This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.mft
File: 6fxsgWY89vzpLoPl1mKLwOtqlNI.mft (raw, json)
Hash identifier: 6eK/EvYQ4Dcp3QdE3nrom0K5R57thAgayvYGW5V0ktU=
Subject key identifier: 27:6A:D4:48:FB:55:0E:4C:5C:FF:FD:B9:0D:C1:B9:96:E4:23:E8:03
Authority key identifier: E9:FC:6C:81:66:3C:F6:FC:E9:2E:83:E5:D6:62:8B:C0:EB:6A:94:D2
Certificate issuer: /CN=e9fc6c81663cf6fce92e83e5d6628bc0eb6a94d2
Certificate serial: 019C420F30C8B504F6E3F13237E4A16F7CEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6fxsgWY89vzpLoPl1mKLwOtqlNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.mft
Manifest number: 059B
Signing time: Mon 09 Feb 2026 11:00:17 +0000
Manifest this update: Mon 09 Feb 2026 11:00:17 +0000
Manifest next update: Tue 10 Feb 2026 11:00:17 +0000
Files and hashes: 1: 6fxsgWY89vzpLoPl1mKLwOtqlNI.crl (hash: vL1pfgffOdI/mlPmNfl6QiKKzVJN8ffdvJ/zdnPL/Sg=)
2: vatD6IyOJfXLFso-oQNdkHZ0B5A.roa (hash: CF8afvvRrtxwksEOb+htGDBoa1bLNCvDnWuii8t0Lrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6fxsgWY89vzpLoPl1mKLwOtqlNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:30:c8:b5:04:f6:e3:f1:32:37:e4:a1:6f:7c:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9fc6c81663cf6fce92e83e5d6628bc0eb6a94d2
Validity
Not Before: Feb 9 11:00:17 2026 GMT
Not After : Feb 10 11:00:17 2026 GMT
Subject: CN=276ad448fb550e4c5cfffdb90dc1b996e423e803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:56:32:de:a5:d7:ce:8e:4a:92:93:12:d4:ef:
92:16:f3:ba:21:04:6f:89:bb:e8:f8:53:ef:4d:1d:
3c:c2:3d:26:6b:1a:46:3f:ea:ea:e6:c8:5d:e6:4c:
de:0e:c7:b8:39:70:1b:f0:ed:73:dd:43:d7:89:db:
11:79:ff:00:c3:b2:14:f2:3e:e6:4f:b2:c8:78:7e:
a0:83:7a:47:a4:e6:5b:28:d4:09:b6:75:96:8a:1c:
a1:81:dc:a1:e6:b5:17:b1:1e:54:5d:bf:04:48:a3:
63:df:8a:dd:48:5c:e3:9d:bd:a1:a9:b6:3c:bc:aa:
18:05:66:8c:9d:b5:17:f0:e8:fd:8d:09:f2:45:a0:
51:aa:11:8d:f2:e6:7c:da:43:5b:93:a4:71:a5:23:
0a:82:4d:4d:c0:63:b1:19:b1:95:01:59:84:06:6d:
62:4f:d2:e9:fc:21:4b:c1:56:8c:61:dc:17:da:14:
11:d0:ca:b8:35:54:b7:d0:a6:ce:a7:41:5d:77:c6:
c3:bf:c0:db:53:f6:42:17:7e:8f:9d:69:f2:a6:29:
4a:f0:09:e2:9d:24:97:ae:59:28:a8:a6:ae:7a:8c:
62:ee:ba:d1:1b:7c:72:e2:6a:7a:2d:44:4e:41:98:
21:35:f0:4d:49:87:45:60:c3:e7:b2:96:76:0d:42:
41:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:6A:D4:48:FB:55:0E:4C:5C:FF:FD:B9:0D:C1:B9:96:E4:23:E8:03
X509v3 Authority Key Identifier:
keyid:E9:FC:6C:81:66:3C:F6:FC:E9:2E:83:E5:D6:62:8B:C0:EB:6A:94:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6fxsgWY89vzpLoPl1mKLwOtqlNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:6f:6d:2e:c1:74:9e:c6:9b:25:1a:c1:48:0b:13:74:42:17:
d6:e1:67:e9:91:39:54:2b:48:8a:b4:6b:ac:07:60:53:2b:e7:
46:22:11:c2:73:6b:53:e7:a9:00:eb:e5:7b:04:cc:98:e8:e3:
14:21:14:e6:e9:fd:f2:44:3e:e9:71:ed:ab:4b:05:a3:f4:15:
d7:19:0e:bb:f5:8d:d9:6b:f8:01:d6:6e:13:d9:35:1c:9f:e5:
a5:87:76:f0:6b:d5:49:11:8c:af:24:e9:f4:00:fc:cf:b0:3e:
78:c5:7b:2f:e5:c1:96:4c:9d:7f:66:48:1d:1a:17:e9:63:de:
7a:fa:92:e9:ca:a8:86:54:ed:9d:62:ac:11:b7:4f:51:14:29:
51:1b:cc:44:99:8b:b3:8b:a0:90:07:21:a9:5f:43:78:3d:93:
8c:5d:86:71:06:c5:cd:29:0e:f8:75:d6:dc:c0:1a:fd:b8:5a:
80:4e:74:1e:ee:b8:1b:c3:c2:07:59:17:27:2c:43:42:8a:25:
38:17:05:78:02:f8:a3:95:4d:29:66:78:1c:6f:49:27:2e:9a:
6a:d2:78:14:d8:1b:36:5d:b0:fb:8c:2b:ad:c2:69:45:ac:49:
b3:f4:48:8b:e4:f9:69:34:47:8d:9f:73:1d:73:12:08:10:6f:
88:f3:b6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:39 2026 by rpki-client