This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/23a19a-30db-4872-ab73-5287afc10e68/1/9xPX34BXC8z7JzeT8ApdRshT5Jo.mft File: 9xPX34BXC8z7JzeT8ApdRshT5Jo.mft (raw, json) Hash identifier: 4DCUWuBNelChwDrBgenNobltLwtVb+VVBeF+cQrZvBI= Subject key identifier: 8C:B3:3D:AC:22:E0:99:25:56:1F:16:00:AA:E9:08:6D:A7:77:AF:C4 Authority key identifier: F7:13:D7:DF:80:57:0B:CC:FB:27:37:93:F0:0A:5D:46:C8:53:E4:9A Certificate issuer: /CN=f713d7df80570bccfb273793f00a5d46c853e49a Certificate serial: 019C420F85AD0EC9CA376AFF93340BDA702C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9xPX34BXC8z7JzeT8ApdRshT5Jo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/23a19a-30db-4872-ab73-5287afc10e68/1/9xPX34BXC8z7JzeT8ApdRshT5Jo.mft Manifest number: 0732 Signing time: Mon 09 Feb 2026 11:00:39 +0000 Manifest this update: Mon 09 Feb 2026 11:00:39 +0000 Manifest next update: Tue 10 Feb 2026 11:00:39 +0000 Files and hashes: 1: 9xPX34BXC8z7JzeT8ApdRshT5Jo.crl (hash: ielxenh0kBXrhKn4oTZ0BArdgucd1dlI/lcqa6dZrm8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/23a19a-30db-4872-ab73-5287afc10e68/1/9xPX34BXC8z7JzeT8ApdRshT5Jo.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/23a19a-30db-4872-ab73-5287afc10e68/1/9xPX34BXC8z7JzeT8ApdRshT5Jo.mft rsync://rpki.ripe.net/repository/DEFAULT/9xPX34BXC8z7JzeT8ApdRshT5Jo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:85:ad:0e:c9:ca:37:6a:ff:93:34:0b:da:70:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f713d7df80570bccfb273793f00a5d46c853e49a Validity Not Before: Feb 9 11:00:39 2026 GMT Not After : Feb 10 11:00:39 2026 GMT Subject: CN=8cb33dac22e09925561f1600aae9086da777afc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a2:88:a6:49:11:ab:c4:fb:e5:a8:29:9a:87: c8:8f:01:6c:35:77:07:ec:59:b5:d4:85:f1:90:ae: fb:6c:0e:ce:1b:1a:e4:36:fd:b7:78:a9:45:2a:e8: 4c:dc:64:c8:12:5b:a1:63:cc:7c:b6:be:b9:65:c7: 92:20:1f:72:83:f5:7b:b7:49:5f:e9:16:10:b3:4f: 95:70:75:5b:9c:4a:f4:fb:38:f4:7f:1f:af:f5:12: fe:b2:8e:11:af:1a:a7:48:a2:0e:a4:91:8b:66:da: 2a:01:b0:cb:5e:25:5f:30:11:c0:13:91:fc:b5:d7: b0:2d:28:18:37:6d:5c:2d:f4:9c:7a:d1:b4:46:56: e6:c3:93:48:6a:07:11:15:dc:14:9c:81:25:64:fb: f5:87:c1:e9:49:37:2a:d6:43:c6:bc:46:51:2a:0c: 38:dd:70:86:0a:8b:5e:d1:91:6a:36:19:3a:8e:8d: 5c:6f:cd:ee:77:86:cb:b2:bb:70:3e:0c:56:a7:8b: 8a:6e:60:73:15:36:65:b1:18:bd:0f:41:04:cf:4c: c0:44:e0:a2:fc:74:f0:c6:5a:47:b1:8c:99:e4:80: 92:4d:14:01:5e:c6:d8:2e:06:57:96:37:eb:cd:b0: f1:df:92:0c:44:53:30:66:a7:5d:b6:c2:d7:ce:50: a2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B3:3D:AC:22:E0:99:25:56:1F:16:00:AA:E9:08:6D:A7:77:AF:C4 X509v3 Authority Key Identifier: keyid:F7:13:D7:DF:80:57:0B:CC:FB:27:37:93:F0:0A:5D:46:C8:53:E4:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9xPX34BXC8z7JzeT8ApdRshT5Jo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/23a19a-30db-4872-ab73-5287afc10e68/1/9xPX34BXC8z7JzeT8ApdRshT5Jo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/23a19a-30db-4872-ab73-5287afc10e68/1/9xPX34BXC8z7JzeT8ApdRshT5Jo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:19:e6:12:85:50:b6:57:26:8c:85:0d:db:7f:c8:c4:4d:d8: f5:53:74:32:82:68:ad:f8:56:af:ff:2c:c0:a8:cf:bc:98:70: cc:ba:1e:42:ad:79:0e:5a:32:18:1b:f6:8d:ca:af:71:3d:68: 24:06:9f:d6:75:f2:2d:1e:23:af:1d:ad:b3:9c:99:5e:85:28: 56:76:2c:ad:e7:10:43:4f:ad:81:34:aa:10:19:f4:63:0d:13: 3a:34:f4:f4:50:b5:fc:dd:4c:1c:40:ff:df:c8:6b:31:ce:b9: ad:f2:9b:f4:97:a8:3b:a9:20:96:4e:fe:cd:8b:e7:c8:29:20: 7f:ea:66:c7:5d:02:b4:d9:7c:c8:db:05:f1:47:c9:ee:98:7e: a1:cd:21:78:10:d4:f0:9c:75:71:ca:cf:61:7c:17:89:d5:fd: 4c:8e:c2:7b:64:fb:e6:0d:63:06:15:43:b1:c2:94:74:5d:7d: 0c:b1:76:fa:69:5c:87:27:51:90:35:21:68:c5:c2:e6:38:1d: 16:85:65:41:9f:bb:72:f0:5f:33:e8:06:e8:b6:0c:5a:cd:b5: b1:e0:7a:ed:5b:c0:7c:3e:96:8b:45:40:d3:01:e2:37:45:47: 41:e4:59:88:fb:6f:93:22:0b:4d:64:1b:98:6f:00:29:38:d2: f3:c2:00:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD4WtDsnKN2r/kzQL2nAsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3MTNkN2RmODA1NzBiY2NmYjI3Mzc5M2YwMGE1ZDQ2Yzg1 M2U0OWEwHhcNMjYwMjA5MTEwMDM5WhcNMjYwMjEwMTEwMDM5WjAzMTEwLwYDVQQD Eyg4Y2IzM2RhYzIyZTA5OTI1NTYxZjE2MDBhYWU5MDg2ZGE3NzdhZmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0aKIpkkRq8T75agpmofIjwFsNXcH 7Fm11IXxkK77bA7OGxrkNv23eKlFKuhM3GTIEluhY8x8tr65ZceSIB9yg/V7t0lf 6RYQs0+VcHVbnEr0+zj0fx+v9RL+so4RrxqnSKIOpJGLZtoqAbDLXiVfMBHAE5H8 tdewLSgYN21cLfScetG0Rlbmw5NIagcRFdwUnIElZPv1h8HpSTcq1kPGvEZRKgw4 3XCGCote0ZFqNhk6jo1cb83ud4bLsrtwPgxWp4uKbmBzFTZlsRi9D0EEz0zAROCi /HTwxlpHsYyZ5ICSTRQBXsbYLgZXljfrzbDx35IMRFMwZqddtsLXzlCiPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIyzPawi4JklVh8WAKrpCG2nd6/EMB8GA1UdIwQY MBaAFPcT19+AVwvM+yc3k/AKXUbIU+SaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXhQWDM0QlhDOHo3SnplVDhBcGRSc2hUNUpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8yM2ExOWEtMzBkYi00ODcyLWFiNzMt NTI4N2FmYzEwZTY4LzEvOXhQWDM0QlhDOHo3SnplVDhBcGRSc2hUNUpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8yM2ExOWEtMzBkYi00ODcyLWFiNzMtNTI4N2FmYzEwZTY4 LzEvOXhQWDM0QlhDOHo3SnplVDhBcGRSc2hUNUpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASBnmEoVQ tlcmjIUN23/IxE3Y9VN0MoJorfhWr/8swKjPvJhwzLoeQq15DloyGBv2jcqvcT1o JAaf1nXyLR4jrx2ts5yZXoUoVnYsrecQQ0+tgTSqEBn0Yw0TOjT09FC1/N1MHED/ 38hrMc65rfKb9JeoO6kglk7+zYvnyCkgf+pmx10CtNl8yNsF8UfJ7ph+oc0heBDU 8Jx1ccrPYXwXidX9TI7Ce2T75g1jBhVDscKUdF19DLF2+mlchydRkDUhaMXC5jgd FoVlQZ+7cvBfM+gG6LYMWs21seB67VvAfD6Wi0VA0wHiN0VHQeRZiPtvkyILTWQb mG8AKTjS88IANQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:31 2026 by rpki-client