This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft File: 0auJR6hgH0uhqFvRwHs_OE95YR0.mft (raw, json) Hash identifier: OMaP+RRxmUpAlh1ksV/yqsLLBwdnLjZgbAVao1gaeLw= Subject key identifier: 1F:7C:D4:C0:49:BA:AE:C6:43:7D:C3:34:46:2C:24:E2:83:AB:39:AA Authority key identifier: D1:AB:89:47:A8:60:1F:4B:A1:A8:5B:D1:C0:7B:3F:38:4F:79:61:1D Certificate issuer: /CN=d1ab8947a8601f4ba1a85bd1c07b3f384f79611d Certificate serial: 019C41D85267333E67F30449C5CDEC0D5E1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0auJR6hgH0uhqFvRwHs_OE95YR0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft Manifest number: 0701 Signing time: Mon 09 Feb 2026 10:00:21 +0000 Manifest this update: Mon 09 Feb 2026 10:00:21 +0000 Manifest next update: Tue 10 Feb 2026 10:00:21 +0000 Files and hashes: 1: 0auJR6hgH0uhqFvRwHs_OE95YR0.crl (hash: sShSQW3rFvNZxDplyXYJjjZ/MisiXsMv+47DULxtzW4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft rsync://rpki.ripe.net/repository/DEFAULT/0auJR6hgH0uhqFvRwHs_OE95YR0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:52:67:33:3e:67:f3:04:49:c5:cd:ec:0d:5e:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1ab8947a8601f4ba1a85bd1c07b3f384f79611d Validity Not Before: Feb 9 10:00:21 2026 GMT Not After : Feb 10 10:00:21 2026 GMT Subject: CN=1f7cd4c049baaec6437dc334462c24e283ab39aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b4:88:9a:ef:e3:ea:7c:0e:21:5d:aa:65:18: d5:28:c2:d4:a1:76:ac:7f:f5:7d:ff:dd:93:4c:fb: a0:16:7a:33:cf:66:45:ac:ac:f0:fc:77:c2:b9:63: 11:63:20:b8:7e:7d:af:36:34:23:47:3f:e2:39:9c: 25:67:93:5f:ca:80:bb:27:57:a0:bc:53:28:0d:68: 15:8b:6d:e5:d7:76:db:34:3a:19:79:a3:3a:b3:1e: a3:23:dc:db:07:31:70:3b:e8:d2:6f:d0:e8:fc:41: 22:9a:e7:f1:51:46:29:83:9c:c8:0f:6a:ed:65:be: 6b:5d:0c:06:f9:47:f6:c5:48:23:c8:ae:d9:d1:0c: be:6e:06:50:62:b1:85:2e:45:98:1d:2f:59:2d:b7: 8f:af:ee:a9:11:a8:dc:0a:20:1c:76:d2:44:1f:1b: 67:59:b1:1c:80:3c:81:d1:d4:bb:05:d1:bf:77:fa: 98:70:ee:83:19:c8:ed:42:fe:da:80:8d:74:05:fe: d0:81:61:5c:5e:79:d6:a6:47:ad:93:95:85:2b:e0: cf:67:07:0d:25:f3:09:fc:e8:fd:49:e7:b3:eb:f2: 04:5d:fd:8a:e5:b7:86:ec:86:bb:5c:3e:88:01:e6: a5:a4:0b:34:54:39:15:11:6b:c4:ff:11:ae:63:66: 77:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:7C:D4:C0:49:BA:AE:C6:43:7D:C3:34:46:2C:24:E2:83:AB:39:AA X509v3 Authority Key Identifier: keyid:D1:AB:89:47:A8:60:1F:4B:A1:A8:5B:D1:C0:7B:3F:38:4F:79:61:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0auJR6hgH0uhqFvRwHs_OE95YR0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:31:9a:87:53:38:ba:f4:1b:cf:99:21:98:fe:47:37:f5:1e: 38:e5:2e:15:c9:2d:08:eb:3e:c8:db:cc:77:61:d1:09:5c:db: 90:2e:84:d1:f0:47:9e:54:3c:c3:78:b7:58:21:0b:df:98:7a: ab:12:5a:02:f6:e5:db:db:03:fd:d6:09:e2:bf:84:c3:c6:ad: e7:30:a7:12:b0:d1:be:2c:e1:36:05:3e:51:0b:97:15:c4:06: a2:28:6b:95:ce:11:10:0e:2c:50:f6:9d:0b:6c:25:a8:f8:d5: 15:ac:fa:b9:e6:5b:b7:9f:29:4f:87:a3:5d:47:45:2c:ba:9f: 10:b3:93:0d:bf:81:e9:2a:e5:19:5c:7c:0e:a8:0a:88:c5:ca: 44:a9:45:6f:55:b7:3b:f1:65:68:4f:29:a7:0d:61:13:a9:55: 01:6c:9d:ac:39:d4:f5:8a:bd:df:b8:9e:85:62:82:d2:25:0e: b3:bf:21:2b:69:32:23:23:c2:32:ae:ae:b6:21:aa:93:03:c1: 4f:39:2d:11:cc:cf:3d:79:8d:2b:93:0b:26:70:20:78:31:e2: 19:fb:df:b1:74:83:84:a1:31:ce:90:56:57:d6:1d:2b:1c:48: 59:37:23:7a:7b:e4:26:01:cf:90:9f:70:4f:33:41:a5:c6:af: dd:27:77:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2FJnMz5n8wRJxc3sDV4cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxYWI4OTQ3YTg2MDFmNGJhMWE4NWJkMWMwN2IzZjM4NGY3 OTYxMWQwHhcNMjYwMjA5MTAwMDIxWhcNMjYwMjEwMTAwMDIxWjAzMTEwLwYDVQQD EygxZjdjZDRjMDQ5YmFhZWM2NDM3ZGMzMzQ0NjJjMjRlMjgzYWIzOWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bSImu/j6nwOIV2qZRjVKMLUoXas f/V9/92TTPugFnozz2ZFrKzw/HfCuWMRYyC4fn2vNjQjRz/iOZwlZ5NfyoC7J1eg vFMoDWgVi23l13bbNDoZeaM6sx6jI9zbBzFwO+jSb9Do/EEimufxUUYpg5zID2rt Zb5rXQwG+Uf2xUgjyK7Z0Qy+bgZQYrGFLkWYHS9ZLbePr+6pEajcCiAcdtJEHxtn WbEcgDyB0dS7BdG/d/qYcO6DGcjtQv7agI10Bf7QgWFcXnnWpketk5WFK+DPZwcN JfMJ/Oj9Seez6/IEXf2K5beG7Ia7XD6IAealpAs0VDkVEWvE/xGuY2Z3xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB981MBJuq7GQ33DNEYsJOKDqzmqMB8GA1UdIwQY MBaAFNGriUeoYB9Loahb0cB7PzhPeWEdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGF1SlI2aGdIMHVocUZ2UndIc19PRTk1WVIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS82MThlMzYtZTBjMy00MjhhLWFmZDEt NDNjYzkwMTE3YWFjLzEvMGF1SlI2aGdIMHVocUZ2UndIc19PRTk1WVIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS82MThlMzYtZTBjMy00MjhhLWFmZDEtNDNjYzkwMTE3YWFj LzEvMGF1SlI2aGdIMHVocUZ2UndIc19PRTk1WVIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgjGah1M4 uvQbz5khmP5HN/UeOOUuFcktCOs+yNvMd2HRCVzbkC6E0fBHnlQ8w3i3WCEL35h6 qxJaAvbl29sD/dYJ4r+Ew8at5zCnErDRvizhNgU+UQuXFcQGoihrlc4REA4sUPad C2wlqPjVFaz6ueZbt58pT4ejXUdFLLqfELOTDb+B6SrlGVx8DqgKiMXKRKlFb1W3 O/FlaE8ppw1hE6lVAWydrDnU9Yq937iehWKC0iUOs78hK2kyIyPCMq6utiGqkwPB TzktEczPPXmNK5MLJnAgeDHiGfvfsXSDhKExzpBWV9YdKxxIWTcjenvkJgHPkJ9w TzNBpcav3Sd3wA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:46 2026 by rpki-client