This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft File: 6gHK_4k1RpEKJfvM64YjVfejcmA.mft (raw, json) Hash identifier: 4kqZ40XG/98lpc2uU8xua4xTSwrS+sTNGiYGETSJjD8= Subject key identifier: 67:FC:CE:30:CB:26:AC:84:EE:32:86:EF:E6:15:90:FA:AE:53:66:8F Authority key identifier: EA:01:CA:FF:89:35:46:91:0A:25:FB:CC:EB:86:23:55:F7:A3:72:60 Certificate issuer: /CN=ea01caff893546910a25fbcceb862355f7a37260 Certificate serial: 019C4322E76309D82CA984A8EDDA50605F15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft Manifest number: 0F2D Signing time: Mon 09 Feb 2026 16:01:26 +0000 Manifest this update: Mon 09 Feb 2026 16:01:26 +0000 Manifest next update: Tue 10 Feb 2026 16:01:26 +0000 Files and hashes: 1: 6gHK_4k1RpEKJfvM64YjVfejcmA.crl (hash: ZZDow8MTwy7YqZ8dpdgkGPpC7eMMK7hBXtV9shS1fWY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:e7:63:09:d8:2c:a9:84:a8:ed:da:50:60:5f:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea01caff893546910a25fbcceb862355f7a37260 Validity Not Before: Feb 9 16:01:26 2026 GMT Not After : Feb 10 16:01:26 2026 GMT Subject: CN=67fcce30cb26ac84ee3286efe61590faae53668f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b6:ac:df:5a:97:f4:5e:72:6d:56:8f:41:30: 14:5b:9a:fb:a5:24:74:7e:c1:39:9b:47:77:32:15: 19:30:54:d5:e2:a5:01:e6:5a:f2:7b:85:4a:b7:33: 7b:27:fe:be:10:cf:8a:98:52:7a:7d:42:39:4a:b8: b7:71:4b:c9:5d:23:d7:65:7d:12:8f:5d:7a:66:d3: e0:9b:c5:1a:7d:8e:32:cc:5a:a5:7a:9d:ed:81:ca: 13:7f:3a:3d:3b:ed:6b:98:e5:cb:db:2d:00:46:d7: 7b:e7:41:96:cb:3a:b8:2f:f0:0a:ba:73:e5:3f:b0: a0:e7:ba:0c:7c:7b:82:40:3f:b4:80:64:03:91:a1: ca:aa:00:56:f9:8e:6c:a8:9b:30:a8:66:c4:3d:18: 5f:f2:e1:2c:49:be:90:a2:6a:86:70:79:93:4c:51: 08:4a:ba:75:9f:51:f7:54:3a:a6:7f:3e:09:b2:f0: a2:bf:48:db:4d:a7:e7:91:23:eb:d1:63:a0:64:f8: f4:c5:9c:61:63:65:18:bf:50:7c:d1:ba:2a:09:97: 4e:b4:34:01:0b:cd:e6:85:ce:96:fd:01:cb:91:de: e2:bf:b5:dd:2e:5c:d4:ce:e9:23:aa:87:a8:db:93: e5:e8:38:7d:50:62:bb:b8:d9:e0:0d:7a:ce:3f:79: 6a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:FC:CE:30:CB:26:AC:84:EE:32:86:EF:E6:15:90:FA:AE:53:66:8F X509v3 Authority Key Identifier: keyid:EA:01:CA:FF:89:35:46:91:0A:25:FB:CC:EB:86:23:55:F7:A3:72:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:b4:d1:ff:d7:ed:95:85:04:e6:a4:4d:e1:8a:86:fa:d9:70: 6c:f4:90:96:93:5c:91:f2:82:9b:88:9a:c9:b8:c1:e9:15:c5: ae:2a:b7:bd:aa:5c:c3:ef:7f:b3:9a:b4:59:d7:e2:87:57:bb: 5b:e1:16:9f:15:0c:1c:b6:5e:0e:0c:36:d9:52:12:d6:c9:be: 78:08:f6:a3:95:42:ee:d7:24:94:20:8d:45:69:f0:d8:5d:1b: ff:47:5f:9a:17:97:ec:0a:7f:51:fc:c6:63:4f:f4:06:36:dd: 18:b9:9e:32:91:8b:c7:fc:1c:71:d9:ab:d8:c7:45:15:9d:28: c4:44:67:8d:ad:ad:29:dd:ea:e2:cf:7a:42:a0:06:c8:8b:4c: 68:9b:93:d8:23:53:67:35:73:16:fd:47:9b:ea:10:63:ea:a6: c7:de:94:a9:10:80:c9:d6:33:28:31:4c:f8:6a:5c:ef:c4:17: 04:69:eb:b9:0a:d7:b6:32:b3:02:44:de:2c:ec:3b:fb:d5:b8: 92:91:39:85:38:e1:e5:18:4b:89:3f:c9:8d:02:79:9c:3e:b9: 66:9a:6b:60:59:0a:38:7e:03:44:96:d3:57:69:7b:52:6b:33: 8b:90:e6:d4:15:39:13:89:a9:8f:37:3a:c6:f1:66:6c:42:8f: 99:30:a5:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIudjCdgsqYSo7dpQYF8VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMDFjYWZmODkzNTQ2OTEwYTI1ZmJjY2ViODYyMzU1Zjdh MzcyNjAwHhcNMjYwMjA5MTYwMTI2WhcNMjYwMjEwMTYwMTI2WjAzMTEwLwYDVQQD Eyg2N2ZjY2UzMGNiMjZhYzg0ZWUzMjg2ZWZlNjE1OTBmYWFlNTM2NjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsras31qX9F5ybVaPQTAUW5r7pSR0 fsE5m0d3MhUZMFTV4qUB5lrye4VKtzN7J/6+EM+KmFJ6fUI5Sri3cUvJXSPXZX0S j116ZtPgm8UafY4yzFqlep3tgcoTfzo9O+1rmOXL2y0ARtd750GWyzq4L/AKunPl P7Cg57oMfHuCQD+0gGQDkaHKqgBW+Y5sqJswqGbEPRhf8uEsSb6QomqGcHmTTFEI Srp1n1H3VDqmfz4JsvCiv0jbTafnkSPr0WOgZPj0xZxhY2UYv1B80boqCZdOtDQB C83mhc6W/QHLkd7iv7XdLlzUzukjqoeo25Pl6Dh9UGK7uNngDXrOP3lqzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGf8zjDLJqyE7jKG7+YVkPquU2aPMB8GA1UdIwQY MBaAFOoByv+JNUaRCiX7zOuGI1X3o3JgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmdIS180azFScEVLSmZ2TTY0WWpWZmVqY21BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8wYTdlYTItNTAzMC00ZTY0LWJkZDYt MmU5ZWRhMTk5YTc4LzEvNmdIS180azFScEVLSmZ2TTY0WWpWZmVqY21BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8wYTdlYTItNTAzMC00ZTY0LWJkZDYtMmU5ZWRhMTk5YTc4 LzEvNmdIS180azFScEVLSmZ2TTY0WWpWZmVqY21BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIbTR/9ft lYUE5qRN4YqG+tlwbPSQlpNckfKCm4iaybjB6RXFriq3vapcw+9/s5q0Wdfih1e7 W+EWnxUMHLZeDgw22VIS1sm+eAj2o5VC7tcklCCNRWnw2F0b/0dfmheX7Ap/UfzG Y0/0BjbdGLmeMpGLx/wccdmr2MdFFZ0oxERnja2tKd3q4s96QqAGyItMaJuT2CNT ZzVzFv1Hm+oQY+qmx96UqRCAydYzKDFM+Gpc78QXBGnruQrXtjKzAkTeLOw7+9W4 kpE5hTjh5RhLiT/JjQJ5nD65ZpprYFkKOH4DRJbTV2l7Umszi5Dm1BU5E4mpjzc6 xvFmbEKPmTClRw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:34 2026 by rpki-client