This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft File: 9Fe8GTpZWUint6CWtxC7UmKDD0E.mft (raw, json) Hash identifier: aVao1IBh8hCdNDgPxrkcFk5ULniIxSi+oaFDif8JxpE= Subject key identifier: 0A:8B:B9:E4:80:87:C7:70:75:43:57:1A:23:2C:7C:C4:F1:50:DD:64 Authority key identifier: F4:57:BC:19:3A:59:59:48:A7:B7:A0:96:B7:10:BB:52:62:83:0F:41 Certificate issuer: /CN=f457bc193a595948a7b7a096b710bb5262830f41 Certificate serial: 019C427DBC66938A1CF1BAB579C713C8791F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft Manifest number: 06DF Signing time: Mon 09 Feb 2026 13:01:02 +0000 Manifest this update: Mon 09 Feb 2026 13:01:02 +0000 Manifest next update: Tue 10 Feb 2026 13:01:02 +0000 Files and hashes: 1: 9Fe8GTpZWUint6CWtxC7UmKDD0E.crl (hash: /jBcGFxj42RT24EEEv0hqX3kb6gIZesBknqICdHWmg4=) 2: fBJnMHALZfcjzCrh2ePgybbFbm0.roa (hash: O2YCNOyi52ka2IOCrOYs4Cry49I7H3lrzo66p5voKNM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.crl rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:bc:66:93:8a:1c:f1:ba:b5:79:c7:13:c8:79:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f457bc193a595948a7b7a096b710bb5262830f41 Validity Not Before: Feb 9 13:01:02 2026 GMT Not After : Feb 10 13:01:02 2026 GMT Subject: CN=0a8bb9e48087c7707543571a232c7cc4f150dd64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:36:7d:a3:79:95:a6:80:eb:ab:2c:9f:79:7f: b9:95:d2:0b:73:44:69:de:ec:c2:e1:58:de:ad:42: ed:a7:6e:02:00:4f:f3:03:62:c5:6c:16:34:c8:fb: 35:fd:4b:5b:39:60:e2:7e:2a:04:d8:c7:dd:4c:32: 24:e7:14:4e:b7:ee:00:e8:56:af:0b:0e:35:72:8e: 87:35:76:46:ae:2f:80:7f:6f:21:71:d9:ff:63:bc: cb:f8:1a:44:b6:1d:15:8a:36:64:6d:16:de:d9:bd: ca:0b:f8:2e:e3:94:ee:5e:61:4b:90:92:8b:ba:88: 61:6e:21:92:8e:5a:6a:5f:ea:95:76:a6:48:e7:59: 52:ee:09:6f:09:db:39:c0:26:7d:7e:9d:de:0f:63: 82:23:43:08:cb:9c:c3:3a:3b:23:0f:ff:01:7a:af: 62:74:57:73:62:74:02:fc:f0:9a:2e:25:18:af:79: c2:54:71:b3:f6:5c:e4:ec:9e:be:06:12:02:7c:90: ce:10:46:3a:48:c4:68:db:eb:2e:e2:11:54:1e:33: 0a:66:be:07:05:ae:33:0a:56:d6:87:aa:84:9a:9e: 31:63:50:cf:b4:5d:fd:bb:cd:57:f7:ad:19:1d:4c: 15:5d:09:f0:57:ae:ec:5f:f2:1c:9e:43:db:d4:db: e0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:8B:B9:E4:80:87:C7:70:75:43:57:1A:23:2C:7C:C4:F1:50:DD:64 X509v3 Authority Key Identifier: keyid:F4:57:BC:19:3A:59:59:48:A7:B7:A0:96:B7:10:BB:52:62:83:0F:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:9d:d3:34:03:67:a1:4c:2e:e6:dc:fb:0c:fe:3a:2e:b8:75: 6f:82:a6:99:01:3d:86:98:68:d2:e1:a2:b1:2c:36:a5:e1:e2: 90:5a:ed:0d:cb:48:d6:66:e9:3a:4c:c7:e3:fa:41:bc:91:7b: e3:36:df:99:a9:7c:78:f9:03:69:c3:46:60:1c:ef:f7:dc:be: c5:2c:96:8f:b3:8c:e2:97:c8:73:d8:1b:85:11:3f:2d:b1:9f: f4:d7:54:dc:f4:55:8b:1b:3b:7f:f2:3e:0d:0d:ee:fd:24:96: 59:fc:2e:09:85:4a:76:06:94:3b:11:da:9e:a7:50:f6:18:56: a2:40:6a:99:7f:b3:2f:9b:c9:77:3b:3d:8e:46:c9:56:cc:b9: e8:92:ee:9f:44:0a:4f:3f:e6:a4:32:cc:d7:46:1b:f2:04:93: 7b:f0:9e:a9:f7:ef:fa:b4:1e:24:f9:5d:9a:0b:12:8e:3e:b8: 79:7a:88:3f:ba:8d:ff:9f:c7:d1:7b:e8:0b:0f:0d:92:e9:c7: aa:f6:f3:0d:de:bb:13:7c:0d:fc:44:2e:b3:eb:a2:65:90:f4: fc:6c:2b:a3:07:11:5f:84:23:f6:2a:8f:17:46:b0:7d:9a:29: 31:7f:6f:9d:d5:b2:e0:2b:7c:41:0c:74:da:20:96:ae:f8:d7: 86:46:8d:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfbxmk4oc8bq1eccTyHkfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0NTdiYzE5M2E1OTU5NDhhN2I3YTA5NmI3MTBiYjUyNjI4 MzBmNDEwHhcNMjYwMjA5MTMwMTAyWhcNMjYwMjEwMTMwMTAyWjAzMTEwLwYDVQQD EygwYThiYjllNDgwODdjNzcwNzU0MzU3MWEyMzJjN2NjNGYxNTBkZDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTZ9o3mVpoDrqyyfeX+5ldILc0Rp 3uzC4VjerULtp24CAE/zA2LFbBY0yPs1/UtbOWDifioE2MfdTDIk5xROt+4A6Fav Cw41co6HNXZGri+Af28hcdn/Y7zL+BpEth0VijZkbRbe2b3KC/gu45TuXmFLkJKL uohhbiGSjlpqX+qVdqZI51lS7glvCds5wCZ9fp3eD2OCI0MIy5zDOjsjD/8Beq9i dFdzYnQC/PCaLiUYr3nCVHGz9lzk7J6+BhICfJDOEEY6SMRo2+su4hFUHjMKZr4H Ba4zClbWh6qEmp4xY1DPtF39u81X960ZHUwVXQnwV67sX/IcnkPb1NvgLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAqLueSAh8dwdUNXGiMsfMTxUN1kMB8GA1UdIwQY MBaAFPRXvBk6WVlIp7eglrcQu1Jigw9BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUZlOEdUcFpXVWludDZDV3R4QzdVbUtERDBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC80NTNjZmQtNTM1Yy00ZDJhLWJiMjct NDM2YjNlZTdlZDM1LzEvOUZlOEdUcFpXVWludDZDV3R4QzdVbUtERDBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC80NTNjZmQtNTM1Yy00ZDJhLWJiMjctNDM2YjNlZTdlZDM1 LzEvOUZlOEdUcFpXVWludDZDV3R4QzdVbUtERDBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEp3TNANn oUwu5tz7DP46Lrh1b4KmmQE9hpho0uGisSw2peHikFrtDctI1mbpOkzH4/pBvJF7 4zbfmal8ePkDacNGYBzv99y+xSyWj7OM4pfIc9gbhRE/LbGf9NdU3PRVixs7f/I+ DQ3u/SSWWfwuCYVKdgaUOxHanqdQ9hhWokBqmX+zL5vJdzs9jkbJVsy56JLun0QK Tz/mpDLM10Yb8gSTe/Ceqffv+rQeJPldmgsSjj64eXqIP7qN/5/H0XvoCw8NkunH qvbzDd67E3wN/EQus+uiZZD0/GwrowcRX4Qj9iqPF0awfZopMX9vndWy4Ct8QQx0 2iCWrvjXhkaNBA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:54:28 2026 by rpki-client