This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.mft File: a_HqpcMxvs8ydwGi69zxobtfBww.mft (raw, json) Hash identifier: 6sao+An3qhnsX56ZR0SbBdqquX3BWS7ojGRFBo/0RVM= Subject key identifier: 6D:23:2A:EC:21:B2:31:A5:41:59:F7:82:D5:B4:F0:C4:56:39:68:BF Authority key identifier: 6B:F1:EA:A5:C3:31:BE:CF:32:77:01:A2:EB:DC:F1:A1:BB:5F:07:0C Certificate issuer: /CN=6bf1eaa5c331becf327701a2ebdcf1a1bb5f070c Certificate serial: 019C427D480A088F85AEFF3C5B4BDF3C5409 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a_HqpcMxvs8ydwGi69zxobtfBww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.mft Manifest number: 0EA6 Signing time: Mon 09 Feb 2026 13:00:32 +0000 Manifest this update: Mon 09 Feb 2026 13:00:32 +0000 Manifest next update: Tue 10 Feb 2026 13:00:32 +0000 Files and hashes: 1: a_HqpcMxvs8ydwGi69zxobtfBww.crl (hash: bbjZy+HTzaHKf4AFXnvRZkUHN/E9DTWZLOgIeShgqFM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.mft rsync://rpki.ripe.net/repository/DEFAULT/a_HqpcMxvs8ydwGi69zxobtfBww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:48:0a:08:8f:85:ae:ff:3c:5b:4b:df:3c:54:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bf1eaa5c331becf327701a2ebdcf1a1bb5f070c Validity Not Before: Feb 9 13:00:32 2026 GMT Not After : Feb 10 13:00:32 2026 GMT Subject: CN=6d232aec21b231a54159f782d5b4f0c4563968bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:4c:49:ea:ae:e5:f6:f6:e8:ed:92:df:a3:cb: 57:b2:b2:83:39:1c:cc:44:92:87:96:86:8a:be:2e: 4c:74:49:e1:0b:36:00:92:ed:c2:8a:a5:6a:ae:cf: 15:84:98:ae:e1:9d:7d:e5:2f:d1:59:b0:a4:08:a9: 3c:9e:38:40:0d:05:1e:49:fb:c1:a4:cf:b3:0b:27: 36:cd:22:c3:10:74:fa:f9:fb:cc:93:f6:8c:c2:9d: b2:c5:26:8a:fd:49:31:66:b5:95:ec:d4:d9:d2:1f: d4:f9:59:e5:d3:7a:f3:ab:56:06:e0:c4:a7:06:54: e5:63:f9:47:1e:db:46:ba:96:72:36:b9:74:38:fb: f6:ed:68:51:2a:8a:fc:b2:95:76:58:a1:aa:a1:dc: 92:d7:55:84:4b:97:7c:e7:e1:01:b0:01:54:69:de: ef:0c:aa:78:6c:1f:6c:e6:c5:6b:01:c8:0e:82:26: 72:3e:0a:53:79:a8:05:2c:09:47:03:32:27:3b:9e: 4d:7f:69:8a:20:d3:eb:ab:a8:bf:a6:7a:75:25:67: 1d:e4:12:cf:ce:60:03:8c:f5:00:2f:cc:60:49:01: 5a:3b:94:4d:1c:65:05:3e:2e:ef:e5:46:77:27:7d: 8b:2a:5d:ee:95:43:16:9f:e4:68:2f:00:d4:ad:d8: ba:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:23:2A:EC:21:B2:31:A5:41:59:F7:82:D5:B4:F0:C4:56:39:68:BF X509v3 Authority Key Identifier: keyid:6B:F1:EA:A5:C3:31:BE:CF:32:77:01:A2:EB:DC:F1:A1:BB:5F:07:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_HqpcMxvs8ydwGi69zxobtfBww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:89:c6:2a:d2:03:b7:18:e1:c4:7c:c9:ad:a7:30:70:0e:ea: 00:18:82:3c:0b:7b:64:cb:79:c0:a8:bc:35:78:2e:36:3e:2f: fd:c2:04:5a:96:46:68:2b:8e:28:74:b1:79:92:6f:aa:0e:65: 06:5b:d8:88:5c:06:ea:21:8f:a9:29:b2:a0:66:ad:27:47:5d: 73:6c:91:6e:31:cb:b0:d4:0f:03:6f:a6:31:9d:9f:82:67:89: 1b:39:0b:3e:21:5d:c2:89:0f:38:02:7e:c8:c5:4c:89:ef:84: 91:c1:ab:d1:6c:b1:b7:ea:6d:eb:6d:d8:8a:5f:45:a2:a9:d0: 61:9d:da:71:ae:b4:6a:ce:54:80:72:10:e6:6e:dc:d3:a6:f9: 7b:c7:5e:62:bc:45:d8:b3:63:5d:b3:89:1c:75:5b:92:26:28: 02:bd:4e:e3:68:c9:e7:e8:6d:ca:f1:cb:5f:56:73:cf:e0:be: 2c:60:49:72:b1:40:bf:41:55:a8:7d:37:fc:70:90:51:c8:9a: db:01:12:3a:48:48:97:a7:80:d0:4c:52:fa:83:38:1c:ae:ad: 99:ff:1a:a3:ad:9f:05:e3:c0:7e:77:e1:1d:3d:8f:aa:5a:97: 1d:69:f8:06:02:fb:c4:70:77:47:be:fb:08:23:11:7c:2a:1c: 3b:8f:63:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfUgKCI+Frv88W0vfPFQJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiZjFlYWE1YzMzMWJlY2YzMjc3MDFhMmViZGNmMWExYmI1 ZjA3MGMwHhcNMjYwMjA5MTMwMDMyWhcNMjYwMjEwMTMwMDMyWjAzMTEwLwYDVQQD Eyg2ZDIzMmFlYzIxYjIzMWE1NDE1OWY3ODJkNWI0ZjBjNDU2Mzk2OGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkExJ6q7l9vbo7ZLfo8tXsrKDORzM RJKHloaKvi5MdEnhCzYAku3CiqVqrs8VhJiu4Z195S/RWbCkCKk8njhADQUeSfvB pM+zCyc2zSLDEHT6+fvMk/aMwp2yxSaK/UkxZrWV7NTZ0h/U+Vnl03rzq1YG4MSn BlTlY/lHHttGupZyNrl0OPv27WhRKor8spV2WKGqodyS11WES5d85+EBsAFUad7v DKp4bB9s5sVrAcgOgiZyPgpTeagFLAlHAzInO55Nf2mKINPrq6i/pnp1JWcd5BLP zmADjPUAL8xgSQFaO5RNHGUFPi7v5UZ3J32LKl3ulUMWn+RoLwDUrdi66QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG0jKuwhsjGlQVn3gtW08MRWOWi/MB8GA1UdIwQY MBaAFGvx6qXDMb7PMncBouvc8aG7XwcMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYV9IcXBjTXh2czh5ZHdHaTY5enhvYnRmQnd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yZTc0MTgtZjY1ZC00ZmZlLThiZGQt OTYxZWNjM2E2Y2QwLzEvYV9IcXBjTXh2czh5ZHdHaTY5enhvYnRmQnd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yZTc0MTgtZjY1ZC00ZmZlLThiZGQtOTYxZWNjM2E2Y2Qw LzEvYV9IcXBjTXh2czh5ZHdHaTY5enhvYnRmQnd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA4nGKtID txjhxHzJracwcA7qABiCPAt7ZMt5wKi8NXguNj4v/cIEWpZGaCuOKHSxeZJvqg5l BlvYiFwG6iGPqSmyoGatJ0ddc2yRbjHLsNQPA2+mMZ2fgmeJGzkLPiFdwokPOAJ+ yMVMie+EkcGr0Wyxt+pt623Yil9FoqnQYZ3aca60as5UgHIQ5m7c06b5e8deYrxF 2LNjXbOJHHVbkiYoAr1O42jJ5+htyvHLX1Zzz+C+LGBJcrFAv0FVqH03/HCQUcia 2wESOkhIl6eA0ExS+oM4HK6tmf8ao62fBePAfnfhHT2PqlqXHWn4BgL7xHB3R777 CCMRfCocO49jmg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:49 2026 by rpki-client