This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.mft File: PA6_tMrlZpxJ8wS-A1qkV7jTWSE.mft (raw, json) Hash identifier: HO8oV4BoZYWj1BZQWNhhAZs2DZNp1sql2ujLxFuIEDc= Subject key identifier: DB:74:89:48:F0:23:63:05:18:85:9E:0E:05:1F:FE:5F:B3:03:8E:8F Authority key identifier: 3C:0E:BF:B4:CA:E5:66:9C:49:F3:04:BE:03:5A:A4:57:B8:D3:59:21 Certificate issuer: /CN=3c0ebfb4cae5669c49f304be035aa457b8d35921 Certificate serial: 019C4321D60606063C6D373B1C395B361B21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.mft Manifest number: 028E Signing time: Mon 09 Feb 2026 16:00:16 +0000 Manifest this update: Mon 09 Feb 2026 16:00:16 +0000 Manifest next update: Tue 10 Feb 2026 16:00:16 +0000 Files and hashes: 1: PA6_tMrlZpxJ8wS-A1qkV7jTWSE.crl (hash: orSnVc9rJyh1SWGd/l6qPlP70mHOuISjA6E1E979CR0=) 2: iBXu_AfLungRwDg5PQCY_EZez3c.roa (hash: K8zsdZyfr+dDBeWgBkWYLPkuu2q5T19Ve+4SgzTV9fE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.mft rsync://rpki.ripe.net/repository/DEFAULT/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:d6:06:06:06:3c:6d:37:3b:1c:39:5b:36:1b:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c0ebfb4cae5669c49f304be035aa457b8d35921 Validity Not Before: Feb 9 16:00:16 2026 GMT Not After : Feb 10 16:00:16 2026 GMT Subject: CN=db748948f023630518859e0e051ffe5fb3038e8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:89:78:a3:5e:d3:e8:0b:e9:24:9e:79:ef:78: 87:dd:c5:30:78:65:c7:76:79:18:f2:5d:12:10:79: 7c:55:f5:da:e2:a6:59:64:0f:16:71:cb:65:0d:68: a8:5c:13:8a:42:c4:b7:de:50:b4:96:46:bc:de:1f: ba:48:70:e6:a3:4c:7b:f1:44:d1:0a:af:4c:33:54: 69:38:c6:d5:51:91:78:fb:40:df:0d:5a:3e:14:c1: cd:7b:b5:b7:2b:8c:db:3f:87:b7:de:90:ab:fb:a0: 16:1a:70:6a:9b:41:95:a5:60:2f:fd:7f:9e:2d:18: 8e:80:c8:aa:61:df:3d:7e:1c:76:a4:84:be:6c:2c: 57:86:0c:9c:43:98:0f:d4:3c:03:02:de:fa:ef:37: 23:df:c2:96:05:c0:12:43:01:14:cc:f1:02:cd:cb: f1:0f:b4:65:30:ca:2c:5b:49:72:65:50:5a:52:5a: ce:f6:00:23:11:0b:c3:ea:56:30:5e:20:4f:57:25: 44:40:13:f1:3e:da:48:fd:ad:ca:8f:4c:d3:4f:2a: 59:12:d3:cc:52:a6:6f:5c:56:84:f2:d7:10:63:36: bb:4d:b2:72:9b:57:b4:2a:74:0e:83:80:25:bf:cd: 7d:22:ba:89:3c:b8:f8:cf:65:33:67:f1:97:11:6f: 1c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:74:89:48:F0:23:63:05:18:85:9E:0E:05:1F:FE:5F:B3:03:8E:8F X509v3 Authority Key Identifier: keyid:3C:0E:BF:B4:CA:E5:66:9C:49:F3:04:BE:03:5A:A4:57:B8:D3:59:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:7d:ab:d3:6a:7c:ba:61:da:df:fa:3d:9a:23:48:c1:4c:eb: 46:a4:7f:ce:9b:23:ad:c6:eb:b2:d3:18:ab:d0:9b:b1:e7:09: aa:e8:cc:0d:63:14:e9:33:a5:30:1d:6f:24:87:92:41:28:a8: 5a:4a:3e:9f:67:a6:9f:71:35:3f:3c:33:f6:1c:20:5f:0e:af: 62:3a:bf:6d:63:31:96:11:b7:c6:1b:44:0a:b1:a4:c3:9f:15: 00:51:76:39:24:96:0f:0c:dc:83:44:65:99:20:3e:6f:77:51: d6:39:cb:d7:ed:02:87:f9:35:48:af:c4:07:23:3d:69:a8:45: d4:86:9a:15:53:98:a9:0a:63:6c:7c:87:06:2a:f7:37:35:7a: d8:0f:e2:0f:d4:c1:29:f9:9e:01:1b:25:d9:0f:97:49:dc:dc: 8f:eb:18:7a:d0:c0:b2:62:43:76:0b:73:b0:17:2c:0d:e6:5d: fa:ed:57:3f:6d:e3:1c:bf:42:26:19:a4:3d:95:fb:45:00:a3: 8f:eb:6b:dd:0a:d6:f3:4a:d4:e9:64:2e:ef:e9:eb:0c:42:9a: 07:47:e7:6e:e9:18:ff:b2:cc:45:aa:a6:ab:b8:f9:46:3e:df: 1e:d0:eb:ca:1a:da:70:d3:c7:66:23:08:42:b4:4f:16:4a:c7: c4:fa:08:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIdYGBgY8bTc7HDlbNhshMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMGViZmI0Y2FlNTY2OWM0OWYzMDRiZTAzNWFhNDU3Yjhk MzU5MjEwHhcNMjYwMjA5MTYwMDE2WhcNMjYwMjEwMTYwMDE2WjAzMTEwLwYDVQQD EyhkYjc0ODk0OGYwMjM2MzA1MTg4NTllMGUwNTFmZmU1ZmIzMDM4ZThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYl4o17T6AvpJJ5573iH3cUweGXH dnkY8l0SEHl8VfXa4qZZZA8WcctlDWioXBOKQsS33lC0lka83h+6SHDmo0x78UTR Cq9MM1RpOMbVUZF4+0DfDVo+FMHNe7W3K4zbP4e33pCr+6AWGnBqm0GVpWAv/X+e LRiOgMiqYd89fhx2pIS+bCxXhgycQ5gP1DwDAt767zcj38KWBcASQwEUzPECzcvx D7RlMMosW0lyZVBaUlrO9gAjEQvD6lYwXiBPVyVEQBPxPtpI/a3Kj0zTTypZEtPM UqZvXFaE8tcQYza7TbJym1e0KnQOg4Alv819IrqJPLj4z2UzZ/GXEW8c6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNt0iUjwI2MFGIWeDgUf/l+zA46PMB8GA1UdIwQY MBaAFDwOv7TK5WacSfMEvgNapFe401khMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEE2X3RNcmxacHhKOHdTLUExcWtWN2pUV1NFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9mMWZjN2MtNDkyMi00OTFkLWE2MGQt ZjJkMjNhYWU1MmM2LzEvUEE2X3RNcmxacHhKOHdTLUExcWtWN2pUV1NFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9mMWZjN2MtNDkyMi00OTFkLWE2MGQtZjJkMjNhYWU1MmM2 LzEvUEE2X3RNcmxacHhKOHdTLUExcWtWN2pUV1NFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfH2r02p8 umHa3/o9miNIwUzrRqR/zpsjrcbrstMYq9CbsecJqujMDWMU6TOlMB1vJIeSQSio Wko+n2emn3E1Pzwz9hwgXw6vYjq/bWMxlhG3xhtECrGkw58VAFF2OSSWDwzcg0Rl mSA+b3dR1jnL1+0Ch/k1SK/EByM9aahF1IaaFVOYqQpjbHyHBir3NzV62A/iD9TB KfmeARsl2Q+XSdzcj+sYetDAsmJDdgtzsBcsDeZd+u1XP23jHL9CJhmkPZX7RQCj j+tr3QrW80rU6WQu7+nrDEKaB0fnbukY/7LMRaqmq7j5Rj7fHtDryhracNPHZiMI QrRPFkrHxPoIQw== -----END CERTIFICATE-----Generated at Mon Feb 9 20:13:27 2026 by rpki-client