This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/6e02e8-7e05-4fcf-8a6a-37c2342c5c2f/1/q06x4MU6aA6qQLjHzT8hzJYEPoo.mft File: q06x4MU6aA6qQLjHzT8hzJYEPoo.mft (raw, json) Hash identifier: cOI41bY0m1dzqMM1H2xKeasPDOpS1ASdGyEFNUullWM= Subject key identifier: 61:F8:6A:6B:26:74:30:AF:57:AD:B9:75:94:C9:7D:09:96:C8:C1:E6 Authority key identifier: AB:4E:B1:E0:C5:3A:68:0E:AA:40:B8:C7:CD:3F:21:CC:96:04:3E:8A Certificate issuer: /CN=ab4eb1e0c53a680eaa40b8c7cd3f21cc96043e8a Certificate serial: 019B7AB7F79EFDB5629B6ACF65E3C5162C9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q06x4MU6aA6qQLjHzT8hzJYEPoo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/6e02e8-7e05-4fcf-8a6a-37c2342c5c2f/1/q06x4MU6aA6qQLjHzT8hzJYEPoo.mft Manifest number: 17A4 Signing time: Thu 01 Jan 2026 18:00:35 +0000 Manifest this update: Thu 01 Jan 2026 18:00:35 +0000 Manifest next update: Fri 02 Jan 2026 18:00:35 +0000 Files and hashes: 1: q06x4MU6aA6qQLjHzT8hzJYEPoo.crl (hash: i2SaPnsk6rwuQb9F6491Fq7tx6WiqM8J07OkqxnGPRE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/6e02e8-7e05-4fcf-8a6a-37c2342c5c2f/1/q06x4MU6aA6qQLjHzT8hzJYEPoo.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/6e02e8-7e05-4fcf-8a6a-37c2342c5c2f/1/q06x4MU6aA6qQLjHzT8hzJYEPoo.mft rsync://rpki.ripe.net/repository/DEFAULT/q06x4MU6aA6qQLjHzT8hzJYEPoo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 17:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:b7:f7:9e:fd:b5:62:9b:6a:cf:65:e3:c5:16:2c:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab4eb1e0c53a680eaa40b8c7cd3f21cc96043e8a Validity Not Before: Jan 1 18:00:35 2026 GMT Not After : Jan 2 18:00:35 2026 GMT Subject: CN=61f86a6b267430af57adb97594c97d0996c8c1e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6d:01:41:bf:da:8f:d3:ed:3b:9e:4d:3b:a8: aa:74:c8:10:a7:36:71:20:e6:0d:95:c4:3c:2f:b7: 76:db:37:e3:7a:76:48:62:39:31:cb:7e:94:b8:43: 4c:c8:86:7f:7c:49:10:54:a9:04:93:d8:62:b9:b0: 43:8c:fd:22:36:ea:26:a1:37:67:b9:ea:21:4f:62: 01:ac:1f:66:fd:f8:20:b3:bc:a4:bb:fe:f6:d5:71: 92:ed:fb:31:9b:87:95:c3:cc:d3:29:76:70:3d:9a: d2:dc:e4:e1:ac:0f:9d:16:32:af:85:7d:99:e2:85: 6f:e7:4b:0d:43:dd:bf:53:aa:e7:6e:c4:7e:eb:4f: b9:a8:9b:81:db:5c:79:2a:03:a1:3d:9a:9c:4c:8d: 1a:26:7f:47:ca:23:48:9d:5d:09:4c:5f:f1:4c:5e: f8:72:53:22:62:eb:45:b7:6d:aa:a9:c9:9d:20:c8: 86:f5:91:9c:9d:7c:e0:cb:93:a3:06:d7:01:ac:94: 61:b2:3a:08:6a:e9:b1:f9:56:55:3f:f1:03:33:ae: ab:20:49:7c:9b:40:2e:32:5b:44:23:72:76:84:dc: 3a:bc:7d:33:96:51:32:4e:06:0e:24:b3:3e:89:d6: ce:b7:28:bd:8b:0f:ea:75:f9:56:0d:96:0a:69:e0: fd:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:F8:6A:6B:26:74:30:AF:57:AD:B9:75:94:C9:7D:09:96:C8:C1:E6 X509v3 Authority Key Identifier: keyid:AB:4E:B1:E0:C5:3A:68:0E:AA:40:B8:C7:CD:3F:21:CC:96:04:3E:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q06x4MU6aA6qQLjHzT8hzJYEPoo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6e02e8-7e05-4fcf-8a6a-37c2342c5c2f/1/q06x4MU6aA6qQLjHzT8hzJYEPoo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6e02e8-7e05-4fcf-8a6a-37c2342c5c2f/1/q06x4MU6aA6qQLjHzT8hzJYEPoo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:9e:16:42:62:f6:3d:90:2f:97:a1:ba:8a:96:70:1d:3c:86: 0e:bc:c0:47:4b:e0:f0:31:f1:83:b9:e8:40:f2:f5:60:c9:6b: e2:aa:f8:bc:32:6b:9c:0d:06:49:01:d4:be:e1:b8:cd:23:3e: 67:de:9c:83:2f:a7:a3:01:15:f3:97:7a:a5:b2:7e:53:49:7a: bc:9e:13:af:08:2b:67:46:c4:53:64:54:a6:5f:52:96:b6:37: c0:46:61:8f:48:76:77:96:4a:9b:25:9d:41:9b:df:0a:d5:af: 2d:ac:42:29:00:8a:fb:41:c1:81:ca:ef:cc:91:66:b8:4e:ae: b1:52:51:c1:aa:b5:73:ca:a9:86:31:25:ca:c3:09:c2:50:9a: cb:12:3b:be:13:ec:d4:08:cb:59:58:32:a4:5a:37:b5:36:f0: d8:f7:b4:e6:66:5f:4f:e0:fe:dd:71:ef:0c:14:bd:bf:1f:26: 9e:75:dc:84:f5:96:6d:e6:4a:e3:1f:c0:fd:33:2d:32:11:7c: a5:26:81:9a:48:ef:13:6a:a0:ea:46:7c:1e:a4:b0:b6:90:0d: c7:1e:8f:fa:05:41:26:3e:a9:89:c5:18:11:92:4f:3b:4f:2c: 49:a7:0d:02:67:10:50:c8:7e:a5:8e:7d:cd:86:d1:c5:a3:aa: fd:9b:38:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt6t/ee/bVim2rPZePFFiybMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiNGViMWUwYzUzYTY4MGVhYTQwYjhjN2NkM2YyMWNjOTYw NDNlOGEwHhcNMjYwMTAxMTgwMDM1WhcNMjYwMTAyMTgwMDM1WjAzMTEwLwYDVQQD Eyg2MWY4NmE2YjI2NzQzMGFmNTdhZGI5NzU5NGM5N2QwOTk2YzhjMWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoG0BQb/aj9PtO55NO6iqdMgQpzZx IOYNlcQ8L7d22zfjenZIYjkxy36UuENMyIZ/fEkQVKkEk9hiubBDjP0iNuomoTdn ueohT2IBrB9m/fggs7yku/721XGS7fsxm4eVw8zTKXZwPZrS3OThrA+dFjKvhX2Z 4oVv50sNQ92/U6rnbsR+60+5qJuB21x5KgOhPZqcTI0aJn9HyiNInV0JTF/xTF74 clMiYutFt22qqcmdIMiG9ZGcnXzgy5OjBtcBrJRhsjoIaumx+VZVP/EDM66rIEl8 m0AuMltEI3J2hNw6vH0zllEyTgYOJLM+idbOtyi9iw/qdflWDZYKaeD9uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGH4amsmdDCvV625dZTJfQmWyMHmMB8GA1UdIwQY MBaAFKtOseDFOmgOqkC4x80/IcyWBD6KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTA2eDRNVTZhQTZxUUxqSHpUOGh6SllFUG9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy82ZTAyZTgtN2UwNS00ZmNmLThhNmEt MzdjMjM0MmM1YzJmLzEvcTA2eDRNVTZhQTZxUUxqSHpUOGh6SllFUG9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy82ZTAyZTgtN2UwNS00ZmNmLThhNmEtMzdjMjM0MmM1YzJm LzEvcTA2eDRNVTZhQTZxUUxqSHpUOGh6SllFUG9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdJ4WQmL2 PZAvl6G6ipZwHTyGDrzAR0vg8DHxg7noQPL1YMlr4qr4vDJrnA0GSQHUvuG4zSM+ Z96cgy+nowEV85d6pbJ+U0l6vJ4TrwgrZ0bEU2RUpl9SlrY3wEZhj0h2d5ZKmyWd QZvfCtWvLaxCKQCK+0HBgcrvzJFmuE6usVJRwaq1c8qphjElysMJwlCayxI7vhPs 1AjLWVgypFo3tTbw2Pe05mZfT+D+3XHvDBS9vx8mnnXchPWWbeZK4x/A/TMtMhF8 pSaBmkjvE2qg6kZ8HqSwtpANxx6P+gVBJj6picUYEZJPO08sSacNAmcQUMh+pY59 zYbRxaOq/Zs4hA== -----END CERTIFICATE-----Generated at Thu Jan 1 19:47:30 2026 by rpki-client