This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft File: c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft (raw, json) Hash identifier: 9rtbW/LGFt1yxCOmAGlmpetibX3PrvL8/95qzh15HQs= Subject key identifier: BE:0E:74:52:8B:44:C5:1B:88:48:F3:5E:B5:DC:13:B9:57:8C:9E:35 Authority key identifier: 73:D8:5F:84:38:D7:3B:56:68:E8:9C:C6:92:64:6F:94:87:96:5F:A9 Certificate issuer: /CN=73d85f8438d73b5668e89cc692646f9487965fa9 Certificate serial: 019C41349D05C40BC7CBBC9C5098412AB44C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft Manifest number: 03D2 Signing time: Mon 09 Feb 2026 07:01:32 +0000 Manifest this update: Mon 09 Feb 2026 07:01:32 +0000 Manifest next update: Tue 10 Feb 2026 07:01:32 +0000 Files and hashes: 1: c9hfhDjXO1Zo6JzGkmRvlIeWX6k.crl (hash: cHQY/f+rv44ulHPWgwr7lMCxgRJtC9A5loEbgXI5enY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.crl rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft rsync://rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:34:9d:05:c4:0b:c7:cb:bc:9c:50:98:41:2a:b4:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73d85f8438d73b5668e89cc692646f9487965fa9 Validity Not Before: Feb 9 07:01:32 2026 GMT Not After : Feb 10 07:01:32 2026 GMT Subject: CN=be0e74528b44c51b8848f35eb5dc13b9578c9e35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0b:75:61:8b:1f:ac:b0:2a:75:e3:43:ff:61: 73:50:ab:a8:87:c4:60:c8:bf:4a:ee:a3:ae:b8:d6: f6:17:19:4a:a7:64:c3:f5:7a:8f:3e:b9:a5:bc:8a: 72:6a:9f:90:e8:e2:ab:73:0d:00:a8:37:d1:6a:fe: 72:6f:9f:bd:a2:c1:cf:4f:4e:c1:f2:35:7f:31:ff: ed:ba:d4:6c:7e:f7:f9:e7:6a:39:3a:d7:3c:fc:32: c4:6c:15:fe:29:2a:5a:27:f1:d8:20:01:62:3b:9f: 6f:a1:66:9d:15:06:0d:a7:6a:a6:b7:a5:8f:54:a5: e6:63:26:c2:7f:d1:85:d6:98:9c:d5:da:1d:12:e8: 7f:71:4b:fe:be:41:99:c5:d3:9f:f0:bb:b5:cf:a7: 2a:78:71:48:62:ca:8d:a1:13:d7:5f:85:35:20:c3: d5:2c:9a:12:91:d8:28:e2:66:d5:83:4b:eb:2b:c1: 4e:e8:6b:85:fd:56:c1:5b:1d:2c:3d:d9:be:75:c3: 79:ad:43:9d:fb:5d:8e:ec:2e:6c:3f:fa:3a:7a:a6: be:9a:3c:cc:d9:1d:70:b6:6d:d3:a6:2a:47:f1:d1: ff:c8:54:7f:7a:98:81:94:f4:4c:99:de:b3:6b:d0: 32:38:d4:ed:03:b6:92:24:bd:f0:2d:a4:1f:81:ce: b5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:0E:74:52:8B:44:C5:1B:88:48:F3:5E:B5:DC:13:B9:57:8C:9E:35 X509v3 Authority Key Identifier: keyid:73:D8:5F:84:38:D7:3B:56:68:E8:9C:C6:92:64:6F:94:87:96:5F:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:89:f0:15:20:87:b7:34:1d:d8:3b:f2:7a:70:5c:46:63:fe: 41:a9:5c:c4:53:ca:00:30:21:40:d9:1a:be:51:ac:58:20:15: cf:06:b3:c0:6f:4f:09:6c:a1:8e:61:72:5c:fe:bc:c9:55:43: fe:50:af:49:e8:4d:af:3b:5c:98:fb:be:e1:e6:d8:a9:d0:e8: 03:47:aa:cb:59:f7:ef:5f:81:b4:c7:26:70:a3:a1:44:46:e2: f6:1a:c6:2d:0a:9b:bf:85:f1:84:8c:95:63:c1:79:4c:9d:f6: 31:17:1b:9a:5a:19:4a:ef:a0:02:02:f6:80:80:90:e8:a7:b1: 8a:36:7f:d5:a9:36:ab:73:15:0b:de:c3:cd:a8:e1:a9:33:e1: a2:eb:83:7e:0d:f2:70:9c:17:6c:27:76:88:01:6c:9c:8b:5b: 53:61:db:9b:8c:90:6c:43:b4:2a:38:e4:6e:4c:2f:fa:4d:3d: a5:e7:95:3a:18:b4:1f:ef:88:43:df:5a:23:b1:f8:01:96:c5: 45:43:3e:3a:c2:00:42:60:b1:26:37:81:a3:b2:c8:79:81:31: a9:e0:97:8f:3e:50:a1:c9:9c:36:9d:49:78:5b:6f:5e:ab:ae: 70:46:4d:63:a2:37:7a:71:a5:cc:bc:ea:3f:7f:fc:73:8b:91: ce:58:2d:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBNJ0FxAvHy7ycUJhBKrRMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZDg1Zjg0MzhkNzNiNTY2OGU4OWNjNjkyNjQ2Zjk0ODc5 NjVmYTkwHhcNMjYwMjA5MDcwMTMyWhcNMjYwMjEwMDcwMTMyWjAzMTEwLwYDVQQD EyhiZTBlNzQ1MjhiNDRjNTFiODg0OGYzNWViNWRjMTNiOTU3OGM5ZTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQt1YYsfrLAqdeND/2FzUKuoh8Rg yL9K7qOuuNb2FxlKp2TD9XqPPrmlvIpyap+Q6OKrcw0AqDfRav5yb5+9osHPT07B 8jV/Mf/tutRsfvf552o5Otc8/DLEbBX+KSpaJ/HYIAFiO59voWadFQYNp2qmt6WP VKXmYybCf9GF1pic1dodEuh/cUv+vkGZxdOf8Lu1z6cqeHFIYsqNoRPXX4U1IMPV LJoSkdgo4mbVg0vrK8FO6GuF/VbBWx0sPdm+dcN5rUOd+12O7C5sP/o6eqa+mjzM 2R1wtm3TpipH8dH/yFR/epiBlPRMmd6za9AyONTtA7aSJL3wLaQfgc61fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL4OdFKLRMUbiEjzXrXcE7lXjJ41MB8GA1UdIwQY MBaAFHPYX4Q41ztWaOicxpJkb5SHll+pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzloZmhEalhPMVpvNkp6R2ttUnZsSWVXWDZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9mNmQ0NzYtNWVjMS00MjdhLTgyZTAt YWVlMGM4MjQwOTllLzEvYzloZmhEalhPMVpvNkp6R2ttUnZsSWVXWDZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9mNmQ0NzYtNWVjMS00MjdhLTgyZTAtYWVlMGM4MjQwOTll LzEvYzloZmhEalhPMVpvNkp6R2ttUnZsSWVXWDZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGYnwFSCH tzQd2DvyenBcRmP+QalcxFPKADAhQNkavlGsWCAVzwazwG9PCWyhjmFyXP68yVVD /lCvSehNrztcmPu+4ebYqdDoA0eqy1n371+BtMcmcKOhREbi9hrGLQqbv4XxhIyV Y8F5TJ32MRcbmloZSu+gAgL2gICQ6KexijZ/1ak2q3MVC97DzajhqTPhouuDfg3y cJwXbCd2iAFsnItbU2Hbm4yQbEO0Kjjkbkwv+k09peeVOhi0H++IQ99aI7H4AZbF RUM+OsIAQmCxJjeBo7LIeYExqeCXjz5QocmcNp1JeFtvXquucEZNY6I3enGlzLzq P3/8c4uRzlgtDw== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:57 2026 by rpki-client