This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.mft File: 1e6pLEJFQFBGvpuMpsDCDmorFA0.mft (raw, json) Hash identifier: nYb42+4FZb94NjQNJ/WYjE4plu1jMwyLxYnarRUMUgo= Subject key identifier: 9F:D2:DB:8A:2A:93:1A:6F:55:0F:55:33:90:9C:E7:5A:83:30:C2:6F Authority key identifier: D5:EE:A9:2C:42:45:40:50:46:BE:9B:8C:A6:C0:C2:0E:6A:2B:14:0D Certificate issuer: /CN=d5eea92c4245405046be9b8ca6c0c20e6a2b140d Certificate serial: 019C4210076674B583B88E5CF241D29F602A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1e6pLEJFQFBGvpuMpsDCDmorFA0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.mft Manifest number: 05FA Signing time: Mon 09 Feb 2026 11:01:12 +0000 Manifest this update: Mon 09 Feb 2026 11:01:12 +0000 Manifest next update: Tue 10 Feb 2026 11:01:12 +0000 Files and hashes: 1: 1e6pLEJFQFBGvpuMpsDCDmorFA0.crl (hash: u6ShPNJQV84a4LlzWF1PeMtHy1oTNiEjM74rZ4bDV7A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.crl rsync://rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.mft rsync://rpki.ripe.net/repository/DEFAULT/1e6pLEJFQFBGvpuMpsDCDmorFA0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:10:07:66:74:b5:83:b8:8e:5c:f2:41:d2:9f:60:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5eea92c4245405046be9b8ca6c0c20e6a2b140d Validity Not Before: Feb 9 11:01:12 2026 GMT Not After : Feb 10 11:01:12 2026 GMT Subject: CN=9fd2db8a2a931a6f550f5533909ce75a8330c26f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:54:69:d8:c4:6d:03:64:c0:b8:01:32:da:61: 62:61:17:e1:06:8c:64:8c:3d:be:f0:83:aa:ec:85: c7:e3:fa:53:52:52:33:11:7f:2e:d5:76:02:21:88: ed:97:d3:8e:6e:82:99:11:79:19:63:fa:5e:48:ce: e1:72:25:be:e6:ca:e2:86:62:46:f3:ff:9d:18:57: 5c:9e:76:57:26:b7:37:e7:80:58:d2:d8:72:fd:4e: 71:09:8b:d0:60:28:37:22:da:5f:71:33:24:5c:f4: 82:e1:82:51:a2:dd:ab:a2:b2:82:29:d8:f2:3c:30: c6:4f:9f:23:ea:4b:15:dc:c7:60:89:8e:65:03:57: 52:a8:08:15:62:41:0e:fe:32:fe:6c:93:68:19:72: ca:b3:7a:bb:76:0a:7e:98:60:50:a5:e3:a7:bc:9b: 01:6e:cd:bf:fe:f3:be:3c:34:a4:00:28:c3:88:47: 84:2a:26:c6:e6:3e:a0:43:b2:57:ab:69:60:dc:f1: 64:50:46:02:05:49:0b:24:19:50:c8:a6:bc:03:78: 47:3f:94:87:5c:cc:7a:32:6d:5e:ab:c4:f7:69:52: 86:41:8b:23:c2:78:48:c6:9b:87:04:9d:5b:3b:04: 4b:7f:cb:e7:5b:44:88:59:97:02:70:53:37:99:ed: 1a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:D2:DB:8A:2A:93:1A:6F:55:0F:55:33:90:9C:E7:5A:83:30:C2:6F X509v3 Authority Key Identifier: keyid:D5:EE:A9:2C:42:45:40:50:46:BE:9B:8C:A6:C0:C2:0E:6A:2B:14:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e6pLEJFQFBGvpuMpsDCDmorFA0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:95:cb:70:0b:7f:6c:ce:5d:6a:e2:31:ff:15:24:7d:55:d4: 0d:4e:68:47:29:20:e3:04:83:6a:7c:f8:ed:41:c7:54:d6:db: 5d:08:da:83:d4:97:6a:fd:0a:23:78:ed:bd:7e:a9:10:01:c8: 21:a1:76:c4:08:a5:42:a4:f6:d0:f9:80:05:ec:2e:b6:06:46: 23:55:1f:6c:38:6b:1e:a6:33:2c:4b:5f:c1:92:5b:26:b1:4d: cc:01:3c:ff:8a:a0:f5:36:4d:22:4a:de:52:94:fb:45:da:e9: 8f:bf:30:09:e9:a7:8e:89:c3:d2:e4:f3:3b:31:25:69:7a:98: c7:cd:74:09:8f:62:f6:e6:45:15:be:94:a5:65:a5:bd:35:05: 5d:14:3c:6a:a3:f2:cb:3c:5c:12:4c:72:0a:55:e5:d2:6d:61: eb:25:30:90:96:26:ed:f7:5e:8a:42:f8:08:7d:57:6a:40:9e: 9f:45:f2:9b:b1:24:6f:84:44:55:90:36:95:7b:b0:ad:4c:51: c2:78:b1:ae:2f:18:29:22:56:f0:da:c9:72:89:eb:0a:8e:c7: 72:43:c1:06:f4:aa:61:0a:37:e2:56:1a:95:53:65:d8:d6:f0: 86:11:af:d0:fb:71:5b:b2:18:40:bb:49:97:fa:d3:d1:ba:71: 75:ca:82:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCEAdmdLWDuI5c8kHSn2AqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZWVhOTJjNDI0NTQwNTA0NmJlOWI4Y2E2YzBjMjBlNmEy YjE0MGQwHhcNMjYwMjA5MTEwMTEyWhcNMjYwMjEwMTEwMTEyWjAzMTEwLwYDVQQD Eyg5ZmQyZGI4YTJhOTMxYTZmNTUwZjU1MzM5MDljZTc1YTgzMzBjMjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1Rp2MRtA2TAuAEy2mFiYRfhBoxk jD2+8IOq7IXH4/pTUlIzEX8u1XYCIYjtl9OOboKZEXkZY/peSM7hciW+5srihmJG 8/+dGFdcnnZXJrc354BY0thy/U5xCYvQYCg3ItpfcTMkXPSC4YJRot2rorKCKdjy PDDGT58j6ksV3MdgiY5lA1dSqAgVYkEO/jL+bJNoGXLKs3q7dgp+mGBQpeOnvJsB bs2//vO+PDSkACjDiEeEKibG5j6gQ7JXq2lg3PFkUEYCBUkLJBlQyKa8A3hHP5SH XMx6Mm1eq8T3aVKGQYsjwnhIxpuHBJ1bOwRLf8vnW0SIWZcCcFM3me0a0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ/S24oqkxpvVQ9VM5Cc51qDMMJvMB8GA1UdIwQY MBaAFNXuqSxCRUBQRr6bjKbAwg5qKxQNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWU2cExFSkZRRkJHdnB1TXBzRENEbW9yRkEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lMTEzMDMtZThkYy00ZDhkLTgwN2Yt NTM1NTIzYmQzZmZiLzEvMWU2cExFSkZRRkJHdnB1TXBzRENEbW9yRkEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9lMTEzMDMtZThkYy00ZDhkLTgwN2YtNTM1NTIzYmQzZmZi LzEvMWU2cExFSkZRRkJHdnB1TXBzRENEbW9yRkEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV5XLcAt/ bM5dauIx/xUkfVXUDU5oRykg4wSDanz47UHHVNbbXQjag9SXav0KI3jtvX6pEAHI IaF2xAilQqT20PmABewutgZGI1UfbDhrHqYzLEtfwZJbJrFNzAE8/4qg9TZNIkre UpT7Rdrpj78wCemnjonD0uTzOzElaXqYx810CY9i9uZFFb6UpWWlvTUFXRQ8aqPy yzxcEkxyClXl0m1h6yUwkJYm7fdeikL4CH1XakCen0Xym7Ekb4REVZA2lXuwrUxR wnixri8YKSJW8NrJconrCo7HckPBBvSqYQo34lYalVNl2NbwhhGv0PtxW7IYQLtJ l/rT0bpxdcqCzg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:09 2026 by rpki-client