This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/6HFybEwQPg60LC8Oi12ocz-n7-0.mft
File: 6HFybEwQPg60LC8Oi12ocz-n7-0.mft (raw, json)
Hash identifier: nji4NCMI9XMZjnOAJGXWehzm0MhoiTDucmzdSx70tJ0=
Subject key identifier: 6A:08:0F:FA:92:12:5F:81:7E:FE:70:CC:D4:DD:7D:D5:D5:3D:59:CC
Authority key identifier: E8:71:72:6C:4C:10:3E:0E:B4:2C:2F:0E:8B:5D:A8:73:3F:A7:EF:ED
Certificate issuer: /CN=e871726c4c103e0eb42c2f0e8b5da8733fa7efed
Certificate serial: 019C41A210AAD2345F18FDF50EE3E5DE4A70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6HFybEwQPg60LC8Oi12ocz-n7-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/6HFybEwQPg60LC8Oi12ocz-n7-0.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 09:01:06 +0000
Manifest this update: Mon 09 Feb 2026 09:01:06 +0000
Manifest next update: Tue 10 Feb 2026 09:01:06 +0000
Files and hashes: 1: 6HFybEwQPg60LC8Oi12ocz-n7-0.crl (hash: FtbZDfWcbvndYNc7HB8324MoZGmjMCujw+/ovU8agRw=)
2: uKa6FxImXf06YNSnlN4nrccJ9Cc.roa (hash: ePdUA2mdutDGzHN2U8mQRRE7yoNYH9bgsLzTLHYrHtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/6HFybEwQPg60LC8Oi12ocz-n7-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/6HFybEwQPg60LC8Oi12ocz-n7-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6HFybEwQPg60LC8Oi12ocz-n7-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a2:10:aa:d2:34:5f:18:fd:f5:0e:e3:e5:de:4a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e871726c4c103e0eb42c2f0e8b5da8733fa7efed
Validity
Not Before: Feb 9 09:01:06 2026 GMT
Not After : Feb 10 09:01:06 2026 GMT
Subject: CN=6a080ffa92125f817efe70ccd4dd7dd5d53d59cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:cb:62:ff:fa:16:12:06:6c:64:53:a2:0a:ba:
6c:f1:bf:a7:82:67:66:cd:d5:84:fb:14:26:e6:3d:
71:12:b8:a5:9f:69:db:bf:49:12:cc:f4:f2:5e:66:
04:d9:05:39:31:1d:d7:f6:4d:62:35:28:87:d5:b4:
a0:53:c0:b3:75:82:3e:dc:fb:60:8f:11:f6:43:05:
f8:7e:15:c3:93:c1:f2:3e:5f:72:d0:7c:93:1a:71:
ee:50:20:1d:2f:93:f9:e8:e1:08:60:8f:44:72:97:
49:70:bc:79:8b:d6:09:fe:bc:d6:5c:3d:07:c4:13:
5c:2b:8a:48:fb:34:23:8b:c7:de:51:82:7c:f5:d0:
a1:a4:58:16:08:41:27:b5:8d:b0:ef:97:08:10:33:
32:bd:55:03:dc:e1:b4:e8:ed:12:de:90:91:4c:cf:
8e:50:3b:54:af:57:a8:14:03:8a:ab:4c:04:12:72:
a9:d6:5d:e2:d7:9c:3f:e8:ee:9d:48:bd:9e:d3:fa:
8e:e7:ea:b0:ad:dc:59:91:a5:d5:72:64:6d:db:59:
d6:88:04:41:f8:2d:d3:3a:39:32:21:00:8f:37:10:
11:b0:97:26:b8:be:bf:6a:9d:53:6c:d5:83:47:48:
34:01:c7:da:c5:b1:af:71:7a:f4:48:3f:b1:cd:d6:
40:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:08:0F:FA:92:12:5F:81:7E:FE:70:CC:D4:DD:7D:D5:D5:3D:59:CC
X509v3 Authority Key Identifier:
keyid:E8:71:72:6C:4C:10:3E:0E:B4:2C:2F:0E:8B:5D:A8:73:3F:A7:EF:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HFybEwQPg60LC8Oi12ocz-n7-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/6HFybEwQPg60LC8Oi12ocz-n7-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/6HFybEwQPg60LC8Oi12ocz-n7-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:15:0b:ab:29:47:b3:4b:05:df:91:c7:58:90:69:32:d0:0b:
aa:10:ca:ff:56:1a:a6:85:9b:0b:12:02:90:43:33:87:72:49:
6c:cd:2b:c6:d8:57:48:d9:66:88:8d:93:e3:a9:2b:a5:4a:60:
ea:65:60:03:db:34:13:01:02:c9:dc:0d:0f:0d:b1:c5:ed:57:
cd:26:a9:96:fa:07:c8:de:e5:ec:43:fa:b5:13:16:59:3f:0c:
5b:07:85:c1:56:23:b3:80:66:57:3d:60:04:bd:64:93:82:46:
82:89:5b:89:e3:0a:f2:7f:5e:df:ab:c0:e7:8a:05:59:f7:ca:
ad:9a:4e:68:9b:d1:09:23:ac:bd:64:7a:fb:b3:60:24:10:eb:
6e:2d:ee:bc:3c:d8:0d:9b:28:88:46:42:33:98:18:01:a8:36:
e4:2c:ab:f0:22:ac:00:e7:51:56:9a:9b:33:95:3d:31:da:6b:
e6:4f:f0:57:72:c0:2a:f5:36:17:99:04:bf:83:b6:98:db:3e:
70:ea:56:3e:4c:8c:0a:e6:4f:fb:fc:dc:01:67:0b:c5:81:af:
24:74:17:0c:d7:14:93:9a:83:0c:df:df:70:a8:fb:fe:27:36:
1b:9e:8c:1e:54:4e:df:a4:79:5a:05:df:f4:33:d5:33:60:48:
89:39:b0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:55 2026 by rpki-client