This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft File: D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft (raw, json) Hash identifier: 4YzAuMZDs1wPr7PU0RybujIcpNmtq1+wn7/b1182ZbY= Subject key identifier: D3:F9:E1:22:9C:F4:BE:1A:B6:B4:84:35:02:5B:4C:81:AF:0C:DE:BE Authority key identifier: 0F:D1:D0:CC:53:21:9B:6F:E6:81:E1:89:E5:E9:3D:63:57:73:6C:CF Certificate issuer: /CN=0fd1d0cc53219b6fe681e189e5e93d6357736ccf Certificate serial: 019C44A2553BF2F9EEF2FEC7A9101314B6FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft Manifest number: 0221 Signing time: Mon 09 Feb 2026 23:00:15 +0000 Manifest this update: Mon 09 Feb 2026 23:00:15 +0000 Manifest next update: Tue 10 Feb 2026 23:00:15 +0000 Files and hashes: 1: D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.crl (hash: 8ytobg0T+8zplMpNDdhNFivcgqLrTF3QoE8dl+Plyj4=) 2: w2RkZIyXNqzrvFHvVSZFRm-pJFQ.roa (hash: 1g4lPlIgbxd4u2cE0VtdggkYIEEI5tatrW6BetCUOgo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.crl rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft rsync://rpki.ripe.net/repository/DEFAULT/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:a2:55:3b:f2:f9:ee:f2:fe:c7:a9:10:13:14:b6:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fd1d0cc53219b6fe681e189e5e93d6357736ccf Validity Not Before: Feb 9 23:00:15 2026 GMT Not After : Feb 10 23:00:15 2026 GMT Subject: CN=d3f9e1229cf4be1ab6b48435025b4c81af0cdebe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:be:7c:4a:71:50:4c:0f:af:1b:0f:d0:d2:7c: aa:e9:e0:1e:7e:fc:f6:9d:c1:ea:eb:03:ab:52:8e: 70:0b:c9:5a:ce:9c:b5:e6:79:c0:21:3b:25:0b:0e: 63:5a:d5:0d:31:0e:93:26:44:5f:90:6a:a2:b5:d1: 92:f2:de:43:e7:99:be:3c:40:0d:bf:a9:d1:7e:5c: d0:61:69:a3:0e:4f:a9:3b:6d:80:2d:31:ef:21:bb: 27:44:19:14:22:f3:7d:96:da:a8:7b:37:eb:2b:b6: 32:4b:dd:de:79:9f:df:1c:5d:81:a8:22:2b:0c:3a: 19:20:a9:96:30:83:f5:1d:62:f9:17:3f:0f:73:ce: d8:2a:d0:dd:02:2a:fd:ca:43:3c:95:69:c0:82:e5: 05:da:7b:3d:ea:32:c7:ba:f8:58:02:f8:5a:14:cf: 1c:30:16:56:8e:f2:1d:e6:c7:ac:a7:b2:6b:db:b4: 42:18:18:82:4c:aa:fe:0b:fb:46:f0:3b:95:08:f1: 45:c6:c9:72:c8:74:77:58:85:39:bd:c9:5b:85:fd: ff:e0:1a:08:4e:75:7d:f1:68:d5:98:fd:57:e5:8c: fc:ac:2d:b1:d3:76:5d:93:b4:01:64:82:6b:d0:90: 55:c5:ca:55:d0:a7:c1:92:04:65:83:fb:79:5a:a2: f0:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:F9:E1:22:9C:F4:BE:1A:B6:B4:84:35:02:5B:4C:81:AF:0C:DE:BE X509v3 Authority Key Identifier: keyid:0F:D1:D0:CC:53:21:9B:6F:E6:81:E1:89:E5:E9:3D:63:57:73:6C:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:75:f4:93:79:6a:96:07:b0:e1:14:c7:11:22:6e:38:b7:9a: a3:b9:cb:18:6c:d6:c7:29:f2:10:9b:6c:b2:91:8c:f0:1c:04: ba:32:a9:62:22:0a:da:07:d8:4d:0e:1e:0f:dd:7a:86:5c:88: 58:da:a3:52:b9:79:9d:43:2a:c8:09:ab:82:25:3d:ce:13:ae: 01:61:ed:91:26:68:fd:31:72:71:da:de:a2:0b:46:f1:6b:d6: d9:e0:80:d8:5d:b1:db:dd:b4:13:00:d9:77:20:ae:1c:b7:9b: 6d:7b:a7:3d:59:48:bf:3f:59:0d:ac:01:33:71:6b:f8:5a:da: 51:f0:6b:4a:03:e5:4e:7a:fa:49:ae:00:c4:75:c0:c9:a4:c6: c1:b8:d7:0d:e7:e4:9b:c2:6d:6c:04:0d:95:8d:9e:77:2e:47: 78:ef:df:ec:b1:ba:2b:58:4f:82:85:5c:b4:f7:55:4e:1d:51: 9d:6d:70:d3:4a:70:d3:03:bd:7e:f0:8d:4e:a2:d5:ee:a1:80: 50:db:df:26:1d:48:7e:13:41:19:9b:e6:91:d3:e0:56:f3:bb: 3c:00:6e:05:a4:90:e7:02:7f:8d:bb:03:90:bf:6e:72:06:8b: 0d:c8:b8:04:66:96:ff:e2:77:09:2c:ba:54:f0:9d:93:6a:3b: 37:1c:74:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEolU78vnu8v7HqRATFLb9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZDFkMGNjNTMyMTliNmZlNjgxZTE4OWU1ZTkzZDYzNTc3 MzZjY2YwHhcNMjYwMjA5MjMwMDE1WhcNMjYwMjEwMjMwMDE1WjAzMTEwLwYDVQQD EyhkM2Y5ZTEyMjljZjRiZTFhYjZiNDg0MzUwMjViNGM4MWFmMGNkZWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArL58SnFQTA+vGw/Q0nyq6eAefvz2 ncHq6wOrUo5wC8lazpy15nnAITslCw5jWtUNMQ6TJkRfkGqitdGS8t5D55m+PEAN v6nRflzQYWmjDk+pO22ALTHvIbsnRBkUIvN9ltqoezfrK7YyS93eeZ/fHF2BqCIr DDoZIKmWMIP1HWL5Fz8Pc87YKtDdAir9ykM8lWnAguUF2ns96jLHuvhYAvhaFM8c MBZWjvId5sesp7Jr27RCGBiCTKr+C/tG8DuVCPFFxslyyHR3WIU5vclbhf3/4BoI TnV98WjVmP1X5Yz8rC2x03Zdk7QBZIJr0JBVxcpV0KfBkgRlg/t5WqLwEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNP54SKc9L4atrSENQJbTIGvDN6+MB8GA1UdIwQY MBaAFA/R0MxTIZtv5oHhieXpPWNXc2zPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDlIUXpGTWhtMl9tZ2VHSjVlazlZMWR6Yk04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi83ZWU0NDItMGVkNS00MzAzLTk2YmQt NDEwYjk5NjZlMjA1LzEvRDlIUXpGTWhtMl9tZ2VHSjVlazlZMWR6Yk04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi83ZWU0NDItMGVkNS00MzAzLTk2YmQtNDEwYjk5NjZlMjA1 LzEvRDlIUXpGTWhtMl9tZ2VHSjVlazlZMWR6Yk04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYHX0k3lq lgew4RTHESJuOLeao7nLGGzWxynyEJtsspGM8BwEujKpYiIK2gfYTQ4eD916hlyI WNqjUrl5nUMqyAmrgiU9zhOuAWHtkSZo/TFycdreogtG8WvW2eCA2F2x2920EwDZ dyCuHLebbXunPVlIvz9ZDawBM3Fr+FraUfBrSgPlTnr6Sa4AxHXAyaTGwbjXDefk m8JtbAQNlY2edy5HeO/f7LG6K1hPgoVctPdVTh1RnW1w00pw0wO9fvCNTqLV7qGA UNvfJh1IfhNBGZvmkdPgVvO7PABuBaSQ5wJ/jbsDkL9ucgaLDci4BGaW/+J3CSy6 VPCdk2o7Nxx0ZA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:39:32 2026 by rpki-client