This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft File: A6YrMJo3hUJZChKznF9wzbDnsVA.mft (raw, json) Hash identifier: 649L0x+oyNo50DldSBkvl96OIPGndSwwUpxbHmDNsdE= Subject key identifier: 28:85:B6:B3:52:61:57:DB:1D:8D:D5:5B:EC:B4:78:F1:D6:74:6D:77 Authority key identifier: 03:A6:2B:30:9A:37:85:42:59:0A:12:B3:9C:5F:70:CD:B0:E7:B1:50 Certificate issuer: /CN=03a62b309a378542590a12b39c5f70cdb0e7b150 Certificate serial: 019C427D53819D69B6BE6302970A938533DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft Manifest number: 053B Signing time: Mon 09 Feb 2026 13:00:35 +0000 Manifest this update: Mon 09 Feb 2026 13:00:35 +0000 Manifest next update: Tue 10 Feb 2026 13:00:35 +0000 Files and hashes: 1: A6YrMJo3hUJZChKznF9wzbDnsVA.crl (hash: ftHb9/WrMjF9pLtB6SFxVhTcWV8TeDm9VJe1hAUswdA=) 2: _n9XrS5UkjXNT6ARRtv7DUuvjEM.roa (hash: TnwTYDlKPUNQjp/SqCH7ciXQlU62x/PX5ypSd1AHyds=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:53:81:9d:69:b6:be:63:02:97:0a:93:85:33:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03a62b309a378542590a12b39c5f70cdb0e7b150 Validity Not Before: Feb 9 13:00:35 2026 GMT Not After : Feb 10 13:00:35 2026 GMT Subject: CN=2885b6b3526157db1d8dd55becb478f1d6746d77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:02:37:37:69:0a:e0:4c:63:ff:10:75:a8:96: e1:12:ee:82:7c:89:bb:01:c3:f5:27:fd:cb:5b:b3: 4b:2a:1d:99:11:a0:26:88:9b:0c:34:9d:90:7e:24: d2:47:3c:e3:02:9f:c4:5a:8a:13:b6:fb:53:33:67: d5:0d:0b:81:3b:73:c2:ca:15:df:2a:1a:30:e8:0f: 64:e5:fc:f5:7d:51:99:15:94:cb:4f:47:9f:bb:82: 79:e1:a9:8e:68:26:3e:2c:9f:25:bf:c9:5c:fb:a0: 45:bc:b1:b7:bd:d2:cf:12:03:ca:25:fb:48:12:b2: 63:c6:6f:c1:1d:7a:a5:43:1f:cb:e1:92:4a:02:2a: 30:fb:6f:eb:7f:0c:3d:cc:0e:5c:fe:a6:4e:a5:b7: a3:53:06:e2:eb:b1:0e:c0:e7:f6:94:83:1f:45:b8: 03:fe:08:20:49:2d:7c:1f:d7:3c:d1:b4:b5:42:69: a0:c9:fa:c8:16:ef:d7:87:90:c3:42:6b:3f:49:75: 86:a7:84:32:94:8c:80:52:72:0e:6a:49:cf:47:e0: ec:ca:bd:50:c3:f7:ca:09:84:67:4e:2e:1b:27:f3: 3c:07:62:99:bb:65:a3:cb:69:b2:28:4c:51:ca:e4: 41:fe:10:9a:91:2f:5d:4c:28:ba:d7:39:44:0a:01: 14:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:85:B6:B3:52:61:57:DB:1D:8D:D5:5B:EC:B4:78:F1:D6:74:6D:77 X509v3 Authority Key Identifier: keyid:03:A6:2B:30:9A:37:85:42:59:0A:12:B3:9C:5F:70:CD:B0:E7:B1:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:cd:b7:2b:a1:71:4d:53:54:8f:b3:50:3a:b4:fe:c0:b5:ea: 15:ff:35:39:25:ba:85:85:bc:a3:e3:c3:2b:a8:0d:ca:18:30: 55:ab:ea:62:19:af:0a:2c:6e:54:02:31:d9:ce:50:4b:da:bb: bd:6a:79:af:05:7c:74:79:19:b3:ae:6e:07:5b:c5:31:cb:8a: 76:b7:1c:fc:f8:12:57:5d:5c:78:37:2d:fe:a2:60:8e:86:05: 57:77:ab:0f:90:a1:8a:bb:76:a0:65:c6:b0:df:4a:55:d2:3c: 11:b7:6f:be:a8:80:64:aa:e8:22:d8:8a:12:fe:76:4a:a2:72: 24:b4:45:8c:a3:a7:f0:73:f2:35:4d:dd:ce:64:04:e3:dd:b8: f4:74:d8:59:7c:bc:a1:a6:90:e0:aa:ce:6a:e3:18:fe:6d:0b: 5b:44:c1:61:c9:1e:3e:4c:56:ac:ec:35:ee:ba:72:29:84:19: cf:23:2c:02:68:d8:6c:3b:e8:1c:ff:8c:f9:d5:b7:56:50:2a: fa:05:54:2a:95:af:d3:6a:cd:2e:35:f2:5a:6c:e9:33:93:01: e0:76:02:6a:5b:f8:0d:99:78:0b:12:67:35:42:64:a5:81:d5: f6:b6:92:c4:6a:fe:7b:cc:2a:b6:e8:6b:5d:db:dd:6e:e7:e1: 2b:a2:0b:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfVOBnWm2vmMClwqThTPbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzYTYyYjMwOWEzNzg1NDI1OTBhMTJiMzljNWY3MGNkYjBl N2IxNTAwHhcNMjYwMjA5MTMwMDM1WhcNMjYwMjEwMTMwMDM1WjAzMTEwLwYDVQQD EygyODg1YjZiMzUyNjE1N2RiMWQ4ZGQ1NWJlY2I0NzhmMWQ2NzQ2ZDc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowI3N2kK4Exj/xB1qJbhEu6CfIm7 AcP1J/3LW7NLKh2ZEaAmiJsMNJ2QfiTSRzzjAp/EWooTtvtTM2fVDQuBO3PCyhXf Khow6A9k5fz1fVGZFZTLT0efu4J54amOaCY+LJ8lv8lc+6BFvLG3vdLPEgPKJftI ErJjxm/BHXqlQx/L4ZJKAiow+2/rfww9zA5c/qZOpbejUwbi67EOwOf2lIMfRbgD /gggSS18H9c80bS1QmmgyfrIFu/Xh5DDQms/SXWGp4QylIyAUnIOaknPR+Dsyr1Q w/fKCYRnTi4bJ/M8B2KZu2Wjy2myKExRyuRB/hCakS9dTCi61zlECgEUJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCiFtrNSYVfbHY3VW+y0ePHWdG13MB8GA1UdIwQY MBaAFAOmKzCaN4VCWQoSs5xfcM2w57FQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTZZck1KbzNoVUpaQ2hLem5GOXd6YkRuc1ZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC82ZDJhMTktNDc0Ni00NzhmLTk5MzYt MjczM2Y2OTljYjYyLzEvQTZZck1KbzNoVUpaQ2hLem5GOXd6YkRuc1ZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC82ZDJhMTktNDc0Ni00NzhmLTk5MzYtMjczM2Y2OTljYjYy LzEvQTZZck1KbzNoVUpaQ2hLem5GOXd6YkRuc1ZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqc23K6Fx TVNUj7NQOrT+wLXqFf81OSW6hYW8o+PDK6gNyhgwVavqYhmvCixuVAIx2c5QS9q7 vWp5rwV8dHkZs65uB1vFMcuKdrcc/PgSV11ceDct/qJgjoYFV3erD5Chirt2oGXG sN9KVdI8EbdvvqiAZKroItiKEv52SqJyJLRFjKOn8HPyNU3dzmQE49249HTYWXy8 oaaQ4KrOauMY/m0LW0TBYckePkxWrOw17rpyKYQZzyMsAmjYbDvoHP+M+dW3VlAq +gVUKpWv02rNLjXyWmzpM5MB4HYCalv4DZl4CxJnNUJkpYHV9raSxGr+e8wqtuhr XdvdbufhK6ILNw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:09:54 2026 by rpki-client