This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft File: 6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft (raw, json) Hash identifier: 2zhV45ndtDJvBWiR3G7NLRyHyaCupK5CoqceT79kPkQ= Subject key identifier: 03:6E:AD:56:56:B4:F3:2A:01:89:14:B9:EF:09:F1:53:94:E3:6D:67 Authority key identifier: E9:72:A6:C2:EB:EA:46:41:30:72:F9:0D:D5:26:D7:8F:11:02:F4:F2 Certificate issuer: /CN=e972a6c2ebea46413072f90dd526d78f1102f4f2 Certificate serial: 019C420F5F632FB70F3D8FD80A31906DA8D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XKmwuvqRkEwcvkN1SbXjxEC9PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft Manifest number: 08CE Signing time: Mon 09 Feb 2026 11:00:29 +0000 Manifest this update: Mon 09 Feb 2026 11:00:29 +0000 Manifest next update: Tue 10 Feb 2026 11:00:29 +0000 Files and hashes: 1: 6XKmwuvqRkEwcvkN1SbXjxEC9PI.crl (hash: n9pkzTz54c2xAZ18BBZ3i2uSNjmouneKAlEsOo/Jin4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft rsync://rpki.ripe.net/repository/DEFAULT/6XKmwuvqRkEwcvkN1SbXjxEC9PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:5f:63:2f:b7:0f:3d:8f:d8:0a:31:90:6d:a8:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e972a6c2ebea46413072f90dd526d78f1102f4f2 Validity Not Before: Feb 9 11:00:29 2026 GMT Not After : Feb 10 11:00:29 2026 GMT Subject: CN=036ead5656b4f32a018914b9ef09f15394e36d67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7c:5b:d2:1d:69:60:8f:11:67:14:e9:73:e4: b5:7c:b4:89:92:b2:d1:2b:be:8b:d2:7c:27:16:13: 87:7b:fa:d4:bb:5b:ee:7d:55:2a:71:50:b9:f2:db: e1:4e:72:56:0c:04:60:ca:78:b6:d9:7c:28:cc:fc: 68:d3:08:ff:96:76:4b:4e:4c:40:50:41:66:85:8b: c1:bd:2b:bc:7e:ab:04:29:10:ca:b3:65:fd:a6:70: 9d:f1:f5:d9:45:b5:fb:54:34:6e:fc:ec:81:74:60: 2e:d6:5e:90:ac:22:0b:95:a4:2b:d0:d8:ea:bc:5b: d5:d8:fd:2a:1a:f1:86:e7:e8:5e:da:49:45:99:87: 59:d2:0d:68:e7:52:05:5e:38:84:83:71:87:e3:ee: 67:8e:7a:71:c7:99:7f:1a:a4:0a:af:f4:32:65:b7: 67:28:9c:49:64:9c:a8:3a:98:59:3c:85:d9:c5:df: ee:14:14:56:3a:10:13:4a:10:e4:e6:cc:ea:c1:90: e9:ce:5c:8f:23:f2:8f:1d:df:c5:2f:ae:9f:58:1d: a0:cb:43:27:99:33:0c:40:9e:cf:d8:f7:80:32:3c: 4a:b7:bc:23:11:0d:ce:2e:c1:5a:91:33:01:ef:2a: 5f:3b:58:f6:f5:ad:1f:33:12:ba:08:40:d6:52:49: 58:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:6E:AD:56:56:B4:F3:2A:01:89:14:B9:EF:09:F1:53:94:E3:6D:67 X509v3 Authority Key Identifier: keyid:E9:72:A6:C2:EB:EA:46:41:30:72:F9:0D:D5:26:D7:8F:11:02:F4:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XKmwuvqRkEwcvkN1SbXjxEC9PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:db:75:58:55:1f:05:3b:03:77:54:cd:c7:71:cf:09:99:8c: 4b:af:e7:d6:7b:5c:36:02:64:60:b4:ba:7e:dd:69:96:9a:02: a5:5d:64:d9:48:e3:19:5a:b4:de:d9:1b:2c:7b:5f:11:56:e4: 68:cd:6c:f5:75:1b:eb:58:7a:0a:e8:15:7c:70:49:77:da:c0: 7a:20:27:f2:20:5f:6f:4c:b3:f1:67:3f:d7:b8:cc:31:52:29: 92:27:ec:fe:b9:56:45:27:48:51:05:e0:33:92:9f:7e:b4:c9: 7a:3a:89:0c:26:9d:1d:13:ab:b2:ac:71:69:49:93:c3:48:b9: 55:ee:72:86:c6:57:cd:c2:82:da:73:e1:40:28:b4:53:d0:50: 02:29:1d:33:20:84:39:f2:d3:d7:ec:41:8e:f3:f6:ff:78:3e: 74:35:7e:21:0b:13:1d:64:b8:d0:b4:7d:28:12:7c:77:7c:72: a4:c7:05:9e:a4:cb:ae:ff:d0:c2:3c:fe:35:04:77:68:52:5d: 35:89:e0:26:95:40:fe:0f:38:a7:2e:e7:88:70:35:1d:3b:93: 54:ec:e0:63:91:78:c7:9e:87:af:e4:b5:fd:2e:f3:2a:f8:92: 36:be:c1:cc:2f:42:9e:0a:fc:6d:bc:2e:27:0e:b9:e5:24:21: 01:c5:72:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD19jL7cPPY/YCjGQbajWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NzJhNmMyZWJlYTQ2NDEzMDcyZjkwZGQ1MjZkNzhmMTEw MmY0ZjIwHhcNMjYwMjA5MTEwMDI5WhcNMjYwMjEwMTEwMDI5WjAzMTEwLwYDVQQD EygwMzZlYWQ1NjU2YjRmMzJhMDE4OTE0YjllZjA5ZjE1Mzk0ZTM2ZDY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynxb0h1pYI8RZxTpc+S1fLSJkrLR K76L0nwnFhOHe/rUu1vufVUqcVC58tvhTnJWDARgyni22XwozPxo0wj/lnZLTkxA UEFmhYvBvSu8fqsEKRDKs2X9pnCd8fXZRbX7VDRu/OyBdGAu1l6QrCILlaQr0Njq vFvV2P0qGvGG5+he2klFmYdZ0g1o51IFXjiEg3GH4+5njnpxx5l/GqQKr/QyZbdn KJxJZJyoOphZPIXZxd/uFBRWOhATShDk5szqwZDpzlyPI/KPHd/FL66fWB2gy0Mn mTMMQJ7P2PeAMjxKt7wjEQ3OLsFakTMB7ypfO1j29a0fMxK6CEDWUklYgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFANurVZWtPMqAYkUue8J8VOU421nMB8GA1UdIwQY MBaAFOlypsLr6kZBMHL5DdUm148RAvTyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlhLbXd1dnFSa0V3Y3ZrTjFTYlhqeEVDOVBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9iNzYyOGQtNDI2Yy00ODg5LWEwMGMt NGY5NzRjOTc3OTQ1LzEvNlhLbXd1dnFSa0V3Y3ZrTjFTYlhqeEVDOVBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9iNzYyOGQtNDI2Yy00ODg5LWEwMGMtNGY5NzRjOTc3OTQ1 LzEvNlhLbXd1dnFSa0V3Y3ZrTjFTYlhqeEVDOVBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdtt1WFUf BTsDd1TNx3HPCZmMS6/n1ntcNgJkYLS6ft1plpoCpV1k2UjjGVq03tkbLHtfEVbk aM1s9XUb61h6CugVfHBJd9rAeiAn8iBfb0yz8Wc/17jMMVIpkifs/rlWRSdIUQXg M5KffrTJejqJDCadHROrsqxxaUmTw0i5Ve5yhsZXzcKC2nPhQCi0U9BQAikdMyCE OfLT1+xBjvP2/3g+dDV+IQsTHWS40LR9KBJ8d3xypMcFnqTLrv/Qwjz+NQR3aFJd NYngJpVA/g84py7niHA1HTuTVOzgY5F4x56Hr+S1/S7zKviSNr7BzC9Cngr8bbwu Jw655SQhAcVycQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:47 2026 by rpki-client