This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft File: X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft (raw, json) Hash identifier: 3kdeqrufbbsbil0veO51IjiBdzmlZV5Msr1erctAU9Q= Subject key identifier: EB:C7:14:C8:5F:CD:61:8B:EA:24:73:8B:47:36:5C:13:9D:69:86:47 Authority key identifier: 5F:A6:25:DC:39:8C:B7:00:F7:2F:A8:EA:6F:43:13:BF:33:35:A5:3B Certificate issuer: /CN=5fa625dc398cb700f72fa8ea6f4313bf3335a53b Certificate serial: 019C43228721B3C76FBFFD7AE26EF3573B9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft Manifest number: 12E9 Signing time: Mon 09 Feb 2026 16:01:02 +0000 Manifest this update: Mon 09 Feb 2026 16:01:02 +0000 Manifest next update: Tue 10 Feb 2026 16:01:02 +0000 Files and hashes: 1: X6Yl3DmMtwD3L6jqb0MTvzM1pTs.crl (hash: NQ9WNczd2t3z+QFADFpPnmEMoqDAKvJAivrcA0IuUwM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.crl rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft rsync://rpki.ripe.net/repository/DEFAULT/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:87:21:b3:c7:6f:bf:fd:7a:e2:6e:f3:57:3b:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fa625dc398cb700f72fa8ea6f4313bf3335a53b Validity Not Before: Feb 9 16:01:02 2026 GMT Not After : Feb 10 16:01:02 2026 GMT Subject: CN=ebc714c85fcd618bea24738b47365c139d698647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:35:c3:7e:16:e1:77:ab:1e:de:ba:20:64:2c: ee:78:55:42:39:2e:b8:08:67:9d:7f:30:24:72:e8: 7d:24:6c:b4:4d:32:15:6e:58:da:2d:d7:b4:ba:26: 48:a7:f4:04:31:42:17:16:bd:5b:85:7e:18:3c:20: d7:37:3c:58:5f:c4:93:c7:6d:45:f0:08:86:2a:3b: f6:3f:10:c7:b8:55:ee:47:54:62:ee:79:b1:20:f4: 8e:d6:4c:cc:ef:34:16:c1:a2:b6:e4:f5:81:92:e1: 55:2f:a9:35:c5:bc:e2:55:7e:d2:7f:25:38:b7:ca: d7:e4:b7:96:5a:01:cd:ae:00:30:e8:68:49:95:36: 46:fc:18:cd:18:5d:a2:5d:05:60:e7:ae:7a:2e:ae: ef:94:72:d4:5b:94:63:ed:90:d7:5d:81:58:f4:cd: f2:69:a2:40:cb:b5:e4:47:2e:35:e3:65:84:1e:ab: 19:52:ef:08:18:ba:eb:6d:af:74:1c:0d:11:0b:52: 21:5c:fa:dd:df:a5:bd:72:0f:da:e6:8a:5e:1b:c5: 7d:16:e7:b8:c4:e6:dc:d7:39:f3:70:54:a3:c2:29: ef:e7:0a:9a:f3:b8:de:85:a0:82:13:e9:92:67:4b: 8d:8c:93:24:49:53:6e:36:9d:24:17:a9:41:dc:a7: 4a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:C7:14:C8:5F:CD:61:8B:EA:24:73:8B:47:36:5C:13:9D:69:86:47 X509v3 Authority Key Identifier: keyid:5F:A6:25:DC:39:8C:B7:00:F7:2F:A8:EA:6F:43:13:BF:33:35:A5:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:1a:4d:29:62:ae:6b:66:18:6d:68:e6:ec:c1:81:e5:3b:14: df:05:f5:ba:2e:a5:8f:14:91:4e:1a:fa:3b:fb:3e:28:03:68: 35:40:6b:a0:77:89:27:89:aa:4e:04:73:18:99:a5:11:f2:27: 24:8b:83:01:8b:83:0a:38:aa:b5:f2:38:47:65:d2:76:14:2c: e0:4e:9d:cb:cf:5d:6a:b1:f3:c8:2b:be:1c:3c:99:3e:2b:2a: 92:18:01:00:60:41:23:fe:68:8d:2a:72:62:1a:84:a6:a8:05: d2:c4:8c:4d:6f:6b:5c:43:c0:68:41:d6:b3:43:57:31:16:94: 0e:07:64:a8:00:e1:48:c7:27:25:81:e9:74:5f:e5:df:08:ea: dd:f7:31:9c:1a:76:ad:68:22:b1:dd:f8:2a:23:e0:1e:b1:3c: c9:d4:c7:4d:53:6e:ac:11:e7:5a:be:ef:4a:0f:1d:b9:be:13: 5f:04:6a:d4:e9:0d:16:d4:07:56:f8:3a:db:5a:25:4f:db:d3: b5:46:7c:f2:8a:fb:2c:bc:75:67:71:04:25:0a:4e:b1:be:1b: 48:ec:de:3a:d3:8e:7f:57:15:68:5f:e6:2d:4a:a4:82:6b:f6: c6:34:6f:3f:21:0d:f5:64:d5:35:c4:7f:df:25:99:24:56:f3: db:e2:6f:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIochs8dvv/164m7zVzucMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYTYyNWRjMzk4Y2I3MDBmNzJmYThlYTZmNDMxM2JmMzMz NWE1M2IwHhcNMjYwMjA5MTYwMTAyWhcNMjYwMjEwMTYwMTAyWjAzMTEwLwYDVQQD EyhlYmM3MTRjODVmY2Q2MThiZWEyNDczOGI0NzM2NWMxMzlkNjk4NjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDXDfhbhd6se3rogZCzueFVCOS64 CGedfzAkcuh9JGy0TTIVbljaLde0uiZIp/QEMUIXFr1bhX4YPCDXNzxYX8STx21F 8AiGKjv2PxDHuFXuR1Ri7nmxIPSO1kzM7zQWwaK25PWBkuFVL6k1xbziVX7SfyU4 t8rX5LeWWgHNrgAw6GhJlTZG/BjNGF2iXQVg5656Lq7vlHLUW5Rj7ZDXXYFY9M3y aaJAy7XkRy4142WEHqsZUu8IGLrrba90HA0RC1IhXPrd36W9cg/a5opeG8V9Fue4 xObc1znzcFSjwinv5wqa87jehaCCE+mSZ0uNjJMkSVNuNp0kF6lB3KdKiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOvHFMhfzWGL6iRzi0c2XBOdaYZHMB8GA1UdIwQY MBaAFF+mJdw5jLcA9y+o6m9DE78zNaU7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDZZbDNEbU10d0QzTDZqcWIwTVR2ek0xcFRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8xNzA2MmEtOTZiZC00OTNmLThiMjAt ZWFjMTA2MzAwYjBhLzEvWDZZbDNEbU10d0QzTDZqcWIwTVR2ek0xcFRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8xNzA2MmEtOTZiZC00OTNmLThiMjAtZWFjMTA2MzAwYjBh LzEvWDZZbDNEbU10d0QzTDZqcWIwTVR2ek0xcFRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAxpNKWKu a2YYbWjm7MGB5TsU3wX1ui6ljxSRThr6O/s+KANoNUBroHeJJ4mqTgRzGJmlEfIn JIuDAYuDCjiqtfI4R2XSdhQs4E6dy89darHzyCu+HDyZPisqkhgBAGBBI/5ojSpy YhqEpqgF0sSMTW9rXEPAaEHWs0NXMRaUDgdkqADhSMcnJYHpdF/l3wjq3fcxnBp2 rWgisd34KiPgHrE8ydTHTVNurBHnWr7vSg8dub4TXwRq1OkNFtQHVvg621olT9vT tUZ88or7LLx1Z3EEJQpOsb4bSOzeOtOOf1cVaF/mLUqkgmv2xjRvPyEN9WTVNcR/ 3yWZJFbz2+Jvpw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:40:38 2026 by rpki-client