This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft File: 9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft (raw, json) Hash identifier: 2Q7lc9Xs3/hZU3nbyFrlouwWqZpofppHXV0LmQ2JMJs= Subject key identifier: 5A:5C:DD:74:00:5C:46:9D:0F:C0:EF:22:8F:D2:8A:F5:B9:C1:DA:A4 Authority key identifier: F5:3F:D9:E6:9D:7D:1F:2D:DC:26:70:91:62:61:90:CE:AA:85:CF:C2 Certificate issuer: /CN=f53fd9e69d7d1f2ddc267091626190ceaa85cfc2 Certificate serial: 019C4321FE12B9F6ABE5D3DA239037DD212E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft Manifest number: 071A Signing time: Mon 09 Feb 2026 16:00:26 +0000 Manifest this update: Mon 09 Feb 2026 16:00:26 +0000 Manifest next update: Tue 10 Feb 2026 16:00:26 +0000 Files and hashes: 1: 9T_Z5p19Hy3cJnCRYmGQzqqFz8I.crl (hash: Xf91Ee/6aZ+LH6PH9pU9EE6ITtw6Fn4xyESKXr+wsd8=) 2: pDLuqrMTiYnndul8__rNpmENW8w.roa (hash: dtdLEtRi5z1XMEhrlW7Gcgyf8VOzvZLXKWQl6l7zHXY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:fe:12:b9:f6:ab:e5:d3:da:23:90:37:dd:21:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f53fd9e69d7d1f2ddc267091626190ceaa85cfc2 Validity Not Before: Feb 9 16:00:26 2026 GMT Not After : Feb 10 16:00:26 2026 GMT Subject: CN=5a5cdd74005c469d0fc0ef228fd28af5b9c1daa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:16:88:a7:cb:9d:b3:05:1a:8c:c7:12:a7:69: ae:28:66:cd:00:4f:42:30:a0:af:08:79:e4:5c:bf: fc:01:e2:75:f7:80:4c:92:16:5f:88:f6:35:1d:5a: 1e:ca:40:02:92:5c:33:cb:0c:ab:a1:73:58:0d:82: af:df:9e:f0:e8:73:bf:08:a2:2c:63:c9:4c:c0:93: 97:17:26:00:16:92:f1:b8:06:58:1e:f9:5e:dc:ed: 40:5f:c9:4c:60:27:19:74:61:ba:41:cb:55:1f:99: 65:ed:9a:25:48:30:4e:d8:34:f6:54:a9:7a:b1:2e: 5e:09:9a:84:8a:4f:a5:4a:a9:1c:b6:e1:88:5e:6d: cd:05:4a:bf:e6:f7:dd:9d:ac:02:66:d1:90:5f:91: aa:aa:47:15:6f:bd:23:f9:66:46:48:c3:cf:44:80: 3a:80:c8:33:8b:69:7f:73:7c:fd:12:1f:7b:67:34: 29:dc:04:ca:cc:91:a5:7f:2b:81:17:78:52:3e:42: 2c:4a:a4:54:8f:49:ad:ae:f5:43:e2:7d:10:47:68: 46:86:c9:99:51:10:6c:a2:0a:84:02:40:51:61:d2: 8f:0d:46:6c:c2:e8:84:de:56:75:87:92:37:b3:99: 48:90:58:d6:2b:76:8f:d4:80:46:82:8f:ed:49:04: 9a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:5C:DD:74:00:5C:46:9D:0F:C0:EF:22:8F:D2:8A:F5:B9:C1:DA:A4 X509v3 Authority Key Identifier: keyid:F5:3F:D9:E6:9D:7D:1F:2D:DC:26:70:91:62:61:90:CE:AA:85:CF:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:62:09:b0:7f:15:d2:1c:73:61:c7:c0:09:f8:36:33:77:f0: cf:11:4e:88:22:ba:be:c3:81:d2:1f:b8:6f:83:25:90:ce:04: 2d:6c:ef:f8:6c:63:dc:99:8a:a3:8e:1c:3a:51:12:e7:88:88: bd:27:63:48:4c:a6:45:08:d0:6c:bc:59:79:ab:b9:d4:10:0b: 5f:15:49:af:07:c2:6d:87:0f:c9:ca:d6:b1:58:13:3c:00:9b: 1e:25:d4:c2:c0:97:c9:9f:1e:83:5b:71:c3:f9:bb:ce:90:c1: bf:20:0d:85:6b:91:c2:d9:c4:af:a2:cc:0f:10:73:cb:cb:87: 9e:27:27:90:fd:51:41:ae:b1:2f:ab:6a:36:a1:3b:ba:2a:39: 5c:ef:30:89:2b:3f:3a:d0:c6:a5:00:cf:7f:28:3e:fc:a0:50: a2:75:e5:5f:3e:71:cb:8c:62:46:58:c5:66:75:80:10:e2:33: 6b:94:67:38:ad:80:70:02:e0:d3:8d:d0:3d:ff:22:08:27:36: 3f:53:2d:f3:f3:20:26:27:8a:e5:06:e6:52:b1:20:d8:bc:da: 25:bd:7e:6f:86:dc:c3:f7:20:cc:b6:c8:b2:78:99:6f:f8:8d: b2:72:ad:ba:99:12:60:9d:e3:bd:e2:ce:d0:e9:0a:b5:e8:79: 91:eb:1b:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIf4Sufar5dPaI5A33SEuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1M2ZkOWU2OWQ3ZDFmMmRkYzI2NzA5MTYyNjE5MGNlYWE4 NWNmYzIwHhcNMjYwMjA5MTYwMDI2WhcNMjYwMjEwMTYwMDI2WjAzMTEwLwYDVQQD Eyg1YTVjZGQ3NDAwNWM0NjlkMGZjMGVmMjI4ZmQyOGFmNWI5YzFkYWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhaIp8udswUajMcSp2muKGbNAE9C MKCvCHnkXL/8AeJ194BMkhZfiPY1HVoeykACklwzywyroXNYDYKv357w6HO/CKIs Y8lMwJOXFyYAFpLxuAZYHvle3O1AX8lMYCcZdGG6QctVH5ll7ZolSDBO2DT2VKl6 sS5eCZqEik+lSqkctuGIXm3NBUq/5vfdnawCZtGQX5GqqkcVb70j+WZGSMPPRIA6 gMgzi2l/c3z9Eh97ZzQp3ATKzJGlfyuBF3hSPkIsSqRUj0mtrvVD4n0QR2hGhsmZ URBsogqEAkBRYdKPDUZswuiE3lZ1h5I3s5lIkFjWK3aP1IBGgo/tSQSahwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFpc3XQAXEadD8DvIo/SivW5wdqkMB8GA1UdIwQY MBaAFPU/2eadfR8t3CZwkWJhkM6qhc/CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVRfWjVwMTlIeTNjSm5DUlltR1F6cXFGejhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9hN2RiNGMtYzlmNi00ZTBjLWFhOTct NGM4OTgwYjU4MTI2LzEvOVRfWjVwMTlIeTNjSm5DUlltR1F6cXFGejhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9hN2RiNGMtYzlmNi00ZTBjLWFhOTctNGM4OTgwYjU4MTI2 LzEvOVRfWjVwMTlIeTNjSm5DUlltR1F6cXFGejhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG2IJsH8V 0hxzYcfACfg2M3fwzxFOiCK6vsOB0h+4b4MlkM4ELWzv+Gxj3JmKo44cOlES54iI vSdjSEymRQjQbLxZeau51BALXxVJrwfCbYcPycrWsVgTPACbHiXUwsCXyZ8eg1tx w/m7zpDBvyANhWuRwtnEr6LMDxBzy8uHnicnkP1RQa6xL6tqNqE7uio5XO8wiSs/ OtDGpQDPfyg+/KBQonXlXz5xy4xiRljFZnWAEOIza5RnOK2AcALg043QPf8iCCc2 P1Mt8/MgJieK5QbmUrEg2LzaJb1+b4bcw/cgzLbIsniZb/iNsnKtupkSYJ3jveLO 0OkKteh5kesb7w== -----END CERTIFICATE-----Generated at Mon Feb 9 22:45:13 2026 by rpki-client