This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft File: SSs6_XmlHZow5zpYnajjdkH0dRo.mft (raw, json) Hash identifier: LhmkHUbG47Rt5JuE7LeR2s7qJy7J6yo7FTpClqYrVNU= Subject key identifier: D8:98:85:4A:DA:58:13:82:B1:47:CE:B4:CD:5D:9B:DB:B4:F1:64:68 Authority key identifier: 49:2B:3A:FD:79:A5:1D:9A:30:E7:3A:58:9D:A8:E3:76:41:F4:75:1A Certificate issuer: /CN=492b3afd79a51d9a30e73a589da8e37641f4751a Certificate serial: 019C43C745FF290740ABEC5863466A30B2C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSs6_XmlHZow5zpYnajjdkH0dRo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft Manifest number: 0732 Signing time: Mon 09 Feb 2026 19:00:58 +0000 Manifest this update: Mon 09 Feb 2026 19:00:58 +0000 Manifest next update: Tue 10 Feb 2026 19:00:58 +0000 Files and hashes: 1: SSs6_XmlHZow5zpYnajjdkH0dRo.crl (hash: JjqOjQKXyCCS46+CvTiMqOpLvbM7D5GDODRZOWPL5ng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.crl rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft rsync://rpki.ripe.net/repository/DEFAULT/SSs6_XmlHZow5zpYnajjdkH0dRo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c7:45:ff:29:07:40:ab:ec:58:63:46:6a:30:b2:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=492b3afd79a51d9a30e73a589da8e37641f4751a Validity Not Before: Feb 9 19:00:58 2026 GMT Not After : Feb 10 19:00:58 2026 GMT Subject: CN=d898854ada581382b147ceb4cd5d9bdbb4f16468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:4c:bf:88:ab:b9:d0:bc:33:9f:14:0e:e2:2c: 3a:7d:dd:55:34:5e:54:83:23:7d:ff:de:95:9f:9f: f1:a1:00:53:05:df:53:b3:da:4c:61:a7:49:c0:5f: 09:01:b7:6b:24:17:ae:f4:00:7c:5e:1c:3c:33:72: 6f:59:eb:1d:7c:99:8a:15:aa:79:27:b1:0d:0b:61: f6:03:6b:ff:f5:c3:7d:9c:37:fa:dd:c8:82:7d:d5: 44:fa:5f:79:55:2d:3d:0a:63:93:0b:4d:d2:31:98: 57:96:09:2e:76:8f:66:10:2a:93:7b:d6:72:2c:4c: 4d:46:1b:eb:7e:70:d5:0d:34:60:bd:56:31:dc:53: bb:92:40:60:8c:d6:4c:59:f6:ac:41:4f:20:82:c1: 2e:b7:0c:45:83:50:10:41:fd:a7:40:43:2e:16:93: e7:cc:e0:a6:79:46:7e:84:a1:4b:25:91:e1:71:60: 40:93:5c:22:21:a4:74:56:f1:98:ac:1b:d8:da:2a: 60:a1:84:d7:0d:19:16:dd:80:8d:cf:55:61:81:23: ee:12:8c:da:52:b9:b7:e1:81:ae:58:d7:4f:f7:46: 62:27:73:68:f9:10:de:e2:98:58:02:e6:51:0f:a4: ac:a3:54:43:3e:b5:28:64:01:ee:e2:14:a7:71:e0: 05:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:98:85:4A:DA:58:13:82:B1:47:CE:B4:CD:5D:9B:DB:B4:F1:64:68 X509v3 Authority Key Identifier: keyid:49:2B:3A:FD:79:A5:1D:9A:30:E7:3A:58:9D:A8:E3:76:41:F4:75:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSs6_XmlHZow5zpYnajjdkH0dRo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:ae:a9:70:9f:76:85:df:20:ec:b7:22:3c:ad:30:50:01:41: 22:59:a2:82:2a:12:14:39:6e:84:99:5c:04:72:8f:49:67:fd: 90:08:ac:38:5c:7f:f4:28:5f:6b:04:6f:cf:4d:07:1f:bc:e8: 3e:cb:3c:50:53:22:1f:e4:2a:80:73:fd:d9:4c:1e:d6:f3:9a: 89:1f:d8:0c:6a:e8:cf:7e:73:fb:5b:54:a3:f7:39:37:fa:cb: 93:69:16:92:38:5d:71:0d:cd:f9:67:a8:d3:f9:92:58:3f:f2: 63:e5:8b:03:b5:1e:ac:b2:2b:3e:91:f9:de:a3:3c:df:f9:d1: 44:90:da:dc:de:7f:87:20:5e:12:4c:dd:f7:ad:97:88:4a:35: e5:7e:13:7b:b4:03:9c:db:4d:41:57:0a:89:42:d9:94:c5:3b: 8f:6e:70:06:cd:b1:56:ee:cd:ec:43:65:fc:a5:58:bc:fd:97: 0d:28:16:2d:c3:3b:c6:d7:bb:8e:ac:ba:18:fd:1b:8b:1d:a4: 57:e6:36:6c:d3:90:cd:2d:76:ce:6e:5c:e2:64:54:62:05:83: 86:9d:7e:70:48:e0:3c:fc:06:bf:01:6e:c8:bc:22:c5:2c:05: eb:4d:87:33:3f:d2:d3:9d:49:c7:37:e7:11:55:33:17:7a:51: 04:4c:51:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDx0X/KQdAq+xYY0ZqMLLJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MmIzYWZkNzlhNTFkOWEzMGU3M2E1ODlkYThlMzc2NDFm NDc1MWEwHhcNMjYwMjA5MTkwMDU4WhcNMjYwMjEwMTkwMDU4WjAzMTEwLwYDVQQD EyhkODk4ODU0YWRhNTgxMzgyYjE0N2NlYjRjZDVkOWJkYmI0ZjE2NDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/Ey/iKu50LwznxQO4iw6fd1VNF5U gyN9/96Vn5/xoQBTBd9Ts9pMYadJwF8JAbdrJBeu9AB8Xhw8M3JvWesdfJmKFap5 J7ENC2H2A2v/9cN9nDf63ciCfdVE+l95VS09CmOTC03SMZhXlgkudo9mECqTe9Zy LExNRhvrfnDVDTRgvVYx3FO7kkBgjNZMWfasQU8ggsEutwxFg1AQQf2nQEMuFpPn zOCmeUZ+hKFLJZHhcWBAk1wiIaR0VvGYrBvY2ipgoYTXDRkW3YCNz1VhgSPuEoza Urm34YGuWNdP90ZiJ3No+RDe4phYAuZRD6Sso1RDPrUoZAHu4hSnceAFNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNiYhUraWBOCsUfOtM1dm9u08WRoMB8GA1UdIwQY MBaAFEkrOv15pR2aMOc6WJ2o43ZB9HUaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1NzNl9YbWxIWm93NXpwWW5hampka0gwZFJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZTdmOWEtZGYwYi00ODIyLWIwZjEt YTMxMDViZDk0MWQ4LzEvU1NzNl9YbWxIWm93NXpwWW5hampka0gwZFJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9hZTdmOWEtZGYwYi00ODIyLWIwZjEtYTMxMDViZDk0MWQ4 LzEvU1NzNl9YbWxIWm93NXpwWW5hampka0gwZFJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB66pcJ92 hd8g7LciPK0wUAFBIlmigioSFDluhJlcBHKPSWf9kAisOFx/9ChfawRvz00HH7zo Pss8UFMiH+QqgHP92Uwe1vOaiR/YDGroz35z+1tUo/c5N/rLk2kWkjhdcQ3N+Weo 0/mSWD/yY+WLA7UerLIrPpH53qM83/nRRJDa3N5/hyBeEkzd962XiEo15X4Te7QD nNtNQVcKiULZlMU7j25wBs2xVu7N7ENl/KVYvP2XDSgWLcM7xte7jqy6GP0bix2k V+Y2bNOQzS12zm5c4mRUYgWDhp1+cEjgPPwGvwFuyLwixSwF602HMz/S051Jxzfn EVUzF3pRBExRAQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:45:39 2026 by rpki-client