This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.mft File: 6pDtaEipyh7yAQ5jTOIbbJrd62I.mft (raw, json) Hash identifier: Eha/BI4bfRrjzpExH9vwNBn9CWndmRSLYz1fsCwtuXo= Subject key identifier: 64:F6:8B:7D:2E:24:59:14:2B:08:A7:D4:DD:6E:04:0B:BE:19:53:71 Authority key identifier: EA:90:ED:68:48:A9:CA:1E:F2:01:0E:63:4C:E2:1B:6C:9A:DD:EB:62 Certificate issuer: /CN=ea90ed6848a9ca1ef2010e634ce21b6c9addeb62 Certificate serial: 019BABA4EBE4E23984CB4A2DE46DC81BE071 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6pDtaEipyh7yAQ5jTOIbbJrd62I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.mft Manifest number: 0484 Signing time: Sun 11 Jan 2026 06:01:10 +0000 Manifest this update: Sun 11 Jan 2026 06:01:10 +0000 Manifest next update: Mon 12 Jan 2026 06:01:10 +0000 Files and hashes: 1: 6pDtaEipyh7yAQ5jTOIbbJrd62I.crl (hash: rzbZFKcI+Iwu9mClE1GzsPyzzoq/gTQ48Y6eav8CtWM=) 2: IPh_6iVNx496xq8P78NbeC5ann4.roa (hash: p/kpws4dnlRTMpuyDTof3NBBpdQNG/GFmv/G6ZFNtHI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.mft rsync://rpki.ripe.net/repository/DEFAULT/6pDtaEipyh7yAQ5jTOIbbJrd62I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 06:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ab:a4:eb:e4:e2:39:84:cb:4a:2d:e4:6d:c8:1b:e0:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea90ed6848a9ca1ef2010e634ce21b6c9addeb62 Validity Not Before: Jan 11 06:01:10 2026 GMT Not After : Jan 12 06:01:10 2026 GMT Subject: CN=64f68b7d2e2459142b08a7d4dd6e040bbe195371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:9f:40:e3:2b:90:bf:90:2d:1a:7f:27:c4:f8: 24:2e:01:a0:eb:83:d0:90:f5:9e:76:cd:81:69:d3: 48:d1:a9:86:79:6e:47:41:6c:18:1e:d5:3c:b4:0b: 53:80:9b:2e:a2:bf:81:41:31:72:1d:e8:25:55:32: 6b:28:c1:15:7e:28:57:79:09:c2:bc:b8:1a:06:e1: f2:39:12:a4:fe:48:f3:a2:49:da:74:f5:c4:57:b9: 53:c7:ea:5d:da:ea:e4:66:7a:44:a0:58:a3:8c:86: bb:5f:ae:6e:59:d3:1a:f5:73:6d:8c:3f:bb:05:5e: cf:c0:2a:dd:d4:65:2f:68:de:ff:f7:2f:7b:c1:59: c8:a9:1c:c5:64:9b:bc:81:e4:6f:a9:46:66:9c:d1: b3:b1:9d:97:1a:f1:01:93:c9:e1:85:57:0f:0d:9f: 08:e1:b4:00:0e:cb:b7:52:f6:3b:d0:ad:22:99:61: fa:a4:de:94:a5:24:8b:67:19:d1:71:a0:e8:e8:bd: 65:4d:f7:f9:4c:84:c3:98:31:4d:57:1a:97:2e:62: f6:bb:71:6f:7c:1f:6c:4b:db:63:07:4b:1f:ae:0d: ab:53:ed:f9:86:cf:f1:08:c8:f2:eb:0d:89:2b:51: a6:78:c9:3d:64:88:b8:43:d7:49:22:f5:60:67:97: 8b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:F6:8B:7D:2E:24:59:14:2B:08:A7:D4:DD:6E:04:0B:BE:19:53:71 X509v3 Authority Key Identifier: keyid:EA:90:ED:68:48:A9:CA:1E:F2:01:0E:63:4C:E2:1B:6C:9A:DD:EB:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6pDtaEipyh7yAQ5jTOIbbJrd62I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:a2:f2:c6:7a:2b:81:60:d1:8e:38:89:d1:bb:af:e2:05:84: 6b:4b:91:c4:ba:c7:b7:e0:4d:1a:f2:0b:8f:fa:be:a0:e2:71: 4a:7d:df:75:d8:94:28:bc:8f:89:41:8a:99:a7:b0:8c:07:0a: 67:52:d4:88:59:ae:76:3b:91:67:86:d4:8b:26:01:75:41:f6: 80:d4:98:a1:4e:6b:3e:ff:6d:ab:f5:8e:ab:a7:04:b9:59:61: a3:c9:ff:c8:c5:5a:cd:4b:af:36:31:16:96:46:00:ba:17:b2: 57:fb:80:83:f3:45:e5:65:40:eb:35:55:3d:e6:df:63:99:b7: 37:a8:bf:e2:e9:a9:de:d3:84:52:46:ac:3d:29:d9:b6:f1:0c: f9:23:96:0c:fc:f8:de:18:cd:61:a7:56:2d:d7:cb:0e:c5:fc: 79:b3:22:d7:1f:3b:07:be:f0:6f:44:2d:f1:ba:8d:88:84:ce: 80:20:72:d9:12:0c:a6:24:1d:66:f0:34:85:ef:33:ef:1b:ae: 14:2e:0b:f6:f5:35:9f:08:09:25:27:ce:03:49:a4:f6:41:1e: e2:ba:3a:5b:b2:eb:74:51:6d:e3:43:37:17:f4:e2:5b:f7:06: 9a:85:7e:83:1d:1b:61:69:ca:a7:52:a0:10:61:52:a4:00:c5: 9c:e6:64:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZurpOvk4jmEy0ot5G3IG+BxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhOTBlZDY4NDhhOWNhMWVmMjAxMGU2MzRjZTIxYjZjOWFk ZGViNjIwHhcNMjYwMTExMDYwMTEwWhcNMjYwMTEyMDYwMTEwWjAzMTEwLwYDVQQD Eyg2NGY2OGI3ZDJlMjQ1OTE0MmIwOGE3ZDRkZDZlMDQwYmJlMTk1MzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1J9A4yuQv5AtGn8nxPgkLgGg64PQ kPWeds2BadNI0amGeW5HQWwYHtU8tAtTgJsuor+BQTFyHeglVTJrKMEVfihXeQnC vLgaBuHyORKk/kjzoknadPXEV7lTx+pd2urkZnpEoFijjIa7X65uWdMa9XNtjD+7 BV7PwCrd1GUvaN7/9y97wVnIqRzFZJu8geRvqUZmnNGzsZ2XGvEBk8nhhVcPDZ8I 4bQADsu3UvY70K0imWH6pN6UpSSLZxnRcaDo6L1lTff5TITDmDFNVxqXLmL2u3Fv fB9sS9tjB0sfrg2rU+35hs/xCMjy6w2JK1GmeMk9ZIi4Q9dJIvVgZ5eLdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGT2i30uJFkUKwin1N1uBAu+GVNxMB8GA1UdIwQY MBaAFOqQ7WhIqcoe8gEOY0ziG2ya3etiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnBEdGFFaXB5aDd5QVE1alRPSWJiSnJkNjJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi85YzFlODMtZTcxNC00YzQ1LTg2ODUt NTg2YjZkMDQ3ODc4LzEvNnBEdGFFaXB5aDd5QVE1alRPSWJiSnJkNjJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi85YzFlODMtZTcxNC00YzQ1LTg2ODUtNTg2YjZkMDQ3ODc4 LzEvNnBEdGFFaXB5aDd5QVE1alRPSWJiSnJkNjJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ6Lyxnor gWDRjjiJ0buv4gWEa0uRxLrHt+BNGvILj/q+oOJxSn3fddiUKLyPiUGKmaewjAcK Z1LUiFmudjuRZ4bUiyYBdUH2gNSYoU5rPv9tq/WOq6cEuVlho8n/yMVazUuvNjEW lkYAuheyV/uAg/NF5WVA6zVVPebfY5m3N6i/4ump3tOEUkasPSnZtvEM+SOWDPz4 3hjNYadWLdfLDsX8ebMi1x87B77wb0Qt8bqNiITOgCBy2RIMpiQdZvA0he8z7xuu FC4L9vU1nwgJJSfOA0mk9kEe4ro6W7LrdFFt40M3F/TiW/cGmoV+gx0bYWnKp1Kg EGFSpADFnOZk1A== -----END CERTIFICATE-----Generated at Sun Jan 11 14:44:19 2026 by rpki-client