This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.mft
File: 6xUL-GuHz4n8RJBgZfaXKwawnqg.mft (raw, json)
Hash identifier: MiXBIde10c0crxXl9tPWIiSwAxVBlLRGUocUUBlsAf0=
Subject key identifier: 58:87:25:CD:56:EC:0E:88:D4:9B:E0:6E:E6:BD:66:18:69:A3:79:B6
Authority key identifier: EB:15:0B:F8:6B:87:CF:89:FC:44:90:60:65:F6:97:2B:06:B0:9E:A8
Certificate issuer: /CN=eb150bf86b87cf89fc44906065f6972b06b09ea8
Certificate serial: 019C43231D25E103A0C37F1B484215425130
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6xUL-GuHz4n8RJBgZfaXKwawnqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.mft
Manifest number: 180D
Signing time: Mon 09 Feb 2026 16:01:40 +0000
Manifest this update: Mon 09 Feb 2026 16:01:40 +0000
Manifest next update: Tue 10 Feb 2026 16:01:40 +0000
Files and hashes: 1: 6xUL-GuHz4n8RJBgZfaXKwawnqg.crl (hash: u/Nnsl5SMrB2qzelAVv9Bjkyp2vzLfereyXomO568Ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6xUL-GuHz4n8RJBgZfaXKwawnqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:23:1d:25:e1:03:a0:c3:7f:1b:48:42:15:42:51:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb150bf86b87cf89fc44906065f6972b06b09ea8
Validity
Not Before: Feb 9 16:01:40 2026 GMT
Not After : Feb 10 16:01:40 2026 GMT
Subject: CN=588725cd56ec0e88d49be06ee6bd661869a379b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:76:0a:86:12:90:42:df:8d:b3:f8:e5:3a:3b:
b7:63:04:31:68:0c:f4:d5:4f:b0:dd:5a:04:65:dd:
69:4a:0c:a7:b7:d4:ad:fb:4c:a6:e8:a3:00:45:b7:
a7:61:ca:be:1b:a0:4e:90:ff:ca:25:40:6b:3c:ac:
20:36:09:93:85:be:dc:3b:0a:40:a7:6d:0e:be:1e:
8b:48:86:e4:b0:02:35:22:67:fa:b4:6a:8f:7f:cb:
11:b7:82:97:e2:bd:43:97:a9:6d:97:92:8d:19:39:
d5:d8:a4:c7:6b:f7:9c:35:22:1c:83:47:82:f4:5e:
11:6d:e1:0f:0a:9b:2b:ab:45:99:e6:c6:82:81:99:
fb:ea:7f:d4:29:74:9d:d5:30:5d:31:b1:ca:cd:f4:
f9:a9:af:69:e2:97:d8:8e:fc:47:b1:09:14:82:54:
f2:1f:50:cc:a9:7b:bd:90:52:aa:19:67:e5:d6:3d:
08:3d:2b:85:2b:fb:30:43:b4:10:6f:ae:19:af:44:
f0:62:f3:84:45:55:8d:bf:f1:92:f3:8a:f3:d9:3b:
f1:f5:aa:a3:4e:93:18:02:6d:9e:04:71:06:17:40:
cf:47:90:91:cb:cf:0b:7c:a8:42:71:28:0c:fb:7b:
63:51:11:34:91:88:bf:d6:74:f4:e3:58:8a:9d:7b:
d6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:87:25:CD:56:EC:0E:88:D4:9B:E0:6E:E6:BD:66:18:69:A3:79:B6
X509v3 Authority Key Identifier:
keyid:EB:15:0B:F8:6B:87:CF:89:FC:44:90:60:65:F6:97:2B:06:B0:9E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xUL-GuHz4n8RJBgZfaXKwawnqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6xUL-GuHz4n8RJBgZfaXKwawnqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:9c:f9:b6:af:2a:1c:ff:84:5d:00:f2:02:08:86:37:97:fc:
08:b9:d6:ab:97:9a:05:8b:bb:58:f1:ca:59:48:88:22:85:b4:
96:bb:ba:a7:7b:60:fb:d2:67:9d:c2:4a:9e:4d:99:61:2b:d4:
13:05:28:4d:20:00:fe:68:fe:4b:f2:ed:e2:a9:78:09:06:97:
ae:ed:d8:c3:e5:97:3a:9f:64:ed:59:a8:46:6b:6e:2a:db:12:
7c:d7:8a:a6:96:1b:fc:b1:b4:d0:f5:20:2a:c3:98:c9:ff:a8:
4c:f9:88:99:1e:98:b6:9d:1f:3f:f6:0b:8d:db:88:c6:5b:cb:
0c:48:62:48:82:56:bc:2b:05:59:aa:97:ba:a0:52:68:75:7f:
bb:54:47:b2:0a:ea:79:cd:35:a4:23:4b:4f:55:8d:0b:9f:77:
f7:6f:39:eb:fe:5b:6c:71:73:a4:e5:3d:7d:b3:5f:13:0d:f0:
bd:45:f8:55:71:99:1d:27:e0:83:f9:9b:89:7e:31:37:ab:1d:
44:fd:9f:81:9e:a1:45:ab:b9:1a:05:4a:08:06:7d:f2:52:50:
7c:95:0d:19:4b:a4:e5:33:19:ae:46:75:18:1b:0f:39:1a:a7:
27:f3:c4:68:ff:b7:21:35:3d:81:2f:ce:b3:c2:a8:d8:1d:74:
4a:70:bf:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:32 2026 by rpki-client