This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.mft File: iOn6I9pP6Xqp4PORFWIFWaKfa3A.mft (raw, json) Hash identifier: a6KfYUyzu1h0UKR+Pybi2LBw8JCxJ9a/WH94e6byodA= Subject key identifier: FC:6C:F3:08:A9:54:F3:DC:D1:63:0E:12:F6:07:E8:05:F4:5C:D8:91 Authority key identifier: 88:E9:FA:23:DA:4F:E9:7A:A9:E0:F3:91:15:62:05:59:A2:9F:6B:70 Certificate issuer: /CN=88e9fa23da4fe97aa9e0f39115620559a29f6b70 Certificate serial: 019C42464B8E2770AB375BD0B2431EB665E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOn6I9pP6Xqp4PORFWIFWaKfa3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.mft Manifest number: 05B7 Signing time: Mon 09 Feb 2026 12:00:28 +0000 Manifest this update: Mon 09 Feb 2026 12:00:28 +0000 Manifest next update: Tue 10 Feb 2026 12:00:28 +0000 Files and hashes: 1: cQCDgJdM56OvB-BfvF6zionxI8Y.roa (hash: +/gYe8nRfG+QFdVNaYVDkUqqDuLW/SmfqR2wjvDlTHY=) 2: iOn6I9pP6Xqp4PORFWIFWaKfa3A.crl (hash: PYYCtMlyW0cg0HvvjtZxzVnAsu72bDK6DFh07ClMYiQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.mft rsync://rpki.ripe.net/repository/DEFAULT/iOn6I9pP6Xqp4PORFWIFWaKfa3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:4b:8e:27:70:ab:37:5b:d0:b2:43:1e:b6:65:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88e9fa23da4fe97aa9e0f39115620559a29f6b70 Validity Not Before: Feb 9 12:00:28 2026 GMT Not After : Feb 10 12:00:28 2026 GMT Subject: CN=fc6cf308a954f3dcd1630e12f607e805f45cd891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2f:53:5d:f3:e7:2f:ae:91:0a:8f:6f:f3:ab: 1f:30:e1:c8:4a:b8:74:99:3d:07:ef:36:de:84:f1: b1:98:29:6a:d0:8f:5e:eb:81:21:da:e9:f3:be:a8: 89:43:d3:04:43:66:b2:cb:40:aa:18:bf:f9:40:e8: b1:af:f1:a1:e6:63:79:7c:35:b8:9d:6f:1a:46:90: 42:c7:8b:7b:2b:43:17:97:db:73:f4:40:8d:8a:3a: 4b:a3:3d:ef:4f:e5:3c:35:83:6b:fd:04:81:87:e1: e5:30:9a:b9:63:16:57:7e:c8:bd:88:0c:5a:db:d9: cb:c5:f2:c0:4e:3a:bc:e3:2f:ce:4b:e4:17:b0:86: d7:2a:b5:66:ee:ea:6e:28:77:82:ed:3e:17:d0:4f: d2:6e:b5:cb:4d:9b:7d:ef:02:a2:14:5f:1f:11:34: 1f:d2:e5:5b:83:8c:10:c6:b0:4e:33:43:b0:29:e9: 5c:36:fc:20:31:01:a8:79:85:54:27:0d:5f:c4:e3: d7:b5:aa:63:d3:dd:20:ec:bd:dc:28:51:ee:fe:93: 63:4a:c9:ea:4d:cb:d1:74:ff:2f:05:1b:90:8e:dd: a4:64:e1:98:76:a7:73:be:5e:ea:0e:07:63:67:33: 93:06:4a:c8:15:74:9d:44:cc:94:95:3f:aa:57:9b: b0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:6C:F3:08:A9:54:F3:DC:D1:63:0E:12:F6:07:E8:05:F4:5C:D8:91 X509v3 Authority Key Identifier: keyid:88:E9:FA:23:DA:4F:E9:7A:A9:E0:F3:91:15:62:05:59:A2:9F:6B:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOn6I9pP6Xqp4PORFWIFWaKfa3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:d2:6f:53:11:78:18:ac:13:0a:2c:07:d6:49:92:65:47:59: c5:55:22:ce:96:72:4c:5f:f9:22:27:20:db:ab:72:f9:79:2a: ec:e8:e7:3c:34:4d:6c:62:3c:80:47:d5:92:f6:4e:ad:6a:e7: b6:cb:bf:b6:12:27:81:50:b2:d7:c6:b8:d3:58:47:53:91:34: e5:ac:f8:27:f4:04:ab:95:66:8d:76:9c:9b:16:44:f3:af:b7: 9d:32:26:c7:0e:74:b3:b0:f7:51:d7:2c:6b:6d:99:d2:89:88: 10:93:84:59:c6:47:d4:81:f6:35:32:fd:e6:41:aa:45:ed:2a: 73:73:73:ca:7c:75:35:3c:b4:f2:1b:33:a7:b9:26:13:e7:1c: ca:3d:69:f0:12:d8:b2:6a:65:a6:67:06:e1:bf:03:26:36:71: 22:d6:74:28:75:57:57:1b:d8:40:b5:a8:7c:bd:af:5e:bc:7f: 96:92:41:f3:04:ca:82:07:6f:3b:29:b2:77:36:cf:76:45:71: ab:84:d4:54:d9:a4:56:4a:ef:6a:a6:78:d8:9c:77:63:ae:4b: 21:14:96:53:31:a2:7e:d3:a4:83:33:f2:02:5b:a1:a1:dd:10: 02:91:1a:70:ca:54:5c:5c:e0:57:fa:c5:42:aa:0a:5c:b8:e4: bf:1e:a4:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRkuOJ3CrN1vQskMetmXiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZTlmYTIzZGE0ZmU5N2FhOWUwZjM5MTE1NjIwNTU5YTI5 ZjZiNzAwHhcNMjYwMjA5MTIwMDI4WhcNMjYwMjEwMTIwMDI4WjAzMTEwLwYDVQQD EyhmYzZjZjMwOGE5NTRmM2RjZDE2MzBlMTJmNjA3ZTgwNWY0NWNkODkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzi9TXfPnL66RCo9v86sfMOHISrh0 mT0H7zbehPGxmClq0I9e64Eh2unzvqiJQ9MEQ2ayy0CqGL/5QOixr/Gh5mN5fDW4 nW8aRpBCx4t7K0MXl9tz9ECNijpLoz3vT+U8NYNr/QSBh+HlMJq5YxZXfsi9iAxa 29nLxfLATjq84y/OS+QXsIbXKrVm7upuKHeC7T4X0E/SbrXLTZt97wKiFF8fETQf 0uVbg4wQxrBOM0OwKelcNvwgMQGoeYVUJw1fxOPXtapj090g7L3cKFHu/pNjSsnq TcvRdP8vBRuQjt2kZOGYdqdzvl7qDgdjZzOTBkrIFXSdRMyUlT+qV5uw1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPxs8wipVPPc0WMOEvYH6AX0XNiRMB8GA1UdIwQY MBaAFIjp+iPaT+l6qeDzkRViBVmin2twMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaU9uNkk5cFA2WHFwNFBPUkZXSUZXYUtmYTNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS82ZDE1YzAtODBjYy00ZWRmLThmMTQt M2UyNDc4OTQ3ZTZlLzEvaU9uNkk5cFA2WHFwNFBPUkZXSUZXYUtmYTNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS82ZDE1YzAtODBjYy00ZWRmLThmMTQtM2UyNDc4OTQ3ZTZl LzEvaU9uNkk5cFA2WHFwNFBPUkZXSUZXYUtmYTNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwdJvUxF4 GKwTCiwH1kmSZUdZxVUizpZyTF/5Iicg26ty+Xkq7OjnPDRNbGI8gEfVkvZOrWrn tsu/thIngVCy18a401hHU5E05az4J/QEq5VmjXacmxZE86+3nTImxw50s7D3Udcs a22Z0omIEJOEWcZH1IH2NTL95kGqRe0qc3Nzynx1NTy08hszp7kmE+ccyj1p8BLY smplpmcG4b8DJjZxItZ0KHVXVxvYQLWofL2vXrx/lpJB8wTKggdvOymydzbPdkVx q4TUVNmkVkrvaqZ42Jx3Y65LIRSWUzGiftOkgzPyAluhod0QApEacMpUXFzgV/rF QqoKXLjkvx6k3Q== -----END CERTIFICATE-----Generated at Mon Feb 9 19:49:16 2026 by rpki-client