This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.mft File: 6XlAPNaMmN9zjjEGKQOgsyJgC1k.mft (raw, json) Hash identifier: 4MvnYqbcXporMwfFvVMxCfk8xpPShaS+NSWKT/KGT4o= Subject key identifier: AF:87:19:38:57:C7:42:D5:56:16:26:17:9E:9B:68:A7:00:B8:80:8A Authority key identifier: E9:79:40:3C:D6:8C:98:DF:73:8E:31:06:29:03:A0:B3:22:60:0B:59 Certificate issuer: /CN=e979403cd68c98df738e31062903a0b322600b59 Certificate serial: 019BB3283D1E8D6CB580CD582F3F2F66F801 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XlAPNaMmN9zjjEGKQOgsyJgC1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.mft Manifest number: 036E Signing time: Mon 12 Jan 2026 17:01:57 +0000 Manifest this update: Mon 12 Jan 2026 17:01:57 +0000 Manifest next update: Tue 13 Jan 2026 17:01:57 +0000 Files and hashes: 1: 6XlAPNaMmN9zjjEGKQOgsyJgC1k.crl (hash: Rpqs3N9iSJN5+vQQOj0AdhyDzWFndHT0MLVTH6479zQ=) 2: 7xaTNR1-LrDroCcVfd51GMULPgk.roa (hash: 1/QOFIY+bIYf3uAnfGJ3BJ+RAzrDoN7j26g8Ffhh1eo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.crl rsync://rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.mft rsync://rpki.ripe.net/repository/DEFAULT/6XlAPNaMmN9zjjEGKQOgsyJgC1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b3:28:3d:1e:8d:6c:b5:80:cd:58:2f:3f:2f:66:f8:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e979403cd68c98df738e31062903a0b322600b59 Validity Not Before: Jan 12 17:01:57 2026 GMT Not After : Jan 13 17:01:57 2026 GMT Subject: CN=af87193857c742d5561626179e9b68a700b8808a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:78:88:96:2c:39:0a:52:fd:df:44:eb:87:96: cb:e0:3c:45:4b:7e:46:df:7c:de:69:5c:62:af:b8: bd:2b:ff:49:60:ad:3b:fa:05:3e:aa:56:48:f6:b6: 9c:64:ec:4b:cc:79:ad:6c:b3:ce:96:3c:24:d0:7a: 83:e9:3c:9b:e0:4f:ec:cb:ca:cd:96:84:c9:9a:d1: d8:0d:c7:f1:4c:15:27:ee:6f:97:af:85:4e:ae:bd: aa:b5:25:db:0a:a1:7d:d9:a4:a9:cd:16:26:4a:ef: d0:71:f9:60:16:a3:d7:31:b3:8b:32:1a:27:f8:c1: eb:21:cb:61:0e:20:09:aa:b8:af:b6:ec:18:1b:f9: 11:7d:10:8a:a2:85:be:dd:1b:bd:b7:d7:b6:50:5e: 21:f1:93:f9:f8:b9:ee:70:04:e3:00:d0:d8:8b:ca: 2e:99:68:a1:f6:0f:13:ae:07:b0:08:0b:d4:87:f0: 1e:60:5c:c5:cb:0f:53:93:ef:58:c9:29:53:4d:74: 5a:06:df:55:d7:1c:19:6a:86:93:40:fb:67:c3:ca: 21:80:32:97:88:a2:f9:48:d2:ed:3b:7d:d5:a1:2b: ac:0b:f7:c7:0c:ca:3e:25:af:7c:f9:3d:aa:15:44: 45:f6:f9:a7:e9:bd:01:da:3a:ea:7e:55:63:a6:b5: 95:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:87:19:38:57:C7:42:D5:56:16:26:17:9E:9B:68:A7:00:B8:80:8A X509v3 Authority Key Identifier: keyid:E9:79:40:3C:D6:8C:98:DF:73:8E:31:06:29:03:A0:B3:22:60:0B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XlAPNaMmN9zjjEGKQOgsyJgC1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:df:35:e6:02:22:db:94:39:7c:07:5e:0c:9e:fa:a9:75:31: f6:3c:06:8f:10:a7:47:d7:5b:59:7e:a8:39:7c:aa:27:be:bc: 6e:4b:ac:1a:d5:97:e3:38:b9:1e:a3:3f:e3:e5:dd:09:82:74: 6a:e2:e0:41:3e:d7:bd:e5:86:59:00:65:5c:10:97:b4:2a:be: e8:2a:65:7a:2d:83:b8:37:4d:5d:cf:46:a8:3e:e7:d1:ff:34: 7f:e0:02:ff:b7:c8:34:82:45:b5:df:95:aa:62:68:c2:50:35: a0:23:aa:1c:85:9c:af:34:6d:a4:dc:32:af:ab:bf:d8:e2:b1: 70:66:9d:c8:dd:b0:3d:8d:c8:dc:50:ab:fe:d7:ec:29:b2:88: ab:87:e3:ee:9d:f5:35:c9:12:f5:2c:fe:25:02:f0:fb:4d:66: c2:0e:e2:50:32:40:e2:ad:07:79:82:02:40:c6:b1:f5:30:a9: 9b:d7:00:b0:ae:f7:b7:20:1d:74:f1:ac:04:4e:bf:df:d0:7e: bf:68:6d:f4:45:e7:36:3d:05:13:e6:f7:ba:28:7c:e6:27:90: 9d:88:ae:71:72:7f:02:9b:6c:fd:6e:85:64:f5:11:90:f6:6a: 7f:2f:0b:00:db:f7:ba:dd:d4:05:da:90:6f:5b:f1:4e:ba:03: 25:e8:b1:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuzKD0ejWy1gM1YLz8vZvgBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5Nzk0MDNjZDY4Yzk4ZGY3MzhlMzEwNjI5MDNhMGIzMjI2 MDBiNTkwHhcNMjYwMTEyMTcwMTU3WhcNMjYwMTEzMTcwMTU3WjAzMTEwLwYDVQQD EyhhZjg3MTkzODU3Yzc0MmQ1NTYxNjI2MTc5ZTliNjhhNzAwYjg4MDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtniIliw5ClL930Trh5bL4DxFS35G 33zeaVxir7i9K/9JYK07+gU+qlZI9racZOxLzHmtbLPOljwk0HqD6Tyb4E/sy8rN loTJmtHYDcfxTBUn7m+Xr4VOrr2qtSXbCqF92aSpzRYmSu/QcflgFqPXMbOLMhon +MHrIcthDiAJqrivtuwYG/kRfRCKooW+3Ru9t9e2UF4h8ZP5+LnucATjANDYi8ou mWih9g8TrgewCAvUh/AeYFzFyw9Tk+9YySlTTXRaBt9V1xwZaoaTQPtnw8ohgDKX iKL5SNLtO33VoSusC/fHDMo+Ja98+T2qFURF9vmn6b0B2jrqflVjprWV6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK+HGThXx0LVVhYmF56baKcAuICKMB8GA1UdIwQY MBaAFOl5QDzWjJjfc44xBikDoLMiYAtZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlhsQVBOYU1tTjl6ampFR0tRT2dzeUpnQzFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zMDNhOGYtMzY3Zi00Y2ZhLTlhNzgt ZTgxNjIxYjYxZDY1LzEvNlhsQVBOYU1tTjl6ampFR0tRT2dzeUpnQzFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8zMDNhOGYtMzY3Zi00Y2ZhLTlhNzgtZTgxNjIxYjYxZDY1 LzEvNlhsQVBOYU1tTjl6ampFR0tRT2dzeUpnQzFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACN815gIi 25Q5fAdeDJ76qXUx9jwGjxCnR9dbWX6oOXyqJ768bkusGtWX4zi5HqM/4+XdCYJ0 auLgQT7XveWGWQBlXBCXtCq+6Cplei2DuDdNXc9GqD7n0f80f+AC/7fINIJFtd+V qmJowlA1oCOqHIWcrzRtpNwyr6u/2OKxcGadyN2wPY3I3FCr/tfsKbKIq4fj7p31 NckS9Sz+JQLw+01mwg7iUDJA4q0HeYICQMax9TCpm9cAsK73tyAddPGsBE6/39B+ v2ht9EXnNj0FE+b3uih85ieQnYiucXJ/Apts/W6FZPURkPZqfy8LANv3ut3UBdqQ b1vxTroDJeixSw== -----END CERTIFICATE-----Generated at Mon Jan 12 23:51:19 2026 by rpki-client