This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft File: 9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft (raw, json) Hash identifier: uFlkq1X7aOAJjssd0Y66OI01zdaDUER6aeILgyR4trw= Subject key identifier: A2:02:AC:0C:62:79:23:34:15:46:63:AE:67:F4:35:F9:F3:24:E7:19 Authority key identifier: F4:27:2A:C0:42:3F:B0:97:58:3C:68:72:56:7D:84:CA:E4:10:C8:9B Certificate issuer: /CN=f4272ac0423fb097583c6872567d84cae410c89b Certificate serial: 019C420FC5439441F36B94F1722DEFD1F1BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft Manifest number: 0B26 Signing time: Mon 09 Feb 2026 11:00:55 +0000 Manifest this update: Mon 09 Feb 2026 11:00:55 +0000 Manifest next update: Tue 10 Feb 2026 11:00:55 +0000 Files and hashes: 1: 9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl (hash: F8LlnYusp6sFUPBKG3cbEkneuQTn583iWh0FX1CI0wo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:c5:43:94:41:f3:6b:94:f1:72:2d:ef:d1:f1:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4272ac0423fb097583c6872567d84cae410c89b Validity Not Before: Feb 9 11:00:55 2026 GMT Not After : Feb 10 11:00:55 2026 GMT Subject: CN=a202ac0c62792334154663ae67f435f9f324e719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fa:e7:75:22:87:33:1e:c9:0a:3d:45:2e:91: 37:b8:aa:96:ff:4b:9a:50:c1:57:80:03:d6:c4:98: 47:1a:ad:fd:2e:6e:91:b9:e2:a2:c2:7c:98:a7:79: f7:17:fa:5e:04:2c:69:03:60:e6:cd:1e:13:9a:d4: 2b:78:8a:bd:16:2f:f7:f2:4b:ab:df:5e:2e:bf:e9: 64:1e:9a:77:cc:51:e0:ac:d8:ae:24:22:7f:fa:93: 0e:bd:e0:f1:62:c1:c5:1c:64:22:fe:4d:55:48:d1: 9c:f9:2a:3a:79:9a:a8:6f:c5:6e:a2:18:f2:ac:25: 9f:1e:7e:88:d9:bd:73:61:e3:d5:95:ca:80:62:fc: 68:fb:a5:4d:cd:43:ab:ee:70:ca:7d:57:a2:34:16: ed:d9:0a:c9:a1:57:38:af:64:cb:da:f6:f8:be:63: 0e:97:a9:9d:be:91:13:00:01:be:de:92:90:5c:55: 3e:ee:38:45:b8:84:ff:b9:89:9b:8c:b1:66:8d:18: 90:45:c9:70:0a:8a:0b:00:2e:44:f3:10:35:9b:75: 47:86:66:a0:0a:ea:0e:55:b6:09:e7:12:89:fb:24: df:d8:5d:c0:a9:64:ef:24:87:09:06:aa:bf:fc:c0: 18:82:21:b0:08:82:1b:84:31:53:4e:3c:8b:93:94: 21:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:02:AC:0C:62:79:23:34:15:46:63:AE:67:F4:35:F9:F3:24:E7:19 X509v3 Authority Key Identifier: keyid:F4:27:2A:C0:42:3F:B0:97:58:3C:68:72:56:7D:84:CA:E4:10:C8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:74:8f:47:1f:5b:c8:9b:7c:be:69:d4:85:52:20:27:0c:a7: 8b:61:9a:56:1b:37:f2:8d:70:cc:74:d0:f3:76:c9:22:cc:cc: a9:74:4e:30:ee:a0:88:37:db:9a:db:6e:41:f7:8c:ff:5e:a4: 60:2b:17:42:8e:b9:47:16:58:dc:80:37:cc:d5:d8:ee:f7:ed: 47:17:e4:63:c1:84:9b:3c:09:bd:e2:2c:cd:b8:a6:93:38:ae: 0b:c2:d9:ee:d4:50:1c:81:69:bf:e2:5a:47:97:98:2f:f1:5b: 51:33:10:38:ea:1b:5a:56:e0:f6:d2:01:7d:54:6a:4a:45:9c: a0:73:5b:ea:ff:1f:55:99:58:b3:ab:e0:ba:10:fa:9a:f0:59: ed:a6:3c:8a:6b:54:25:4b:14:42:52:aa:d5:4e:44:38:78:16: c6:5a:8a:48:1e:0a:e9:9e:8b:34:78:a7:45:d1:a1:9c:77:2f: 06:a9:3a:64:26:c6:fe:de:aa:7a:e9:e2:11:7d:e7:09:74:7c: ae:a6:33:1a:34:0d:4c:56:cd:31:20:57:e7:c2:8d:d5:6f:81: c6:32:82:5f:ea:73:ce:ba:11:2b:72:6e:3f:ff:eb:0b:a5:a4: cc:0a:af:64:07:ec:cc:a8:60:1f:7a:1d:4a:88:4b:45:d4:44: fa:a3:96:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD8VDlEHza5Txci3v0fG/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0MjcyYWMwNDIzZmIwOTc1ODNjNjg3MjU2N2Q4NGNhZTQx MGM4OWIwHhcNMjYwMjA5MTEwMDU1WhcNMjYwMjEwMTEwMDU1WjAzMTEwLwYDVQQD EyhhMjAyYWMwYzYyNzkyMzM0MTU0NjYzYWU2N2Y0MzVmOWYzMjRlNzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvrndSKHMx7JCj1FLpE3uKqW/0ua UMFXgAPWxJhHGq39Lm6RueKiwnyYp3n3F/peBCxpA2DmzR4TmtQreIq9Fi/38kur 314uv+lkHpp3zFHgrNiuJCJ/+pMOveDxYsHFHGQi/k1VSNGc+So6eZqob8Vuohjy rCWfHn6I2b1zYePVlcqAYvxo+6VNzUOr7nDKfVeiNBbt2QrJoVc4r2TL2vb4vmMO l6mdvpETAAG+3pKQXFU+7jhFuIT/uYmbjLFmjRiQRclwCooLAC5E8xA1m3VHhmag CuoOVbYJ5xKJ+yTf2F3AqWTvJIcJBqq//MAYgiGwCIIbhDFTTjyLk5QhdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKICrAxieSM0FUZjrmf0NfnzJOcZMB8GA1UdIwQY MBaAFPQnKsBCP7CXWDxoclZ9hMrkEMibMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUNjcXdFSV9zSmRZUEdoeVZuMkV5dVFReUpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy83ZjJjZjItNDI5NC00M2Q2LWEzMjEt NDdlZGRkZTJhMzcyLzEvOUNjcXdFSV9zSmRZUEdoeVZuMkV5dVFReUpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy83ZjJjZjItNDI5NC00M2Q2LWEzMjEtNDdlZGRkZTJhMzcy LzEvOUNjcXdFSV9zSmRZUEdoeVZuMkV5dVFReUpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdXSPRx9b yJt8vmnUhVIgJwyni2GaVhs38o1wzHTQ83bJIszMqXROMO6giDfbmttuQfeM/16k YCsXQo65RxZY3IA3zNXY7vftRxfkY8GEmzwJveIszbimkziuC8LZ7tRQHIFpv+Ja R5eYL/FbUTMQOOobWlbg9tIBfVRqSkWcoHNb6v8fVZlYs6vguhD6mvBZ7aY8imtU JUsUQlKq1U5EOHgWxlqKSB4K6Z6LNHinRdGhnHcvBqk6ZCbG/t6qeuniEX3nCXR8 rqYzGjQNTFbNMSBX58KN1W+BxjKCX+pzzroRK3JuP//rC6WkzAqvZAfszKhgH3od SohLRdRE+qOWFQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:08:02 2026 by rpki-client