This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft File: 9ssMjyCEMwIDT2NlbqKevW0RY6o.mft (raw, json) Hash identifier: lb0zSUn0k2LR8JqaIub9AQ7GmkqmuRlvktWUgTn5lHA= Subject key identifier: D2:83:19:C0:18:71:E4:EE:E8:6F:67:7A:74:A0:46:B0:36:D6:6B:4D Authority key identifier: F6:CB:0C:8F:20:84:33:02:03:4F:63:65:6E:A2:9E:BD:6D:11:63:AA Certificate issuer: /CN=f6cb0c8f20843302034f63656ea29ebd6d1163aa Certificate serial: 019C420FB4C13E777552DC457142B86A9622 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft Manifest number: 10F7 Signing time: Mon 09 Feb 2026 11:00:51 +0000 Manifest this update: Mon 09 Feb 2026 11:00:51 +0000 Manifest next update: Tue 10 Feb 2026 11:00:51 +0000 Files and hashes: 1: 6YI5rJ7BlGzxSIRA8GPA9weBdeE.roa (hash: Rjqr+vNFn+Ln+ETYNFvgxdo2liKvZUHKE0VAbwfjlW8=) 2: 9ssMjyCEMwIDT2NlbqKevW0RY6o.crl (hash: 8Bt3GmI5UClg97Bbml6MTZYfs6SBVvScOfbVmK4Sjd4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:b4:c1:3e:77:75:52:dc:45:71:42:b8:6a:96:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6cb0c8f20843302034f63656ea29ebd6d1163aa Validity Not Before: Feb 9 11:00:51 2026 GMT Not After : Feb 10 11:00:51 2026 GMT Subject: CN=d28319c01871e4eee86f677a74a046b036d66b4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:33:2c:33:f6:d8:e3:40:fa:39:2d:eb:b1:f1: 4b:b1:7b:25:18:f7:0f:63:7a:5e:c9:58:9a:04:35: 06:9a:a3:bb:d6:6b:16:c6:fd:a3:06:43:d6:87:d2: d1:1f:64:be:fb:c6:e6:75:37:d8:70:6c:87:ef:47: b3:2e:98:71:83:3c:31:34:fb:06:19:9d:4f:a6:ed: cd:70:53:fc:17:b7:14:df:88:4e:34:1a:05:9b:23: c7:0c:c3:b2:bf:a4:da:6c:f0:1b:07:d4:10:49:45: e3:5f:e3:38:c6:bf:1b:f2:a8:56:87:67:07:fb:d8: 7e:91:4f:fc:1d:c4:f8:5d:3a:67:2f:f4:ad:b6:92: 27:b8:66:58:66:67:cc:ef:80:43:68:ca:f0:20:90: 98:e2:77:23:7b:6b:56:a7:f0:d1:43:4a:9e:2a:57: 61:1d:8d:65:fb:b6:9d:00:e4:8d:9c:51:45:ef:e5: 8a:aa:80:ba:11:e9:7e:cb:14:3e:a1:1e:cc:87:b3: 54:0f:4d:94:3d:7c:9c:71:26:46:37:9b:6c:a3:d7: dd:76:c9:61:eb:3f:8d:4a:6a:f8:1f:56:23:b3:1e: a6:3f:a4:29:b9:41:b5:fd:b3:c7:b9:e5:ff:0c:fb: ec:7a:3c:0d:e7:61:40:66:e7:53:28:60:c7:2c:49: d3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:83:19:C0:18:71:E4:EE:E8:6F:67:7A:74:A0:46:B0:36:D6:6B:4D X509v3 Authority Key Identifier: keyid:F6:CB:0C:8F:20:84:33:02:03:4F:63:65:6E:A2:9E:BD:6D:11:63:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:90:c6:d3:24:bb:2c:f8:1a:7f:99:d5:fe:93:bf:91:d6:d3: 1a:6d:c4:11:46:bb:b2:87:1d:60:b8:a8:d1:be:57:75:b6:6d: cc:be:5d:c8:03:07:60:89:34:11:93:c2:43:38:f1:92:96:f6: 84:c8:92:bb:a6:6c:d6:d2:05:aa:a3:64:77:98:71:73:48:1d: 3c:7b:1b:2b:f3:fa:38:72:72:0b:47:9a:99:a7:2a:68:a1:0b: a0:76:fc:8f:a7:fa:af:f1:58:c2:0e:07:d4:c4:62:43:96:40: be:6c:ee:40:f4:14:8a:e0:26:2f:4e:fd:be:b9:98:d4:6a:b1: 97:6e:a1:58:de:4e:40:76:de:8e:65:12:bd:ea:83:06:1b:32: 94:6f:2e:d7:5c:df:d5:b3:fc:a5:14:2e:a9:80:ec:9b:72:cd: e9:f8:ca:19:6a:e8:14:5f:2c:53:9c:7f:e1:ee:36:1c:c4:ad: da:b6:80:b1:be:8e:1a:02:38:08:c9:5d:01:de:f9:11:be:9a: 4a:f2:7a:87:35:aa:4a:97:2d:9c:46:cf:10:e7:7b:23:d6:02: 06:d9:24:7c:38:63:7d:af:8c:c2:22:31:9a:22:21:4e:89:2e: e6:5d:98:0e:4f:28:4b:e7:ae:8c:56:e4:97:65:72:d5:a8:7b: 25:00:07:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD7TBPnd1UtxFcUK4apYiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2Y2IwYzhmMjA4NDMzMDIwMzRmNjM2NTZlYTI5ZWJkNmQx MTYzYWEwHhcNMjYwMjA5MTEwMDUxWhcNMjYwMjEwMTEwMDUxWjAzMTEwLwYDVQQD EyhkMjgzMTljMDE4NzFlNGVlZTg2ZjY3N2E3NGEwNDZiMDM2ZDY2YjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjMsM/bY40D6OS3rsfFLsXslGPcP Y3peyViaBDUGmqO71msWxv2jBkPWh9LRH2S++8bmdTfYcGyH70ezLphxgzwxNPsG GZ1Ppu3NcFP8F7cU34hONBoFmyPHDMOyv6TabPAbB9QQSUXjX+M4xr8b8qhWh2cH +9h+kU/8HcT4XTpnL/SttpInuGZYZmfM74BDaMrwIJCY4ncje2tWp/DRQ0qeKldh HY1l+7adAOSNnFFF7+WKqoC6Eel+yxQ+oR7Mh7NUD02UPXyccSZGN5tso9fddslh 6z+NSmr4H1Yjsx6mP6QpuUG1/bPHueX/DPvsejwN52FAZudTKGDHLEnTaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNKDGcAYceTu6G9nenSgRrA21mtNMB8GA1UdIwQY MBaAFPbLDI8ghDMCA09jZW6inr1tEWOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXNzTWp5Q0VNd0lEVDJObGJxS2V2VzBSWTZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS85ODQ4NDQtM2ViNC00MjMyLTkzODUt MmFmM2Q2MmJlN2YyLzEvOXNzTWp5Q0VNd0lEVDJObGJxS2V2VzBSWTZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS85ODQ4NDQtM2ViNC00MjMyLTkzODUtMmFmM2Q2MmJlN2Yy LzEvOXNzTWp5Q0VNd0lEVDJObGJxS2V2VzBSWTZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJpDG0yS7 LPgaf5nV/pO/kdbTGm3EEUa7socdYLio0b5XdbZtzL5dyAMHYIk0EZPCQzjxkpb2 hMiSu6Zs1tIFqqNkd5hxc0gdPHsbK/P6OHJyC0eamacqaKELoHb8j6f6r/FYwg4H 1MRiQ5ZAvmzuQPQUiuAmL079vrmY1Gqxl26hWN5OQHbejmUSveqDBhsylG8u11zf 1bP8pRQuqYDsm3LN6fjKGWroFF8sU5x/4e42HMSt2raAsb6OGgI4CMldAd75Eb6a SvJ6hzWqSpctnEbPEOd7I9YCBtkkfDhjfa+MwiIxmiIhToku5l2YDk8oS+eujFbk l2Vy1ah7JQAH1g== -----END CERTIFICATE-----Generated at Mon Feb 9 18:31:13 2026 by rpki-client