This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.mft File: b_rHiuobz0OKYe-RUCRI9glkHS0.mft (raw, json) Hash identifier: JydFKsbPVow5+sTWcjFhanqv5T66jnTQNBrpE0FK0NM= Subject key identifier: 6E:9A:34:3F:DD:8F:07:36:61:44:8E:D3:D5:F0:92:7E:2D:3A:48:DC Authority key identifier: 6F:FA:C7:8A:EA:1B:CF:43:8A:61:EF:91:50:24:48:F6:09:64:1D:2D Certificate issuer: /CN=6ffac78aea1bcf438a61ef91502448f609641d2d Certificate serial: 019C427D319036FF85B89F3848A70E9FB77F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_rHiuobz0OKYe-RUCRI9glkHS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.mft Manifest number: 14A1 Signing time: Mon 09 Feb 2026 13:00:26 +0000 Manifest this update: Mon 09 Feb 2026 13:00:26 +0000 Manifest next update: Tue 10 Feb 2026 13:00:26 +0000 Files and hashes: 1: b_rHiuobz0OKYe-RUCRI9glkHS0.crl (hash: Dc65UDf29+Z9yD9x0vx7eqpTZKQI0sdyewRAlgu/K+w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.crl rsync://rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.mft rsync://rpki.ripe.net/repository/DEFAULT/b_rHiuobz0OKYe-RUCRI9glkHS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:31:90:36:ff:85:b8:9f:38:48:a7:0e:9f:b7:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ffac78aea1bcf438a61ef91502448f609641d2d Validity Not Before: Feb 9 13:00:26 2026 GMT Not After : Feb 10 13:00:26 2026 GMT Subject: CN=6e9a343fdd8f073661448ed3d5f0927e2d3a48dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:35:a4:80:ed:4e:15:1a:9e:ca:8c:66:9c:b0: 02:49:ff:f2:df:c3:ce:39:18:24:00:f4:58:2d:8e: 07:9b:c0:8f:b4:6c:31:04:e4:0f:7f:8a:20:f4:63: c9:76:18:c9:95:83:c3:85:61:29:c9:16:65:97:ee: a3:b8:80:40:f1:e6:63:05:e7:fe:fd:59:d1:13:68: ac:db:93:a5:a2:78:7e:64:ff:93:46:5d:a2:05:8a: 58:e6:96:fb:97:60:14:fc:d4:01:26:8d:cb:d7:47: d5:66:22:45:1a:3c:65:f1:82:72:e3:cd:0e:d4:10: f0:a6:13:05:30:90:91:a5:3a:c5:65:b3:2c:56:f3: dc:47:e4:c9:23:b1:5e:0d:22:62:f4:c4:ad:2c:8c: 11:d2:61:b3:6a:3f:1d:b1:99:a3:e0:42:f4:11:a6: 0b:54:eb:c0:73:cc:ee:3a:37:a4:88:32:23:bf:d4: 49:ef:49:08:64:86:64:65:3f:88:bf:9d:0d:23:27: 99:3a:be:59:b0:b0:50:74:a8:07:12:20:58:3b:16: e8:ba:17:0c:31:29:1b:cd:66:fb:8e:4a:a2:d2:06: 0b:43:ea:8d:f3:5d:4e:92:c0:c7:a1:64:2c:87:2a: 95:2c:8d:1f:9a:ec:30:72:fd:50:d8:fa:aa:c4:64: 55:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:9A:34:3F:DD:8F:07:36:61:44:8E:D3:D5:F0:92:7E:2D:3A:48:DC X509v3 Authority Key Identifier: keyid:6F:FA:C7:8A:EA:1B:CF:43:8A:61:EF:91:50:24:48:F6:09:64:1D:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_rHiuobz0OKYe-RUCRI9glkHS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:cf:02:6c:07:e8:16:e5:b4:09:2f:1e:d9:85:62:94:a2:8b: ca:a3:08:33:25:e2:c7:03:fb:ed:ce:03:18:2f:78:f4:ae:94: b4:2b:de:a1:32:1d:57:20:34:51:8e:f2:57:07:85:b8:cc:ae: 68:b9:c6:2a:12:3a:66:fb:78:65:91:50:98:85:39:7e:f3:c7: 7a:3b:9c:fa:ad:33:df:45:0f:fd:de:2b:87:ea:b5:3c:0e:41: 64:84:2e:5f:fd:2c:79:03:4a:ca:25:38:d6:7e:39:28:6b:54: 9e:44:26:5c:ec:79:0d:f3:0f:5b:40:68:d9:bf:e8:4b:25:0e: 72:1a:36:87:3a:1e:7e:c1:73:9d:32:fa:88:9b:ef:90:fe:1d: 9f:45:cf:0a:af:73:69:f7:21:3f:d7:8a:bb:25:df:9c:99:e9: 89:a4:2b:0d:c2:78:98:a8:41:69:23:32:0b:57:51:67:5a:bd: 9f:ed:c5:44:5f:cb:50:c7:64:ae:e1:d8:6a:d9:b4:7f:70:b8: 14:03:c7:2c:98:3f:7f:bf:08:08:db:71:a6:a5:7a:da:29:19: 32:a3:c1:50:db:4c:18:44:cd:9e:4b:f9:ca:d4:a4:a3:72:59: 11:2e:f0:ea:96:85:9f:72:e3:cf:6d:7b:67:07:9f:fc:d1:11: b2:0f:84:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfTGQNv+FuJ84SKcOn7d/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmZmFjNzhhZWExYmNmNDM4YTYxZWY5MTUwMjQ0OGY2MDk2 NDFkMmQwHhcNMjYwMjA5MTMwMDI2WhcNMjYwMjEwMTMwMDI2WjAzMTEwLwYDVQQD Eyg2ZTlhMzQzZmRkOGYwNzM2NjE0NDhlZDNkNWYwOTI3ZTJkM2E0OGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DWkgO1OFRqeyoxmnLACSf/y38PO ORgkAPRYLY4Hm8CPtGwxBOQPf4og9GPJdhjJlYPDhWEpyRZll+6juIBA8eZjBef+ /VnRE2is25Olonh+ZP+TRl2iBYpY5pb7l2AU/NQBJo3L10fVZiJFGjxl8YJy480O 1BDwphMFMJCRpTrFZbMsVvPcR+TJI7FeDSJi9MStLIwR0mGzaj8dsZmj4EL0EaYL VOvAc8zuOjekiDIjv9RJ70kIZIZkZT+Iv50NIyeZOr5ZsLBQdKgHEiBYOxbouhcM MSkbzWb7jkqi0gYLQ+qN811OksDHoWQshyqVLI0fmuwwcv1Q2PqqxGRVuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG6aND/djwc2YUSO09Xwkn4tOkjcMB8GA1UdIwQY MBaAFG/6x4rqG89DimHvkVAkSPYJZB0tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYl9ySGl1b2J6ME9LWWUtUlVDUkk5Z2xrSFMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi85OGU2YTktMDRkNS00NWEwLTk3MTAt MGMzNDM1MTNhZGUzLzEvYl9ySGl1b2J6ME9LWWUtUlVDUkk5Z2xrSFMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi85OGU2YTktMDRkNS00NWEwLTk3MTAtMGMzNDM1MTNhZGUz LzEvYl9ySGl1b2J6ME9LWWUtUlVDUkk5Z2xrSFMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAns8CbAfo FuW0CS8e2YVilKKLyqMIMyXixwP77c4DGC949K6UtCveoTIdVyA0UY7yVweFuMyu aLnGKhI6Zvt4ZZFQmIU5fvPHejuc+q0z30UP/d4rh+q1PA5BZIQuX/0seQNKyiU4 1n45KGtUnkQmXOx5DfMPW0Bo2b/oSyUOcho2hzoefsFznTL6iJvvkP4dn0XPCq9z afchP9eKuyXfnJnpiaQrDcJ4mKhBaSMyC1dRZ1q9n+3FRF/LUMdkruHYatm0f3C4 FAPHLJg/f78ICNtxpqV62ikZMqPBUNtMGETNnkv5ytSko3JZES7w6paFn3Ljz217 Zwef/NERsg+EfQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:36 2026 by rpki-client