This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b52ae1-09a6-4458-9d06-0b6908737d7f/1/k6P6S3jlD0r5e-KF4ukQpdHtxjk.mft File: k6P6S3jlD0r5e-KF4ukQpdHtxjk.mft (raw, json) Hash identifier: W9qMOr8rqzc3Qe/EEPwOG9wUPDw8p0J8ywRuJ8GN39s= Subject key identifier: F3:D8:BA:10:CB:8C:44:1D:D6:6E:40:1A:12:0C:7D:5C:0D:29:B2:5A Authority key identifier: 93:A3:FA:4B:78:E5:0F:4A:F9:7B:E2:85:E2:E9:10:A5:D1:ED:C6:39 Certificate issuer: /CN=93a3fa4b78e50f4af97be285e2e910a5d1edc639 Certificate serial: 019C4434A8846D42FA783D3EB20515D7D249 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6P6S3jlD0r5e-KF4ukQpdHtxjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b52ae1-09a6-4458-9d06-0b6908737d7f/1/k6P6S3jlD0r5e-KF4ukQpdHtxjk.mft Manifest number: 013B Signing time: Mon 09 Feb 2026 21:00:27 +0000 Manifest this update: Mon 09 Feb 2026 21:00:27 +0000 Manifest next update: Tue 10 Feb 2026 21:00:27 +0000 Files and hashes: 1: k6P6S3jlD0r5e-KF4ukQpdHtxjk.crl (hash: 2RteAIJ7UJoQ1RyX6BWAJ5T9FGvX2lqR/SgrG2AygWc=) 2: nNA82N_hjVXNM_yczV3h8R-2MFg.roa (hash: O4Af+6D81H3k5D2s05YzXco56fg23wfzXj6Epvc/dd0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b52ae1-09a6-4458-9d06-0b6908737d7f/1/k6P6S3jlD0r5e-KF4ukQpdHtxjk.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b52ae1-09a6-4458-9d06-0b6908737d7f/1/k6P6S3jlD0r5e-KF4ukQpdHtxjk.mft rsync://rpki.ripe.net/repository/DEFAULT/k6P6S3jlD0r5e-KF4ukQpdHtxjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:34:a8:84:6d:42:fa:78:3d:3e:b2:05:15:d7:d2:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93a3fa4b78e50f4af97be285e2e910a5d1edc639 Validity Not Before: Feb 9 21:00:27 2026 GMT Not After : Feb 10 21:00:27 2026 GMT Subject: CN=f3d8ba10cb8c441dd66e401a120c7d5c0d29b25a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:68:ee:a3:7f:14:af:b5:6a:3c:9a:ce:cb:c6: 33:9f:46:7f:8b:d1:5f:58:ae:35:0c:66:10:9d:bb: 20:b1:48:ed:5d:a7:c3:4d:da:58:34:67:55:02:ba: a4:03:bb:2f:62:ae:c6:e9:f5:12:47:8f:75:e2:36: 84:dd:ff:dd:69:0f:8e:34:06:25:3c:62:ef:2b:e7: 6c:09:eb:79:04:d8:c9:ad:3f:d0:98:af:2a:20:a1: 5a:85:2a:96:95:45:22:49:79:97:07:4a:27:3b:fd: f7:1e:ef:50:c4:a9:fc:54:84:ff:27:ba:76:6a:c2: c6:64:0a:ca:7c:c8:3b:a6:d2:3b:72:f2:3c:9e:6d: 45:57:7b:74:4e:1f:57:2b:2e:20:32:ac:03:30:2b: 7c:3e:d6:65:f4:87:10:3e:77:f7:9d:a2:72:9b:15: eb:68:27:03:0e:47:48:9e:2a:f5:d7:ac:ac:bd:97: 99:1d:5d:43:92:9e:8e:58:4c:6e:92:b2:95:e0:17: bc:34:ba:c7:c6:99:83:05:2a:ce:df:49:03:05:86: ca:cd:d2:6c:c4:5d:5d:78:37:aa:f1:93:72:cb:01: 86:56:2e:be:ac:41:a7:bd:c1:e0:6d:8e:71:3f:b4: 0a:08:29:a4:80:91:d9:2e:d9:ca:6e:a7:24:ee:98: 51:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:D8:BA:10:CB:8C:44:1D:D6:6E:40:1A:12:0C:7D:5C:0D:29:B2:5A X509v3 Authority Key Identifier: keyid:93:A3:FA:4B:78:E5:0F:4A:F9:7B:E2:85:E2:E9:10:A5:D1:ED:C6:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6P6S3jlD0r5e-KF4ukQpdHtxjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b52ae1-09a6-4458-9d06-0b6908737d7f/1/k6P6S3jlD0r5e-KF4ukQpdHtxjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b52ae1-09a6-4458-9d06-0b6908737d7f/1/k6P6S3jlD0r5e-KF4ukQpdHtxjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:6a:ec:12:d5:6b:32:f3:64:1f:6e:79:e6:6d:39:eb:09:fa: f3:1f:d5:c5:cf:f4:ee:6f:1c:c0:fd:69:bc:95:cf:f1:5d:04: b2:9a:fe:3d:19:8c:00:16:1d:93:31:53:26:40:e9:18:90:5a: de:84:15:78:73:cf:6f:9c:e4:5b:a0:b5:2a:2f:5d:48:14:80: d8:f3:29:d8:19:78:65:f6:d0:db:1c:8b:18:d8:b3:1e:00:8c: dd:bf:64:c0:fc:1d:80:73:4f:4f:94:67:b7:62:f4:f7:3d:3e: 52:cc:9f:f9:79:01:b3:34:a7:54:5d:25:c5:b1:39:e0:53:63: 02:ba:07:f6:d2:8c:3f:8d:fd:89:1c:14:fb:ba:24:86:4c:20: 0e:b2:21:fa:6b:13:08:36:95:57:d5:2f:1c:cb:23:7f:36:e7: 7d:f8:98:78:48:3f:38:bb:e3:96:c2:7d:26:f7:5e:be:d5:cd: 1b:ec:2e:01:e5:26:50:8c:43:50:e0:51:29:bf:de:7b:7d:69: 00:d6:4d:c9:3f:36:38:ab:65:76:1d:5f:9e:cc:65:15:6b:7f: 38:da:c1:72:a2:f6:eb:84:30:e0:dd:71:a9:1c:e2:10:43:80: fb:6b:7a:7a:a3:6f:0a:c5:cc:eb:15:70:19:90:f5:a6:80:2c: b8:be:2b:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxENKiEbUL6eD0+sgUV19JJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzYTNmYTRiNzhlNTBmNGFmOTdiZTI4NWUyZTkxMGE1ZDFl ZGM2MzkwHhcNMjYwMjA5MjEwMDI3WhcNMjYwMjEwMjEwMDI3WjAzMTEwLwYDVQQD EyhmM2Q4YmExMGNiOGM0NDFkZDY2ZTQwMWExMjBjN2Q1YzBkMjliMjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGjuo38Ur7VqPJrOy8Yzn0Z/i9Ff WK41DGYQnbsgsUjtXafDTdpYNGdVArqkA7svYq7G6fUSR4914jaE3f/daQ+ONAYl PGLvK+dsCet5BNjJrT/QmK8qIKFahSqWlUUiSXmXB0onO/33Hu9QxKn8VIT/J7p2 asLGZArKfMg7ptI7cvI8nm1FV3t0Th9XKy4gMqwDMCt8PtZl9IcQPnf3naJymxXr aCcDDkdInir116ysvZeZHV1Dkp6OWExukrKV4Be8NLrHxpmDBSrO30kDBYbKzdJs xF1deDeq8ZNyywGGVi6+rEGnvcHgbY5xP7QKCCmkgJHZLtnKbqck7phRnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPPYuhDLjEQd1m5AGhIMfVwNKbJaMB8GA1UdIwQY MBaAFJOj+kt45Q9K+XviheLpEKXR7cY5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazZQNlMzamxEMHI1ZS1LRjR1a1FwZEh0eGprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iNTJhZTEtMDlhNi00NDU4LTlkMDYt MGI2OTA4NzM3ZDdmLzEvazZQNlMzamxEMHI1ZS1LRjR1a1FwZEh0eGprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iNTJhZTEtMDlhNi00NDU4LTlkMDYtMGI2OTA4NzM3ZDdm LzEvazZQNlMzamxEMHI1ZS1LRjR1a1FwZEh0eGprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGGrsEtVr MvNkH2555m056wn68x/Vxc/07m8cwP1pvJXP8V0Espr+PRmMABYdkzFTJkDpGJBa 3oQVeHPPb5zkW6C1Ki9dSBSA2PMp2Bl4ZfbQ2xyLGNizHgCM3b9kwPwdgHNPT5Rn t2L09z0+Usyf+XkBszSnVF0lxbE54FNjAroH9tKMP439iRwU+7okhkwgDrIh+msT CDaVV9UvHMsjfzbnffiYeEg/OLvjlsJ9JvdevtXNG+wuAeUmUIxDUOBRKb/ee31p ANZNyT82OKtldh1fnsxlFWt/ONrBcqL264Qw4N1xqRziEEOA+2t6eqNvCsXM6xVw GZD1poAsuL4rnA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:47:32 2026 by rpki-client