF:58:36:86:46:4C:53:3D:41:52:BC:A2:ED:F3:A0:1B:48:7E:EA:92 Certificate issuer: /CN=ef583686464c533d4152bca2edf3a01b487eea92 Certificate serial: 019BAF1435CCED935CCB4F55533B23AE6A40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft Manifest number: 17C6 Signing time: Sun 11 Jan 2026 22:01:35 +0000 Manifest this update: Sun 11 Jan 2026 22:01:35 +0000 Manifest next update: Mon 12 Jan 2026 22:01:35 +0000 Files and hashes: 1: 0mo3X00m4Wa_0S9tvAPdeEXjbIM.roa (hash: 1U4/DSlzuUT0abOkebzV1TmeepoX7B2dOGHwLGQ4cEw=) 2: 2861EryPsrS4a-CLsyIstAV7F9w.roa (hash: +qUAh0c2VsbVAzUE8hPQZ3Z3n7oYsSBDx7kw6q6WdmE=) 3: 71g2hkZMUz1BUryi7fOgG0h-6pI.crl (hash: 7R6Vfg2jOCQg027LLwktQK4rfMwZrabQCvfB3uxufaA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.crl rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 22:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:af:14:35:cc:ed:93:5c:cb:4f:55:53:3b:23:ae:6a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef583686464c533d4152bca2edf3a01b487eea92 Validity Not Before: Jan 11 22:01:35 2026 GMT Not After : Jan 12 22:01:35 2026 GMT Subject: CN=82fe2c3115ed826c8b1cc40a6ad789f36a9c6b96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b5:0e:d4:b3:96:09:f3:71:2d:90:10:c0:09: e8:c3:f8:a1:59:52:ec:ee:3b:9f:ea:b3:5d:a0:9b: 56:f0:af:b5:86:a9:8b:2a:69:92:aa:65:af:87:ea: 90:53:be:8c:2e:90:14:54:ab:34:61:ac:01:84:4f: ce:0d:05:32:3e:53:1f:27:76:94:8c:c2:e3:99:71: 09:34:e3:72:02:fb:12:01:f4:0b:65:9a:87:f0:a8: 1d:09:c2:79:6a:b6:dd:42:ae:e3:6b:e7:81:80:aa: c2:26:c7:f9:db:b4:45:7f:22:2b:3c:33:52:7e:90: 03:fe:9a:4d:7f:ce:c9:09:a2:39:16:3e:87:84:2d: 2a:ea:ed:6d:4f:df:eb:13:87:f2:b6:e5:ec:11:61: 50:7f:ad:de:61:c8:c0:04:be:a6:0c:23:62:1c:74: 7c:80:82:af:9a:f2:b9:da:86:6b:62:85:0d:a1:9b: 84:98:05:da:79:7d:a8:84:00:c6:f3:9b:5a:fe:3a: 04:04:6c:21:9a:90:a4:40:26:ed:1b:59:e3:de:28: 87:26:14:90:20:06:0a:5a:8b:bc:ef:41:e8:9a:1b: b2:06:50:6e:34:65:58:b7:17:1d:8b:13:fa:ba:35: 0c:10:4a:10:fe:b1:d0:77:2f:94:fd:9d:fe:96:a5: 28:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:FE:2C:31:15:ED:82:6C:8B:1C:C4:0A:6A:D7:89:F3:6A:9C:6B:96 X509v3 Authority Key Identifier: keyid:EF:58:36:86:46:4C:53:3D:41:52:BC:A2:ED:F3:A0:1B:48:7E:EA:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:56:92:d9:f1:be:93:c9:e6:ec:fa:ef:30:16:91:50:66:c1: 58:b4:c8:01:a9:4d:f4:11:e1:cf:24:6c:7e:c3:45:dd:76:b7: 12:cd:c0:61:1b:5a:0c:34:6a:e3:c0:92:26:b7:54:85:3b:2b: 74:35:f7:21:4c:51:32:cc:35:ea:bf:33:b0:a4:c5:24:03:ec: 4b:5d:ec:85:68:d8:2a:4f:28:9d:2e:f9:cc:55:11:90:55:a8: 54:eb:22:54:2f:0d:db:eb:8c:25:b9:e5:10:d4:c3:a5:35:77: b5:cd:7d:c5:a4:a7:e1:48:93:35:bd:75:57:82:c4:5b:b0:a9: f9:a4:c7:0e:ee:1c:0c:63:b1:60:47:ac:df:f5:58:3c:05:dd: ab:c3:b0:25:7c:77:c8:0c:f3:1f:de:11:5a:32:f4:ae:a8:34: 50:2d:3a:a4:6e:8b:16:ee:ca:9f:6d:af:b4:2e:9e:4b:c7:08: a9:d2:de:3e:32:db:74:a3:22:1f:9d:68:82:41:f8:7a:47:cf: 25:25:ec:6d:54:17:95:48:42:92:2b:04:a7:02:e2:83:2f:31: ed:4f:88:10:c3:49:ea:91:7d:3f:af:43:b0:64:86:cc:22:90: ae:51:9e:b0:a9:dc:9c:f4:f6:35:03:64:45:00:2f:53:1e:a2: 62:a9:63:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuvFDXM7ZNcy09VUzsjrmpAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNTgzNjg2NDY0YzUzM2Q0MTUyYmNhMmVkZjNhMDFiNDg3 ZWVhOTIwHhcNMjYwMTExMjIwMTM1WhcNMjYwMTEyMjIwMTM1WjAzMTEwLwYDVQQD Eyg4MmZlMmMzMTE1ZWQ4MjZjOGIxY2M0MGE2YWQ3ODlmMzZhOWM2Yjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7UO1LOWCfNxLZAQwAnow/ihWVLs 7juf6rNdoJtW8K+1hqmLKmmSqmWvh+qQU76MLpAUVKs0YawBhE/ODQUyPlMfJ3aU jMLjmXEJNONyAvsSAfQLZZqH8KgdCcJ5arbdQq7ja+eBgKrCJsf527RFfyIrPDNS fpAD/ppNf87JCaI5Fj6HhC0q6u1tT9/rE4fytuXsEWFQf63eYcjABL6mDCNiHHR8 gIKvmvK52oZrYoUNoZuEmAXaeX2ohADG85ta/joEBGwhmpCkQCbtG1nj3iiHJhSQ IAYKWou870HomhuyBlBuNGVYtxcdixP6ujUMEEoQ/rHQdy+U/Z3+lqUoRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIL+LDEV7YJsixzECmrXifNqnGuWMB8GA1UdIwQY MBaAFO9YNoZGTFM9QVK8ou3zoBtIfuqSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzFnMmhrWk1VejFCVXJ5aTdmT2dHMGgtNnBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS82YTc1NGUtNThmNi00YzEwLTlkNWUt ZjQzYWEyNzAwM2M1LzEvNzFnMmhrWk1VejFCVXJ5aTdmT2dHMGgtNnBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS82YTc1NGUtNThmNi00YzEwLTlkNWUtZjQzYWEyNzAwM2M1 LzEvNzFnMmhrWk1VejFCVXJ5aTdmT2dHMGgtNnBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnFaS2fG+ k8nm7PrvMBaRUGbBWLTIAalN9BHhzyRsfsNF3Xa3Es3AYRtaDDRq48CSJrdUhTsr dDX3IUxRMsw16r8zsKTFJAPsS13shWjYKk8onS75zFURkFWoVOsiVC8N2+uMJbnl ENTDpTV3tc19xaSn4UiTNb11V4LEW7Cp+aTHDu4cDGOxYEes3/VYPAXdq8OwJXx3 yAzzH94RWjL0rqg0UC06pG6LFu7Kn22vtC6eS8cIqdLePjLbdKMiH51ogkH4ekfP JSXsbVQXlUhCkisEpwLigy8x7U+IEMNJ6pF9P69DsGSGzCKQrlGesKncnPT2NQNk RQAvUx6iYqljSA== -----END CERTIFICATE-----Generated at Mon Jan 12 07:42:01 2026 by rpki-client