This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/816cf9-e6a0-43f1-8a3d-5c7c3ad74a32/1/6DGCFvAxEBktn29i_-4ZDrvVxBs.mft
File: 6DGCFvAxEBktn29i_-4ZDrvVxBs.mft (raw, json)
Hash identifier: UAm9vwOuwUNQQ48mKfYUQstU1W/hsZzAAJ5oIv5nKYM=
Subject key identifier: E6:86:B1:85:F2:0D:57:EB:20:E5:FA:98:45:E0:C4:D6:7C:2E:78:E7
Authority key identifier: E8:31:82:16:F0:31:10:19:2D:9F:6F:62:FF:EE:19:0E:BB:D5:C4:1B
Certificate issuer: /CN=e8318216f03110192d9f6f62ffee190ebbd5c41b
Certificate serial: 019C42B436C1E08BBAFF1E925E827596AE2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6DGCFvAxEBktn29i_-4ZDrvVxBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/816cf9-e6a0-43f1-8a3d-5c7c3ad74a32/1/6DGCFvAxEBktn29i_-4ZDrvVxBs.mft
Manifest number: 0255
Signing time: Mon 09 Feb 2026 14:00:32 +0000
Manifest this update: Mon 09 Feb 2026 14:00:32 +0000
Manifest next update: Tue 10 Feb 2026 14:00:32 +0000
Files and hashes: 1: 6DGCFvAxEBktn29i_-4ZDrvVxBs.crl (hash: 1/wNBfAxVbAcz3Z75toAQi1jGkifuvxy/5x3/iaxmC0=)
2: y7eyZqNEkZQkPingFqUdgXmucwc.roa (hash: f2+YM/xZdW946QzAFcbV9ZF0dOKQRzmJA4JL++o4rTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/816cf9-e6a0-43f1-8a3d-5c7c3ad74a32/1/6DGCFvAxEBktn29i_-4ZDrvVxBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/816cf9-e6a0-43f1-8a3d-5c7c3ad74a32/1/6DGCFvAxEBktn29i_-4ZDrvVxBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6DGCFvAxEBktn29i_-4ZDrvVxBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:36:c1:e0:8b:ba:ff:1e:92:5e:82:75:96:ae:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8318216f03110192d9f6f62ffee190ebbd5c41b
Validity
Not Before: Feb 9 14:00:32 2026 GMT
Not After : Feb 10 14:00:32 2026 GMT
Subject: CN=e686b185f20d57eb20e5fa9845e0c4d67c2e78e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:86:19:5c:a8:10:bd:7d:87:cd:d7:11:18:2d:
03:14:74:92:6e:34:10:6e:b8:f0:83:47:fb:e1:f2:
ad:87:67:65:b7:b1:0d:78:b3:91:d6:2c:d1:dc:4d:
5a:ed:c8:fd:5d:4a:32:9e:34:b5:32:06:83:07:c5:
83:22:11:c1:cc:e3:a3:e6:58:32:cf:59:83:a2:a3:
57:59:1c:f7:58:1e:d2:96:a2:96:f9:7d:43:35:c2:
29:cc:c7:cc:cb:9a:23:2c:da:f2:90:a7:f5:5d:33:
cc:90:56:70:d5:f1:36:a4:c7:27:be:25:f7:70:da:
c8:82:73:f4:7c:99:ee:d3:75:ea:d7:44:cd:9c:82:
c4:57:ae:fc:0e:4a:36:64:d6:fb:fd:71:a6:5e:7d:
5c:48:90:85:05:50:c5:a3:b4:2d:5f:6d:72:6b:5a:
13:99:a3:c9:fc:51:15:9e:a8:fc:0d:61:1f:a8:b3:
5d:21:48:d1:f6:12:40:6f:b6:dd:ea:ab:5c:cd:98:
21:c0:e6:e4:26:26:ae:bd:5b:5a:0b:81:57:1d:e2:
75:c7:a5:df:99:46:e4:6c:90:b0:51:1e:8a:14:17:
28:65:c4:a8:d0:4c:94:ab:a9:29:19:92:03:2f:44:
60:45:72:a4:01:89:f4:c0:67:18:81:3d:98:f8:07:
d8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:86:B1:85:F2:0D:57:EB:20:E5:FA:98:45:E0:C4:D6:7C:2E:78:E7
X509v3 Authority Key Identifier:
keyid:E8:31:82:16:F0:31:10:19:2D:9F:6F:62:FF:EE:19:0E:BB:D5:C4:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6DGCFvAxEBktn29i_-4ZDrvVxBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/816cf9-e6a0-43f1-8a3d-5c7c3ad74a32/1/6DGCFvAxEBktn29i_-4ZDrvVxBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/816cf9-e6a0-43f1-8a3d-5c7c3ad74a32/1/6DGCFvAxEBktn29i_-4ZDrvVxBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:e1:48:3c:1d:13:d5:b0:99:0b:eb:5c:be:0a:c6:01:04:ce:
cd:e1:14:d9:c7:a3:12:71:ca:ce:1c:73:62:d7:9f:e2:7b:d5:
b9:ad:bd:0e:75:41:6c:09:4f:b8:6c:b3:01:c7:9e:b9:e5:22:
70:32:6a:2b:ac:af:4d:63:48:69:80:f1:42:5b:18:f1:ca:5e:
e5:9a:13:24:db:4b:96:f0:07:19:69:fe:c1:e8:9e:9b:68:31:
d3:0d:7b:dc:bf:58:a4:50:dd:dc:d5:ab:f9:c3:aa:6c:c2:78:
f1:0c:b4:a4:93:02:c1:75:ce:36:4d:16:81:26:5f:d7:dd:36:
e3:e8:0f:b5:a4:81:2f:fc:c8:fb:2d:5f:d1:27:c5:4f:c2:2b:
6d:86:23:f2:70:fc:f9:98:54:df:91:ee:ba:29:81:1c:ce:55:
bd:2a:a1:88:50:5a:1d:5e:1f:7b:c8:02:53:cb:fb:ae:78:00:
58:d9:36:42:bc:71:6e:17:3b:3d:09:57:92:33:d7:f7:56:5e:
d6:31:90:9a:a7:2d:91:fb:1d:6d:7c:e7:21:0a:29:52:a3:e4:
24:29:b1:db:c0:08:0e:65:3c:1e:2d:1a:8b:86:73:3e:42:02:
5c:24:09:a3:b6:51:1f:2c:ea:f2:a9:ee:cf:43:06:46:cd:b9:
bc:8d:c2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:30:53 2026 by rpki-client