This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft File: 9keQtSf6QLqj8ts_oqFL-UzSgv8.mft (raw, json) Hash identifier: ++pQ81NcAjkvXlKpmIlRhrvbcZ7qzibGA9p/b4tKWPs= Subject key identifier: 0B:48:1F:DA:58:28:97:70:1A:36:9B:E8:43:65:50:FD:81:CE:16:DC Authority key identifier: F6:47:90:B5:27:FA:40:BA:A3:F2:DB:3F:A2:A1:4B:F9:4C:D2:82:FF Certificate issuer: /CN=f64790b527fa40baa3f2db3fa2a14bf94cd282ff Certificate serial: 019C420FEE5C792A14AF5B1054763B01EDF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9keQtSf6QLqj8ts_oqFL-UzSgv8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft Manifest number: 0538 Signing time: Mon 09 Feb 2026 11:01:05 +0000 Manifest this update: Mon 09 Feb 2026 11:01:05 +0000 Manifest next update: Tue 10 Feb 2026 11:01:05 +0000 Files and hashes: 1: 9keQtSf6QLqj8ts_oqFL-UzSgv8.crl (hash: M7lAQaVpvEISFnZX1XXY1FHGlTJxchX2GP0sSk1RnUg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.crl rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft rsync://rpki.ripe.net/repository/DEFAULT/9keQtSf6QLqj8ts_oqFL-UzSgv8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:ee:5c:79:2a:14:af:5b:10:54:76:3b:01:ed:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f64790b527fa40baa3f2db3fa2a14bf94cd282ff Validity Not Before: Feb 9 11:01:05 2026 GMT Not After : Feb 10 11:01:05 2026 GMT Subject: CN=0b481fda582897701a369be8436550fd81ce16dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2f:3a:62:8d:5f:da:5d:2f:9d:34:49:6a:58: 76:3e:42:45:61:89:81:27:f7:5d:8d:91:e5:a8:36: 67:d0:14:d8:3e:7a:47:cb:c7:f6:98:d9:ce:91:a1: 40:f3:a4:ff:01:8a:c2:f6:82:c7:30:f5:f2:1b:d0: 6a:52:8c:ad:7c:b5:c5:eb:ef:15:31:1e:13:95:af: 73:d9:e2:a2:9d:58:a0:2b:94:46:44:f4:ce:8b:1d: b9:bb:72:e0:3a:bd:c1:3d:27:2b:97:f3:96:21:4c: 0f:fa:55:bb:c1:91:d1:5d:8e:2f:42:8b:f2:26:b9: 25:0d:c2:66:18:19:cb:09:b0:cd:bc:76:2e:0b:4b: 9b:65:bf:44:08:87:98:b1:cd:05:d4:d9:ba:35:c8: 5a:0e:7d:11:f9:e8:71:a6:79:30:bd:f2:c5:77:cc: 19:36:b7:82:b2:aa:2a:82:a6:0c:b1:f4:df:cd:0a: 12:4a:25:35:dc:bb:77:57:74:d0:c1:f9:68:ff:90: 86:dc:bb:f1:9c:9c:08:c9:11:06:6b:90:37:ec:5b: 6b:15:3c:a1:85:56:a8:09:b1:25:37:67:e2:c9:30: 39:16:94:58:af:a5:b8:3e:5a:d3:55:21:ee:b8:ce: 8b:ac:35:1b:83:90:2f:2c:27:c9:36:ca:bf:fc:c3: bb:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:48:1F:DA:58:28:97:70:1A:36:9B:E8:43:65:50:FD:81:CE:16:DC X509v3 Authority Key Identifier: keyid:F6:47:90:B5:27:FA:40:BA:A3:F2:DB:3F:A2:A1:4B:F9:4C:D2:82:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9keQtSf6QLqj8ts_oqFL-UzSgv8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:56:54:65:6d:b8:98:5c:2d:8d:06:1e:d3:8c:8a:16:67:a1: 10:66:be:5d:f4:2b:ea:3e:3d:3c:07:65:9e:20:01:ae:0e:d7: f2:8e:fc:ba:86:96:64:41:b3:71:70:11:d8:9a:48:b5:84:06: b3:62:f9:89:b5:24:81:4b:2f:0a:02:e2:99:5e:1f:66:9a:49: 7c:6e:74:4a:33:0b:50:43:9f:9f:e6:35:8e:1d:af:07:4c:e1: 73:73:ee:99:40:25:53:ea:20:53:ba:3a:8a:8e:61:54:d2:27: e7:34:45:e7:45:62:ef:68:b0:a7:bc:2a:d6:dd:d4:6d:6d:cd: 70:b1:19:52:dc:3b:35:dc:0e:ff:22:b8:be:c5:27:3e:6a:8c: 66:5f:d2:49:28:e9:21:bd:a6:4f:7a:66:9e:82:a6:06:5c:4e: 89:c3:36:bd:ff:1b:32:00:e1:9f:6c:9d:60:1c:bd:41:41:69: 9d:4d:5d:a3:92:fc:ce:f4:60:fc:19:de:ec:02:db:08:21:a5: 3f:af:b4:c7:9d:ff:46:97:10:9a:ca:62:27:7c:f0:72:3e:5c: f8:28:fa:0f:b1:44:86:91:f2:c7:0b:64:0f:70:4d:a4:87:96: 11:ae:eb:dc:ee:0c:69:2b:af:63:bb:41:4b:d5:89:94:0b:da: 37:2b:e1:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD+5ceSoUr1sQVHY7Ae3xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NDc5MGI1MjdmYTQwYmFhM2YyZGIzZmEyYTE0YmY5NGNk MjgyZmYwHhcNMjYwMjA5MTEwMTA1WhcNMjYwMjEwMTEwMTA1WjAzMTEwLwYDVQQD EygwYjQ4MWZkYTU4Mjg5NzcwMWEzNjliZTg0MzY1NTBmZDgxY2UxNmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsy86Yo1f2l0vnTRJalh2PkJFYYmB J/ddjZHlqDZn0BTYPnpHy8f2mNnOkaFA86T/AYrC9oLHMPXyG9BqUoytfLXF6+8V MR4Tla9z2eKinVigK5RGRPTOix25u3LgOr3BPScrl/OWIUwP+lW7wZHRXY4vQovy JrklDcJmGBnLCbDNvHYuC0ubZb9ECIeYsc0F1Nm6NchaDn0R+ehxpnkwvfLFd8wZ NreCsqoqgqYMsfTfzQoSSiU13Lt3V3TQwflo/5CG3LvxnJwIyREGa5A37FtrFTyh hVaoCbElN2fiyTA5FpRYr6W4PlrTVSHuuM6LrDUbg5AvLCfJNsq//MO7+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAtIH9pYKJdwGjab6ENlUP2BzhbcMB8GA1UdIwQY MBaAFPZHkLUn+kC6o/LbP6KhS/lM0oL/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWtlUXRTZjZRTHFqOHRzX29xRkwtVXpTZ3Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy85OWRiNTEtNjhiZC00YjViLWEyZTIt MjhkNzMzN2MwNjk0LzEvOWtlUXRTZjZRTHFqOHRzX29xRkwtVXpTZ3Y4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy85OWRiNTEtNjhiZC00YjViLWEyZTItMjhkNzMzN2MwNjk0 LzEvOWtlUXRTZjZRTHFqOHRzX29xRkwtVXpTZ3Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASFZUZW24 mFwtjQYe04yKFmehEGa+XfQr6j49PAdlniABrg7X8o78uoaWZEGzcXAR2JpItYQG s2L5ibUkgUsvCgLimV4fZppJfG50SjMLUEOfn+Y1jh2vB0zhc3PumUAlU+ogU7o6 io5hVNIn5zRF50Vi72iwp7wq1t3UbW3NcLEZUtw7NdwO/yK4vsUnPmqMZl/SSSjp Ib2mT3pmnoKmBlxOicM2vf8bMgDhn2ydYBy9QUFpnU1do5L8zvRg/Bne7ALbCCGl P6+0x53/RpcQmspiJ3zwcj5c+Cj6D7FEhpHyxwtkD3BNpIeWEa7r3O4MaSuvY7tB S9WJlAvaNyvhfQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:46:08 2026 by rpki-client