This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/628da6-8325-4c25-9837-d41c3e3c3555/1/6jVS_EWjZkCbn8e9lhOlnx_gbk0.mft File: 6jVS_EWjZkCbn8e9lhOlnx_gbk0.mft (raw, json) Hash identifier: OgIlfFPFyw1ms0WdqBG0I94x7dEiJh/FPsRBJztAQto= Subject key identifier: 97:2B:CA:D1:1D:8F:DD:0F:EC:2E:5F:8B:8C:79:28:37:1A:47:0C:F0 Authority key identifier: EA:35:52:FC:45:A3:66:40:9B:9F:C7:BD:96:13:A5:9F:1F:E0:6E:4D Certificate issuer: /CN=ea3552fc45a366409b9fc7bd9613a59f1fe06e4d Certificate serial: 019C427D43E162C85AA7FEA830333D159FAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6jVS_EWjZkCbn8e9lhOlnx_gbk0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/628da6-8325-4c25-9837-d41c3e3c3555/1/6jVS_EWjZkCbn8e9lhOlnx_gbk0.mft Manifest number: 0C1C Signing time: Mon 09 Feb 2026 13:00:31 +0000 Manifest this update: Mon 09 Feb 2026 13:00:31 +0000 Manifest next update: Tue 10 Feb 2026 13:00:31 +0000 Files and hashes: 1: 6jVS_EWjZkCbn8e9lhOlnx_gbk0.crl (hash: JmoubvcIRlbjvCCriY+4d5TK9qcgEzeRPsQb0j46hcs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/628da6-8325-4c25-9837-d41c3e3c3555/1/6jVS_EWjZkCbn8e9lhOlnx_gbk0.crl rsync://rpki.ripe.net/repository/DEFAULT/da/628da6-8325-4c25-9837-d41c3e3c3555/1/6jVS_EWjZkCbn8e9lhOlnx_gbk0.mft rsync://rpki.ripe.net/repository/DEFAULT/6jVS_EWjZkCbn8e9lhOlnx_gbk0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:43:e1:62:c8:5a:a7:fe:a8:30:33:3d:15:9f:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea3552fc45a366409b9fc7bd9613a59f1fe06e4d Validity Not Before: Feb 9 13:00:31 2026 GMT Not After : Feb 10 13:00:31 2026 GMT Subject: CN=972bcad11d8fdd0fec2e5f8b8c7928371a470cf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ff:e1:d3:82:2a:84:b8:45:48:0b:75:63:bc: 7b:6f:36:d7:d8:96:4b:64:57:b2:c0:ed:04:b0:13: a7:31:d2:2e:b1:89:65:14:ec:23:cd:e3:36:a3:01: 00:8f:34:90:33:6d:21:89:b9:3b:f2:d1:d3:d1:82: d0:47:8f:f4:91:8a:f7:01:d4:e2:f1:e6:82:b7:3a: 99:a9:1a:e5:fa:a6:33:d0:9a:0e:3c:10:e4:12:7e: 02:f8:fa:26:9c:89:e6:d8:e2:34:38:39:1b:2e:c5: ef:11:e0:0d:a4:31:f1:ba:f0:1a:5f:ef:a4:70:31: 7e:f4:ab:38:70:e3:00:57:94:e3:50:02:0e:d0:1c: b5:cd:98:eb:15:31:24:ee:f8:44:c5:14:b9:f2:d0: 66:ea:db:d4:53:b1:7c:1f:3a:2a:7c:85:8e:ea:ff: e3:8c:4f:d4:48:b5:1f:d6:f8:e8:41:8d:13:d2:4c: e2:74:91:a8:f7:99:3b:54:b5:97:b6:9c:83:d5:e8: 48:18:fa:d8:b1:65:04:f8:89:9e:fd:ac:29:3d:7c: 35:6d:f3:a0:e0:ac:f0:ef:4d:60:39:79:c4:63:c5: b3:70:04:12:3b:69:84:0c:db:74:de:7c:ef:ab:e7: 54:22:fa:b2:4e:47:9e:52:be:d9:b8:c3:71:c8:5b: 24:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:2B:CA:D1:1D:8F:DD:0F:EC:2E:5F:8B:8C:79:28:37:1A:47:0C:F0 X509v3 Authority Key Identifier: keyid:EA:35:52:FC:45:A3:66:40:9B:9F:C7:BD:96:13:A5:9F:1F:E0:6E:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6jVS_EWjZkCbn8e9lhOlnx_gbk0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/628da6-8325-4c25-9837-d41c3e3c3555/1/6jVS_EWjZkCbn8e9lhOlnx_gbk0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/628da6-8325-4c25-9837-d41c3e3c3555/1/6jVS_EWjZkCbn8e9lhOlnx_gbk0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:79:52:89:9a:d1:9f:4a:c1:15:f8:f4:59:99:7f:e4:97:62: 7a:eb:47:35:89:cb:59:8d:49:b4:58:25:67:d9:44:eb:ff:49: 97:93:31:51:f2:4a:3f:68:0e:f3:1c:36:96:54:28:91:b0:b9: 96:c3:4f:5f:46:69:95:6a:78:92:08:ef:dc:64:43:f5:44:d3: c0:0f:d5:af:3d:41:e9:da:00:5b:66:5c:ce:d2:f4:c3:5d:ba: 4f:85:23:32:b1:19:81:6b:2e:0b:69:be:ac:86:9e:34:6a:d7: b4:25:3d:c3:1a:69:c3:1b:15:81:7f:ef:ee:66:ee:b1:2d:f6: 8a:46:cd:1f:aa:f6:74:f4:91:d5:d8:9d:80:8a:f9:18:54:8c: f6:69:8f:3f:c5:1f:15:d6:32:eb:04:d2:83:42:d8:74:f9:d4: 40:19:19:d3:dc:7f:30:6a:1c:c5:29:44:bf:03:55:ae:c0:2e: 07:5f:79:d2:75:1d:85:56:e9:88:d0:8e:c0:4a:0c:80:fc:0e: 8d:45:7b:46:81:80:fc:6a:51:0a:73:a1:7f:15:5b:17:0c:ba: 45:22:2a:e0:bf:32:3c:95:cf:28:bf:10:19:3c:da:cf:92:b8: 74:f5:93:6b:79:29:11:35:df:c9:48:d1:d5:dc:99:17:78:9c: 8b:78:8c:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfUPhYshap/6oMDM9FZ+sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMzU1MmZjNDVhMzY2NDA5YjlmYzdiZDk2MTNhNTlmMWZl MDZlNGQwHhcNMjYwMjA5MTMwMDMxWhcNMjYwMjEwMTMwMDMxWjAzMTEwLwYDVQQD Eyg5NzJiY2FkMTFkOGZkZDBmZWMyZTVmOGI4Yzc5MjgzNzFhNDcwY2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtP/h04IqhLhFSAt1Y7x7bzbX2JZL ZFeywO0EsBOnMdIusYllFOwjzeM2owEAjzSQM20hibk78tHT0YLQR4/0kYr3AdTi 8eaCtzqZqRrl+qYz0JoOPBDkEn4C+PomnInm2OI0ODkbLsXvEeANpDHxuvAaX++k cDF+9Ks4cOMAV5TjUAIO0By1zZjrFTEk7vhExRS58tBm6tvUU7F8HzoqfIWO6v/j jE/USLUf1vjoQY0T0kzidJGo95k7VLWXtpyD1ehIGPrYsWUE+Ime/awpPXw1bfOg 4Kzw701gOXnEY8WzcAQSO2mEDNt03nzvq+dUIvqyTkeeUr7ZuMNxyFskQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJcrytEdj90P7C5fi4x5KDcaRwzwMB8GA1UdIwQY MBaAFOo1UvxFo2ZAm5/HvZYTpZ8f4G5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmpWU19FV2paa0NibjhlOWxoT2xueF9nYmswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82MjhkYTYtODMyNS00YzI1LTk4Mzct ZDQxYzNlM2MzNTU1LzEvNmpWU19FV2paa0NibjhlOWxoT2xueF9nYmswLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS82MjhkYTYtODMyNS00YzI1LTk4MzctZDQxYzNlM2MzNTU1 LzEvNmpWU19FV2paa0NibjhlOWxoT2xueF9nYmswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh3lSiZrR n0rBFfj0WZl/5JdieutHNYnLWY1JtFglZ9lE6/9Jl5MxUfJKP2gO8xw2llQokbC5 lsNPX0ZplWp4kgjv3GRD9UTTwA/Vrz1B6doAW2ZcztL0w126T4UjMrEZgWsuC2m+ rIaeNGrXtCU9wxppwxsVgX/v7mbusS32ikbNH6r2dPSR1didgIr5GFSM9mmPP8Uf FdYy6wTSg0LYdPnUQBkZ09x/MGocxSlEvwNVrsAuB1950nUdhVbpiNCOwEoMgPwO jUV7RoGA/GpRCnOhfxVbFwy6RSIq4L8yPJXPKL8QGTzaz5K4dPWTa3kpETXfyUjR 1dyZF3ici3iMWw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:47 2026 by rpki-client