This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft
File: 6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft (raw, json)
Hash identifier: M9qDTotPk/tlH8q1BpwukYvZy3gs2yKjJ4/SqFDEa6o=
Subject key identifier: C8:38:28:C7:FB:F6:CA:A9:7A:74:A3:08:74:A1:E3:74:19:46:BA:09
Authority key identifier: E9:30:B7:6E:72:1F:5D:83:4E:D5:3E:49:28:4D:97:90:33:92:11:C8
Certificate issuer: /CN=e930b76e721f5d834ed53e49284d9790339211c8
Certificate serial: 019C435928CAFF74FDC4B6B5E529CD6D70B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6TC3bnIfXYNO1T5JKE2XkDOSEcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft
Manifest number: 02DA
Signing time: Mon 09 Feb 2026 17:00:42 +0000
Manifest this update: Mon 09 Feb 2026 17:00:42 +0000
Manifest next update: Tue 10 Feb 2026 17:00:42 +0000
Files and hashes: 1: 6TC3bnIfXYNO1T5JKE2XkDOSEcg.crl (hash: AzVpA8+n2wMDf88ujcMyzorP1M9Od7hAyTdeDYrGcRc=)
2: hkxJH8qDns81hHO_TEwuH8z_Eac.roa (hash: WI/ahDUF+5IzjpWVPH44VyOD7TChtaZ1JW84a/hYGec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6TC3bnIfXYNO1T5JKE2XkDOSEcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:59:28:ca:ff:74:fd:c4:b6:b5:e5:29:cd:6d:70:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e930b76e721f5d834ed53e49284d9790339211c8
Validity
Not Before: Feb 9 17:00:42 2026 GMT
Not After : Feb 10 17:00:42 2026 GMT
Subject: CN=c83828c7fbf6caa97a74a30874a1e3741946ba09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4c:b4:64:bf:63:71:3b:d1:04:9b:17:94:39:
6a:18:3d:d8:7c:da:4a:19:2c:d0:21:32:6e:b4:f4:
a5:7d:b6:f9:94:a5:6e:f9:38:48:8c:57:94:12:a1:
3c:07:d4:1f:a2:18:ac:a1:51:00:cc:d2:59:14:91:
fc:c5:f2:09:6f:ae:46:e6:a9:ec:6e:11:b7:75:34:
13:e5:dd:3b:34:49:4e:9a:e9:4a:0f:a0:6f:5d:cc:
53:40:c2:d4:5d:5a:63:b3:92:57:a9:cb:46:f8:19:
a8:90:8b:7d:9e:66:19:6f:d9:f9:76:23:24:31:89:
69:a5:a9:a0:70:e0:bf:1f:da:83:1d:8f:18:28:0b:
b4:f9:1e:f3:3d:fb:42:d6:cf:eb:72:07:85:e8:d7:
f8:1d:25:ae:71:29:1a:6d:5d:4d:bb:da:c1:b8:62:
3f:7e:b2:8f:dc:fc:41:d5:cc:41:b9:e3:aa:f6:31:
e2:e3:fb:f2:03:8f:21:b2:78:d6:08:b8:50:a0:54:
15:b6:db:8e:14:ac:39:53:e3:16:b0:fe:5d:74:64:
32:55:b8:83:8a:2b:5a:ef:4c:c8:3e:b8:a4:31:5b:
79:1b:93:0f:de:98:2a:b6:af:87:9e:cf:a3:97:e6:
c5:17:51:90:94:2e:6d:f0:03:14:70:b1:6d:16:b7:
e9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:38:28:C7:FB:F6:CA:A9:7A:74:A3:08:74:A1:E3:74:19:46:BA:09
X509v3 Authority Key Identifier:
keyid:E9:30:B7:6E:72:1F:5D:83:4E:D5:3E:49:28:4D:97:90:33:92:11:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TC3bnIfXYNO1T5JKE2XkDOSEcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:70:d0:b5:67:3f:e1:44:47:00:47:57:ff:30:0d:56:64:e2:
1b:62:dc:ed:81:e7:aa:15:c6:03:4e:c9:da:b8:8b:27:b0:2a:
4d:0f:58:63:3e:cf:70:7c:04:31:df:70:c6:4e:ad:15:2d:a4:
de:a0:d2:5e:d3:c0:2e:41:7f:2f:d0:09:00:d5:7d:27:6a:86:
45:3a:90:8d:e6:58:e0:04:c9:dc:88:42:20:9f:f2:75:0b:e4:
0c:cb:bf:11:1d:9b:93:d5:5c:ec:e8:06:37:dd:f9:eb:04:2e:
a1:88:9e:56:65:43:f3:cb:cf:66:da:7f:96:72:8d:b2:cf:1c:
5a:65:30:5b:70:18:08:ef:bd:72:d4:b4:61:0d:0c:83:39:b6:
e9:44:ac:7f:04:20:3c:07:27:54:97:33:83:c5:33:e7:ce:66:
45:ca:02:64:5b:29:97:0e:d8:8a:2a:e4:a9:cd:11:e9:f7:41:
30:97:3c:b7:cc:64:cf:2b:c2:24:d9:a0:95:de:7b:20:b2:db:
49:29:2b:5f:9c:08:f0:25:9c:38:53:f3:e8:59:ed:98:3d:dc:
ee:b0:e9:79:d0:56:e4:40:4a:68:8b:ad:57:09:8a:55:ac:96:
82:2d:42:93:74:f0:a2:b7:3e:3e:42:7c:9f:9d:cf:e5:a3:99:
08:aa:ac:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDWSjK/3T9xLa15SnNbXC1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MzBiNzZlNzIxZjVkODM0ZWQ1M2U0OTI4NGQ5NzkwMzM5
MjExYzgwHhcNMjYwMjA5MTcwMDQyWhcNMjYwMjEwMTcwMDQyWjAzMTEwLwYDVQQD
EyhjODM4MjhjN2ZiZjZjYWE5N2E3NGEzMDg3NGExZTM3NDE5NDZiYTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEy0ZL9jcTvRBJsXlDlqGD3YfNpK
GSzQITJutPSlfbb5lKVu+ThIjFeUEqE8B9QfohisoVEAzNJZFJH8xfIJb65G5qns
bhG3dTQT5d07NElOmulKD6BvXcxTQMLUXVpjs5JXqctG+BmokIt9nmYZb9n5diMk
MYlppamgcOC/H9qDHY8YKAu0+R7zPftC1s/rcgeF6Nf4HSWucSkabV1Nu9rBuGI/
frKP3PxB1cxBueOq9jHi4/vyA48hsnjWCLhQoFQVttuOFKw5U+MWsP5ddGQyVbiD
iita70zIPrikMVt5G5MP3pgqtq+Hns+jl+bFF1GQlC5t8AMUcLFtFrfptwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMg4KMf79sqpenSjCHSh43QZRroJMB8GA1UdIwQY
MBaAFOkwt25yH12DTtU+SShNl5AzkhHIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlRDM2JuSWZYWU5PMVQ1SktFMlhrRE9TRWNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hOWRiMjMtYTY3Yy00ZjhiLThhZGYt
NzA1MjJkODE0ZTBjLzEvNlRDM2JuSWZYWU5PMVQ1SktFMlhrRE9TRWNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9hOWRiMjMtYTY3Yy00ZjhiLThhZGYtNzA1MjJkODE0ZTBj
LzEvNlRDM2JuSWZYWU5PMVQ1SktFMlhrRE9TRWNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMXDQtWc/
4URHAEdX/zANVmTiG2Lc7YHnqhXGA07J2riLJ7AqTQ9YYz7PcHwEMd9wxk6tFS2k
3qDSXtPALkF/L9AJANV9J2qGRTqQjeZY4ATJ3IhCIJ/ydQvkDMu/ER2bk9Vc7OgG
N9356wQuoYieVmVD88vPZtp/lnKNss8cWmUwW3AYCO+9ctS0YQ0Mgzm26USsfwQg
PAcnVJczg8Uz585mRcoCZFsplw7Yiirkqc0R6fdBMJc8t8xkzyvCJNmgld57ILLb
SSkrX5wI8CWcOFPz6FntmD3c7rDpedBW5EBKaIutVwmKVayWgi1Ck3Tworc+PkJ8
n53P5aOZCKqsog==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:34:19 2026 by rpki-client