This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft File: 9rES1L7bpvNYUoqDcUG3SwkphZM.mft (raw, json) Hash identifier: +ju6TupafIxyVR1X+2UZAmyLNBxh3ZaXtGzshxkX93Y= Subject key identifier: FF:EA:09:17:C3:91:9C:7E:7F:46:E4:ED:4D:AA:76:2F:0C:40:7D:BD Authority key identifier: F6:B1:12:D4:BE:DB:A6:F3:58:52:8A:83:71:41:B7:4B:09:29:85:93 Certificate issuer: /CN=f6b112d4bedba6f358528a837141b74b09298593 Certificate serial: 019C446B96E35C4FD9F64EA0C441BD409469 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft Manifest number: 1760 Signing time: Mon 09 Feb 2026 22:00:27 +0000 Manifest this update: Mon 09 Feb 2026 22:00:27 +0000 Manifest next update: Tue 10 Feb 2026 22:00:27 +0000 Files and hashes: 1: 9rES1L7bpvNYUoqDcUG3SwkphZM.crl (hash: DMsj4x3sF2A/Llb+mpJao5+ydP3FVMuqimdkKXJQkOk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6b:96:e3:5c:4f:d9:f6:4e:a0:c4:41:bd:40:94:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6b112d4bedba6f358528a837141b74b09298593 Validity Not Before: Feb 9 22:00:27 2026 GMT Not After : Feb 10 22:00:27 2026 GMT Subject: CN=ffea0917c3919c7e7f46e4ed4daa762f0c407dbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:52:c4:9c:0e:ca:a0:b0:e0:a3:93:92:9c:a1: 5d:e5:af:57:37:bf:ce:fb:4a:8e:c2:de:1d:a9:78: e3:73:47:b4:1f:59:6d:66:c4:ce:ee:0f:44:dd:d8: 73:d5:19:c9:13:3b:0d:f9:88:8f:7b:06:eb:fa:78: 7f:b7:51:34:0a:94:76:2c:48:3d:68:ba:b3:89:be: ff:b8:57:0d:9e:8c:5f:98:7a:aa:3f:72:5f:fc:e4: 66:73:f0:8b:86:5c:aa:6d:a2:0d:59:8c:c1:10:6f: 0a:b6:21:80:28:ff:b6:22:67:7a:d6:ef:29:df:c8: 83:a1:3e:78:bc:ad:03:13:79:05:08:33:8c:5c:08: 3e:92:9e:68:32:d9:1e:6d:bb:a7:f9:7c:aa:0a:1e: ff:31:67:ae:38:4a:49:47:cf:75:c4:69:c2:42:0d: 8a:59:fa:a1:3d:0d:e0:9a:e8:23:d7:ab:21:62:31: 4c:63:90:20:ab:c6:14:35:8d:fe:73:02:3a:a3:12: 33:0e:9a:82:3f:93:99:18:d2:1f:8f:e3:ab:9e:86: 68:db:48:ab:37:a5:09:d1:d7:52:3f:54:cf:cd:d6: 57:3b:22:a3:af:17:25:90:01:34:a4:08:ed:f0:06: c5:7f:19:9e:e7:d7:70:36:7d:e7:69:33:df:75:0f: 9c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:EA:09:17:C3:91:9C:7E:7F:46:E4:ED:4D:AA:76:2F:0C:40:7D:BD X509v3 Authority Key Identifier: keyid:F6:B1:12:D4:BE:DB:A6:F3:58:52:8A:83:71:41:B7:4B:09:29:85:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:d1:a6:40:5e:d5:fc:a9:59:75:7f:53:8b:83:e6:ac:de:1b: b9:30:16:e6:6c:21:07:a2:66:b1:9c:78:f5:e7:e5:8a:65:f1: 00:cf:b1:33:cd:10:aa:82:3a:c6:58:a3:c8:0e:32:a8:64:ff: 3c:de:c8:88:d8:b6:84:b8:ef:4c:8c:bf:d7:d1:b6:97:bf:ce: 8a:41:48:f1:0f:0c:a3:5e:c8:9d:20:91:af:e4:c5:ec:12:8c: af:25:d1:f0:a4:59:59:85:b3:1a:9f:2a:be:bf:f1:c5:b3:1a: 3a:9c:02:c1:5d:90:90:99:a6:3f:61:e6:1f:ac:28:3a:f8:18: 70:02:1e:bd:b9:16:e1:57:0e:63:d7:51:a7:b6:8e:18:dd:8a: 8d:7a:c1:21:1d:e8:58:5b:17:0d:a4:d0:a6:eb:f8:fe:48:2b: 43:36:04:fd:b1:5d:24:a0:36:ef:f5:aa:7d:bb:84:3d:4b:3e: 06:7e:89:68:fb:78:86:fc:57:ff:f4:31:75:44:a1:4e:e7:fb: 21:c3:11:f1:ab:80:1e:33:54:ef:f4:77:aa:72:9b:d0:25:78: 77:f5:fa:bd:2c:43:9d:e3:6a:4e:e3:6e:d8:33:69:62:db:e8: 74:b4:98:ff:0d:96:17:b2:8e:ec:59:68:b4:91:e0:7f:9e:21: 52:ef:e7:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEa5bjXE/Z9k6gxEG9QJRpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YjExMmQ0YmVkYmE2ZjM1ODUyOGE4MzcxNDFiNzRiMDky OTg1OTMwHhcNMjYwMjA5MjIwMDI3WhcNMjYwMjEwMjIwMDI3WjAzMTEwLwYDVQQD EyhmZmVhMDkxN2MzOTE5YzdlN2Y0NmU0ZWQ0ZGFhNzYyZjBjNDA3ZGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA91LEnA7KoLDgo5OSnKFd5a9XN7/O +0qOwt4dqXjjc0e0H1ltZsTO7g9E3dhz1RnJEzsN+YiPewbr+nh/t1E0CpR2LEg9 aLqzib7/uFcNnoxfmHqqP3Jf/ORmc/CLhlyqbaINWYzBEG8KtiGAKP+2Imd61u8p 38iDoT54vK0DE3kFCDOMXAg+kp5oMtkebbun+XyqCh7/MWeuOEpJR891xGnCQg2K WfqhPQ3gmugj16shYjFMY5Agq8YUNY3+cwI6oxIzDpqCP5OZGNIfj+OrnoZo20ir N6UJ0ddSP1TPzdZXOyKjrxclkAE0pAjt8AbFfxme59dwNn3naTPfdQ+cRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/qCRfDkZx+f0bk7U2qdi8MQH29MB8GA1UdIwQY MBaAFPaxEtS+26bzWFKKg3FBt0sJKYWTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXJFUzFMN2Jwdk5ZVW9xRGNVRzNTd2twaFpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8zZjkxNjctNjZlZS00NTNiLTllYTAt NGMzZWY0MWFlZDdmLzEvOXJFUzFMN2Jwdk5ZVW9xRGNVRzNTd2twaFpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8zZjkxNjctNjZlZS00NTNiLTllYTAtNGMzZWY0MWFlZDdm LzEvOXJFUzFMN2Jwdk5ZVW9xRGNVRzNTd2twaFpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvNGmQF7V /KlZdX9Ti4PmrN4buTAW5mwhB6JmsZx49eflimXxAM+xM80QqoI6xlijyA4yqGT/ PN7IiNi2hLjvTIy/19G2l7/OikFI8Q8Mo17InSCRr+TF7BKMryXR8KRZWYWzGp8q vr/xxbMaOpwCwV2QkJmmP2HmH6woOvgYcAIevbkW4VcOY9dRp7aOGN2KjXrBIR3o WFsXDaTQpuv4/kgrQzYE/bFdJKA27/WqfbuEPUs+Bn6JaPt4hvxX//QxdUShTuf7 IcMR8auAHjNU7/R3qnKb0CV4d/X6vSxDneNqTuNu2DNpYtvodLSY/w2WF7KO7Flo tJHgf54hUu/n6A== -----END CERTIFICATE-----Generated at Tue Feb 10 01:34:55 2026 by rpki-client