This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft File: 6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft (raw, json) Hash identifier: weYVZqJ0d1HOaUDe33tofjxvzMpNogDrwxuGU3ShUxY= Subject key identifier: 9E:B4:66:2A:A8:71:28:38:D4:5C:CB:23:87:CD:09:9C:FC:CE:D4:2D Authority key identifier: EA:50:1A:68:D9:10:93:E7:DE:F2:F4:E0:31:03:1D:11:4D:43:BA:3C Certificate issuer: /CN=ea501a68d91093e7def2f4e031031d114d43ba3c Certificate serial: 019C432229B0A2385D8234180814957350E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lAaaNkQk-fe8vTgMQMdEU1Dujw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft Manifest number: 12F0 Signing time: Mon 09 Feb 2026 16:00:38 +0000 Manifest this update: Mon 09 Feb 2026 16:00:38 +0000 Manifest next update: Tue 10 Feb 2026 16:00:38 +0000 Files and hashes: 1: 6lAaaNkQk-fe8vTgMQMdEU1Dujw.crl (hash: kDuNWfeox0ERQATt0SNIhW10rY3pNLni/Z84lXEdQnE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft rsync://rpki.ripe.net/repository/DEFAULT/6lAaaNkQk-fe8vTgMQMdEU1Dujw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:29:b0:a2:38:5d:82:34:18:08:14:95:73:50:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea501a68d91093e7def2f4e031031d114d43ba3c Validity Not Before: Feb 9 16:00:38 2026 GMT Not After : Feb 10 16:00:38 2026 GMT Subject: CN=9eb4662aa8712838d45ccb2387cd099cfcced42d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:da:a1:a7:0b:34:c8:84:ad:51:06:07:6d:82: 99:3e:42:cd:7a:e6:ad:74:48:c0:c7:ff:e1:bb:00: ee:57:7b:60:a9:69:0e:a2:cb:18:89:36:26:20:65: dc:bf:c5:b4:29:82:b2:cf:a7:ef:d6:74:10:aa:c5: 28:73:1b:6c:d4:22:e2:b1:e2:e7:d9:cf:a9:8b:5c: fe:64:d1:73:68:f1:89:ea:10:f6:81:b6:47:43:7a: 5f:32:55:dc:40:76:77:68:3a:51:6b:9d:88:23:4b: 93:7d:9a:ae:1e:e5:17:e6:ab:98:9a:6c:af:7c:02: 96:7d:ad:27:f6:a1:28:fd:4a:4f:55:0a:02:69:ac: 56:47:24:8a:00:d9:4d:ef:5d:9a:e2:14:da:88:75: 1d:53:c1:c6:2e:86:30:6b:cf:20:c9:d8:df:2f:44: 54:aa:87:c7:9c:d3:56:72:d4:11:81:19:c3:a6:16: 8d:ba:bd:67:8f:64:67:bb:a5:98:da:01:b3:b3:59: fb:fc:b5:fc:ab:e7:01:ee:fa:eb:2a:4e:0c:9e:b3: c2:8e:17:24:1b:a8:48:51:e4:d0:ee:72:f4:f1:f1: 88:e9:19:27:70:a1:d7:c1:19:8b:9b:67:e0:46:b0: 80:48:b5:36:cc:4c:88:86:0e:3d:dd:fc:40:5c:d9: 98:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:B4:66:2A:A8:71:28:38:D4:5C:CB:23:87:CD:09:9C:FC:CE:D4:2D X509v3 Authority Key Identifier: keyid:EA:50:1A:68:D9:10:93:E7:DE:F2:F4:E0:31:03:1D:11:4D:43:BA:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lAaaNkQk-fe8vTgMQMdEU1Dujw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:a0:2e:60:1b:05:ca:3a:45:09:6a:dd:3f:0d:f0:41:c6:5a: bf:58:25:d9:db:f1:62:04:dc:1b:55:90:7f:97:a1:f8:d1:ac: 17:be:7f:fc:6d:3c:2a:27:0e:14:f8:58:9b:bc:8f:31:5c:f9: 9d:22:e2:33:ca:59:d7:6a:f8:eb:7a:6a:75:14:1d:28:b8:f5: 41:11:d2:3f:a6:87:27:2e:63:fd:35:8a:c2:60:52:c9:81:ac: 6f:a7:21:19:97:ab:ea:54:ce:c2:7d:24:b5:f4:f2:8e:e9:4c: 35:70:0f:dc:b9:17:e6:fa:f6:7d:a5:07:38:34:4e:b4:0c:e1: 43:d2:65:c4:67:a9:8e:37:2e:44:05:4e:0b:fb:3e:89:74:4f: 3d:6c:8f:09:5a:68:f9:a7:5d:56:c7:af:88:13:a3:60:83:65: fa:01:39:72:fc:0b:84:be:d8:bb:61:63:bd:a2:59:66:d7:1a: 02:18:71:37:d5:af:ae:d1:1b:c8:4b:8c:0b:7d:7b:16:47:19: 80:27:5b:ad:b1:7a:7d:5d:0f:b5:48:33:8d:34:b5:b1:78:64: 28:fc:8f:78:25:f3:b0:87:b3:b7:ee:5f:64:bb:23:04:b4:64: c3:13:b9:56:2d:8a:92:64:ff:fa:12:94:bc:d6:e8:ba:d1:22: 16:13:87:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIimwojhdgjQYCBSVc1DiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhNTAxYTY4ZDkxMDkzZTdkZWYyZjRlMDMxMDMxZDExNGQ0 M2JhM2MwHhcNMjYwMjA5MTYwMDM4WhcNMjYwMjEwMTYwMDM4WjAzMTEwLwYDVQQD Eyg5ZWI0NjYyYWE4NzEyODM4ZDQ1Y2NiMjM4N2NkMDk5Y2ZjY2VkNDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdqhpws0yIStUQYHbYKZPkLNeuat dEjAx//huwDuV3tgqWkOossYiTYmIGXcv8W0KYKyz6fv1nQQqsUocxts1CLiseLn 2c+pi1z+ZNFzaPGJ6hD2gbZHQ3pfMlXcQHZ3aDpRa52II0uTfZquHuUX5quYmmyv fAKWfa0n9qEo/UpPVQoCaaxWRySKANlN712a4hTaiHUdU8HGLoYwa88gydjfL0RU qofHnNNWctQRgRnDphaNur1nj2Rnu6WY2gGzs1n7/LX8q+cB7vrrKk4MnrPCjhck G6hIUeTQ7nL08fGI6RkncKHXwRmLm2fgRrCASLU2zEyIhg493fxAXNmYVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ60ZiqocSg41FzLI4fNCZz8ztQtMB8GA1UdIwQY MBaAFOpQGmjZEJPn3vL04DEDHRFNQ7o8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmxBYWFOa1FrLWZlOHZUZ01RTWRFVTFEdWp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9mNGQ2NTMtNmY3Ny00Y2UwLWE2ZjIt MzQ1ZTE3ZjlkNjMyLzEvNmxBYWFOa1FrLWZlOHZUZ01RTWRFVTFEdWp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9mNGQ2NTMtNmY3Ny00Y2UwLWE2ZjItMzQ1ZTE3ZjlkNjMy LzEvNmxBYWFOa1FrLWZlOHZUZ01RTWRFVTFEdWp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIKAuYBsF yjpFCWrdPw3wQcZav1gl2dvxYgTcG1WQf5eh+NGsF75//G08KicOFPhYm7yPMVz5 nSLiM8pZ12r463pqdRQdKLj1QRHSP6aHJy5j/TWKwmBSyYGsb6chGZer6lTOwn0k tfTyjulMNXAP3LkX5vr2faUHODROtAzhQ9JlxGepjjcuRAVOC/s+iXRPPWyPCVpo +addVseviBOjYINl+gE5cvwLhL7Yu2FjvaJZZtcaAhhxN9WvrtEbyEuMC317FkcZ gCdbrbF6fV0PtUgzjTS1sXhkKPyPeCXzsIezt+5fZLsjBLRkwxO5Vi2KkmT/+hKU vNboutEiFhOHkQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:53:37 2026 by rpki-client