This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
File: 6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft (raw, json)
Hash identifier: BADeIUbL08flaBU9JbN1thHb0Jn2iqsXzkM/NfxisjU=
Subject key identifier: 1C:6D:EB:3B:6E:28:FD:23:50:4C:E5:08:F9:87:ED:C8:A6:51:2B:35
Authority key identifier: EA:51:76:9C:E8:67:2C:56:D1:65:2B:F9:0A:5A:EF:CA:81:9B:48:8A
Certificate issuer: /CN=ea51769ce8672c56d1652bf90a5aefca819b488a
Certificate serial: 019C43C70ACAB0AAC9F9A60A310B2DB117A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 19:00:43 +0000
Manifest this update: Mon 09 Feb 2026 19:00:43 +0000
Manifest next update: Tue 10 Feb 2026 19:00:43 +0000
Files and hashes: 1: 6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl (hash: LTsh36qsRIgCpzS76XB+pRMTknrRMteWht5G8hRX1ls=)
2: A8PCXHYtPKOyp3MabVe-odhqYuU.roa (hash: BBukl0iR4BOT3LGjsYPG4CkyN4d3K0S/00+hEdW+8z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:c7:0a:ca:b0:aa:c9:f9:a6:0a:31:0b:2d:b1:17:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea51769ce8672c56d1652bf90a5aefca819b488a
Validity
Not Before: Feb 9 19:00:43 2026 GMT
Not After : Feb 10 19:00:43 2026 GMT
Subject: CN=1c6deb3b6e28fd23504ce508f987edc8a6512b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:69:b0:0a:0c:52:45:98:84:2c:41:5c:94:5d:
69:ef:f6:df:d7:62:21:ca:69:37:60:05:92:b5:a2:
6a:f8:48:98:cb:e0:28:65:fc:d3:71:5d:e8:a6:8f:
29:95:cb:20:64:74:a2:21:40:3d:da:43:f0:1b:a3:
14:97:b1:bc:78:e7:b5:43:a2:7e:93:cd:19:a5:ef:
f8:ca:73:e9:8b:2b:69:7e:65:69:75:3b:4e:17:08:
4c:63:29:80:f5:69:71:31:1a:cb:74:ff:cf:f1:7d:
32:5b:6e:fd:e8:dc:e3:3a:ff:b8:30:f4:67:7c:89:
0a:64:91:33:0f:9a:72:60:be:ec:ce:fe:c0:87:35:
94:f5:fe:aa:03:3a:7d:6e:ef:93:2a:a8:5a:b7:bf:
2f:f1:b8:1a:c1:b1:fb:21:d3:80:0c:52:c4:b0:ab:
8f:55:ee:46:d6:c0:f7:52:ec:04:f9:4d:b3:1d:a4:
39:2d:98:c5:0b:fb:05:e0:ee:bf:8f:d2:9e:0b:85:
77:57:50:fc:2a:3a:6f:a7:46:ba:e5:ad:16:1f:2b:
5f:28:4c:50:5d:5b:d0:3c:14:cc:65:57:2f:57:f5:
a5:df:bb:08:ac:ec:13:e3:6b:a9:32:94:59:58:2d:
f1:20:fd:07:c5:b5:e7:16:8d:a0:96:00:bf:91:37:
ec:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:6D:EB:3B:6E:28:FD:23:50:4C:E5:08:F9:87:ED:C8:A6:51:2B:35
X509v3 Authority Key Identifier:
keyid:EA:51:76:9C:E8:67:2C:56:D1:65:2B:F9:0A:5A:EF:CA:81:9B:48:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b6:b3:d9:fe:15:db:d6:49:08:da:66:64:30:62:95:02:2c:
c4:6c:14:31:50:4d:ac:31:d0:f6:45:0e:76:ac:a9:98:d1:cb:
11:80:9e:54:d4:ad:3c:ed:e5:03:90:ac:4e:03:e9:ae:9b:12:
9d:b3:cd:42:39:6e:1a:ef:bb:e9:2d:1c:f8:7f:58:43:f8:d8:
bc:4c:61:c6:9d:c0:a0:b3:b7:74:b7:4f:d1:3c:56:50:60:28:
8a:65:5d:1c:5a:76:7b:cd:4f:21:0c:19:e2:24:58:2d:9a:22:
2a:0b:bc:eb:f2:47:14:9e:a8:25:6d:c6:8d:91:0b:0a:74:b5:
cc:8e:e4:b8:56:f4:64:67:f0:4c:2b:eb:96:b6:7b:45:49:d6:
10:02:90:0b:b0:ec:6f:e0:61:06:05:5d:78:44:56:73:8f:25:
01:c2:67:17:b7:1c:de:09:8d:88:7c:88:38:fe:39:e7:ac:39:
89:82:24:59:26:7f:f2:5c:b6:ed:43:c2:21:a6:b6:83:ac:01:
e0:39:f9:76:a9:f4:7d:4f:76:5f:d4:2a:45:01:4f:10:d7:b7:
de:05:b7:01:bc:5a:f5:73:ce:ce:89:cf:ad:ad:35:e9:f7:b2:
77:c2:40:ee:08:69:42:d2:91:27:06:b5:f9:2d:fc:f1:40:fa:
b9:ab:87:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:17:48 2026 by rpki-client