This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/521d34-3630-4150-9432-6d96cdaecdfd/1/b6U11TlSoTJ99CLvgOuXvABDRn4.mft
File: b6U11TlSoTJ99CLvgOuXvABDRn4.mft (raw, json)
Hash identifier: 1yxCt7JhCTeHMetTNH4PgyBZbAjfnd7BXxsTUaTho54=
Subject key identifier: 6D:C8:8E:26:D3:46:DF:8B:F1:5D:BE:D5:22:E0:D0:AF:12:B6:DC:FC
Authority key identifier: 6F:A5:35:D5:39:52:A1:32:7D:F4:22:EF:80:EB:97:BC:00:43:46:7E
Certificate issuer: /CN=6fa535d53952a1327df422ef80eb97bc0043467e
Certificate serial: 019C1BA6CB7CE67FA389CBA0A6A74A784D35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6U11TlSoTJ99CLvgOuXvABDRn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/521d34-3630-4150-9432-6d96cdaecdfd/1/b6U11TlSoTJ99CLvgOuXvABDRn4.mft
Manifest number: 28
Signing time: Mon 02 Feb 2026 00:00:41 +0000
Manifest this update: Mon 02 Feb 2026 00:00:41 +0000
Manifest next update: Tue 03 Feb 2026 00:00:41 +0000
Files and hashes: 1: b6U11TlSoTJ99CLvgOuXvABDRn4.crl (hash: etg8JiX3yK5FfRte14/dWDWOZarxlDo7DVhzGAdtNYk=)
2: g1tYY4bVpyzZbmnsZxjeKhC82fI.asa (hash: NFlqii/du4GcWVzE0r9fvBXM9j6Xd6y2z1i5Qmeg3Yc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/521d34-3630-4150-9432-6d96cdaecdfd/1/b6U11TlSoTJ99CLvgOuXvABDRn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/521d34-3630-4150-9432-6d96cdaecdfd/1/b6U11TlSoTJ99CLvgOuXvABDRn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/b6U11TlSoTJ99CLvgOuXvABDRn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Feb 2026 21:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1b:a6:cb:7c:e6:7f:a3:89:cb:a0:a6:a7:4a:78:4d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fa535d53952a1327df422ef80eb97bc0043467e
Validity
Not Before: Feb 2 00:00:41 2026 GMT
Not After : Feb 3 00:00:41 2026 GMT
Subject: CN=6dc88e26d346df8bf15dbed522e0d0af12b6dcfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:12:60:97:a2:f1:62:f2:47:c6:68:b7:67:98:
11:62:68:10:3f:3e:99:ed:f9:21:9b:c8:79:d1:ed:
82:6e:19:26:8e:fa:de:ff:e5:88:a6:cf:e1:a1:1a:
1d:5a:0f:8f:1b:0f:8b:84:9e:a1:e8:ee:40:f7:1e:
4a:d5:43:9a:b8:31:bb:cd:bf:46:dd:fb:ce:96:4f:
42:18:ee:75:c5:d7:ff:49:45:9b:c0:97:3f:d9:1a:
df:b0:9a:84:83:b6:f6:1b:d0:98:be:d3:5c:3a:fa:
28:01:e5:2b:a9:ee:e9:56:3d:5f:6a:ed:c0:0b:56:
ed:81:44:60:c9:67:d6:c2:5d:58:4e:a2:12:ec:c4:
90:a8:d9:d3:38:ff:00:c6:df:93:69:51:42:fc:0d:
99:d5:47:18:15:f4:f9:ca:fc:a7:cc:77:02:44:72:
b6:e0:c0:1f:de:b2:31:46:f2:18:58:a2:21:58:1f:
96:4d:7d:58:14:16:b2:55:ea:a4:86:a7:4e:e2:a7:
88:c0:9d:9c:24:e6:c4:08:17:37:00:bb:19:49:5a:
81:98:eb:05:4b:86:40:44:34:c2:83:87:09:1c:08:
28:d8:6b:75:3c:b5:73:13:08:54:bf:2b:38:67:2c:
46:ce:ac:48:56:10:ef:32:58:e2:22:cb:ee:b1:07:
0b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C8:8E:26:D3:46:DF:8B:F1:5D:BE:D5:22:E0:D0:AF:12:B6:DC:FC
X509v3 Authority Key Identifier:
keyid:6F:A5:35:D5:39:52:A1:32:7D:F4:22:EF:80:EB:97:BC:00:43:46:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6U11TlSoTJ99CLvgOuXvABDRn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/521d34-3630-4150-9432-6d96cdaecdfd/1/b6U11TlSoTJ99CLvgOuXvABDRn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/521d34-3630-4150-9432-6d96cdaecdfd/1/b6U11TlSoTJ99CLvgOuXvABDRn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:84:26:1b:5f:77:78:e7:47:c9:28:ce:52:ee:ec:e7:f5:db:
cd:d9:9f:14:cf:88:d0:80:15:14:41:64:04:51:f9:64:d0:33:
25:ad:8d:d1:42:b8:17:ad:3e:3a:40:f5:78:2b:d5:2c:df:dd:
71:1e:ef:9b:92:d0:11:0f:a5:61:9e:ac:6a:0a:ae:cb:13:fc:
ab:b5:9a:d3:bc:4a:b6:d5:9b:9d:2b:cf:60:d2:04:f1:e7:9f:
0f:af:98:f3:b0:fc:2e:41:2a:ce:5e:5c:43:24:b9:37:16:7a:
f7:d1:bc:be:f0:d6:6a:48:20:37:76:ca:ff:62:21:fe:94:d0:
d8:4a:cd:05:8f:19:ee:af:56:36:6e:09:49:a3:73:15:07:dd:
ef:6e:e7:55:94:f3:96:9d:f3:5f:1e:d6:a3:c3:92:25:e9:90:
48:6e:ca:a8:4e:9f:95:71:55:7b:99:83:86:f6:91:1c:53:3c:
b9:fa:7e:6e:c4:52:5d:19:82:71:75:a8:31:55:62:9a:5d:39:
3f:54:fe:4a:cb:97:13:c6:d9:9e:4f:22:8b:9c:23:80:d8:53:
19:af:c3:fb:c0:0f:4f:8e:0f:02:92:97:b1:d7:1c:a6:f5:8f:
0f:8f:fb:06:20:27:09:f8:ee:2e:b1:5e:a0:5a:53:b6:b2:05:
c8:38:74:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 07:54:47 2026 by rpki-client