This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.mft
File: 6vlt8xs_QE31t345nOeTcbT0REM.mft (raw, json)
Hash identifier: WgNdvvVQN0GJshmnSW5vwjMknwiAOT0we4dE5JluvKY=
Subject key identifier: CB:B0:EE:02:23:33:D2:90:0A:0C:64:CB:4E:BB:2B:3B:06:75:0E:39
Authority key identifier: EA:F9:6D:F3:1B:3F:40:4D:F5:B7:7E:39:9C:E7:93:71:B4:F4:44:43
Certificate issuer: /CN=eaf96df31b3f404df5b77e399ce79371b4f44443
Certificate serial: 019C41D894EF71B71659969E00BB15BB8DA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6vlt8xs_QE31t345nOeTcbT0REM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.mft
Manifest number: 05B3
Signing time: Mon 09 Feb 2026 10:00:38 +0000
Manifest this update: Mon 09 Feb 2026 10:00:38 +0000
Manifest next update: Tue 10 Feb 2026 10:00:38 +0000
Files and hashes: 1: 6vlt8xs_QE31t345nOeTcbT0REM.crl (hash: hyik4r1XsMwdpY63EqqVnTtVQ5oHwt+H9uuZpI0Ydkw=)
2: XXpcSIWvTG-ujhC6WFKAP7xbCew.roa (hash: 8DYns3VAIMoO5AUluTPjCUWoA3CUpaSLrzipyJ93fJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6vlt8xs_QE31t345nOeTcbT0REM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:d8:94:ef:71:b7:16:59:96:9e:00:bb:15:bb:8d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaf96df31b3f404df5b77e399ce79371b4f44443
Validity
Not Before: Feb 9 10:00:38 2026 GMT
Not After : Feb 10 10:00:38 2026 GMT
Subject: CN=cbb0ee022333d2900a0c64cb4ebb2b3b06750e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a2:c5:9a:a6:02:fc:25:ef:31:c3:66:c4:31:
07:74:f9:f6:b9:95:ee:51:95:84:ef:49:62:ae:a3:
bb:ff:e1:68:88:f0:ac:93:67:9f:34:4c:d1:54:74:
df:ed:f2:2f:78:8c:ba:5b:07:78:bc:8d:c9:4a:65:
5b:99:ed:86:3b:52:05:08:73:b1:9a:ec:ca:ad:50:
05:f9:25:f8:fd:6b:5c:cc:74:b9:a6:16:c7:ac:3e:
96:ba:5e:b3:8a:e0:d6:58:bf:b8:cf:c7:f0:b2:9e:
60:f3:72:3c:38:c0:5a:63:eb:56:80:91:f2:4a:70:
e7:0d:bb:2a:02:e2:63:9f:4f:f9:b7:12:be:fc:5a:
73:d8:50:c2:cd:43:91:2b:ad:91:f3:d9:38:98:40:
d1:60:8e:61:f1:ee:89:34:3e:dd:16:fa:77:52:e3:
32:b2:f2:dc:85:bf:73:d9:ec:ac:ff:a9:ab:17:27:
9f:3f:97:19:30:fc:fc:79:a6:7f:b8:fd:a7:3e:42:
e5:47:b3:d3:38:bb:4d:11:87:ef:35:9b:08:06:f3:
95:d9:0d:9e:ca:ba:6a:ba:45:d7:37:ee:f6:47:65:
fd:9c:da:4a:e6:8e:27:2d:7b:ec:05:1e:af:db:7d:
69:d2:b1:58:86:20:eb:32:5a:0f:4d:4f:1e:c5:c5:
f3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B0:EE:02:23:33:D2:90:0A:0C:64:CB:4E:BB:2B:3B:06:75:0E:39
X509v3 Authority Key Identifier:
keyid:EA:F9:6D:F3:1B:3F:40:4D:F5:B7:7E:39:9C:E7:93:71:B4:F4:44:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6vlt8xs_QE31t345nOeTcbT0REM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:d2:0d:2d:06:dd:d1:79:3e:43:1e:75:2a:17:35:aa:19:c1:
e3:a0:4e:09:89:df:21:09:20:12:14:90:5b:ba:18:f4:74:30:
13:2a:34:ca:94:5d:40:50:3a:71:f6:ce:5b:46:e6:68:d8:3c:
99:0c:38:a5:29:25:34:53:a0:8f:2a:c7:9e:15:fb:db:b1:17:
c7:92:3c:2d:15:36:f6:83:b5:4d:0e:33:77:fc:15:f7:bc:5d:
d9:e9:63:ae:2a:60:84:f3:d4:c9:3c:af:d3:70:01:db:35:8b:
fb:ec:99:fa:52:2c:dd:01:c8:fe:bc:53:2a:20:f4:c2:27:f0:
37:24:dc:36:a5:d4:b0:65:89:f8:94:ec:d8:05:fc:42:e9:2e:
7c:c2:40:d4:62:fa:47:b7:27:bf:38:4d:9c:80:14:0f:02:14:
ae:a6:76:5d:b5:47:44:a8:8b:93:5d:35:69:b7:ef:d8:11:84:
e9:74:4d:88:37:c1:ca:e0:87:4b:f4:3f:b5:ec:80:6b:49:a3:
1a:c8:a3:d0:c4:a4:62:57:87:1b:20:fd:4e:66:37:0d:7e:b6:
8d:e8:f3:29:c8:fd:7a:2a:f7:f2:8c:a2:3c:f5:bd:b6:21:c1:
d7:19:87:9c:8c:9a:56:47:49:22:7d:35:0c:2c:55:15:f5:a1:
e4:f0:6e:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxB2JTvcbcWWZaeALsVu42kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhZjk2ZGYzMWIzZjQwNGRmNWI3N2UzOTljZTc5MzcxYjRm
NDQ0NDMwHhcNMjYwMjA5MTAwMDM4WhcNMjYwMjEwMTAwMDM4WjAzMTEwLwYDVQQD
EyhjYmIwZWUwMjIzMzNkMjkwMGEwYzY0Y2I0ZWJiMmIzYjA2NzUwZTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqLFmqYC/CXvMcNmxDEHdPn2uZXu
UZWE70lirqO7/+FoiPCsk2efNEzRVHTf7fIveIy6Wwd4vI3JSmVbme2GO1IFCHOx
muzKrVAF+SX4/WtczHS5phbHrD6Wul6ziuDWWL+4z8fwsp5g83I8OMBaY+tWgJHy
SnDnDbsqAuJjn0/5txK+/Fpz2FDCzUORK62R89k4mEDRYI5h8e6JND7dFvp3UuMy
svLchb9z2eys/6mrFyefP5cZMPz8eaZ/uP2nPkLlR7PTOLtNEYfvNZsIBvOV2Q2e
yrpqukXXN+72R2X9nNpK5o4nLXvsBR6v231p0rFYhiDrMloPTU8excXzMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMuw7gIjM9KQCgxky067KzsGdQ45MB8GA1UdIwQY
MBaAFOr5bfMbP0BN9bd+OZznk3G09ERDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnZsdDh4c19RRTMxdDM0NW5PZVRjYlQwUkVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8wZTAzOWEtYmU5Ni00MWZjLWFiY2Qt
OTY0YjYxYmMzMTliLzEvNnZsdDh4c19RRTMxdDM0NW5PZVRjYlQwUkVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8wZTAzOWEtYmU5Ni00MWZjLWFiY2QtOTY0YjYxYmMzMTli
LzEvNnZsdDh4c19RRTMxdDM0NW5PZVRjYlQwUkVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPtINLQbd
0Xk+Qx51Khc1qhnB46BOCYnfIQkgEhSQW7oY9HQwEyo0ypRdQFA6cfbOW0bmaNg8
mQw4pSklNFOgjyrHnhX727EXx5I8LRU29oO1TQ4zd/wV97xd2eljripghPPUyTyv
03AB2zWL++yZ+lIs3QHI/rxTKiD0wifwNyTcNqXUsGWJ+JTs2AX8QukufMJA1GL6
R7cnvzhNnIAUDwIUrqZ2XbVHRKiLk101abfv2BGE6XRNiDfByuCHS/Q/teyAa0mj
Gsij0MSkYleHGyD9TmY3DX62jejzKcj9eir38oyiPPW9tiHB1xmHnIyaVkdJIn01
DCxVFfWh5PBu5A==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:28 2026 by rpki-client