This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.mft
File: 6UqatkKm6a9PttCsgnGFTevQcHY.mft (raw, json)
Hash identifier: 437ETX6D9v1IgOhdiTOvE1JGZqfwPLC1KfzfJNA+h8A=
Subject key identifier: CC:C2:9D:ED:F0:28:F0:F8:18:7D:71:C0:09:69:95:9B:C4:72:F0:A0
Authority key identifier: E9:4A:9A:B6:42:A6:E9:AF:4F:B6:D0:AC:82:71:85:4D:EB:D0:70:76
Certificate issuer: /CN=e94a9ab642a6e9af4fb6d0ac8271854debd07076
Certificate serial: 019C427D609041AFC9149B9431407739791B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6UqatkKm6a9PttCsgnGFTevQcHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.mft
Manifest number: 0EA3
Signing time: Mon 09 Feb 2026 13:00:38 +0000
Manifest this update: Mon 09 Feb 2026 13:00:38 +0000
Manifest next update: Tue 10 Feb 2026 13:00:38 +0000
Files and hashes: 1: 6UqatkKm6a9PttCsgnGFTevQcHY.crl (hash: gEvb8ovJ0hFGgQ2WHL+qjPnlPzndoSn+jfXOycfi+EE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6UqatkKm6a9PttCsgnGFTevQcHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:60:90:41:af:c9:14:9b:94:31:40:77:39:79:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e94a9ab642a6e9af4fb6d0ac8271854debd07076
Validity
Not Before: Feb 9 13:00:38 2026 GMT
Not After : Feb 10 13:00:38 2026 GMT
Subject: CN=ccc29dedf028f0f8187d71c00969959bc472f0a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:d6:9d:f7:69:60:89:2e:56:3d:cd:84:4a:b4:
13:43:04:db:63:5a:f3:8c:c7:91:cc:9a:8b:ba:51:
ef:03:4b:6b:fd:ca:9b:82:7d:3f:3e:48:b3:a4:e1:
79:4a:45:44:7a:5e:71:a1:dc:33:80:43:7c:0c:1c:
82:4d:76:1c:2b:9b:db:36:a5:16:cc:a8:2b:e6:30:
48:24:6a:89:1b:ae:46:2f:9a:68:9e:3d:86:e1:91:
78:32:91:a6:21:13:e5:3c:bd:15:89:29:58:aa:ec:
41:20:f5:28:9c:af:b2:a6:8f:ec:01:56:5d:4c:66:
57:91:eb:dd:e1:17:20:7e:0c:28:dc:7a:0a:e3:2e:
a7:28:e1:76:ea:ad:fd:b1:bb:9c:e5:ae:65:2c:f5:
66:d1:19:ec:00:ee:08:5c:20:72:af:ac:d4:7a:fd:
5b:f1:a8:91:17:4d:08:bb:92:1f:ce:d5:77:b9:28:
a9:e3:be:70:5b:b4:b5:7a:ce:69:87:04:34:d7:fe:
76:46:f9:9e:7e:6c:c0:ef:85:2f:8f:de:ce:8f:24:
36:15:1d:b9:7d:67:22:66:67:40:60:4a:e1:35:35:
09:8d:81:2f:af:3d:cf:50:56:29:20:f2:7d:44:ab:
fc:01:7e:9e:f6:b8:91:b7:9a:73:78:19:96:6a:5f:
c1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C2:9D:ED:F0:28:F0:F8:18:7D:71:C0:09:69:95:9B:C4:72:F0:A0
X509v3 Authority Key Identifier:
keyid:E9:4A:9A:B6:42:A6:E9:AF:4F:B6:D0:AC:82:71:85:4D:EB:D0:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6UqatkKm6a9PttCsgnGFTevQcHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:84:ad:2a:5d:e4:96:d5:f6:ec:3b:ff:77:da:ac:78:72:4a:
ab:b7:ff:d6:67:1f:ea:1e:8b:71:16:4d:52:c9:3f:c4:4b:71:
3b:ff:b9:f1:62:4d:5f:89:38:62:01:41:4a:ba:56:ea:51:7f:
56:24:a7:ad:5d:29:ef:b4:05:16:e9:f4:4d:6d:19:36:a4:fe:
70:3b:b4:d5:8e:78:58:bb:56:34:f1:9f:24:d7:6e:48:38:6d:
55:09:a2:e2:25:9b:7d:50:92:70:ab:6e:90:e1:13:29:d2:82:
71:22:0a:8b:db:c4:7b:eb:c7:6f:91:2b:d9:4b:85:6c:0d:d7:
25:a6:46:5f:63:54:e2:59:ed:be:eb:31:69:87:69:67:61:ec:
34:7f:65:e3:48:15:c7:0c:ab:09:9a:37:72:4a:cd:57:b5:98:
6e:db:b1:03:f6:11:4e:a2:ab:b8:54:37:6a:ab:f2:2a:90:fa:
dd:f1:ed:81:a3:eb:a4:2e:fa:0e:dd:2d:f5:bc:8e:cf:3c:fa:
16:5e:12:1d:1e:65:95:31:e1:5c:2a:2b:7e:ac:fb:70:d8:d4:
7c:f8:03:f1:41:bc:a0:f9:cd:c8:2c:7b:6a:53:85:5d:8e:e5:
35:bc:6e:58:da:e7:c8:13:94:fa:ad:18:d5:0b:3f:ab:2b:20:
40:73:5d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:09 2026 by rpki-client