This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft File: B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft (raw, json) Hash identifier: ebqsKiswzlM1h52/CEE1IQZ+Wxri3mcoZOXOUjUyJ+Q= Subject key identifier: DB:11:BD:88:3F:1A:2C:D5:23:09:1E:23:0D:4F:00:CD:1D:50:4E:4A Authority key identifier: 07:D0:8D:F8:BC:7A:38:3E:97:6D:BB:03:D2:A0:EB:9F:E0:D7:86:E7 Certificate issuer: /CN=07d08df8bc7a383e976dbb03d2a0eb9fe0d786e7 Certificate serial: 019C42B44E6C2F71A31999B8FF884B619587 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 14:00:38 +0000 Manifest this update: Mon 09 Feb 2026 14:00:38 +0000 Manifest next update: Tue 10 Feb 2026 14:00:38 +0000 Files and hashes: 1: B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl (hash: WSVPRMAE5whUUfktzGEClm7H028Vcf2/ldI62NZiLZQ=) 2: xHdQm9eajl_-s6UmnTM6iscJFVc.roa (hash: kI5yXHQqZsO9mW/MmVAsJAYZ2S2lqy/VUF6lDZvuKJc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:4e:6c:2f:71:a3:19:99:b8:ff:88:4b:61:95:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07d08df8bc7a383e976dbb03d2a0eb9fe0d786e7 Validity Not Before: Feb 9 14:00:38 2026 GMT Not After : Feb 10 14:00:38 2026 GMT Subject: CN=db11bd883f1a2cd523091e230d4f00cd1d504e4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:2d:68:55:0d:3f:74:bf:95:03:aa:e3:62:e6: 84:c7:9b:98:59:a5:84:f1:a4:51:89:4a:d6:e2:46: 0c:d6:81:20:b6:8a:f4:14:58:9e:2f:d3:c2:a8:95: 30:01:01:31:ac:3f:0e:d2:76:59:b1:61:91:cb:b8: 01:84:de:dc:26:b5:44:89:56:b0:4f:0d:66:fc:af: fd:69:55:33:d0:9d:c7:f4:4e:91:48:78:66:e1:ba: 12:c1:c6:f5:73:7a:12:76:8f:83:3c:dc:db:e6:75: 3b:7e:d3:53:f1:cf:0e:5f:90:2b:af:25:48:fd:cc: 9d:93:33:f2:12:15:c6:13:76:18:e4:51:5f:fb:9c: d4:ec:f5:60:51:a4:e7:6f:88:c4:e1:b1:a8:a2:68: f4:34:b4:e8:33:7f:ee:f9:0d:b3:4f:2c:9c:69:65: e0:b3:b7:12:fb:79:29:91:7d:a4:55:ce:e1:c8:57: 29:36:dc:d8:14:f1:dc:b0:b5:ec:bc:01:fc:3f:57: ed:2f:7c:40:50:18:ab:10:df:0f:af:f7:d7:a8:65: db:61:e1:04:89:81:fe:cc:59:c7:29:ff:6c:4a:0f: e4:ae:4d:76:bd:66:ec:72:e2:16:e9:44:38:20:fb: 58:86:94:c7:9b:0f:76:54:f5:c9:9a:5b:ad:28:40: 0d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:11:BD:88:3F:1A:2C:D5:23:09:1E:23:0D:4F:00:CD:1D:50:4E:4A X509v3 Authority Key Identifier: keyid:07:D0:8D:F8:BC:7A:38:3E:97:6D:BB:03:D2:A0:EB:9F:E0:D7:86:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:3b:ff:ef:2e:32:97:d2:4c:49:96:f4:97:02:e9:02:b9:81: d7:60:91:1b:4a:b3:40:3b:e7:84:62:93:03:d5:0c:d0:a5:e1: 03:14:e1:bc:fc:de:27:bd:72:6a:e5:70:c3:1c:a4:bd:b5:6a: 54:c0:fb:cd:db:fe:a0:d6:fe:30:4b:9e:17:b1:a6:53:36:25: ac:84:d7:c7:d6:13:14:b9:b9:46:d2:75:d3:8c:4d:4c:d8:e8: b5:f4:0f:35:22:00:47:9f:7d:e3:44:98:69:72:6b:d4:73:c3: d5:03:03:80:91:a4:75:75:3e:3e:76:88:45:54:65:da:fa:5b: 43:2a:79:5e:a3:41:a5:c6:fe:62:43:9e:ff:c0:f3:68:ea:21: 7f:23:b3:58:b0:fa:b2:d6:88:fd:06:19:9a:98:36:b1:42:9a: 06:04:ef:ff:25:38:89:5e:75:c8:a6:83:fc:bd:11:8f:92:07: 97:7b:ea:81:96:ea:0a:09:76:79:dc:9f:a0:72:d3:ad:49:36: d0:b7:d9:b8:70:2b:10:9f:43:d7:23:e6:a7:d9:c7:de:0e:c5: 4d:a5:11:f8:a0:44:87:b8:1f:84:27:65:cf:95:b4:58:83:67: 3b:b3:ff:14:84:5b:99:e7:2b:f5:46:07:a3:77:c3:8c:68:2e: 29:95:d6:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtE5sL3GjGZm4/4hLYZWHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZDA4ZGY4YmM3YTM4M2U5NzZkYmIwM2QyYTBlYjlmZTBk Nzg2ZTcwHhcNMjYwMjA5MTQwMDM4WhcNMjYwMjEwMTQwMDM4WjAzMTEwLwYDVQQD EyhkYjExYmQ4ODNmMWEyY2Q1MjMwOTFlMjMwZDRmMDBjZDFkNTA0ZTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkS1oVQ0/dL+VA6rjYuaEx5uYWaWE 8aRRiUrW4kYM1oEgtor0FFieL9PCqJUwAQExrD8O0nZZsWGRy7gBhN7cJrVEiVaw Tw1m/K/9aVUz0J3H9E6RSHhm4boSwcb1c3oSdo+DPNzb5nU7ftNT8c8OX5ArryVI /cydkzPyEhXGE3YY5FFf+5zU7PVgUaTnb4jE4bGoomj0NLToM3/u+Q2zTyycaWXg s7cS+3kpkX2kVc7hyFcpNtzYFPHcsLXsvAH8P1ftL3xAUBirEN8Pr/fXqGXbYeEE iYH+zFnHKf9sSg/krk12vWbscuIW6UQ4IPtYhpTHmw92VPXJmlutKEANywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNsRvYg/GizVIwkeIw1PAM0dUE5KMB8GA1UdIwQY MBaAFAfQjfi8ejg+l227A9Kg65/g14bnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjlDTi1MeDZPRDZYYmJzRDBxRHJuLURYaHVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8wMzE4MTgtMDQ2My00YmFiLWJiNTYt NTE0ODVmZTIyMmRiLzEvQjlDTi1MeDZPRDZYYmJzRDBxRHJuLURYaHVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8wMzE4MTgtMDQ2My00YmFiLWJiNTYtNTE0ODVmZTIyMmRi LzEvQjlDTi1MeDZPRDZYYmJzRDBxRHJuLURYaHVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAjv/7y4y l9JMSZb0lwLpArmB12CRG0qzQDvnhGKTA9UM0KXhAxThvPzeJ71yauVwwxykvbVq VMD7zdv+oNb+MEueF7GmUzYlrITXx9YTFLm5RtJ104xNTNjotfQPNSIAR59940SY aXJr1HPD1QMDgJGkdXU+PnaIRVRl2vpbQyp5XqNBpcb+YkOe/8DzaOohfyOzWLD6 staI/QYZmpg2sUKaBgTv/yU4iV51yKaD/L0Rj5IHl3vqgZbqCgl2edyfoHLTrUk2 0LfZuHArEJ9D1yPmp9nH3g7FTaUR+KBEh7gfhCdlz5W0WINnO7P/FIRbmecr9UYH o3fDjGguKZXWzQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:47:35 2026 by rpki-client