This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft File: 9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft (raw, json) Hash identifier: SMoTw0nPkJQYuRaSnpKJGzlDSppE3Xu+QdzygYgLRUo= Subject key identifier: 14:7F:11:C4:BA:18:D8:E1:FA:8E:2E:BB:76:C5:70:35:34:49:52:FC Authority key identifier: F4:39:1C:FD:28:B0:7E:6A:9E:1C:A3:25:6C:DB:82:01:7B:2B:56:21 Certificate issuer: /CN=f4391cfd28b07e6a9e1ca3256cdb82017b2b5621 Certificate serial: 019C4246B7652B27DB6C7044FCB8428BBBE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Dkc_SiwfmqeHKMlbNuCAXsrViE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft Manifest number: 0791 Signing time: Mon 09 Feb 2026 12:00:56 +0000 Manifest this update: Mon 09 Feb 2026 12:00:56 +0000 Manifest next update: Tue 10 Feb 2026 12:00:56 +0000 Files and hashes: 1: 9Dkc_SiwfmqeHKMlbNuCAXsrViE.crl (hash: vzIRzdqwo4W5L9jZyJB0wFXh6mGKaTCuTYZGP1wdFRU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.crl rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft rsync://rpki.ripe.net/repository/DEFAULT/9Dkc_SiwfmqeHKMlbNuCAXsrViE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:b7:65:2b:27:db:6c:70:44:fc:b8:42:8b:bb:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4391cfd28b07e6a9e1ca3256cdb82017b2b5621 Validity Not Before: Feb 9 12:00:56 2026 GMT Not After : Feb 10 12:00:56 2026 GMT Subject: CN=147f11c4ba18d8e1fa8e2ebb76c57035344952fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c2:f3:aa:61:4b:93:9e:ff:bb:d2:a9:c2:24: 02:42:af:10:42:fc:0c:85:aa:34:bd:b9:a9:e2:85: c7:4d:9c:05:d0:05:66:cf:05:e3:71:86:a9:68:ed: 4f:32:fc:ea:7f:0f:4c:3e:e8:9a:87:13:33:2a:12: df:93:d5:d4:ac:3e:78:67:5a:0c:05:ea:ab:df:2f: 96:91:1e:73:0a:57:14:25:64:fd:de:de:f4:01:56: 72:cf:b8:cb:47:ed:64:e4:bb:be:a7:aa:29:ef:41: 34:ce:91:45:c2:63:46:29:99:a9:92:17:7b:53:b3: ca:9f:f6:88:b5:af:ac:a5:67:2f:f9:e3:fe:e8:16: 58:6a:0f:33:0b:8c:b6:ca:04:12:8f:d5:24:5e:ee: c6:9d:c7:e5:1a:44:1a:1a:4c:03:bb:bd:f4:a8:cc: 04:65:0f:c9:a5:15:28:5b:a1:dc:d6:17:1e:73:0c: 63:4a:d0:84:2e:08:74:44:45:54:a4:53:e9:7d:d6: 5d:4c:79:8c:82:f1:66:22:77:7e:9b:8f:83:50:e7: 02:a9:40:56:30:02:b4:f1:6d:0d:bc:32:76:ec:4c: 8e:95:e9:d4:91:90:37:b9:47:97:e0:19:6a:d7:85: f3:60:03:51:d9:fb:15:df:38:e9:ad:0f:1d:56:24: 8d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:7F:11:C4:BA:18:D8:E1:FA:8E:2E:BB:76:C5:70:35:34:49:52:FC X509v3 Authority Key Identifier: keyid:F4:39:1C:FD:28:B0:7E:6A:9E:1C:A3:25:6C:DB:82:01:7B:2B:56:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Dkc_SiwfmqeHKMlbNuCAXsrViE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:e5:60:ca:e3:4a:9f:8b:9e:35:7d:2a:d1:de:a0:d7:f0:a4: 66:7d:ea:81:f8:9c:eb:cb:10:52:a2:b2:79:28:97:40:db:f7: 0a:43:8e:c7:46:1a:4c:5c:7a:65:4c:49:5c:d3:86:b5:63:07: f3:72:f3:c4:9c:cc:f2:ce:b6:08:a0:b4:2b:07:32:43:a9:8a: ff:ff:ed:26:41:10:e0:a9:fd:56:e3:17:3f:71:00:74:4b:a0: e0:3d:61:df:77:9b:33:97:09:5c:c2:76:5c:5a:9d:c7:ae:77: 09:ab:11:e8:e5:c9:33:18:57:a5:b2:7e:c5:23:f2:6a:3e:88: a8:ef:17:83:b6:2a:fb:dc:d7:96:15:8f:89:7c:d5:ab:cc:c0: 69:83:91:fc:e7:87:4a:0e:0f:f7:bd:93:5a:9f:46:77:db:ac: 3e:2b:c5:1f:1d:66:19:ca:4e:9f:3a:f9:3a:ba:44:e7:6a:6d: 83:d6:ff:5c:9a:6b:99:a6:c8:98:dc:b5:2a:cc:4f:ac:b8:0d: ec:c5:94:93:fe:5c:d6:6e:05:2a:00:e1:33:26:b2:59:b0:7d: 77:92:e3:b9:64:3b:df:a5:ce:19:a2:46:be:8f:3c:c6:51:0d: 0f:0f:ef:6a:9d:2e:c3:e4:4e:90:26:ce:a5:e0:82:1f:bc:e6: 52:41:2f:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRrdlKyfbbHBE/LhCi7viMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0MzkxY2ZkMjhiMDdlNmE5ZTFjYTMyNTZjZGI4MjAxN2Iy YjU2MjEwHhcNMjYwMjA5MTIwMDU2WhcNMjYwMjEwMTIwMDU2WjAzMTEwLwYDVQQD EygxNDdmMTFjNGJhMThkOGUxZmE4ZTJlYmI3NmM1NzAzNTM0NDk1MmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMLzqmFLk57/u9KpwiQCQq8QQvwM hao0vbmp4oXHTZwF0AVmzwXjcYapaO1PMvzqfw9MPuiahxMzKhLfk9XUrD54Z1oM Beqr3y+WkR5zClcUJWT93t70AVZyz7jLR+1k5Lu+p6op70E0zpFFwmNGKZmpkhd7 U7PKn/aIta+spWcv+eP+6BZYag8zC4y2ygQSj9UkXu7GncflGkQaGkwDu730qMwE ZQ/JpRUoW6Hc1hcecwxjStCELgh0REVUpFPpfdZdTHmMgvFmInd+m4+DUOcCqUBW MAK08W0NvDJ27EyOlenUkZA3uUeX4Blq14XzYANR2fsV3zjprQ8dViSNDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBR/EcS6GNjh+o4uu3bFcDU0SVL8MB8GA1UdIwQY MBaAFPQ5HP0osH5qnhyjJWzbggF7K1YhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOURrY19TaXdmbXFlSEtNbGJOdUNBWHNyVmlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9iNmVhM2UtY2M5MS00OGJmLTg2YmMt ZTVhOWJhOGY1NmFlLzEvOURrY19TaXdmbXFlSEtNbGJOdUNBWHNyVmlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9iNmVhM2UtY2M5MS00OGJmLTg2YmMtZTVhOWJhOGY1NmFl LzEvOURrY19TaXdmbXFlSEtNbGJOdUNBWHNyVmlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEeVgyuNK n4ueNX0q0d6g1/CkZn3qgfic68sQUqKyeSiXQNv3CkOOx0YaTFx6ZUxJXNOGtWMH 83LzxJzM8s62CKC0KwcyQ6mK///tJkEQ4Kn9VuMXP3EAdEug4D1h33ebM5cJXMJ2 XFqdx653CasR6OXJMxhXpbJ+xSPyaj6IqO8Xg7Yq+9zXlhWPiXzVq8zAaYOR/OeH Sg4P972TWp9Gd9usPivFHx1mGcpOnzr5OrpE52ptg9b/XJprmabImNy1KsxPrLgN 7MWUk/5c1m4FKgDhMyayWbB9d5LjuWQ736XOGaJGvo88xlENDw/vap0uw+ROkCbO peCCH7zmUkEvUw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:59 2026 by rpki-client