This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.mft File: 6XlAPNaMmN9zjjEGKQOgsyJgC1k.mft (raw, json) Hash identifier: 8CrcMvY8olGqzrj8KARHwVh6npyrBUKtK6a0rH+U1dU= Subject key identifier: 45:FB:A6:32:DF:4B:4F:59:15:2F:76:44:1C:8D:76:CA:3E:26:0F:35 Authority key identifier: E9:79:40:3C:D6:8C:98:DF:73:8E:31:06:29:03:A0:B3:22:60:0B:59 Certificate issuer: /CN=e979403cd68c98df738e31062903a0b322600b59 Certificate serial: 019C4210287211EBCF1C1CBDAE585D5B5A69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XlAPNaMmN9zjjEGKQOgsyJgC1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.mft Manifest number: 03B8 Signing time: Mon 09 Feb 2026 11:01:20 +0000 Manifest this update: Mon 09 Feb 2026 11:01:20 +0000 Manifest next update: Tue 10 Feb 2026 11:01:20 +0000 Files and hashes: 1: 6XlAPNaMmN9zjjEGKQOgsyJgC1k.crl (hash: GOfCKqoitXmnzZL7DeCVlg7kUQV420bl+ug1wzT3VHQ=) 2: 7xaTNR1-LrDroCcVfd51GMULPgk.roa (hash: 1/QOFIY+bIYf3uAnfGJ3BJ+RAzrDoN7j26g8Ffhh1eo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.crl rsync://rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.mft rsync://rpki.ripe.net/repository/DEFAULT/6XlAPNaMmN9zjjEGKQOgsyJgC1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:10:28:72:11:eb:cf:1c:1c:bd:ae:58:5d:5b:5a:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e979403cd68c98df738e31062903a0b322600b59 Validity Not Before: Feb 9 11:01:20 2026 GMT Not After : Feb 10 11:01:20 2026 GMT Subject: CN=45fba632df4b4f59152f76441c8d76ca3e260f35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:38:12:cb:42:b1:c4:31:0d:a7:f2:df:be:0f: 4c:bd:04:e5:df:c0:d4:2c:af:bc:00:ae:13:65:14: 76:7d:9e:8e:0f:55:61:3d:cc:ae:6d:8c:a5:9b:c2: d3:c0:66:d5:e6:21:a1:32:2e:9d:13:38:7e:c8:18: b9:dc:13:ae:dd:ea:65:41:04:66:5d:c0:61:3d:30: 53:15:38:ce:01:fc:2f:0d:bf:83:51:62:1f:a5:70: 19:82:dd:09:20:5b:28:6b:ea:91:af:11:19:7e:20: 28:60:54:89:ef:ff:98:c9:8b:56:c9:8c:eb:ca:4e: 7f:06:69:52:fa:79:53:c6:3a:72:f6:79:c1:96:d4: eb:01:23:21:9e:52:74:d9:a8:ce:7e:e1:79:61:35: 8a:1a:5e:f6:3e:3c:08:3a:6d:f3:ca:c9:28:af:c7: d0:73:45:0b:28:c6:a1:b7:55:c6:66:27:0e:57:dd: ae:2e:b4:cb:6c:8f:09:78:01:2d:37:3a:7c:b5:79: 8f:3d:d1:b8:6e:89:77:3b:5c:0a:2f:de:b8:bb:da: fa:41:c2:f4:4b:44:ef:a1:ca:96:f7:e5:ff:5f:46: d0:4a:82:0a:b5:cf:db:4e:0a:f8:b7:e8:17:8e:5a: 59:13:80:8e:8d:dd:1a:1a:55:21:27:dd:63:ca:19: 07:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:FB:A6:32:DF:4B:4F:59:15:2F:76:44:1C:8D:76:CA:3E:26:0F:35 X509v3 Authority Key Identifier: keyid:E9:79:40:3C:D6:8C:98:DF:73:8E:31:06:29:03:A0:B3:22:60:0B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XlAPNaMmN9zjjEGKQOgsyJgC1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:bf:eb:75:9a:36:a3:38:68:f4:cd:42:f8:b2:4d:2c:1c:e9: 86:0c:df:7f:02:3d:ef:b8:72:3d:51:58:ec:2f:ff:a1:f5:44: 31:d8:76:81:d6:f2:72:6b:02:25:ad:f0:69:59:13:2f:87:69: 1f:00:87:d5:c0:e9:de:2b:22:8f:f0:ec:c0:19:cc:a7:99:5b: 76:b3:29:fc:88:15:52:1d:4e:46:61:8d:fd:37:29:14:e1:d0: 51:13:50:5e:02:c1:b0:82:1c:ee:ff:ee:11:41:59:59:c8:e1: 70:f7:fe:c5:26:85:01:fa:a9:b2:b9:62:e3:61:f5:00:0b:6c: b0:2e:3b:5c:94:7b:74:0c:29:be:7b:72:8a:0b:ba:66:ef:74: df:53:82:c7:e3:5c:4c:c4:06:77:65:d8:06:63:ac:16:94:a7: e8:db:32:b2:fb:33:34:29:22:02:79:62:dc:51:a1:30:a7:cb: ae:63:ec:35:8f:48:64:48:be:97:c4:e4:b9:9c:be:75:98:2e: 62:eb:c2:65:53:da:fb:c3:0d:8d:61:d1:77:93:e6:a2:1d:c9: 7a:cc:c1:bd:36:0d:1f:0e:4b:7e:8a:f9:e0:27:2d:44:d0:8f: 03:c8:0d:2d:48:c8:ef:d3:eb:ce:8b:59:4a:dd:ad:3f:e3:a3: 60:43:30:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCEChyEevPHBy9rlhdW1ppMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5Nzk0MDNjZDY4Yzk4ZGY3MzhlMzEwNjI5MDNhMGIzMjI2 MDBiNTkwHhcNMjYwMjA5MTEwMTIwWhcNMjYwMjEwMTEwMTIwWjAzMTEwLwYDVQQD Eyg0NWZiYTYzMmRmNGI0ZjU5MTUyZjc2NDQxYzhkNzZjYTNlMjYwZjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozgSy0KxxDENp/Lfvg9MvQTl38DU LK+8AK4TZRR2fZ6OD1VhPcyubYylm8LTwGbV5iGhMi6dEzh+yBi53BOu3eplQQRm XcBhPTBTFTjOAfwvDb+DUWIfpXAZgt0JIFsoa+qRrxEZfiAoYFSJ7/+YyYtWyYzr yk5/BmlS+nlTxjpy9nnBltTrASMhnlJ02ajOfuF5YTWKGl72PjwIOm3zyskor8fQ c0ULKMaht1XGZicOV92uLrTLbI8JeAEtNzp8tXmPPdG4bol3O1wKL964u9r6QcL0 S0TvocqW9+X/X0bQSoIKtc/bTgr4t+gXjlpZE4COjd0aGlUhJ91jyhkHCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEX7pjLfS09ZFS92RByNdso+Jg81MB8GA1UdIwQY MBaAFOl5QDzWjJjfc44xBikDoLMiYAtZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlhsQVBOYU1tTjl6ampFR0tRT2dzeUpnQzFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zMDNhOGYtMzY3Zi00Y2ZhLTlhNzgt ZTgxNjIxYjYxZDY1LzEvNlhsQVBOYU1tTjl6ampFR0tRT2dzeUpnQzFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8zMDNhOGYtMzY3Zi00Y2ZhLTlhNzgtZTgxNjIxYjYxZDY1 LzEvNlhsQVBOYU1tTjl6ampFR0tRT2dzeUpnQzFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjL/rdZo2 ozho9M1C+LJNLBzphgzffwI977hyPVFY7C//ofVEMdh2gdbycmsCJa3waVkTL4dp HwCH1cDp3isij/DswBnMp5lbdrMp/IgVUh1ORmGN/TcpFOHQURNQXgLBsIIc7v/u EUFZWcjhcPf+xSaFAfqpsrli42H1AAtssC47XJR7dAwpvntyigu6Zu9031OCx+Nc TMQGd2XYBmOsFpSn6NsysvszNCkiAnli3FGhMKfLrmPsNY9IZEi+l8TkuZy+dZgu YuvCZVPa+8MNjWHRd5Pmoh3JeszBvTYNHw5Lfor54CctRNCPA8gNLUjI79PrzotZ St2tP+OjYEMwKQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:46:41 2026 by rpki-client