This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft File: 6QOzpacoCqn-K_-pBlwrKgGld8w.mft (raw, json) Hash identifier: hELdKyqSJFDNt0U6Zj9TLpiX2HLA9OLyt8V6SFza2Ro= Subject key identifier: 58:6C:CC:0F:28:0D:6F:DA:AF:67:4A:91:93:2B:36:77:86:0B:27:59 Authority key identifier: E9:03:B3:A5:A7:28:0A:A9:FE:2B:FF:A9:06:5C:2B:2A:01:A5:77:CC Certificate issuer: /CN=e903b3a5a7280aa9fe2bffa9065c2b2a01a577cc Certificate serial: 019C41A1DDBD971DB8F0CF1857C6914641F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QOzpacoCqn-K_-pBlwrKgGld8w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft Manifest number: 180C Signing time: Mon 09 Feb 2026 09:00:52 +0000 Manifest this update: Mon 09 Feb 2026 09:00:52 +0000 Manifest next update: Tue 10 Feb 2026 09:00:52 +0000 Files and hashes: 1: 6QOzpacoCqn-K_-pBlwrKgGld8w.crl (hash: OypzSQxZjFsbgXu0EVwX+47hk3rer2C0WP4y12JYSAo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.crl rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft rsync://rpki.ripe.net/repository/DEFAULT/6QOzpacoCqn-K_-pBlwrKgGld8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:dd:bd:97:1d:b8:f0:cf:18:57:c6:91:46:41:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e903b3a5a7280aa9fe2bffa9065c2b2a01a577cc Validity Not Before: Feb 9 09:00:52 2026 GMT Not After : Feb 10 09:00:52 2026 GMT Subject: CN=586ccc0f280d6fdaaf674a91932b3677860b2759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:47:54:83:d2:02:dd:eb:c9:3a:76:7a:15:0f: 1f:8b:9c:3e:07:ed:d5:9c:3a:72:54:81:e5:35:1b: 8a:56:fd:f1:ed:90:d4:2c:32:0d:50:d2:06:e9:4e: ef:29:7f:07:a1:47:ff:f3:b0:26:9b:17:ca:61:ef: 0a:60:ef:a9:3b:c6:50:3a:99:ac:a0:69:26:e2:fc: 31:75:d9:ba:14:94:2f:21:6a:9d:47:ba:9d:9d:cf: 72:37:19:e7:df:f8:d6:85:0f:50:08:e6:ad:ea:c8: d6:04:49:ea:c3:18:19:e4:65:af:36:e9:f5:fa:cb: c8:1d:c4:5c:2a:ba:e1:aa:08:7c:4c:03:6c:98:1a: 02:9e:32:ce:ac:87:ab:58:92:a9:07:8b:43:30:fe: 2b:94:ad:41:76:19:5a:b7:61:af:8a:34:40:96:cb: 50:6b:d9:eb:e6:8b:88:9b:68:63:45:9f:a4:d1:3c: 9a:5d:f6:9b:ad:3c:d8:bf:b5:ae:97:83:9f:1d:3b: 63:3c:4c:b4:96:45:18:70:ad:91:d4:fe:a6:d4:22: 4a:d1:f8:3b:33:d4:80:73:76:db:e4:2e:4b:16:95: 14:78:c4:04:31:70:fd:1f:a3:8d:e3:fe:c6:7b:b7: 7b:22:9d:8f:ea:54:09:4d:78:0f:2f:93:6a:e7:71: 0b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:6C:CC:0F:28:0D:6F:DA:AF:67:4A:91:93:2B:36:77:86:0B:27:59 X509v3 Authority Key Identifier: keyid:E9:03:B3:A5:A7:28:0A:A9:FE:2B:FF:A9:06:5C:2B:2A:01:A5:77:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QOzpacoCqn-K_-pBlwrKgGld8w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:5f:11:74:ef:97:e9:bb:71:5e:ae:f2:6a:39:81:33:68:bb: 16:04:94:b6:3b:66:ae:85:7c:ab:b6:92:e4:37:79:2c:b5:17: 78:93:d4:35:5f:c2:94:1e:54:5a:e6:fd:4d:05:cc:ef:5a:a9: 65:a5:cb:67:bf:ab:b6:a3:52:8b:eb:62:4a:97:28:eb:0e:68: 4b:52:e0:dd:66:6b:bf:44:78:89:59:20:02:7e:0b:f8:a2:12: 9c:26:9a:6c:8b:f7:c6:d5:a2:50:b6:48:c0:77:e8:8d:5c:48: ee:3e:0b:bb:e2:fe:8e:c9:8d:ed:e0:72:94:db:3c:c5:5d:69: 46:16:49:2d:96:4c:6e:db:ad:a5:a5:78:ae:3b:03:8c:66:96: 9d:c3:1a:ea:b4:a8:f1:b5:77:d0:20:d3:1b:7b:4e:bf:4e:5b: 45:37:fe:11:f9:ef:59:23:90:2a:51:96:33:ff:e8:5f:94:fc: 8a:32:c5:2a:4a:aa:94:2a:73:30:2c:0b:ff:04:b4:cf:a5:01: 7b:32:3b:38:48:1b:1e:eb:0b:1a:f0:80:b7:e9:d1:dc:96:04: c4:44:dd:d6:34:cc:80:f8:4a:d2:5b:9c:f9:dd:78:ef:1e:33: 65:ca:04:2f:2c:ed:59:12:f9:cf:3a:50:f7:fa:35:db:d7:a1: 10:93:68:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBod29lx248M8YV8aRRkH3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MDNiM2E1YTcyODBhYTlmZTJiZmZhOTA2NWMyYjJhMDFh NTc3Y2MwHhcNMjYwMjA5MDkwMDUyWhcNMjYwMjEwMDkwMDUyWjAzMTEwLwYDVQQD Eyg1ODZjY2MwZjI4MGQ2ZmRhYWY2NzRhOTE5MzJiMzY3Nzg2MGIyNzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0dUg9IC3evJOnZ6FQ8fi5w+B+3V nDpyVIHlNRuKVv3x7ZDULDINUNIG6U7vKX8HoUf/87AmmxfKYe8KYO+pO8ZQOpms oGkm4vwxddm6FJQvIWqdR7qdnc9yNxnn3/jWhQ9QCOat6sjWBEnqwxgZ5GWvNun1 +svIHcRcKrrhqgh8TANsmBoCnjLOrIerWJKpB4tDMP4rlK1Bdhlat2GvijRAlstQ a9nr5ouIm2hjRZ+k0TyaXfabrTzYv7Wul4OfHTtjPEy0lkUYcK2R1P6m1CJK0fg7 M9SAc3bb5C5LFpUUeMQEMXD9H6ON4/7Ge7d7Ip2P6lQJTXgPL5Nq53EL0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFhszA8oDW/ar2dKkZMrNneGCydZMB8GA1UdIwQY MBaAFOkDs6WnKAqp/iv/qQZcKyoBpXfMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlFPenBhY29DcW4tS18tcEJsd3JLZ0dsZDh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81OGI1NTctMjdhOS00NmFhLTlkZWUt NGNlYzY5NjgzM2VkLzEvNlFPenBhY29DcW4tS18tcEJsd3JLZ0dsZDh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS81OGI1NTctMjdhOS00NmFhLTlkZWUtNGNlYzY5NjgzM2Vk LzEvNlFPenBhY29DcW4tS18tcEJsd3JLZ0dsZDh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFV8RdO+X 6btxXq7yajmBM2i7FgSUtjtmroV8q7aS5Dd5LLUXeJPUNV/ClB5UWub9TQXM71qp ZaXLZ7+rtqNSi+tiSpco6w5oS1Lg3WZrv0R4iVkgAn4L+KISnCaabIv3xtWiULZI wHfojVxI7j4Lu+L+jsmN7eBylNs8xV1pRhZJLZZMbtutpaV4rjsDjGaWncMa6rSo 8bV30CDTG3tOv05bRTf+EfnvWSOQKlGWM//oX5T8ijLFKkqqlCpzMCwL/wS0z6UB ezI7OEgbHusLGvCAt+nR3JYExETd1jTMgPhK0luc+d147x4zZcoELyztWRL5zzpQ 9/o129ehEJNoVw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:47:52 2026 by rpki-client