This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft File: 1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft (raw, json) Hash identifier: 3QD2uSolnKD55azAslt+QxJbTCFyqS6oJ5892QoXNkA= Subject key identifier: D1:FF:6E:89:58:D7:D1:CD:30:98:00:1C:E0:02:16:E9:14:D1:18:0B Authority key identifier: FB:0F:7E:BD:25:F6:AF:46:37:82:2E:FF:48:B2:78:B1:8C:70:6F:82 Certificate issuer: /CN=fb0f7ebd25f6af4637822eff48b278b18c706f82 Certificate serial: 019C43FDAF720A33394D8449C292B851F4EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft Manifest number: 179F Signing time: Mon 09 Feb 2026 20:00:24 +0000 Manifest this update: Mon 09 Feb 2026 20:00:24 +0000 Manifest next update: Tue 10 Feb 2026 20:00:24 +0000 Files and hashes: 1: 1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.crl (hash: Ud7qbDZqdzbW0B842s/Q9u8Wx6hhA42NErfIoulfGG8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.crl rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft rsync://rpki.ripe.net/repository/DEFAULT/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:af:72:0a:33:39:4d:84:49:c2:92:b8:51:f4:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb0f7ebd25f6af4637822eff48b278b18c706f82 Validity Not Before: Feb 9 20:00:24 2026 GMT Not After : Feb 10 20:00:24 2026 GMT Subject: CN=d1ff6e8958d7d1cd3098001ce00216e914d1180b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:a6:68:6c:e4:f3:7a:d6:e5:68:8f:a0:d3:4f: 70:76:bd:11:4b:35:59:d0:51:e5:a7:7f:a1:4e:93: 15:06:ff:42:69:26:17:b2:1a:f4:4d:d7:94:1d:5f: aa:57:5f:6b:bc:83:ba:e8:7e:a8:6f:96:a8:9e:04: 3c:da:f4:75:61:2d:6e:9a:f0:ef:a4:4e:38:1a:b4: d9:58:ee:ae:28:4c:74:17:0f:8d:f4:bc:83:75:65: 6b:8d:7a:45:3f:25:3b:c3:4f:0f:9e:8b:f4:cf:f6: 52:13:85:39:25:9c:d7:2e:69:af:52:bf:49:38:df: 00:2c:9b:5b:0d:f1:b4:eb:63:00:9d:88:1c:da:69: d5:1e:8f:0e:d9:a7:30:5f:32:38:db:56:c2:2a:5c: ad:5d:34:57:75:74:a6:0c:bd:de:a0:f2:03:5d:27: 27:93:02:6a:88:dd:81:b0:fe:1c:0f:21:f7:f4:a0: b0:a2:e6:20:78:ed:1e:ff:ec:09:7b:2a:c4:2e:8b: 89:4f:ca:08:5c:56:79:7b:40:4d:97:13:a8:a4:47: 04:f1:ec:ad:e6:21:61:de:20:20:27:fd:37:b8:48: 4c:ef:68:10:8c:62:bb:f0:5b:ee:60:16:bb:aa:3a: fb:82:9a:95:a2:a7:5d:2c:2c:22:41:11:e7:78:18: 26:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:FF:6E:89:58:D7:D1:CD:30:98:00:1C:E0:02:16:E9:14:D1:18:0B X509v3 Authority Key Identifier: keyid:FB:0F:7E:BD:25:F6:AF:46:37:82:2E:FF:48:B2:78:B1:8C:70:6F:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:38:b4:bb:8d:b2:7d:9c:ef:26:98:bc:75:07:17:8b:ef:2e: e6:5e:a2:9b:7c:e3:20:2f:37:37:73:c0:07:31:c9:4c:43:8c: 76:68:58:81:f4:ea:d3:35:bf:3d:7a:11:d6:52:76:c0:d8:da: 63:ab:54:e7:5e:fd:6f:ec:66:73:a2:de:db:f5:e6:89:34:1e: c8:86:c3:e8:dd:6b:e9:a0:cf:7d:29:e2:a3:45:bf:b6:9e:a3: 62:9b:7a:38:72:d0:26:28:3b:e6:71:08:6c:79:c2:23:c3:4d: e2:bd:bb:cf:77:4e:70:94:1f:34:0c:86:9c:03:76:87:75:ba: 42:e7:ba:55:3f:cd:9d:b9:21:46:eb:14:2c:7c:16:61:ad:38: 71:fd:b9:8a:51:a5:83:a9:27:96:a6:5f:5d:87:51:3e:a5:17: e3:36:fd:e9:ef:bb:84:0f:cb:c8:31:4f:19:f7:67:31:97:f2: 13:6d:95:55:56:e9:42:e7:67:a7:1a:00:e5:d1:86:8f:0f:02: 2e:e1:a5:c3:64:4f:8b:ad:0a:2b:e3:e9:e4:42:e9:86:57:3a: 08:1a:f9:c9:a0:e8:0f:69:58:76:d1:01:06:dc:31:a1:b5:5f: 58:e7:bd:56:c9:23:33:0d:e5:ce:64:7e:f3:57:76:ef:8d:21: 52:0f:97:8a -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZxD/a9yCjM5TYRJwpK4UfTsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiMGY3ZWJkMjVmNmFmNDYzNzgyMmVmZjQ4YjI3OGIxOGM3 MDZmODIwHhcNMjYwMjA5MjAwMDI0WhcNMjYwMjEwMjAwMDI0WjAzMTEwLwYDVQQD EyhkMWZmNmU4OTU4ZDdkMWNkMzA5ODAwMWNlMDAyMTZlOTE0ZDExODBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8aZobOTzetblaI+g009wdr0RSzVZ 0FHlp3+hTpMVBv9CaSYXshr0TdeUHV+qV19rvIO66H6ob5aongQ82vR1YS1umvDv pE44GrTZWO6uKEx0Fw+N9LyDdWVrjXpFPyU7w08Pnov0z/ZSE4U5JZzXLmmvUr9J ON8ALJtbDfG062MAnYgc2mnVHo8O2acwXzI421bCKlytXTRXdXSmDL3eoPIDXScn kwJqiN2BsP4cDyH39KCwouYgeO0e/+wJeyrELouJT8oIXFZ5e0BNlxOopEcE8eyt 5iFh3iAgJ/03uEhM72gQjGK78FvuYBa7qjr7gpqVoqddLCwiQRHneBgmjwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFNH/bolY19HNMJgAHOACFukU0RgLMB8GA1UdIwQY MBaAFPsPfr0l9q9GN4Iu/0iyeLGMcG+CMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS13OS12U1gycjBZM2dpN19TTEo0c1l4d2I0SS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvZTIwOTk3LWExZWUtNDFkZS04Nzhj LTIxODA1NDA3YjkwYy8xLzEtdzktdlNYMnIwWTNnaTdfU0xKNHNZeHdiNEkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzA1L2UyMDk5Ny1hMWVlLTQxZGUtODc4Yy0yMTgwNTQwN2I5 MGMvMS8xLXc5LXZTWDJyMFkzZ2k3X1NMSjRzWXh3YjRJLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYDi0 u42yfZzvJpi8dQcXi+8u5l6im3zjIC83N3PABzHJTEOMdmhYgfTq0zW/PXoR1lJ2 wNjaY6tU5179b+xmc6Le2/XmiTQeyIbD6N1r6aDPfSnio0W/tp6jYpt6OHLQJig7 5nEIbHnCI8NN4r27z3dOcJQfNAyGnAN2h3W6Que6VT/NnbkhRusULHwWYa04cf25 ilGlg6knlqZfXYdRPqUX4zb96e+7hA/LyDFPGfdnMZfyE22VVVbpQudnpxoA5dGG jw8CLuGlw2RPi60KK+Pp5ELphlc6CBr5yaDoD2lYdtEBBtwxobVfWOe9VskjMw3l zmR+81d2740hUg+Xig== -----END CERTIFICATE-----Generated at Tue Feb 10 00:16:56 2026 by rpki-client