This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ce40b9-35d7-4a6a-8307-6a0b25c5632d/1/G6QV0W5y4zPyk2wcXhffJDeBCMI.mft
File: G6QV0W5y4zPyk2wcXhffJDeBCMI.mft (raw, json)
Hash identifier: EGbMBDbWMXq3dogvRcVcKFSqV6v9kMY/1G4Tc+rt9mA=
Subject key identifier: A0:BB:D5:76:41:03:AA:45:E8:04:E7:6B:80:0E:AF:E7:F7:FE:E4:BE
Authority key identifier: 1B:A4:15:D1:6E:72:E3:33:F2:93:6C:1C:5E:17:DF:24:37:81:08:C2
Certificate issuer: /CN=1ba415d16e72e333f2936c1c5e17df24378108c2
Certificate serial: 019C4434F1FB5901BBC23A2609DE37A7A92A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6QV0W5y4zPyk2wcXhffJDeBCMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/ce40b9-35d7-4a6a-8307-6a0b25c5632d/1/G6QV0W5y4zPyk2wcXhffJDeBCMI.mft
Manifest number: 06AF
Signing time: Mon 09 Feb 2026 21:00:46 +0000
Manifest this update: Mon 09 Feb 2026 21:00:46 +0000
Manifest next update: Tue 10 Feb 2026 21:00:46 +0000
Files and hashes: 1: G6QV0W5y4zPyk2wcXhffJDeBCMI.crl (hash: 7kQToDZovwELSIiW1vhTo1ebvLOcrfX88uxgqJ0Ji54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/ce40b9-35d7-4a6a-8307-6a0b25c5632d/1/G6QV0W5y4zPyk2wcXhffJDeBCMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/ce40b9-35d7-4a6a-8307-6a0b25c5632d/1/G6QV0W5y4zPyk2wcXhffJDeBCMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/G6QV0W5y4zPyk2wcXhffJDeBCMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:34:f1:fb:59:01:bb:c2:3a:26:09:de:37:a7:a9:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba415d16e72e333f2936c1c5e17df24378108c2
Validity
Not Before: Feb 9 21:00:46 2026 GMT
Not After : Feb 10 21:00:46 2026 GMT
Subject: CN=a0bbd5764103aa45e804e76b800eafe7f7fee4be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:09:4d:d5:30:e3:5b:66:7e:6c:9d:0b:8e:9a:
d0:b3:09:93:ee:3b:c7:5f:f4:a4:72:8a:7e:2f:37:
e7:5b:71:fb:7f:35:e8:0e:f1:2a:c7:db:19:16:33:
c6:af:84:00:1e:5e:8d:25:91:0b:8f:11:d5:46:6c:
56:95:59:a9:9f:ff:3c:47:7f:b7:1f:14:b7:f2:69:
4a:1a:9a:e3:6b:6e:73:33:9e:f1:c8:d8:dd:fe:a3:
1e:fd:2c:de:d4:0d:a1:d0:ac:fe:81:fe:95:f9:86:
eb:54:c0:47:1f:a6:37:8d:1a:91:ef:90:8e:4b:ef:
0b:69:60:3b:7f:90:53:9e:89:97:21:c4:40:7c:9d:
58:61:10:32:e2:ee:7e:cf:4a:fd:c8:f4:9d:6a:8c:
12:a7:51:b4:7b:51:6f:0a:ae:33:71:35:72:8b:9d:
ff:57:07:d6:a1:bb:0b:40:95:10:5a:c3:45:35:2a:
20:02:6e:96:fc:ae:6b:9e:d5:60:a7:56:18:74:87:
13:62:44:9a:37:2d:9f:76:7d:2b:09:74:3e:c2:a1:
71:e4:1b:78:33:5a:64:54:57:0b:50:3e:56:16:d2:
13:0a:b0:a8:52:c5:be:41:e5:7c:31:d8:3d:e0:e2:
b4:ad:d6:e5:25:a3:2e:47:72:dc:b1:b8:e9:39:72:
a2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:BB:D5:76:41:03:AA:45:E8:04:E7:6B:80:0E:AF:E7:F7:FE:E4:BE
X509v3 Authority Key Identifier:
keyid:1B:A4:15:D1:6E:72:E3:33:F2:93:6C:1C:5E:17:DF:24:37:81:08:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6QV0W5y4zPyk2wcXhffJDeBCMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ce40b9-35d7-4a6a-8307-6a0b25c5632d/1/G6QV0W5y4zPyk2wcXhffJDeBCMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ce40b9-35d7-4a6a-8307-6a0b25c5632d/1/G6QV0W5y4zPyk2wcXhffJDeBCMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ee:47:c8:cf:99:b1:5b:c6:97:26:e6:48:87:cf:e5:e5:8b:
32:01:44:af:ce:46:8a:fc:e8:e1:d1:7d:83:47:3b:21:0c:78:
1e:8e:24:56:ab:3c:56:d3:ef:6b:03:fa:d1:ce:58:2c:47:99:
7c:af:5d:19:00:d7:3c:b1:5d:b7:0c:44:31:bb:32:8c:54:ef:
4d:64:3f:65:2a:12:7b:14:da:2e:3c:ea:db:87:10:74:f5:c7:
94:69:cc:95:ed:2e:18:4d:3a:d8:49:38:ac:e2:ef:eb:8e:29:
08:dd:79:d7:75:03:fb:46:3b:c0:c3:cf:f2:96:96:71:c6:6a:
c4:ec:87:9f:cd:5e:b8:07:2b:ea:92:2b:51:40:a1:b9:c4:cd:
5f:40:4a:f3:ee:df:0b:60:4e:22:7f:83:bf:18:43:9a:5c:68:
2f:82:41:56:e4:72:ee:64:d8:fd:15:69:fa:0c:c4:89:51:2e:
9c:d0:8a:dd:b5:08:62:64:b4:b6:00:05:04:2f:74:04:6a:8f:
07:f9:a5:5d:b4:f1:ed:29:ae:e2:77:c5:9b:17:39:13:f1:14:
ea:09:29:74:0c:28:dc:27:6a:b1:72:f5:f4:76:81:e1:c5:02:
dc:e8:f9:78:34:18:21:e1:d1:9c:37:7c:69:01:c9:03:72:5b:
2d:4c:8b:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxENPH7WQG7wjomCd43p6kqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiYTQxNWQxNmU3MmUzMzNmMjkzNmMxYzVlMTdkZjI0Mzc4
MTA4YzIwHhcNMjYwMjA5MjEwMDQ2WhcNMjYwMjEwMjEwMDQ2WjAzMTEwLwYDVQQD
EyhhMGJiZDU3NjQxMDNhYTQ1ZTgwNGU3NmI4MDBlYWZlN2Y3ZmVlNGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoglN1TDjW2Z+bJ0LjprQswmT7jvH
X/Skcop+LzfnW3H7fzXoDvEqx9sZFjPGr4QAHl6NJZELjxHVRmxWlVmpn/88R3+3
HxS38mlKGprja25zM57xyNjd/qMe/Sze1A2h0Kz+gf6V+YbrVMBHH6Y3jRqR75CO
S+8LaWA7f5BTnomXIcRAfJ1YYRAy4u5+z0r9yPSdaowSp1G0e1FvCq4zcTVyi53/
VwfWobsLQJUQWsNFNSogAm6W/K5rntVgp1YYdIcTYkSaNy2fdn0rCXQ+wqFx5Bt4
M1pkVFcLUD5WFtITCrCoUsW+QeV8Mdg94OK0rdblJaMuR3LcsbjpOXKi9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKC71XZBA6pF6ATna4AOr+f3/uS+MB8GA1UdIwQY
MBaAFBukFdFucuMz8pNsHF4X3yQ3gQjCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzZRVjBXNXk0elB5azJ3Y1hoZmZKRGVCQ01JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9jZTQwYjktMzVkNy00YTZhLTgzMDct
NmEwYjI1YzU2MzJkLzEvRzZRVjBXNXk0elB5azJ3Y1hoZmZKRGVCQ01JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9jZTQwYjktMzVkNy00YTZhLTgzMDctNmEwYjI1YzU2MzJk
LzEvRzZRVjBXNXk0elB5azJ3Y1hoZmZKRGVCQ01JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIu5HyM+Z
sVvGlybmSIfP5eWLMgFEr85Givzo4dF9g0c7IQx4Ho4kVqs8VtPvawP60c5YLEeZ
fK9dGQDXPLFdtwxEMbsyjFTvTWQ/ZSoSexTaLjzq24cQdPXHlGnMle0uGE062Ek4
rOLv644pCN1513UD+0Y7wMPP8paWccZqxOyHn81euAcr6pIrUUChucTNX0BK8+7f
C2BOIn+DvxhDmlxoL4JBVuRy7mTY/RVp+gzEiVEunNCK3bUIYmS0tgAFBC90BGqP
B/mlXbTx7Smu4nfFmxc5E/EU6gkpdAwo3CdqsXL19HaB4cUC3Oj5eDQYIeHRnDd8
aQHJA3JbLUyLBQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 23:53:08 2026 by rpki-client