This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft
File: 6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft (raw, json)
Hash identifier: t45LQ6VMBTuB/6fELNkriqDjt1KhYU1k885mqS+KvmE=
Subject key identifier: 5D:A0:88:4C:37:2A:C6:69:D4:97:AA:CC:82:86:25:8C:66:78:CC:52
Authority key identifier: E8:5B:21:AF:E1:B0:91:6F:55:EE:A6:D5:BD:C1:DB:F2:E7:3A:3C:68
Certificate issuer: /CN=e85b21afe1b0916f55eea6d5bdc1dbf2e73a3c68
Certificate serial: 019C42EB390CC2F30745DC8A6605F05F71F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Fshr-GwkW9V7qbVvcHb8uc6PGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft
Manifest number: 075B
Signing time: Mon 09 Feb 2026 15:00:37 +0000
Manifest this update: Mon 09 Feb 2026 15:00:37 +0000
Manifest next update: Tue 10 Feb 2026 15:00:37 +0000
Files and hashes: 1: 6Fshr-GwkW9V7qbVvcHb8uc6PGg.crl (hash: QPDxGhLtwKcJggTBepKhyEORx/2DkZmbPnH7gF4LWiQ=)
2: hElyins30a6CcTsBId_5i9QZESM.roa (hash: XTxIIPJV+tyv9VF/zIfOPYzhtJazNs7LRzbWZlggukw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Fshr-GwkW9V7qbVvcHb8uc6PGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:39:0c:c2:f3:07:45:dc:8a:66:05:f0:5f:71:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e85b21afe1b0916f55eea6d5bdc1dbf2e73a3c68
Validity
Not Before: Feb 9 15:00:37 2026 GMT
Not After : Feb 10 15:00:37 2026 GMT
Subject: CN=5da0884c372ac669d497aacc8286258c6678cc52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e0:23:e7:fb:46:75:61:43:c1:d0:c4:4b:9d:
85:77:a2:c9:81:13:1a:6b:75:ad:2b:60:fd:0e:ea:
bb:28:f8:ea:be:87:2b:84:e5:01:0e:63:86:8b:f6:
b4:9e:bf:43:a9:c8:4c:1d:b9:82:72:63:79:37:ce:
89:c1:1c:9c:81:c4:7d:e4:94:ab:e4:d6:51:73:41:
09:c7:59:08:07:cf:c5:56:ab:d1:43:6f:76:b9:7f:
67:ff:9d:5a:f6:b3:1c:30:23:0c:19:9c:65:77:af:
dd:5a:4d:09:ed:b7:fe:7e:79:e0:00:39:42:f1:f8:
38:b0:24:8f:ad:43:f7:85:bf:3c:d2:0c:32:39:da:
19:9e:e2:f9:50:b4:ac:2a:42:e8:f5:3b:29:10:a9:
02:06:45:b6:6d:4b:44:ef:fa:dc:01:41:8d:f5:55:
2f:77:76:d4:4e:89:d8:7a:f3:ba:ec:22:79:8b:77:
33:b5:2d:5a:bb:57:c4:ab:b0:51:d6:7b:50:89:68:
22:a5:2b:f9:25:20:2e:db:6c:c7:7d:c8:2e:35:b2:
3f:0f:99:b3:4e:9d:49:1d:e6:3d:79:f0:f1:2a:b1:
86:aa:4e:70:2b:f2:81:b0:35:e2:42:9c:b6:e4:a4:
8d:eb:71:f4:e9:ba:20:0e:d1:1b:d8:88:25:17:1a:
de:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A0:88:4C:37:2A:C6:69:D4:97:AA:CC:82:86:25:8C:66:78:CC:52
X509v3 Authority Key Identifier:
keyid:E8:5B:21:AF:E1:B0:91:6F:55:EE:A6:D5:BD:C1:DB:F2:E7:3A:3C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Fshr-GwkW9V7qbVvcHb8uc6PGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:3e:cf:18:d4:58:c0:c0:e7:b4:e9:79:5f:9c:bb:6c:3c:0c:
9d:2a:e7:30:a5:30:fb:40:68:f8:ca:b1:79:7b:96:51:57:e2:
91:72:b7:1c:7b:45:f8:dd:9b:45:17:d0:e2:21:9e:3c:de:b9:
34:55:1d:09:d8:72:45:94:6f:f0:48:ed:df:c4:83:92:4b:a8:
ae:34:82:34:12:7e:06:48:30:8d:b6:4e:0f:53:5b:35:df:90:
59:10:bf:ca:a6:b8:f7:04:51:44:1a:ad:12:e5:dc:07:ee:a9:
c8:5e:da:4d:63:4f:a9:49:00:99:e6:cb:7a:ed:a9:07:93:c9:
9e:9a:34:d8:55:f5:d7:9c:a1:e7:79:29:9d:ea:16:a2:fa:28:
bd:4a:a4:eb:76:e2:b9:37:52:ff:57:dd:51:21:bb:6e:98:7f:
e2:64:84:13:61:4e:65:f9:a8:8b:f8:f4:54:c8:57:f3:fa:8c:
9a:1c:80:c0:17:76:5e:db:f2:4d:73:d3:1a:11:a7:39:69:3e:
ea:1d:9a:17:5c:bd:46:ec:d2:5c:55:00:c5:de:45:6f:31:19:
ee:22:f2:e6:28:08:ad:1b:62:ae:1d:85:2d:4f:73:aa:0f:d1:
f9:ea:34:2b:24:8a:26:f8:b7:e5:15:17:91:c0:a6:66:be:85:
d5:05:a9:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxC6zkMwvMHRdyKZgXwX3HxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NWIyMWFmZTFiMDkxNmY1NWVlYTZkNWJkYzFkYmYyZTcz
YTNjNjgwHhcNMjYwMjA5MTUwMDM3WhcNMjYwMjEwMTUwMDM3WjAzMTEwLwYDVQQD
Eyg1ZGEwODg0YzM3MmFjNjY5ZDQ5N2FhY2M4Mjg2MjU4YzY2NzhjYzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+Aj5/tGdWFDwdDES52Fd6LJgRMa
a3WtK2D9Duq7KPjqvocrhOUBDmOGi/a0nr9DqchMHbmCcmN5N86JwRycgcR95JSr
5NZRc0EJx1kIB8/FVqvRQ292uX9n/51a9rMcMCMMGZxld6/dWk0J7bf+fnngADlC
8fg4sCSPrUP3hb880gwyOdoZnuL5ULSsKkLo9TspEKkCBkW2bUtE7/rcAUGN9VUv
d3bUTonYevO67CJ5i3cztS1au1fEq7BR1ntQiWgipSv5JSAu22zHfcguNbI/D5mz
Tp1JHeY9efDxKrGGqk5wK/KBsDXiQpy25KSN63H06bogDtEb2IglFxreOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF2giEw3KsZp1JeqzIKGJYxmeMxSMB8GA1UdIwQY
MBaAFOhbIa/hsJFvVe6m1b3B2/LnOjxoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkZzaHItR3drVzlWN3FiVnZjSGI4dWM2UEdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC80YjQ3NDgtNWFmMC00NTEzLWFjYTkt
MGI0MTIzNGNiMGNlLzEvNkZzaHItR3drVzlWN3FiVnZjSGI4dWM2UEdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC80YjQ3NDgtNWFmMC00NTEzLWFjYTktMGI0MTIzNGNiMGNl
LzEvNkZzaHItR3drVzlWN3FiVnZjSGI4dWM2UEdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYT7PGNRY
wMDntOl5X5y7bDwMnSrnMKUw+0Bo+MqxeXuWUVfikXK3HHtF+N2bRRfQ4iGePN65
NFUdCdhyRZRv8Ejt38SDkkuorjSCNBJ+BkgwjbZOD1NbNd+QWRC/yqa49wRRRBqt
EuXcB+6pyF7aTWNPqUkAmebLeu2pB5PJnpo02FX115yh53kpneoWovoovUqk63bi
uTdS/1fdUSG7bph/4mSEE2FOZfmoi/j0VMhX8/qMmhyAwBd2XtvyTXPTGhGnOWk+
6h2aF1y9RuzSXFUAxd5FbzEZ7iLy5igIrRtirh2FLU9zqg/R+eo0KySKJvi35RUX
kcCmZr6F1QWp0A==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:56 2026 by rpki-client