This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.mft File: j6aYyfgDAyV5IBBIuHwZxjyOEZc.mft (raw, json) Hash identifier: nrDF/UNfWgyrqNlGsM9kTOQz/TlzfubmSDpBiikoKbE= Subject key identifier: FC:2E:E8:47:E9:2C:92:EB:65:F6:7F:02:F6:AC:6D:11:98:9E:3B:61 Authority key identifier: 8F:A6:98:C9:F8:03:03:25:79:20:10:48:B8:7C:19:C6:3C:8E:11:97 Certificate issuer: /CN=8fa698c9f803032579201048b87c19c63c8e1197 Certificate serial: 019C42467CBE625941F9E9B63DDCD5321C69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6aYyfgDAyV5IBBIuHwZxjyOEZc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.mft Manifest number: 0296 Signing time: Mon 09 Feb 2026 12:00:41 +0000 Manifest this update: Mon 09 Feb 2026 12:00:41 +0000 Manifest next update: Tue 10 Feb 2026 12:00:41 +0000 Files and hashes: 1: j6aYyfgDAyV5IBBIuHwZxjyOEZc.crl (hash: IITKqRoYxvgahbQQByylhzYvMcd+eghzoW83bLTjUx0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.mft rsync://rpki.ripe.net/repository/DEFAULT/j6aYyfgDAyV5IBBIuHwZxjyOEZc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:7c:be:62:59:41:f9:e9:b6:3d:dc:d5:32:1c:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fa698c9f803032579201048b87c19c63c8e1197 Validity Not Before: Feb 9 12:00:41 2026 GMT Not After : Feb 10 12:00:41 2026 GMT Subject: CN=fc2ee847e92c92eb65f67f02f6ac6d11989e3b61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ec:73:71:45:62:f6:00:4d:91:ba:a0:ee:92: 54:b5:09:b8:98:26:b5:63:86:b1:08:33:5b:81:58: 02:45:89:17:40:19:31:25:73:8d:75:35:17:be:f5: 10:f8:b6:51:06:41:44:e1:43:1f:cb:70:7a:f1:ff: f1:63:0e:24:8e:f8:28:b6:92:28:99:8a:e5:56:ae: 02:15:6d:69:03:8c:01:38:ed:1b:ad:fb:ef:47:c2: 86:fa:72:cf:6c:ee:60:9c:6b:e9:10:82:66:97:b2: 4b:4a:9f:b0:40:23:ce:93:51:1c:0e:ad:e7:d0:f2: e8:52:88:f7:c3:fb:40:74:3e:26:1c:93:79:48:70: 1d:14:57:8f:f0:1a:30:e8:43:64:df:54:3a:75:87: e5:03:1b:29:fb:db:dd:f2:02:2e:35:a0:17:49:56: 31:2d:77:a9:ed:2b:60:6e:07:ff:55:47:cd:bc:a2: d2:04:03:3c:78:d0:19:54:3c:72:4a:e5:00:14:a4: 86:d6:0b:fd:03:c1:f0:bb:a8:90:d1:ef:da:41:20: a9:61:42:da:47:09:04:bb:fc:75:8f:6e:8d:44:b7: 07:93:91:66:25:9e:f8:28:1c:9b:9d:51:39:67:af: cb:a3:14:b1:36:02:b2:48:c5:72:2f:3b:29:36:41: fe:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:2E:E8:47:E9:2C:92:EB:65:F6:7F:02:F6:AC:6D:11:98:9E:3B:61 X509v3 Authority Key Identifier: keyid:8F:A6:98:C9:F8:03:03:25:79:20:10:48:B8:7C:19:C6:3C:8E:11:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6aYyfgDAyV5IBBIuHwZxjyOEZc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:81:87:27:9a:7e:81:9d:eb:73:2e:24:c1:ca:a4:af:d5:e0: 4d:b1:57:75:a6:2b:c0:3c:0a:86:0e:06:c6:cc:34:96:f0:3d: 0c:b3:49:cf:58:d2:fa:eb:8a:59:7c:b5:63:bb:e9:ba:83:61: 5a:80:b0:ea:81:b5:7c:fb:5f:ea:ee:9f:38:6b:06:7d:38:32: e2:be:4d:52:ea:34:31:1d:e1:4f:8c:ef:9b:f2:44:a1:c9:d0: 8d:1a:ae:3c:06:46:92:77:4f:43:c7:99:76:ee:f7:e6:6e:0f: fa:eb:e7:5c:1b:e3:d8:a0:18:d6:c7:80:90:42:53:ff:53:cc: 24:9c:a1:f3:bb:37:f2:7d:2c:b3:27:fe:6a:e9:24:f9:d7:7b: 6b:e4:21:46:a2:95:7d:ab:ec:42:ef:c9:ab:52:0c:1a:88:8e: 29:2f:bf:fc:a5:c3:89:b2:48:6d:da:18:d9:7b:e9:fa:78:6b: f5:c6:73:0e:af:2c:7a:55:a5:1c:28:ec:c5:cc:a7:a2:3c:a0: 6f:6c:22:61:ae:1e:f5:96:5e:dc:e3:9a:13:55:c0:42:1d:23: f9:9c:c8:0c:63:d7:07:b4:69:df:df:04:2f:76:82:7f:00:38: c0:8a:d6:09:bd:ba:18:65:bd:e5:16:0f:30:8d:e3:3a:80:a8: 62:c1:57:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRny+YllB+em2PdzVMhxpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmYTY5OGM5ZjgwMzAzMjU3OTIwMTA0OGI4N2MxOWM2M2M4 ZTExOTcwHhcNMjYwMjA5MTIwMDQxWhcNMjYwMjEwMTIwMDQxWjAzMTEwLwYDVQQD EyhmYzJlZTg0N2U5MmM5MmViNjVmNjdmMDJmNmFjNmQxMTk4OWUzYjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquxzcUVi9gBNkbqg7pJUtQm4mCa1 Y4axCDNbgVgCRYkXQBkxJXONdTUXvvUQ+LZRBkFE4UMfy3B68f/xYw4kjvgotpIo mYrlVq4CFW1pA4wBOO0brfvvR8KG+nLPbO5gnGvpEIJml7JLSp+wQCPOk1EcDq3n 0PLoUoj3w/tAdD4mHJN5SHAdFFeP8Bow6ENk31Q6dYflAxsp+9vd8gIuNaAXSVYx LXep7Stgbgf/VUfNvKLSBAM8eNAZVDxySuUAFKSG1gv9A8Hwu6iQ0e/aQSCpYULa RwkEu/x1j26NRLcHk5FmJZ74KBybnVE5Z6/LoxSxNgKySMVyLzspNkH+/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPwu6EfpLJLrZfZ/AvasbRGYnjthMB8GA1UdIwQY MBaAFI+mmMn4AwMleSAQSLh8GcY8jhGXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajZhWXlmZ0RBeVY1SUJCSXVId1p4anlPRVpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8wNjc0MDQtOWU5ZS00NGI4LTkwNWMt ZjQ0ODA5NTc4Y2NhLzEvajZhWXlmZ0RBeVY1SUJCSXVId1p4anlPRVpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8wNjc0MDQtOWU5ZS00NGI4LTkwNWMtZjQ0ODA5NTc4Y2Nh LzEvajZhWXlmZ0RBeVY1SUJCSXVId1p4anlPRVpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJIGHJ5p+ gZ3rcy4kwcqkr9XgTbFXdaYrwDwKhg4Gxsw0lvA9DLNJz1jS+uuKWXy1Y7vpuoNh WoCw6oG1fPtf6u6fOGsGfTgy4r5NUuo0MR3hT4zvm/JEocnQjRquPAZGkndPQ8eZ du735m4P+uvnXBvj2KAY1seAkEJT/1PMJJyh87s38n0ssyf+aukk+dd7a+QhRqKV favsQu/Jq1IMGoiOKS+//KXDibJIbdoY2Xvp+nhr9cZzDq8selWlHCjsxcynojyg b2wiYa4e9ZZe3OOaE1XAQh0j+ZzIDGPXB7Rp398EL3aCfwA4wIrWCb26GGW95RYP MI3jOoCoYsFXKQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:46:42 2026 by rpki-client