This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft File: a-pT2WLWegFI5je0tGib5NCEqeU.mft (raw, json) Hash identifier: yIqhrK4QashZB/Z3ZAQpby/exYiCvA0WhLNdi9S+44k= Subject key identifier: 0F:D0:35:3B:7D:81:66:C3:81:AA:15:B1:4D:F6:31:3C:EA:E2:A7:D3 Authority key identifier: 6B:EA:53:D9:62:D6:7A:01:48:E6:37:B4:B4:68:9B:E4:D0:84:A9:E5 Certificate issuer: /CN=6bea53d962d67a0148e637b4b4689be4d084a9e5 Certificate serial: 019C41A17FD04EDC608721591C0F22CDB41E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-pT2WLWegFI5je0tGib5NCEqeU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft Manifest number: 07ED Signing time: Mon 09 Feb 2026 09:00:28 +0000 Manifest this update: Mon 09 Feb 2026 09:00:28 +0000 Manifest next update: Tue 10 Feb 2026 09:00:28 +0000 Files and hashes: 1: a-pT2WLWegFI5je0tGib5NCEqeU.crl (hash: dPgk5fw8+VLEqdWKxcYyfz6xlSVttzmvBqVQWg6u+Pk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft rsync://rpki.ripe.net/repository/DEFAULT/a-pT2WLWegFI5je0tGib5NCEqeU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:7f:d0:4e:dc:60:87:21:59:1c:0f:22:cd:b4:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bea53d962d67a0148e637b4b4689be4d084a9e5 Validity Not Before: Feb 9 09:00:28 2026 GMT Not After : Feb 10 09:00:28 2026 GMT Subject: CN=0fd0353b7d8166c381aa15b14df6313ceae2a7d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8d:dd:b0:0c:e6:a9:c5:e7:2e:30:94:a0:45: a8:62:85:36:2f:ba:93:5d:94:3c:ae:7a:28:cc:84: 1e:ce:06:9a:46:ea:25:d6:6b:33:3f:94:e5:13:48: c9:30:c1:14:4b:ec:a2:3c:d8:0d:68:d6:46:e7:0e: e5:26:fe:ef:90:16:9c:a9:b2:4b:b7:92:62:30:5a: c6:64:5e:de:f1:e0:4c:a6:fa:1f:4d:6f:6c:a7:61: 71:4c:1e:cb:7b:5c:b7:cd:a5:c7:47:15:7c:20:b7: aa:75:9c:b5:ed:2d:d6:b8:87:c0:9f:4e:6c:4c:22: e5:c7:f5:b1:b7:26:c3:69:e3:a1:42:a7:a6:34:00: 22:15:6a:87:83:df:dc:32:c2:dd:86:1d:c4:0a:2c: 17:05:10:ac:42:e6:26:24:43:f8:a6:78:de:09:ec: 21:95:1d:5d:2d:53:ec:3d:cd:06:70:45:ef:b8:66: a8:36:d0:e2:c4:c2:ad:3d:84:1d:45:79:40:41:39: dd:b3:ad:8a:27:1a:f4:37:ec:13:5f:a8:32:05:e5: 54:df:a2:bf:0a:fc:d4:d7:5a:31:5d:4c:cc:16:25: b3:7c:ae:7e:f4:47:8c:ba:b2:fb:b5:b0:ec:de:f9: b4:35:5c:bf:01:d9:22:fa:40:40:96:4b:f0:dd:79: 87:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:D0:35:3B:7D:81:66:C3:81:AA:15:B1:4D:F6:31:3C:EA:E2:A7:D3 X509v3 Authority Key Identifier: keyid:6B:EA:53:D9:62:D6:7A:01:48:E6:37:B4:B4:68:9B:E4:D0:84:A9:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-pT2WLWegFI5je0tGib5NCEqeU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:f9:27:b4:b6:c8:34:73:ec:af:0e:fe:cc:42:a1:b7:2e:8e: 41:5d:1d:00:7c:9e:d5:19:75:60:1d:b6:de:d5:b0:a2:52:97: d6:dc:fa:15:bc:84:83:9a:63:14:94:fa:3f:30:a7:b3:06:9f: 4b:6d:38:25:28:ea:b4:f1:fb:c1:bf:c2:9a:1b:57:19:ce:8f: e7:5d:6b:39:7f:07:b7:86:ad:b1:9c:4e:f7:a7:be:6a:93:31: 2a:3f:e3:55:7a:97:6a:90:cf:f5:8e:7d:b5:d0:09:82:92:df: 0b:ea:22:b2:2d:29:a6:b2:a4:1b:c3:66:59:eb:22:9b:5f:d8: 26:56:ed:83:53:89:63:69:56:93:7e:d2:3f:97:c4:b1:20:41: 45:e5:ba:1a:02:a2:e8:95:85:39:e2:75:75:a1:69:a7:5e:4c: 6b:ce:83:77:4f:68:a3:2a:32:38:e9:76:71:74:d2:f3:bc:7e: 4f:51:97:20:45:42:54:b6:2d:98:cb:97:aa:70:21:25:4d:51: 3a:30:b3:ac:28:f4:ac:2a:d7:ba:36:85:03:9b:d7:bc:c4:8a: 52:ad:78:f1:e8:db:9c:f0:8b:d9:8f:7d:15:8a:78:a5:23:32: 16:86:85:f4:63:f3:74:bf:b4:a1:1d:7e:2b:5c:d1:fb:43:32: b1:ca:c4:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoX/QTtxghyFZHA8izbQeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiZWE1M2Q5NjJkNjdhMDE0OGU2MzdiNGI0Njg5YmU0ZDA4 NGE5ZTUwHhcNMjYwMjA5MDkwMDI4WhcNMjYwMjEwMDkwMDI4WjAzMTEwLwYDVQQD EygwZmQwMzUzYjdkODE2NmMzODFhYTE1YjE0ZGY2MzEzY2VhZTJhN2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAno3dsAzmqcXnLjCUoEWoYoU2L7qT XZQ8rnoozIQezgaaRuol1mszP5TlE0jJMMEUS+yiPNgNaNZG5w7lJv7vkBacqbJL t5JiMFrGZF7e8eBMpvofTW9sp2FxTB7Le1y3zaXHRxV8ILeqdZy17S3WuIfAn05s TCLlx/WxtybDaeOhQqemNAAiFWqHg9/cMsLdhh3ECiwXBRCsQuYmJEP4pnjeCewh lR1dLVPsPc0GcEXvuGaoNtDixMKtPYQdRXlAQTnds62KJxr0N+wTX6gyBeVU36K/ CvzU11oxXUzMFiWzfK5+9EeMurL7tbDs3vm0NVy/Adki+kBAlkvw3XmHRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA/QNTt9gWbDgaoVsU32MTzq4qfTMB8GA1UdIwQY MBaAFGvqU9li1noBSOY3tLRom+TQhKnlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYS1wVDJXTFdlZ0ZJNWplMHRHaWI1TkNFcWVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi85Yzg1NzEtYzlkNy00NTUwLTg4NDEt ZTIwYjdlNjc5NjIyLzEvYS1wVDJXTFdlZ0ZJNWplMHRHaWI1TkNFcWVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi85Yzg1NzEtYzlkNy00NTUwLTg4NDEtZTIwYjdlNjc5NjIy LzEvYS1wVDJXTFdlZ0ZJNWplMHRHaWI1TkNFcWVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWPkntLbI NHPsrw7+zEKhty6OQV0dAHye1Rl1YB223tWwolKX1tz6FbyEg5pjFJT6PzCnswaf S204JSjqtPH7wb/CmhtXGc6P511rOX8Ht4atsZxO96e+apMxKj/jVXqXapDP9Y59 tdAJgpLfC+oisi0pprKkG8NmWesim1/YJlbtg1OJY2lWk37SP5fEsSBBReW6GgKi 6JWFOeJ1daFpp15Ma86Dd09ooyoyOOl2cXTS87x+T1GXIEVCVLYtmMuXqnAhJU1R OjCzrCj0rCrXujaFA5vXvMSKUq148ejbnPCL2Y99FYp4pSMyFoaF9GPzdL+0oR1+ K1zR+0MyscrEvA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:17 2026 by rpki-client