This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.mft File: h9qWV60f35jec4uxmnPv0NsLOio.mft (raw, json) Hash identifier: GyO4i9+juWY/5xxeGF+2IWHr/PPbMrSvRPQNeBBreNQ= Subject key identifier: 28:B4:58:DE:8A:43:4D:42:64:2D:8E:0A:95:DF:6C:5F:19:D9:BD:35 Authority key identifier: 87:DA:96:57:AD:1F:DF:98:DE:73:8B:B1:9A:73:EF:D0:DB:0B:3A:2A Certificate issuer: /CN=87da9657ad1fdf98de738bb19a73efd0db0b3a2a Certificate serial: 019C41A1B0FDC5DAE08F0EF4D931F57B9131 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9qWV60f35jec4uxmnPv0NsLOio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.mft Manifest number: 02AF Signing time: Mon 09 Feb 2026 09:00:41 +0000 Manifest this update: Mon 09 Feb 2026 09:00:41 +0000 Manifest next update: Tue 10 Feb 2026 09:00:41 +0000 Files and hashes: 1: dd_8XOt-AgZFAxv4LVoQ4tuZiZc.roa (hash: SfXOkOIMQUgKz0cDtjyVCOFX4NWLQaKSkA6RWiEx530=) 2: h9qWV60f35jec4uxmnPv0NsLOio.crl (hash: tQ6tz6NBid1Z08hg+yK1eHsURms0sSe3kXt4pLhfKwk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.crl rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.mft rsync://rpki.ripe.net/repository/DEFAULT/h9qWV60f35jec4uxmnPv0NsLOio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:b0:fd:c5:da:e0:8f:0e:f4:d9:31:f5:7b:91:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87da9657ad1fdf98de738bb19a73efd0db0b3a2a Validity Not Before: Feb 9 09:00:41 2026 GMT Not After : Feb 10 09:00:41 2026 GMT Subject: CN=28b458de8a434d42642d8e0a95df6c5f19d9bd35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:94:48:7f:fc:c2:18:28:7a:a9:a7:37:51:26: 8c:5a:c8:45:4c:a0:d0:5f:ed:da:04:79:9a:87:f9: f9:eb:f6:16:a7:df:8b:95:28:13:a3:6a:57:84:3a: 1a:dc:37:e8:af:7d:ed:44:dc:b5:3b:22:ba:07:67: 59:8c:1d:9b:51:90:5c:48:f2:33:b1:a8:65:78:40: 65:4a:d6:ca:c9:c2:32:c7:66:b7:4a:ee:d8:e0:19: 0e:57:8e:21:15:21:b0:e8:b6:03:ba:06:13:98:8e: ce:8b:90:89:62:27:56:ed:1d:1b:2a:cc:5d:09:77: fd:fa:c4:33:5f:f9:c8:26:ba:79:55:b9:f3:b5:f2: aa:57:a8:9b:87:5c:c0:fe:75:d0:c3:4b:36:77:8a: bc:83:ca:83:fe:f8:60:7d:11:dd:b0:d5:71:77:52: 2d:b4:44:3f:5e:30:62:32:f5:a5:38:b9:94:2a:0f: 19:3b:81:32:da:cc:fb:fd:2d:85:3c:85:57:f1:b7: c7:69:c6:fe:fb:54:7f:85:96:1c:57:9f:16:24:e5: df:5e:86:d7:b6:90:c3:6d:48:6e:4f:0e:5e:79:ae: 41:1a:f4:52:b8:75:fa:84:9f:2a:c2:9b:2b:ed:3b: f0:cd:04:84:a0:72:bd:3d:84:07:f6:75:ac:e4:55: 2f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B4:58:DE:8A:43:4D:42:64:2D:8E:0A:95:DF:6C:5F:19:D9:BD:35 X509v3 Authority Key Identifier: keyid:87:DA:96:57:AD:1F:DF:98:DE:73:8B:B1:9A:73:EF:D0:DB:0B:3A:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9qWV60f35jec4uxmnPv0NsLOio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:e2:a1:f2:fa:94:30:7e:e5:7c:09:cd:1c:9e:03:a0:2a:d9: 50:92:7b:ef:ec:d7:d0:a2:f6:b7:2e:8e:b8:11:6a:0b:39:cd: dc:1f:81:24:25:69:24:7b:fa:5e:c7:0a:38:57:dd:11:9b:36: 7b:14:65:68:fc:14:ea:b3:86:b9:73:5d:2a:6c:0f:d2:95:b0: 44:e2:4b:da:27:3a:ae:f6:13:6e:10:36:8a:91:39:77:d6:a4: d4:61:a5:b7:02:e7:1a:1d:c0:d8:c1:0a:13:b1:c8:3d:83:ac: 39:e1:d4:65:e6:7c:e2:a8:c4:bf:a7:95:e7:6f:72:72:45:b8: 7c:87:cb:5f:f0:35:3b:f8:62:c2:64:bc:8e:65:39:4a:99:50: c1:f6:b9:4c:1f:cb:75:82:86:13:41:83:36:cc:cc:1a:ac:45: 7c:20:53:91:71:d8:ab:61:da:59:c8:e7:f1:06:c3:a9:51:2f: a7:be:29:62:3c:5b:2c:d0:17:ae:d8:5d:40:90:1f:60:64:42: da:58:81:8e:07:df:9e:c6:ec:8f:8b:06:cb:04:13:2c:29:a6: 84:7e:df:83:b7:31:1c:c9:a9:4a:ad:a2:51:9a:49:9a:cb:57: 19:c0:19:bd:da:fa:68:89:d1:41:3d:66:16:eb:8d:13:f1:3e: 57:d0:a7:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBobD9xdrgjw702TH1e5ExMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3ZGE5NjU3YWQxZmRmOThkZTczOGJiMTlhNzNlZmQwZGIw YjNhMmEwHhcNMjYwMjA5MDkwMDQxWhcNMjYwMjEwMDkwMDQxWjAzMTEwLwYDVQQD EygyOGI0NThkZThhNDM0ZDQyNjQyZDhlMGE5NWRmNmM1ZjE5ZDliZDM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZRIf/zCGCh6qac3USaMWshFTKDQ X+3aBHmah/n56/YWp9+LlSgTo2pXhDoa3Dfor33tRNy1OyK6B2dZjB2bUZBcSPIz sahleEBlStbKycIyx2a3Su7Y4BkOV44hFSGw6LYDugYTmI7Oi5CJYidW7R0bKsxd CXf9+sQzX/nIJrp5VbnztfKqV6ibh1zA/nXQw0s2d4q8g8qD/vhgfRHdsNVxd1It tEQ/XjBiMvWlOLmUKg8ZO4Ey2sz7/S2FPIVX8bfHacb++1R/hZYcV58WJOXfXobX tpDDbUhuTw5eea5BGvRSuHX6hJ8qwpsr7TvwzQSEoHK9PYQH9nWs5FUvEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCi0WN6KQ01CZC2OCpXfbF8Z2b01MB8GA1UdIwQY MBaAFIfalletH9+Y3nOLsZpz79DbCzoqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDlxV1Y2MGYzNWplYzR1eG1uUHYwTnNMT2lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9iYmVlNWUtZGRiZC00Yjg1LWI0Y2Et MmFlNDQwYTVjY2IwLzEvaDlxV1Y2MGYzNWplYzR1eG1uUHYwTnNMT2lvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9iYmVlNWUtZGRiZC00Yjg1LWI0Y2EtMmFlNDQwYTVjY2Iw LzEvaDlxV1Y2MGYzNWplYzR1eG1uUHYwTnNMT2lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFeKh8vqU MH7lfAnNHJ4DoCrZUJJ77+zX0KL2ty6OuBFqCznN3B+BJCVpJHv6XscKOFfdEZs2 exRlaPwU6rOGuXNdKmwP0pWwROJL2ic6rvYTbhA2ipE5d9ak1GGltwLnGh3A2MEK E7HIPYOsOeHUZeZ84qjEv6eV529yckW4fIfLX/A1O/hiwmS8jmU5SplQwfa5TB/L dYKGE0GDNszMGqxFfCBTkXHYq2HaWcjn8QbDqVEvp74pYjxbLNAXrthdQJAfYGRC 2liBjgffnsbsj4sGywQTLCmmhH7fg7cxHMmpSq2iUZpJmstXGcAZvdr6aInRQT1m FuuNE/E+V9Cngw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:47 2026 by rpki-client