This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft File: 6lz30dxfvb1jS9YbgLfv_uxGKHM.mft (raw, json) Hash identifier: LsquOoB1A1a7pOOOZiRQ8nIgBmfOcbVSrVALqn3cwQs= Subject key identifier: A3:19:ED:55:7F:F2:E5:92:A9:75:7B:37:E2:BE:73:95:D0:73:AE:4E Authority key identifier: EA:5C:F7:D1:DC:5F:BD:BD:63:4B:D6:1B:80:B7:EF:FE:EC:46:28:73 Certificate issuer: /CN=ea5cf7d1dc5fbdbd634bd61b80b7effeec462873 Certificate serial: 019C41D8E824D224C77C9AB063B6D58947E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lz30dxfvb1jS9YbgLfv_uxGKHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft Manifest number: 16C2 Signing time: Mon 09 Feb 2026 10:01:00 +0000 Manifest this update: Mon 09 Feb 2026 10:01:00 +0000 Manifest next update: Tue 10 Feb 2026 10:01:00 +0000 Files and hashes: 1: 6lz30dxfvb1jS9YbgLfv_uxGKHM.crl (hash: P+DHwE+Ug80sMq1kl4vU+pSG/M0YAQm8gnLY7SnLqww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft rsync://rpki.ripe.net/repository/DEFAULT/6lz30dxfvb1jS9YbgLfv_uxGKHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:e8:24:d2:24:c7:7c:9a:b0:63:b6:d5:89:47:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea5cf7d1dc5fbdbd634bd61b80b7effeec462873 Validity Not Before: Feb 9 10:01:00 2026 GMT Not After : Feb 10 10:01:00 2026 GMT Subject: CN=a319ed557ff2e592a9757b37e2be7395d073ae4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:11:7e:3a:a1:bd:74:a6:d6:34:ca:65:1d:b3: c6:ca:4b:35:c2:f6:68:ca:cf:a7:c0:18:78:df:22: 97:ec:94:b6:4c:bf:ea:2d:e8:5f:68:b5:f9:98:34: b7:23:e3:82:e8:f0:58:a3:59:f9:4b:80:c0:37:c8: b4:56:9e:93:e3:e5:d7:69:f0:6a:a3:87:d9:71:f9: b5:ee:df:c8:1d:8b:ff:5a:6f:7e:56:ad:fc:57:af: 5f:79:77:eb:0e:ef:65:d5:61:15:64:55:e8:ac:38: 64:f2:76:d4:69:f1:36:fb:bc:65:4b:43:89:2a:20: 95:94:b9:0e:81:e5:72:ff:07:37:54:8a:cd:fb:c9: eb:24:4a:b4:8e:cb:56:3b:c8:65:5d:37:3f:14:7c: c5:83:66:dc:e9:f8:c3:53:a1:d7:b7:c6:50:cd:93: fc:3e:46:d8:9c:ad:b0:83:f8:01:79:1e:01:ad:cf: c4:bf:f9:e0:c2:7a:23:c2:00:7a:9a:e9:76:f1:4c: ca:a2:0a:af:c3:b2:df:39:5a:06:07:43:03:a6:7d: 76:50:26:9d:a8:f8:7e:12:07:4c:ec:1d:96:e7:ee: bb:39:e5:e7:28:39:3b:ca:1e:c6:64:41:63:f4:01: b4:f2:f5:0c:23:6a:d8:fe:92:41:c5:9c:65:3e:d8: 47:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:19:ED:55:7F:F2:E5:92:A9:75:7B:37:E2:BE:73:95:D0:73:AE:4E X509v3 Authority Key Identifier: keyid:EA:5C:F7:D1:DC:5F:BD:BD:63:4B:D6:1B:80:B7:EF:FE:EC:46:28:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lz30dxfvb1jS9YbgLfv_uxGKHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:3e:8d:91:a6:23:6a:ed:e3:d3:6c:22:f8:77:17:b0:bf:d3: b6:d9:57:4c:c8:48:73:57:6f:ef:6b:66:2d:ce:d3:26:bf:4f: 96:42:0b:4d:9c:eb:a2:0c:61:a6:ac:62:5a:4a:4d:9c:56:98: e2:c6:84:b2:58:a0:06:75:a3:af:a4:70:0f:e2:e2:c0:a5:4a: 0d:f6:23:5d:9a:99:26:3d:3b:d5:c4:62:29:0d:95:31:3d:4d: c4:d5:fd:83:5c:8a:9f:4b:40:f0:c5:df:c4:21:64:ce:02:4b: 5b:4b:e6:45:a6:70:7c:58:de:ea:5c:c2:2e:5e:48:ae:21:ae: 99:98:57:f5:c3:33:42:39:5f:33:91:47:a4:1b:8a:88:f1:13: aa:c2:c9:19:c3:7c:90:fb:a5:cf:77:e0:d0:41:2f:aa:e1:83: f7:6e:a6:01:76:6c:b1:f5:65:fe:5d:34:8f:fb:33:a8:f2:c9: 31:4b:d1:9f:cc:97:69:98:de:92:2a:08:37:2c:0d:aa:04:79: 72:90:47:19:88:09:5e:3e:26:2a:c2:0e:c8:4b:9b:ae:d5:d1: e3:ea:b9:d3:14:0b:e2:e8:a9:11:65:c8:7b:69:4c:1f:46:99: b8:60:3d:10:c3:1d:37:38:4e:eb:03:45:2e:49:a7:88:64:f0: 77:c5:49:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2Ogk0iTHfJqwY7bViUfiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhNWNmN2QxZGM1ZmJkYmQ2MzRiZDYxYjgwYjdlZmZlZWM0 NjI4NzMwHhcNMjYwMjA5MTAwMTAwWhcNMjYwMjEwMTAwMTAwWjAzMTEwLwYDVQQD EyhhMzE5ZWQ1NTdmZjJlNTkyYTk3NTdiMzdlMmJlNzM5NWQwNzNhZTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hF+OqG9dKbWNMplHbPGyks1wvZo ys+nwBh43yKX7JS2TL/qLehfaLX5mDS3I+OC6PBYo1n5S4DAN8i0Vp6T4+XXafBq o4fZcfm17t/IHYv/Wm9+Vq38V69feXfrDu9l1WEVZFXorDhk8nbUafE2+7xlS0OJ KiCVlLkOgeVy/wc3VIrN+8nrJEq0jstWO8hlXTc/FHzFg2bc6fjDU6HXt8ZQzZP8 PkbYnK2wg/gBeR4Brc/Ev/ngwnojwgB6mul28UzKogqvw7LfOVoGB0MDpn12UCad qPh+EgdM7B2W5+67OeXnKDk7yh7GZEFj9AG08vUMI2rY/pJBxZxlPthH4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKMZ7VV/8uWSqXV7N+K+c5XQc65OMB8GA1UdIwQY MBaAFOpc99HcX729Y0vWG4C37/7sRihzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmx6MzBkeGZ2YjFqUzlZYmdMZnZfdXhHS0hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9kYmQyNGItODQ3NS00ZWIwLTk2MzQt ODEzMjMyOWFjMzViLzEvNmx6MzBkeGZ2YjFqUzlZYmdMZnZfdXhHS0hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9kYmQyNGItODQ3NS00ZWIwLTk2MzQtODEzMjMyOWFjMzVi LzEvNmx6MzBkeGZ2YjFqUzlZYmdMZnZfdXhHS0hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPD6NkaYj au3j02wi+HcXsL/TttlXTMhIc1dv72tmLc7TJr9PlkILTZzrogxhpqxiWkpNnFaY 4saEsligBnWjr6RwD+LiwKVKDfYjXZqZJj071cRiKQ2VMT1NxNX9g1yKn0tA8MXf xCFkzgJLW0vmRaZwfFje6lzCLl5IriGumZhX9cMzQjlfM5FHpBuKiPETqsLJGcN8 kPulz3fg0EEvquGD926mAXZssfVl/l00j/szqPLJMUvRn8yXaZjekioINywNqgR5 cpBHGYgJXj4mKsIOyEubrtXR4+q50xQL4uipEWXIe2lMH0aZuGA9EMMdNzhO6wNF LkmniGTwd8VJOw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:52 2026 by rpki-client