This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft File: l6A46SAR7iaAaKFRfSRM4iwmVU0.mft (raw, json) Hash identifier: TY1GbMP7uen0fZ7q/8rhuUNT6t4R06fZwsEDeFiO9UM= Subject key identifier: 41:0C:CF:1C:37:02:E2:12:DC:B8:54:0D:28:A7:DE:18:78:D6:F7:AC Authority key identifier: 97:A0:38:E9:20:11:EE:26:80:68:A1:51:7D:24:4C:E2:2C:26:55:4D Certificate issuer: /CN=97a038e92011ee268068a1517d244ce22c26554d Certificate serial: 019C41D836B79E7357D086ADD072F0FCFCF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6A46SAR7iaAaKFRfSRM4iwmVU0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft Manifest number: 0B7A Signing time: Mon 09 Feb 2026 10:00:14 +0000 Manifest this update: Mon 09 Feb 2026 10:00:14 +0000 Manifest next update: Tue 10 Feb 2026 10:00:14 +0000 Files and hashes: 1: l6A46SAR7iaAaKFRfSRM4iwmVU0.crl (hash: AOkZ34RoNP97GUws91AOmveHwQT1fZS4B5lPEsfPdz4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft rsync://rpki.ripe.net/repository/DEFAULT/l6A46SAR7iaAaKFRfSRM4iwmVU0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:36:b7:9e:73:57:d0:86:ad:d0:72:f0:fc:fc:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97a038e92011ee268068a1517d244ce22c26554d Validity Not Before: Feb 9 10:00:14 2026 GMT Not After : Feb 10 10:00:14 2026 GMT Subject: CN=410ccf1c3702e212dcb8540d28a7de1878d6f7ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7b:d4:6f:fd:d1:c0:12:31:d6:5c:6f:8a:89: b0:ef:54:09:b8:30:70:4f:73:38:1e:c5:97:82:ea: 88:e4:ca:68:22:f8:79:4e:aa:93:ce:e6:a5:0f:e2: 4b:23:42:8b:ef:99:38:d8:5f:34:8f:27:d1:73:67: 9d:6c:e8:91:88:58:cd:91:57:c2:4d:57:bf:e0:60: 8e:ad:ac:10:59:9a:f9:f8:b2:2d:36:8d:66:00:a0: db:8a:7d:43:99:ce:00:ed:c5:35:c6:04:97:9b:74: 8c:07:93:51:e5:f2:1f:56:bf:cd:74:be:34:41:68: 92:68:d8:81:3b:68:fd:bf:8f:50:62:63:fc:55:4f: 9e:57:66:cb:e5:33:50:57:9f:43:aa:70:38:1a:0c: b0:31:a7:80:00:67:61:4e:b2:7a:5a:bb:d7:55:54: 58:4c:9f:29:98:e4:c4:54:a5:51:17:42:ac:e1:cc: f4:9d:d4:76:3c:a0:86:a3:44:8c:5b:9f:4a:42:cc: 24:d2:ed:45:4e:49:aa:27:a4:5d:19:48:2f:8a:16: 04:25:29:2c:76:b3:fb:ff:32:85:34:ae:c7:27:22: f1:1e:78:e2:20:ff:a4:00:6b:25:24:db:1e:8d:2d: b8:3d:f9:da:e0:eb:89:bc:42:0c:c2:d8:bd:c8:e4: 36:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:0C:CF:1C:37:02:E2:12:DC:B8:54:0D:28:A7:DE:18:78:D6:F7:AC X509v3 Authority Key Identifier: keyid:97:A0:38:E9:20:11:EE:26:80:68:A1:51:7D:24:4C:E2:2C:26:55:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6A46SAR7iaAaKFRfSRM4iwmVU0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:c6:0c:f8:d2:f7:91:c0:ce:f7:25:d8:5b:c6:1a:4a:de:46: d4:17:5e:f6:b3:c7:06:ab:94:b7:17:1e:91:ed:27:0e:9e:cd: 8f:63:09:17:06:ac:ed:ad:14:e4:56:82:8b:79:52:b2:df:aa: aa:6c:99:1f:7d:4e:9a:7a:aa:f2:42:0e:4c:48:02:84:a8:cb: 66:cb:31:40:4e:aa:d2:ff:c0:a8:cd:0a:30:ed:e8:39:58:d2: d9:9c:69:22:0e:77:41:30:e2:2e:80:68:12:72:a3:7b:f9:78: 5d:b1:5f:ba:06:df:2e:03:f7:c9:69:22:94:20:45:f7:c3:0c: 93:13:d0:82:2a:08:10:bd:48:cf:1c:e6:34:0b:8b:96:c1:15: 03:87:28:32:8d:df:36:b3:ef:42:be:68:64:0a:24:92:9e:39: 63:38:1f:ca:80:b0:c9:21:86:3d:b3:82:b9:8f:cb:b9:15:92: b7:9d:33:96:3b:f4:99:02:3b:0e:44:53:0e:d4:45:7b:af:c9: 85:8b:6a:5f:59:0d:cb:89:00:22:cd:b1:7f:df:be:e5:09:26: b5:07:1a:ba:eb:8e:78:ec:a9:0b:ab:9c:91:30:3c:ea:45:af: eb:87:70:2a:88:00:0b:90:ef:97:b2:af:ee:f4:9a:f1:da:0e: 3e:8e:d7:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2Da3nnNX0Iat0HLw/PzxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3YTAzOGU5MjAxMWVlMjY4MDY4YTE1MTdkMjQ0Y2UyMmMy NjU1NGQwHhcNMjYwMjA5MTAwMDE0WhcNMjYwMjEwMTAwMDE0WjAzMTEwLwYDVQQD Eyg0MTBjY2YxYzM3MDJlMjEyZGNiODU0MGQyOGE3ZGUxODc4ZDZmN2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnvUb/3RwBIx1lxviomw71QJuDBw T3M4HsWXguqI5MpoIvh5TqqTzualD+JLI0KL75k42F80jyfRc2edbOiRiFjNkVfC TVe/4GCOrawQWZr5+LItNo1mAKDbin1Dmc4A7cU1xgSXm3SMB5NR5fIfVr/NdL40 QWiSaNiBO2j9v49QYmP8VU+eV2bL5TNQV59DqnA4GgywMaeAAGdhTrJ6WrvXVVRY TJ8pmOTEVKVRF0Ks4cz0ndR2PKCGo0SMW59KQswk0u1FTkmqJ6RdGUgvihYEJSks drP7/zKFNK7HJyLxHnjiIP+kAGslJNsejS24Pfna4OuJvEIMwti9yOQ2FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEEMzxw3AuIS3LhUDSin3hh41vesMB8GA1UdIwQY MBaAFJegOOkgEe4mgGihUX0kTOIsJlVNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDZBNDZTQVI3aWFBYUtGUmZTUk00aXdtVlUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81ZmZkMmYtY2ZlYi00NWE4LThkZWYt ODUyYjZkOGMwMmUyLzEvbDZBNDZTQVI3aWFBYUtGUmZTUk00aXdtVlUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81ZmZkMmYtY2ZlYi00NWE4LThkZWYtODUyYjZkOGMwMmUy LzEvbDZBNDZTQVI3aWFBYUtGUmZTUk00aXdtVlUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZsYM+NL3 kcDO9yXYW8YaSt5G1Bde9rPHBquUtxceke0nDp7Nj2MJFwas7a0U5FaCi3lSst+q qmyZH31Omnqq8kIOTEgChKjLZssxQE6q0v/AqM0KMO3oOVjS2ZxpIg53QTDiLoBo EnKje/l4XbFfugbfLgP3yWkilCBF98MMkxPQgioIEL1IzxzmNAuLlsEVA4coMo3f NrPvQr5oZAokkp45YzgfyoCwySGGPbOCuY/LuRWSt50zljv0mQI7DkRTDtRFe6/J hYtqX1kNy4kAIs2xf9++5QkmtQcauuuOeOypC6uckTA86kWv64dwKogAC5Dvl7Kv 7vSa8doOPo7XBA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:40 2026 by rpki-client