This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft File: 9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft (raw, json) Hash identifier: 3CtU2gwj6OvcnI1PpfVozV8t4KzTgznFV+/VlvU+5qg= Subject key identifier: 6A:B6:59:2B:A2:46:1C:47:47:25:83:06:37:89:24:AA:FF:5F:A2:5B Authority key identifier: F4:2D:0C:AD:0E:AE:D1:A6:1F:47:8F:B0:91:9C:7A:43:22:72:46:95 Certificate issuer: /CN=f42d0cad0eaed1a61f478fb0919c7a4322724695 Certificate serial: 019C41A1681D85630247049EB563160A2D37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft Manifest number: 0D44 Signing time: Mon 09 Feb 2026 09:00:22 +0000 Manifest this update: Mon 09 Feb 2026 09:00:22 +0000 Manifest next update: Tue 10 Feb 2026 09:00:22 +0000 Files and hashes: 1: 9C0MrQ6u0aYfR4-wkZx6QyJyRpU.crl (hash: St7U8ogqmTzoJ7N8brXmKsYDpXJUQputNkw+eGnG+Eo=) 2: Uklboo3tG2E8bmpaNpWg7iBT500.roa (hash: 3bdk4yfdkJQ/C4ZvETpkPR6Yh1F2fFWoUHJ2qwV5MwY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft rsync://rpki.ripe.net/repository/DEFAULT/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:68:1d:85:63:02:47:04:9e:b5:63:16:0a:2d:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f42d0cad0eaed1a61f478fb0919c7a4322724695 Validity Not Before: Feb 9 09:00:22 2026 GMT Not After : Feb 10 09:00:22 2026 GMT Subject: CN=6ab6592ba2461c4747258306378924aaff5fa25b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:90:21:7c:a1:26:c9:8d:64:17:11:b0:1a:ea: 13:70:0a:63:77:31:08:13:9f:3d:58:2e:2d:74:a1: 9d:9c:9b:02:98:d6:39:83:fc:84:de:c5:99:da:c3: 33:f9:9d:de:87:de:5d:42:07:59:1a:d8:55:7c:78: df:c5:a0:66:45:19:85:71:53:59:e3:89:c5:bf:5b: a1:cf:04:0b:07:28:8e:b8:c5:f8:3f:b6:3b:ea:8a: 58:aa:6f:3e:c2:b5:f8:93:c9:5c:7c:df:0e:d1:5b: 5a:c8:bb:91:66:85:bc:15:e7:b9:70:d7:78:19:67: 51:99:e7:17:ac:2f:c7:47:ae:f1:b1:93:0a:cd:9e: 8b:e7:67:4c:a9:1a:33:73:9e:be:29:ab:be:95:7b: 35:e6:b5:3d:60:2c:46:0a:39:da:da:8f:cd:7e:d4: 67:be:16:79:23:f0:7c:52:95:41:43:d5:ac:c7:ea: c1:3f:ac:91:31:6d:5f:65:3e:95:b8:70:11:5e:96: d0:07:68:e0:56:8c:a2:d3:53:c4:3c:8a:57:99:e7: 5d:1e:7b:f1:cd:7d:b0:5a:c3:21:a2:cf:3b:cf:dd: ee:71:c8:5c:8c:f9:c2:d1:4d:08:56:ad:72:0e:cd: 65:31:f5:66:ae:53:3e:55:2b:e8:d9:cc:94:96:62: d4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:B6:59:2B:A2:46:1C:47:47:25:83:06:37:89:24:AA:FF:5F:A2:5B X509v3 Authority Key Identifier: keyid:F4:2D:0C:AD:0E:AE:D1:A6:1F:47:8F:B0:91:9C:7A:43:22:72:46:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:66:37:67:60:1a:2e:cb:93:a1:b3:64:fe:58:b6:a0:31:42: f2:06:41:af:b7:a3:51:2b:fa:3d:cc:87:27:ae:a6:54:50:f8: d3:25:22:e5:8f:c1:d7:dc:ce:14:89:c7:4d:3c:ef:d9:e3:ff: 31:2f:b1:95:3d:9f:53:fb:62:f6:14:1f:7b:6e:3a:af:67:4e: b8:ad:a6:ea:e3:84:04:cc:cc:39:ff:c7:fe:8c:a5:32:29:08: 5d:d1:99:88:57:6f:b8:d1:e9:f8:37:fb:05:b3:cc:55:70:2b: dd:9c:dd:cc:31:06:1a:da:78:59:95:6a:bc:74:38:b6:12:9b: b3:fd:aa:f0:13:58:5b:36:bb:46:db:e3:b6:96:a9:71:11:33: 51:9a:f2:01:3d:a4:67:b3:86:09:d8:a2:0e:c5:7b:41:b9:94: 00:61:53:c9:ed:9e:45:f3:87:95:29:3c:a7:b6:73:b4:31:94: 1f:02:dc:2d:9b:aa:91:4f:cd:27:e3:03:a9:97:25:69:04:5c: 6a:80:ed:1f:ef:9e:7d:7b:b1:b4:94:a7:e2:63:6b:76:cc:f4: d5:af:25:ef:b0:53:8b:86:38:4d:1c:9f:a7:85:fe:65:02:e8: de:ca:f8:ea:b1:87:68:af:2b:44:6b:f0:80:07:bd:91:67:49: d3:6b:e8:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoWgdhWMCRwSetWMWCi03MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0MmQwY2FkMGVhZWQxYTYxZjQ3OGZiMDkxOWM3YTQzMjI3 MjQ2OTUwHhcNMjYwMjA5MDkwMDIyWhcNMjYwMjEwMDkwMDIyWjAzMTEwLwYDVQQD Eyg2YWI2NTkyYmEyNDYxYzQ3NDcyNTgzMDYzNzg5MjRhYWZmNWZhMjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ZAhfKEmyY1kFxGwGuoTcApjdzEI E589WC4tdKGdnJsCmNY5g/yE3sWZ2sMz+Z3eh95dQgdZGthVfHjfxaBmRRmFcVNZ 44nFv1uhzwQLByiOuMX4P7Y76opYqm8+wrX4k8lcfN8O0VtayLuRZoW8Fee5cNd4 GWdRmecXrC/HR67xsZMKzZ6L52dMqRozc56+Kau+lXs15rU9YCxGCjna2o/NftRn vhZ5I/B8UpVBQ9Wsx+rBP6yRMW1fZT6VuHARXpbQB2jgVoyi01PEPIpXmeddHnvx zX2wWsMhos87z93ucchcjPnC0U0IVq1yDs1lMfVmrlM+VSvo2cyUlmLU5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGq2WSuiRhxHRyWDBjeJJKr/X6JbMB8GA1UdIwQY MBaAFPQtDK0OrtGmH0ePsJGcekMickaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUMwTXJRNnUwYVlmUjQtd2taeDZReUp5UnBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9kZmY0ZDAtMWQwYS00OTUxLThiMjct N2Y3Mzk0YmU4Y2U0LzEvOUMwTXJRNnUwYVlmUjQtd2taeDZReUp5UnBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9kZmY0ZDAtMWQwYS00OTUxLThiMjctN2Y3Mzk0YmU4Y2U0 LzEvOUMwTXJRNnUwYVlmUjQtd2taeDZReUp5UnBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPWY3Z2Aa LsuTobNk/li2oDFC8gZBr7ejUSv6PcyHJ66mVFD40yUi5Y/B19zOFInHTTzv2eP/ MS+xlT2fU/ti9hQfe246r2dOuK2m6uOEBMzMOf/H/oylMikIXdGZiFdvuNHp+Df7 BbPMVXAr3ZzdzDEGGtp4WZVqvHQ4thKbs/2q8BNYWza7RtvjtpapcREzUZryAT2k Z7OGCdiiDsV7QbmUAGFTye2eRfOHlSk8p7ZztDGUHwLcLZuqkU/NJ+MDqZclaQRc aoDtH++efXuxtJSn4mNrdsz01a8l77BTi4Y4TRyfp4X+ZQLo3sr46rGHaK8rRGvw gAe9kWdJ02vowQ== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:03 2026 by rpki-client