This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft File: 6laHr9YhtSqXTNOvC-iiWmcRhtI.mft (raw, json) Hash identifier: sV+CoUVZkL8+A7EM2CHvyMUpYD8z2yae0//xWuxk1Bc= Subject key identifier: 95:B4:A0:3B:62:81:2A:3C:9E:03:41:61:03:72:52:D1:60:7D:D1:CF Authority key identifier: EA:56:87:AF:D6:21:B5:2A:97:4C:D3:AF:0B:E8:A2:5A:67:11:86:D2 Certificate issuer: /CN=ea5687afd621b52a974cd3af0be8a25a671186d2 Certificate serial: 019C4322B87C4C5E214E1F62BEB9073C3FEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6laHr9YhtSqXTNOvC-iiWmcRhtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft Manifest number: 0837 Signing time: Mon 09 Feb 2026 16:01:14 +0000 Manifest this update: Mon 09 Feb 2026 16:01:14 +0000 Manifest next update: Tue 10 Feb 2026 16:01:14 +0000 Files and hashes: 1: 6laHr9YhtSqXTNOvC-iiWmcRhtI.crl (hash: nj5eNZxpwMgO60gb3xS5miTqY8ZkhbmtYFnJT4kJrXg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft rsync://rpki.ripe.net/repository/DEFAULT/6laHr9YhtSqXTNOvC-iiWmcRhtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:b8:7c:4c:5e:21:4e:1f:62:be:b9:07:3c:3f:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea5687afd621b52a974cd3af0be8a25a671186d2 Validity Not Before: Feb 9 16:01:14 2026 GMT Not After : Feb 10 16:01:14 2026 GMT Subject: CN=95b4a03b62812a3c9e034161037252d1607dd1cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5e:af:c1:e9:4c:72:ee:c5:80:d0:71:b6:97: ba:76:23:b1:35:07:00:44:8c:28:e3:59:81:bc:16: 0c:39:ff:a1:ff:04:09:34:3a:0e:3e:fb:2a:77:ba: e5:71:a7:78:c6:e5:6c:59:14:e8:5d:cc:18:f1:67: 4b:0e:60:6f:cb:2b:c8:77:df:0b:7d:70:2c:95:bc: 6d:ac:78:50:59:ec:50:a5:11:c1:2c:2a:59:b0:96: 75:e2:0c:ee:98:0b:da:40:a2:14:74:1e:a6:d8:b6: f4:2b:4e:53:ba:4c:25:45:c3:76:1e:e3:6b:53:49: 7b:a7:0e:74:22:48:1b:13:3f:fe:c9:c2:0b:83:59: 0e:93:a3:aa:ba:ea:65:f6:80:c8:15:7c:da:ef:49: 8c:d4:08:2f:a2:e9:f0:d0:08:a5:7a:8b:ec:08:3f: 71:0c:5c:93:21:8d:ea:a9:9f:d3:36:86:9f:e4:72: 12:aa:45:b2:dc:84:e0:22:75:38:7b:a5:0f:e4:1e: 6d:0b:f6:3e:75:48:36:e7:34:e6:cb:b2:b3:29:1e: 91:44:a3:41:a6:83:3d:be:c9:6e:fb:a3:e4:21:3f: cd:c5:60:a6:be:b4:4e:71:08:e5:3e:09:75:5f:89: b1:a4:6a:42:cf:08:a2:8f:e2:bd:e4:42:2a:1b:23: 0f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:B4:A0:3B:62:81:2A:3C:9E:03:41:61:03:72:52:D1:60:7D:D1:CF X509v3 Authority Key Identifier: keyid:EA:56:87:AF:D6:21:B5:2A:97:4C:D3:AF:0B:E8:A2:5A:67:11:86:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6laHr9YhtSqXTNOvC-iiWmcRhtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:50:81:65:41:24:07:73:07:d4:72:6d:f5:b9:24:71:3a:c2: ec:97:ff:ba:3a:98:b9:cb:a9:ca:36:fc:a4:4a:2e:c4:65:c5: 5e:11:61:15:cb:51:c2:5a:1d:1f:a4:f0:c7:e0:71:3d:95:b4: ed:ad:31:53:c7:39:6c:6c:bf:da:2e:c1:e3:60:e3:23:9f:26: 96:3b:68:0f:b5:fc:54:27:56:1d:d8:93:10:f0:c8:4b:b5:11: 26:39:3f:36:6e:59:ac:06:1f:40:3b:a9:2f:0c:0f:4f:1f:56: 6a:60:b5:23:3f:3d:c6:25:7f:97:08:37:5a:ed:fc:8a:5b:6b: aa:c1:eb:4b:55:a4:ac:d2:7b:cb:2c:91:bd:d4:18:95:c8:da: bf:29:2d:9d:b6:3e:cc:52:61:cf:09:55:e7:18:68:29:06:73: 31:1a:cf:e1:ac:45:d6:97:aa:c4:7d:88:1c:3d:03:1a:68:96: 0c:0f:ef:91:80:9c:95:d9:a7:35:71:9a:44:a7:5c:85:cf:3d: 38:28:cc:30:91:86:ab:2f:32:d4:e1:45:90:6e:b6:db:99:a8: a8:e6:77:88:c5:5a:97:46:22:1f:df:bb:de:7e:57:17:07:8e: 9c:de:76:22:b8:7c:52:00:0e:3e:56:cb:56:25:ae:cc:be:d3: 65:37:e8:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIrh8TF4hTh9ivrkHPD/qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhNTY4N2FmZDYyMWI1MmE5NzRjZDNhZjBiZThhMjVhNjcx MTg2ZDIwHhcNMjYwMjA5MTYwMTE0WhcNMjYwMjEwMTYwMTE0WjAzMTEwLwYDVQQD Eyg5NWI0YTAzYjYyODEyYTNjOWUwMzQxNjEwMzcyNTJkMTYwN2RkMWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsl6vwelMcu7FgNBxtpe6diOxNQcA RIwo41mBvBYMOf+h/wQJNDoOPvsqd7rlcad4xuVsWRToXcwY8WdLDmBvyyvId98L fXAslbxtrHhQWexQpRHBLCpZsJZ14gzumAvaQKIUdB6m2Lb0K05TukwlRcN2HuNr U0l7pw50IkgbEz/+ycILg1kOk6Oquupl9oDIFXza70mM1Agvounw0AileovsCD9x DFyTIY3qqZ/TNoaf5HISqkWy3ITgInU4e6UP5B5tC/Y+dUg25zTmy7KzKR6RRKNB poM9vslu+6PkIT/NxWCmvrROcQjlPgl1X4mxpGpCzwiij+K95EIqGyMPZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJW0oDtigSo8ngNBYQNyUtFgfdHPMB8GA1UdIwQY MBaAFOpWh6/WIbUql0zTrwvoolpnEYbSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmxhSHI5WWh0U3FYVE5PdkMtaWlXbWNSaHRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC82YjJkYTItMzU5Ni00N2ZmLTliYTUt YjIzODU2YTFhODAzLzEvNmxhSHI5WWh0U3FYVE5PdkMtaWlXbWNSaHRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC82YjJkYTItMzU5Ni00N2ZmLTliYTUtYjIzODU2YTFhODAz LzEvNmxhSHI5WWh0U3FYVE5PdkMtaWlXbWNSaHRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1FCBZUEk B3MH1HJt9bkkcTrC7Jf/ujqYucupyjb8pEouxGXFXhFhFctRwlodH6Twx+BxPZW0 7a0xU8c5bGy/2i7B42DjI58mljtoD7X8VCdWHdiTEPDIS7URJjk/Nm5ZrAYfQDup LwwPTx9WamC1Iz89xiV/lwg3Wu38iltrqsHrS1WkrNJ7yyyRvdQYlcjavyktnbY+ zFJhzwlV5xhoKQZzMRrP4axF1peqxH2IHD0DGmiWDA/vkYCcldmnNXGaRKdchc89 OCjMMJGGqy8y1OFFkG6225moqOZ3iMVal0YiH9+73n5XFweOnN52Irh8UgAOPlbL ViWuzL7TZTfocg== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:49 2026 by rpki-client