This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft File: t6K9aUc7So6Fp2r72OW77ptLs0s.mft (raw, json) Hash identifier: OgBgtMMnBfNhEBgYpySjwt7ppDaQA7HEwFqmsol7uTc= Subject key identifier: 4E:01:65:35:91:AB:0C:28:A5:CF:7D:C8:CF:1C:5A:CD:E0:85:EE:51 Authority key identifier: B7:A2:BD:69:47:3B:4A:8E:85:A7:6A:FB:D8:E5:BB:EE:9B:4B:B3:4B Certificate issuer: /CN=b7a2bd69473b4a8e85a76afbd8e5bbee9b4bb34b Certificate serial: 019C43220503D2122518EEB220B25615C436 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6K9aUc7So6Fp2r72OW77ptLs0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft Manifest number: 1174 Signing time: Mon 09 Feb 2026 16:00:28 +0000 Manifest this update: Mon 09 Feb 2026 16:00:28 +0000 Manifest next update: Tue 10 Feb 2026 16:00:28 +0000 Files and hashes: 1: t6K9aUc7So6Fp2r72OW77ptLs0s.crl (hash: ZGfi/lX577SFdCRm9s73HfHwwPRKyMfBSkcxtI5Mfho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft rsync://rpki.ripe.net/repository/DEFAULT/t6K9aUc7So6Fp2r72OW77ptLs0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:05:03:d2:12:25:18:ee:b2:20:b2:56:15:c4:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7a2bd69473b4a8e85a76afbd8e5bbee9b4bb34b Validity Not Before: Feb 9 16:00:28 2026 GMT Not After : Feb 10 16:00:28 2026 GMT Subject: CN=4e01653591ab0c28a5cf7dc8cf1c5acde085ee51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fc:62:9e:4b:fc:57:2c:64:7a:8d:71:d1:84: 79:d6:a4:cf:a6:63:33:2b:b8:a5:4e:55:55:a1:1e: 9b:84:d0:26:26:96:d8:96:ab:76:97:70:24:c5:a6: bd:30:26:65:08:14:fc:02:e4:96:30:5d:f2:f7:c8: 18:14:70:49:95:6a:69:96:07:55:31:f6:71:b0:77: 62:64:b2:ec:ed:cc:b4:95:53:db:44:6b:40:d4:0c: 1d:1d:b3:02:20:e0:ab:ee:34:e5:bf:f0:12:15:df: aa:2e:f6:a7:84:66:f7:97:c1:7f:17:c8:1d:1b:af: 91:d4:eb:21:a3:eb:b8:5d:81:ba:bf:60:06:e6:a2: 86:4b:aa:45:bc:79:25:96:f1:81:11:80:7f:f0:1e: 1e:42:2a:49:15:77:0e:f4:2f:a8:ab:6b:ba:02:cb: 1c:77:a0:7f:a1:77:05:0b:20:ed:a0:46:5d:4e:65: 85:55:33:75:5f:8e:48:3e:0b:de:dd:87:b5:d1:2f: 44:a4:9a:05:25:ec:4d:b7:9d:c4:5d:87:db:a3:7f: a7:71:9a:47:05:43:fc:09:97:b2:f9:4e:60:d8:15: fb:ae:c0:88:1c:4e:7a:ac:cc:e6:b1:86:db:cf:8f: 3d:bc:39:fc:e7:3c:66:a5:56:48:8f:a6:66:8a:07: b3:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:01:65:35:91:AB:0C:28:A5:CF:7D:C8:CF:1C:5A:CD:E0:85:EE:51 X509v3 Authority Key Identifier: keyid:B7:A2:BD:69:47:3B:4A:8E:85:A7:6A:FB:D8:E5:BB:EE:9B:4B:B3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6K9aUc7So6Fp2r72OW77ptLs0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:0c:cb:92:f0:8c:0b:bb:a1:fe:c4:bf:e7:bf:a5:ac:0d:d7: f6:5e:b2:40:8e:8f:d6:84:66:c3:d0:f6:0a:c6:45:48:bf:6d: ce:c7:de:e2:df:9f:91:7c:3e:7a:6b:60:7d:e0:1f:a6:42:36: f9:07:3d:23:d6:c7:a2:e0:a6:57:61:bc:78:ad:cc:91:1a:10: 84:13:14:6b:68:8a:52:cd:c0:6e:88:48:0c:7a:0b:dd:5a:68: ea:d4:b6:5b:5b:86:98:73:49:d6:10:ae:17:2a:c9:dc:d8:98: 2f:b1:a5:0c:aa:51:e1:b0:c6:67:ee:32:55:1d:ef:b0:11:c8: e4:4e:50:32:06:2d:de:7e:a4:e3:e8:25:1b:10:be:4a:66:1f: 73:bc:1c:12:e1:ee:3e:0f:d9:69:8c:fb:7c:b1:bc:25:c3:c4: 57:99:92:de:eb:83:6c:e8:30:27:bf:78:15:68:cc:2f:de:e6: e8:89:17:08:10:5a:72:86:8b:71:d3:ab:2f:bd:6d:90:f3:bf: 62:9b:d6:c9:ec:9e:24:bb:57:ab:a8:32:27:09:bc:64:75:45: 09:44:f0:75:06:ed:ac:23:61:99:2b:af:46:73:13:02:b0:1b: 4b:4f:82:51:56:13:e4:09:af:03:37:16:8f:45:70:70:91:ef: 8d:b9:04:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIgUD0hIlGO6yILJWFcQ2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3YTJiZDY5NDczYjRhOGU4NWE3NmFmYmQ4ZTViYmVlOWI0 YmIzNGIwHhcNMjYwMjA5MTYwMDI4WhcNMjYwMjEwMTYwMDI4WjAzMTEwLwYDVQQD Eyg0ZTAxNjUzNTkxYWIwYzI4YTVjZjdkYzhjZjFjNWFjZGUwODVlZTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/xinkv8Vyxkeo1x0YR51qTPpmMz K7ilTlVVoR6bhNAmJpbYlqt2l3Akxaa9MCZlCBT8AuSWMF3y98gYFHBJlWpplgdV MfZxsHdiZLLs7cy0lVPbRGtA1AwdHbMCIOCr7jTlv/ASFd+qLvanhGb3l8F/F8gd G6+R1Osho+u4XYG6v2AG5qKGS6pFvHkllvGBEYB/8B4eQipJFXcO9C+oq2u6Assc d6B/oXcFCyDtoEZdTmWFVTN1X45IPgve3Ye10S9EpJoFJexNt53EXYfbo3+ncZpH BUP8CZey+U5g2BX7rsCIHE56rMzmsYbbz489vDn85zxmpVZIj6ZmigezZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE4BZTWRqwwopc99yM8cWs3ghe5RMB8GA1UdIwQY MBaAFLeivWlHO0qOhadq+9jlu+6bS7NLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDZLOWFVYzdTbzZGcDJyNzJPVzc3cHRMczBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83NGQ1ZjYtZTY0MS00NDA4LWE3NmUt NTM4ODliZGM4NGY1LzEvdDZLOWFVYzdTbzZGcDJyNzJPVzc3cHRMczBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS83NGQ1ZjYtZTY0MS00NDA4LWE3NmUtNTM4ODliZGM4NGY1 LzEvdDZLOWFVYzdTbzZGcDJyNzJPVzc3cHRMczBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXAzLkvCM C7uh/sS/57+lrA3X9l6yQI6P1oRmw9D2CsZFSL9tzsfe4t+fkXw+emtgfeAfpkI2 +Qc9I9bHouCmV2G8eK3MkRoQhBMUa2iKUs3AbohIDHoL3Vpo6tS2W1uGmHNJ1hCu FyrJ3NiYL7GlDKpR4bDGZ+4yVR3vsBHI5E5QMgYt3n6k4+glGxC+SmYfc7wcEuHu Pg/ZaYz7fLG8JcPEV5mS3uuDbOgwJ794FWjML97m6IkXCBBacoaLcdOrL71tkPO/ YpvWyeyeJLtXq6gyJwm8ZHVFCUTwdQbtrCNhmSuvRnMTArAbS0+CUVYT5AmvAzcW j0VwcJHvjbkEXw== -----END CERTIFICATE-----Generated at Tue Feb 10 01:34:18 2026 by rpki-client