This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft File: 9yR1sGTeionxUD6u_H1yrczzihY.mft (raw, json) Hash identifier: 2ZlGODJiP8iW/jPmwpG5KLaDPtgFF0OzoBXHdTPXJh8= Subject key identifier: BD:F9:C6:0D:76:70:C0:83:E2:8F:0B:89:11:90:71:BF:04:C2:6A:89 Authority key identifier: F7:24:75:B0:64:DE:8A:89:F1:50:3E:AE:FC:7D:72:AD:CC:F3:8A:16 Certificate issuer: /CN=f72475b064de8a89f1503eaefc7d72adccf38a16 Certificate serial: 019C427D5163F45F1AF2DA43D3140086EFE7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft Manifest number: 180B Signing time: Mon 09 Feb 2026 13:00:34 +0000 Manifest this update: Mon 09 Feb 2026 13:00:34 +0000 Manifest next update: Tue 10 Feb 2026 13:00:34 +0000 Files and hashes: 1: 9yR1sGTeionxUD6u_H1yrczzihY.crl (hash: gW0AwzWVkNDGE0bOr10Pp36lDx12GiyKOaRN6dsp8uk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.crl rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:51:63:f4:5f:1a:f2:da:43:d3:14:00:86:ef:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f72475b064de8a89f1503eaefc7d72adccf38a16 Validity Not Before: Feb 9 13:00:34 2026 GMT Not After : Feb 10 13:00:34 2026 GMT Subject: CN=bdf9c60d7670c083e28f0b89119071bf04c26a89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cc:72:fc:6e:01:e0:4e:51:41:12:4e:9e:fc: 94:d8:5d:c0:d0:fc:a4:db:19:c7:79:c3:45:1d:22: 05:31:cb:bf:81:6b:1a:24:18:77:b5:fb:75:09:33: 82:07:28:de:bc:49:03:6e:a2:ca:ac:bb:56:e2:8a: 10:75:a9:61:b7:5f:25:5e:c0:a2:9f:4f:04:a4:4f: dd:28:7b:04:81:6d:25:83:a3:6a:77:71:57:b5:cc: 9e:f3:70:c1:a5:e5:30:76:b8:bf:88:56:6a:80:4a: 35:65:97:a9:77:d0:eb:1e:9b:e5:d2:09:73:60:c7: 54:4e:40:65:4d:d6:8a:0f:25:b9:39:2d:3a:81:7e: 8b:29:87:3a:b6:8b:79:25:c5:c5:33:78:25:d2:62: a8:6e:65:bf:6f:51:80:e2:ba:ed:9f:29:2c:df:20: 96:8f:1c:c6:e3:49:21:ae:08:a2:21:5f:8a:c8:1b: f3:14:11:68:c8:00:35:f2:30:94:7d:0a:ac:69:f8: 44:30:d7:79:ba:5c:dd:68:9a:b3:d3:42:ef:09:ce: b1:af:cc:f2:a7:93:e3:c7:b8:2f:d1:fc:31:8e:f3: 49:57:f8:64:38:47:45:bf:f5:70:11:29:97:5d:b7: 9e:a6:73:4e:d3:3e:19:71:52:f2:36:48:74:ac:41: 15:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F9:C6:0D:76:70:C0:83:E2:8F:0B:89:11:90:71:BF:04:C2:6A:89 X509v3 Authority Key Identifier: keyid:F7:24:75:B0:64:DE:8A:89:F1:50:3E:AE:FC:7D:72:AD:CC:F3:8A:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:ff:d7:29:20:bb:58:26:19:8c:91:96:fa:29:dc:62:27:1d: 8f:27:81:4b:c7:58:8f:18:ed:97:67:ba:6a:c9:1b:29:6a:36: 55:13:fb:49:fa:2d:75:03:54:9b:a3:d2:3e:5b:9f:c6:16:c0: 78:05:0c:3a:8f:a4:3f:06:4f:fa:76:25:86:ce:df:58:3c:31: 19:da:6e:c6:e1:47:29:fb:1b:6a:07:d1:2d:e8:c1:cf:8a:94: d6:48:fd:fb:42:fe:c8:36:98:4b:28:47:90:9a:6d:55:21:27: c6:a1:9d:c8:5c:41:1c:7b:ec:e9:bb:10:a7:d5:97:ad:92:f3: db:4c:45:fc:b2:0c:4d:e6:ce:9b:ae:f2:4a:6c:73:81:e9:80: a7:0b:43:31:c0:e7:4b:04:9e:fe:5a:ad:b1:9a:16:ba:4b:1f: d1:12:8b:8f:33:7c:80:9c:84:09:f8:2f:8a:52:c8:b9:94:a2: db:ba:dd:14:e5:76:d9:68:23:fb:35:ab:6d:36:cb:9e:f8:75: 03:24:ca:e3:f8:c6:08:75:c2:c8:77:7e:d5:3f:ab:53:85:52: 7f:0d:c6:4e:23:44:67:68:3a:4b:e6:91:8b:cd:5b:b5:9b:ab: 04:89:c7:22:b3:70:f3:88:e9:67:06:af:48:87:ec:66:63:31: 2d:be:e9:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfVFj9F8a8tpD0xQAhu/nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3MjQ3NWIwNjRkZThhODlmMTUwM2VhZWZjN2Q3MmFkY2Nm MzhhMTYwHhcNMjYwMjA5MTMwMDM0WhcNMjYwMjEwMTMwMDM0WjAzMTEwLwYDVQQD EyhiZGY5YzYwZDc2NzBjMDgzZTI4ZjBiODkxMTkwNzFiZjA0YzI2YTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMxy/G4B4E5RQRJOnvyU2F3A0Pyk 2xnHecNFHSIFMcu/gWsaJBh3tft1CTOCByjevEkDbqLKrLtW4ooQdalht18lXsCi n08EpE/dKHsEgW0lg6Nqd3FXtcye83DBpeUwdri/iFZqgEo1ZZepd9DrHpvl0glz YMdUTkBlTdaKDyW5OS06gX6LKYc6tot5JcXFM3gl0mKobmW/b1GA4rrtnyks3yCW jxzG40khrgiiIV+KyBvzFBFoyAA18jCUfQqsafhEMNd5ulzdaJqz00LvCc6xr8zy p5Pjx7gv0fwxjvNJV/hkOEdFv/VwESmXXbeepnNO0z4ZcVLyNkh0rEEVyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL35xg12cMCD4o8LiRGQcb8EwmqJMB8GA1UdIwQY MBaAFPckdbBk3oqJ8VA+rvx9cq3M84oWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXlSMXNHVGVpb254VUQ2dV9IMXlyY3p6aWhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy85MGYzNmUtZDM4Zi00ZWU5LWFjZWIt MjgzMjBhNWMwNzdiLzEvOXlSMXNHVGVpb254VUQ2dV9IMXlyY3p6aWhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy85MGYzNmUtZDM4Zi00ZWU5LWFjZWItMjgzMjBhNWMwNzdi LzEvOXlSMXNHVGVpb254VUQ2dV9IMXlyY3p6aWhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArP/XKSC7 WCYZjJGW+incYicdjyeBS8dYjxjtl2e6askbKWo2VRP7SfotdQNUm6PSPlufxhbA eAUMOo+kPwZP+nYlhs7fWDwxGdpuxuFHKfsbagfRLejBz4qU1kj9+0L+yDaYSyhH kJptVSEnxqGdyFxBHHvs6bsQp9WXrZLz20xF/LIMTebOm67ySmxzgemApwtDMcDn SwSe/lqtsZoWuksf0RKLjzN8gJyECfgvilLIuZSi27rdFOV22Wgj+zWrbTbLnvh1 AyTK4/jGCHXCyHd+1T+rU4VSfw3GTiNEZ2g6S+aRi81btZurBInHIrNw84jpZwav SIfsZmMxLb7p/A== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:29 2026 by rpki-client