This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft File: p6YlNTs6w-H5XJYlGRWNsSINCo4.mft (raw, json) Hash identifier: zPWSdrCXrdmfRUXYwWIiAYBsv9BtZSSQ5IhDUf75+Q4= Subject key identifier: 72:BA:68:C3:13:88:0C:6F:AD:7D:63:EC:A7:EF:E6:DA:91:07:AE:AD Authority key identifier: A7:A6:25:35:3B:3A:C3:E1:F9:5C:96:25:19:15:8D:B1:22:0D:0A:8E Certificate issuer: /CN=a7a625353b3ac3e1f95c962519158db1220d0a8e Certificate serial: 019C4322A049B30F06A8BD2E7EF43148239B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6YlNTs6w-H5XJYlGRWNsSINCo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft Manifest number: 0C77 Signing time: Mon 09 Feb 2026 16:01:08 +0000 Manifest this update: Mon 09 Feb 2026 16:01:08 +0000 Manifest next update: Tue 10 Feb 2026 16:01:08 +0000 Files and hashes: 1: p6YlNTs6w-H5XJYlGRWNsSINCo4.crl (hash: RVYw3hXekA0QEueDfr0wOD0MPx/brU1J7v3ijBzkrgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft rsync://rpki.ripe.net/repository/DEFAULT/p6YlNTs6w-H5XJYlGRWNsSINCo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:a0:49:b3:0f:06:a8:bd:2e:7e:f4:31:48:23:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7a625353b3ac3e1f95c962519158db1220d0a8e Validity Not Before: Feb 9 16:01:08 2026 GMT Not After : Feb 10 16:01:08 2026 GMT Subject: CN=72ba68c313880c6fad7d63eca7efe6da9107aead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:13:6f:ae:5e:b9:cd:5d:d2:18:42:38:88:b9: f2:89:72:6a:9f:b6:69:a1:f8:36:4a:e6:ad:b0:c1: 37:7d:67:35:36:ad:49:c9:2a:ca:4f:dc:32:34:c1: de:8a:ad:78:69:75:f7:02:5c:cf:f1:e6:83:a6:13: 2c:33:05:d0:a7:c5:0d:d3:cb:0d:1a:b3:27:02:55: 88:40:52:53:20:fe:24:35:39:ee:a2:f4:18:cb:d0: 98:04:98:81:72:ef:a8:83:cb:10:37:4c:47:ba:48: 18:f8:71:b2:35:d4:96:af:75:3b:6a:74:89:2d:20: 04:94:62:33:64:0b:8c:20:85:cd:b7:4f:85:10:9d: 1f:7b:d4:16:a7:86:e9:ea:5c:c9:7e:33:60:4f:4a: e1:a3:b9:46:8f:a7:15:78:fc:ae:9a:20:26:28:4a: 59:f5:ed:6d:3a:b5:d0:ab:99:50:de:2c:97:4c:b8: eb:0b:65:41:31:10:98:22:24:9a:59:b6:87:fe:59: ef:e0:eb:74:82:69:45:4b:09:57:0e:e6:b5:3c:66: ce:d4:b7:ec:4b:e6:0f:93:87:9d:69:c6:bb:2e:1f: 20:f7:55:c9:64:c1:99:64:e8:3b:ad:13:02:c3:c5: 35:61:1a:b0:d0:de:89:ab:03:42:58:b2:60:32:be: dd:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:BA:68:C3:13:88:0C:6F:AD:7D:63:EC:A7:EF:E6:DA:91:07:AE:AD X509v3 Authority Key Identifier: keyid:A7:A6:25:35:3B:3A:C3:E1:F9:5C:96:25:19:15:8D:B1:22:0D:0A:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6YlNTs6w-H5XJYlGRWNsSINCo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:a0:05:05:5f:8f:4b:f2:7d:d1:9b:3b:d9:48:ab:95:cb:64: a3:3d:07:eb:d2:56:5d:3f:c7:5d:da:ca:41:29:26:de:e8:01: 49:19:38:45:29:9a:39:43:9a:de:a1:29:78:b3:af:23:68:05: fd:30:64:80:2f:10:b2:72:b2:56:6f:06:de:85:3b:f3:5b:a1: ad:b8:8e:0d:4b:c8:c0:48:c7:9c:53:5e:34:56:e1:57:21:84: f3:f7:5d:65:39:47:35:e0:46:5d:b0:6b:00:5c:19:68:a5:27: 94:74:d7:a1:86:6c:b2:5a:a5:b6:d7:a4:85:45:86:a6:08:8c: 2b:11:89:fe:97:33:fa:c7:ca:7d:69:0e:8b:12:4c:72:2a:87: 2d:2a:cc:b0:a5:21:e5:59:51:ec:2e:9a:fe:e7:61:10:78:87: be:7b:21:e0:9e:4d:be:df:42:40:8c:2c:cf:ab:1f:5e:1e:20: 30:7b:8e:a1:62:12:73:40:5b:14:53:8d:82:5b:07:5b:41:8c: c2:1d:6a:07:78:40:fb:ce:55:39:c9:33:2d:13:28:b7:15:83: e4:b8:3e:4a:06:3d:eb:be:e8:7b:66:c2:df:0f:b8:0e:cd:e4: f1:83:ce:4c:49:7a:c1:e7:33:2c:25:43:fe:ef:76:db:7a:58: b3:a4:ae:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIqBJsw8GqL0ufvQxSCObMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3YTYyNTM1M2IzYWMzZTFmOTVjOTYyNTE5MTU4ZGIxMjIw ZDBhOGUwHhcNMjYwMjA5MTYwMTA4WhcNMjYwMjEwMTYwMTA4WjAzMTEwLwYDVQQD Eyg3MmJhNjhjMzEzODgwYzZmYWQ3ZDYzZWNhN2VmZTZkYTkxMDdhZWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBNvrl65zV3SGEI4iLnyiXJqn7Zp ofg2SuatsME3fWc1Nq1JySrKT9wyNMHeiq14aXX3AlzP8eaDphMsMwXQp8UN08sN GrMnAlWIQFJTIP4kNTnuovQYy9CYBJiBcu+og8sQN0xHukgY+HGyNdSWr3U7anSJ LSAElGIzZAuMIIXNt0+FEJ0fe9QWp4bp6lzJfjNgT0rho7lGj6cVePyumiAmKEpZ 9e1tOrXQq5lQ3iyXTLjrC2VBMRCYIiSaWbaH/lnv4Ot0gmlFSwlXDua1PGbO1Lfs S+YPk4edaca7Lh8g91XJZMGZZOg7rRMCw8U1YRqw0N6JqwNCWLJgMr7d4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHK6aMMTiAxvrX1j7Kfv5tqRB66tMB8GA1UdIwQY MBaAFKemJTU7OsPh+VyWJRkVjbEiDQqOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDZZbE5UczZ3LUg1WEpZbEdSV05zU0lOQ280LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy83MTFlYTAtMjQ4Yi00YzZhLTg3ZGMt MjFmMGU4NDFkODRhLzEvcDZZbE5UczZ3LUg1WEpZbEdSV05zU0lOQ280Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy83MTFlYTAtMjQ4Yi00YzZhLTg3ZGMtMjFmMGU4NDFkODRh LzEvcDZZbE5UczZ3LUg1WEpZbEdSV05zU0lOQ280LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ6AFBV+P S/J90Zs72Uirlctkoz0H69JWXT/HXdrKQSkm3ugBSRk4RSmaOUOa3qEpeLOvI2gF /TBkgC8QsnKyVm8G3oU781uhrbiODUvIwEjHnFNeNFbhVyGE8/ddZTlHNeBGXbBr AFwZaKUnlHTXoYZsslqlttekhUWGpgiMKxGJ/pcz+sfKfWkOixJMciqHLSrMsKUh 5VlR7C6a/udhEHiHvnsh4J5Nvt9CQIwsz6sfXh4gMHuOoWISc0BbFFONglsHW0GM wh1qB3hA+85VOckzLRMotxWD5Lg+SgY9677oe2bC3w+4Ds3k8YPOTEl6weczLCVD /u9223pYs6Su6g== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:57 2026 by rpki-client