This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft File: r6seSN7xSynSHTQjTESOqAjmGL8.mft (raw, json) Hash identifier: NOZCiUXLGTEGGqGcG7MMdzn/zZ5RZ1aMBXVC94GJn3M= Subject key identifier: FF:E7:2A:94:90:99:18:FC:07:14:75:5F:32:80:56:A8:54:D2:6B:F1 Authority key identifier: AF:AB:1E:48:DE:F1:4B:29:D2:1D:34:23:4C:44:8E:A8:08:E6:18:BF Certificate issuer: /CN=afab1e48def14b29d21d34234c448ea808e618bf Certificate serial: 019C41D897F0BF1C82B9069E821C9796C6A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6seSN7xSynSHTQjTESOqAjmGL8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft Manifest number: 0EF4 Signing time: Mon 09 Feb 2026 10:00:39 +0000 Manifest this update: Mon 09 Feb 2026 10:00:39 +0000 Manifest next update: Tue 10 Feb 2026 10:00:39 +0000 Files and hashes: 1: r6seSN7xSynSHTQjTESOqAjmGL8.crl (hash: rFvKlfmIRhi/NytWLJBmbXzApJp9wseQjr8wG8Wcrpc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft rsync://rpki.ripe.net/repository/DEFAULT/r6seSN7xSynSHTQjTESOqAjmGL8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:97:f0:bf:1c:82:b9:06:9e:82:1c:97:96:c6:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afab1e48def14b29d21d34234c448ea808e618bf Validity Not Before: Feb 9 10:00:39 2026 GMT Not After : Feb 10 10:00:39 2026 GMT Subject: CN=ffe72a94909918fc0714755f328056a854d26bf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:12:f1:ad:39:f5:63:45:8d:b7:fc:c5:93:d0: 01:ce:01:61:20:0d:7a:98:11:e0:c3:c0:39:79:0c: 68:a5:38:25:51:f4:cb:a5:08:50:35:ea:97:aa:a4: fb:1f:fd:aa:9c:69:11:4a:84:5c:41:cf:18:ee:7e: 09:a0:a3:24:50:0b:2e:be:69:51:70:ec:81:6c:83: ba:05:af:41:c8:ec:a9:d8:c8:ca:a3:f1:c1:2c:d7: 87:d1:b9:fe:99:42:9e:51:6d:df:34:bd:d2:f0:b8: da:5b:9d:65:3a:a2:6e:b6:d5:d2:d3:70:f8:23:4c: 37:1d:7a:d9:a3:e1:20:9d:d5:87:1e:bc:ab:f9:4c: 03:1b:bc:5d:82:a7:d3:83:32:c2:6a:52:9f:98:d5: a9:ed:0c:ed:19:a5:71:c0:43:75:61:1d:d4:f2:e7: e5:32:f2:ad:1b:ef:3d:45:59:65:e0:56:50:94:53: 88:19:1c:6f:8a:53:7e:ac:2f:b3:88:cf:2a:54:05: eb:0f:8e:09:2f:9f:db:fb:61:31:f5:0e:ec:f3:1e: e5:1a:02:6b:ca:b4:01:0b:1e:fe:ed:03:9d:fe:ec: c7:ef:77:94:72:49:3e:d0:ae:2b:a6:c3:00:60:4e: cc:f4:a7:5d:b4:87:f7:d8:f3:98:bd:63:07:c2:20: 57:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:E7:2A:94:90:99:18:FC:07:14:75:5F:32:80:56:A8:54:D2:6B:F1 X509v3 Authority Key Identifier: keyid:AF:AB:1E:48:DE:F1:4B:29:D2:1D:34:23:4C:44:8E:A8:08:E6:18:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6seSN7xSynSHTQjTESOqAjmGL8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:1d:f0:1c:59:bb:14:0d:62:4e:76:da:58:37:10:a9:2f:96: 40:89:4e:fb:c2:74:f7:e0:13:04:5c:42:cf:eb:ac:58:5a:65: be:ac:e3:5d:c9:e4:97:7a:f4:8c:2d:f0:5b:4c:e7:75:b0:6c: 7b:94:e4:ec:05:f5:6f:c4:56:9c:a2:d1:5c:83:ad:95:3c:09: 7d:ad:52:7b:0f:ba:5f:86:00:bf:f6:37:74:18:4d:57:af:23: 72:5d:72:d5:09:fd:dc:88:25:61:75:c5:4d:3c:ff:59:13:51: 57:e0:f5:b8:cf:1c:0d:3e:9d:82:4b:0c:c4:af:3c:4e:9e:da: bb:1c:75:e9:00:0d:8e:e7:68:d9:e6:c7:40:0e:56:6d:91:7f: db:8d:f8:c8:17:22:e4:83:c1:73:a0:74:54:0f:90:3b:31:86: 04:d1:29:a0:68:b3:ca:70:3e:9f:c7:4a:fd:ed:b4:b4:e6:aa: de:11:f0:91:c8:7f:1a:12:0f:97:33:1d:e0:76:5a:f3:dd:df: f4:02:ef:32:80:f5:bc:4b:a1:30:b7:0d:21:58:0d:ac:55:22: 4f:d3:b4:f6:92:65:a9:f8:4a:65:eb:e2:05:c0:89:14:b0:03: 5d:67:59:7a:6b:fa:16:73:fb:4f:4a:8a:21:3e:4f:85:fb:3d: dc:4c:5b:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2JfwvxyCuQaeghyXlsaoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmYWIxZTQ4ZGVmMTRiMjlkMjFkMzQyMzRjNDQ4ZWE4MDhl NjE4YmYwHhcNMjYwMjA5MTAwMDM5WhcNMjYwMjEwMTAwMDM5WjAzMTEwLwYDVQQD EyhmZmU3MmE5NDkwOTkxOGZjMDcxNDc1NWYzMjgwNTZhODU0ZDI2YmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RLxrTn1Y0WNt/zFk9ABzgFhIA16 mBHgw8A5eQxopTglUfTLpQhQNeqXqqT7H/2qnGkRSoRcQc8Y7n4JoKMkUAsuvmlR cOyBbIO6Ba9ByOyp2MjKo/HBLNeH0bn+mUKeUW3fNL3S8LjaW51lOqJuttXS03D4 I0w3HXrZo+EgndWHHryr+UwDG7xdgqfTgzLCalKfmNWp7QztGaVxwEN1YR3U8ufl MvKtG+89RVll4FZQlFOIGRxvilN+rC+ziM8qVAXrD44JL5/b+2Ex9Q7s8x7lGgJr yrQBCx7+7QOd/uzH73eUckk+0K4rpsMAYE7M9KddtIf32POYvWMHwiBXPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/nKpSQmRj8BxR1XzKAVqhU0mvxMB8GA1UdIwQY MBaAFK+rHkje8Usp0h00I0xEjqgI5hi/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjZzZVNON3hTeW5TSFRRalRFU09xQWptR0w4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wZTYwN2YtZTIxZi00Y2ZhLWEzMzYt OTMxNDg2MGMyYzdmLzEvcjZzZVNON3hTeW5TSFRRalRFU09xQWptR0w4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8wZTYwN2YtZTIxZi00Y2ZhLWEzMzYtOTMxNDg2MGMyYzdm LzEvcjZzZVNON3hTeW5TSFRRalRFU09xQWptR0w4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnR3wHFm7 FA1iTnbaWDcQqS+WQIlO+8J09+ATBFxCz+usWFplvqzjXcnkl3r0jC3wW0zndbBs e5Tk7AX1b8RWnKLRXIOtlTwJfa1Sew+6X4YAv/Y3dBhNV68jcl1y1Qn93IglYXXF TTz/WRNRV+D1uM8cDT6dgksMxK88Tp7auxx16QANjudo2ebHQA5WbZF/2434yBci 5IPBc6B0VA+QOzGGBNEpoGizynA+n8dK/e20tOaq3hHwkch/GhIPlzMd4HZa893f 9ALvMoD1vEuhMLcNIVgNrFUiT9O09pJlqfhKZeviBcCJFLADXWdZemv6FnP7T0qK IT5Phfs93ExbzQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:52:57 2026 by rpki-client