This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d873d0-bde8-4fae-9f6d-5c042dbd069f/1/J6-AiEvc7y-e2bqXgRYKBnyMTws.mft File: J6-AiEvc7y-e2bqXgRYKBnyMTws.mft (raw, json) Hash identifier: rCpKw1Aa/qdPMtJ0YGo1quwTUbNX7YUGvZBnx16yuUc= Subject key identifier: 41:7A:D8:C0:C0:65:A2:78:E1:92:C8:3D:05:37:AC:51:76:2F:20:17 Authority key identifier: 27:AF:80:88:4B:DC:EF:2F:9E:D9:BA:97:81:16:0A:06:7C:8C:4F:0B Certificate issuer: /CN=27af80884bdcef2f9ed9ba9781160a067c8c4f0b Certificate serial: 019B7A4AA8564DEBDF0F6914F05DAFB88171 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6-AiEvc7y-e2bqXgRYKBnyMTws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d873d0-bde8-4fae-9f6d-5c042dbd069f/1/J6-AiEvc7y-e2bqXgRYKBnyMTws.mft Manifest number: 05BA Signing time: Thu 01 Jan 2026 16:01:11 +0000 Manifest this update: Thu 01 Jan 2026 16:01:11 +0000 Manifest next update: Fri 02 Jan 2026 16:01:11 +0000 Files and hashes: 1: J6-AiEvc7y-e2bqXgRYKBnyMTws.crl (hash: PpuIFnW5s+C7IhV0DBvchdcZLxd7fWmvOR1ouJoLDaA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d873d0-bde8-4fae-9f6d-5c042dbd069f/1/J6-AiEvc7y-e2bqXgRYKBnyMTws.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/d873d0-bde8-4fae-9f6d-5c042dbd069f/1/J6-AiEvc7y-e2bqXgRYKBnyMTws.mft rsync://rpki.ripe.net/repository/DEFAULT/J6-AiEvc7y-e2bqXgRYKBnyMTws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:4a:a8:56:4d:eb:df:0f:69:14:f0:5d:af:b8:81:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27af80884bdcef2f9ed9ba9781160a067c8c4f0b Validity Not Before: Jan 1 16:01:11 2026 GMT Not After : Jan 2 16:01:11 2026 GMT Subject: CN=417ad8c0c065a278e192c83d0537ac51762f2017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0a:c1:5b:a3:de:5c:4a:76:a3:56:d4:f4:a4: b0:31:84:55:82:0e:7c:43:02:4e:c3:e1:ee:93:7d: 62:ba:39:f9:2b:51:67:2b:9f:95:18:0e:22:b9:f1: 56:d9:d9:e8:6c:ee:e1:6a:f7:4f:18:a9:fa:e9:19: 96:1c:6a:41:d7:f8:bc:05:f6:70:bb:8f:05:4e:30: eb:c0:06:c0:15:fc:58:97:31:b6:2e:6c:7a:85:6a: dd:65:b3:1d:ce:9e:21:70:58:2b:33:48:76:df:92: cf:95:d0:06:cd:ae:b7:ce:71:c5:46:6a:bb:92:bc: 36:97:a9:27:47:98:45:a6:d4:a2:6c:0b:49:78:9d: d3:dc:d2:d7:db:c8:b2:66:92:6e:33:93:f7:cd:55: 6c:f1:e6:8e:37:9f:af:94:fd:10:b6:36:c5:d0:7b: 12:80:3e:49:00:e7:80:74:4b:fd:9f:4a:1f:17:82: be:06:de:24:95:5a:23:a0:08:d4:1b:16:69:7a:70: e6:e7:27:7d:f1:f3:cf:5f:c7:59:1f:5d:0f:c6:67: d8:97:65:eb:3e:57:ce:fa:43:b8:73:c4:13:0f:5c: c6:39:1a:1a:af:c2:9f:ef:66:1f:d2:fb:22:2a:7e: 10:11:23:4f:bb:b6:ea:f3:d5:2f:8c:fa:68:cd:9d: e8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:7A:D8:C0:C0:65:A2:78:E1:92:C8:3D:05:37:AC:51:76:2F:20:17 X509v3 Authority Key Identifier: keyid:27:AF:80:88:4B:DC:EF:2F:9E:D9:BA:97:81:16:0A:06:7C:8C:4F:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6-AiEvc7y-e2bqXgRYKBnyMTws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d873d0-bde8-4fae-9f6d-5c042dbd069f/1/J6-AiEvc7y-e2bqXgRYKBnyMTws.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d873d0-bde8-4fae-9f6d-5c042dbd069f/1/J6-AiEvc7y-e2bqXgRYKBnyMTws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:21:68:d4:50:b4:f7:73:4f:fe:58:26:1d:4a:7a:a7:80:08: d2:2c:de:66:4e:a9:ce:6d:95:bd:ba:03:4d:5b:dd:26:0c:fb: 3d:63:21:0b:c8:40:20:83:c2:ac:1f:b7:18:73:05:a4:0a:87: a5:5f:05:9e:f1:f1:8b:a6:00:b8:90:0f:41:63:71:1d:ed:70: ac:db:f8:d8:be:ce:a7:47:ec:eb:90:a0:69:2b:c1:7b:54:02: 0e:e8:dd:0b:b7:6b:d0:6d:75:f4:9d:b2:96:1e:74:48:d9:f9: 89:bf:41:30:ca:c6:88:5c:9d:6c:c0:4f:0b:a6:18:22:a1:30: 24:59:88:13:18:2f:50:41:ba:20:00:df:fd:4e:0f:ff:7e:89: 38:97:69:eb:74:b1:e8:64:93:0c:a7:6b:ac:13:e4:5a:12:01: 4c:7c:98:38:84:73:c5:ee:06:fb:1d:e5:25:77:b6:05:ad:0c: 24:5d:df:b2:5f:a7:15:83:a6:34:1a:cb:73:90:5a:c6:24:4f: db:e6:f7:6d:5d:20:bb:a6:cc:0e:7f:4a:0f:08:3b:89:5f:bd: d8:76:68:01:d8:39:c2:e9:ec:be:69:d9:15:39:c1:d1:e0:64: b1:1a:c2:b5:26:51:79:43:1d:98:27:e9:28:2f:22:a4:5e:d4: 11:be:2d:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt6SqhWTevfD2kU8F2vuIFxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YWY4MDg4NGJkY2VmMmY5ZWQ5YmE5NzgxMTYwYTA2N2M4 YzRmMGIwHhcNMjYwMTAxMTYwMTExWhcNMjYwMTAyMTYwMTExWjAzMTEwLwYDVQQD Eyg0MTdhZDhjMGMwNjVhMjc4ZTE5MmM4M2QwNTM3YWM1MTc2MmYyMDE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQrBW6PeXEp2o1bU9KSwMYRVgg58 QwJOw+Huk31iujn5K1FnK5+VGA4iufFW2dnobO7havdPGKn66RmWHGpB1/i8BfZw u48FTjDrwAbAFfxYlzG2Lmx6hWrdZbMdzp4hcFgrM0h235LPldAGza63znHFRmq7 krw2l6knR5hFptSibAtJeJ3T3NLX28iyZpJuM5P3zVVs8eaON5+vlP0QtjbF0HsS gD5JAOeAdEv9n0ofF4K+Bt4klVojoAjUGxZpenDm5yd98fPPX8dZH10PxmfYl2Xr PlfO+kO4c8QTD1zGORoar8Kf72Yf0vsiKn4QESNPu7bq89UvjPpozZ3oIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEF62MDAZaJ44ZLIPQU3rFF2LyAXMB8GA1UdIwQY MBaAFCevgIhL3O8vntm6l4EWCgZ8jE8LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjYtQWlFdmM3eS1lMmJxWGdSWUtCbnlNVHdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9kODczZDAtYmRlOC00ZmFlLTlmNmQt NWMwNDJkYmQwNjlmLzEvSjYtQWlFdmM3eS1lMmJxWGdSWUtCbnlNVHdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9kODczZDAtYmRlOC00ZmFlLTlmNmQtNWMwNDJkYmQwNjlm LzEvSjYtQWlFdmM3eS1lMmJxWGdSWUtCbnlNVHdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQSFo1FC0 93NP/lgmHUp6p4AI0izeZk6pzm2VvboDTVvdJgz7PWMhC8hAIIPCrB+3GHMFpAqH pV8FnvHxi6YAuJAPQWNxHe1wrNv42L7Op0fs65CgaSvBe1QCDujdC7dr0G119J2y lh50SNn5ib9BMMrGiFydbMBPC6YYIqEwJFmIExgvUEG6IADf/U4P/36JOJdp63Sx 6GSTDKdrrBPkWhIBTHyYOIRzxe4G+x3lJXe2Ba0MJF3fsl+nFYOmNBrLc5BaxiRP 2+b3bV0gu6bMDn9KDwg7iV+92HZoAdg5wunsvmnZFTnB0eBksRrCtSZReUMdmCfp KC8ipF7UEb4t9w== -----END CERTIFICATE-----Generated at Thu Jan 1 17:35:35 2026 by rpki-client