This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft File: t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft (raw, json) Hash identifier: ruRk1W2VSo0a29axyeFXdq2S0liImVLSiaDFZdXnPPg= Subject key identifier: A6:D7:51:78:41:FE:29:5C:ED:6C:79:F3:F1:59:34:3B:20:12:F0:7E Authority key identifier: B7:D2:96:D6:90:59:45:7B:E3:9C:3C:82:46:6A:CE:ED:02:76:68:36 Certificate issuer: /CN=b7d296d69059457be39c3c82466aceed02766836 Certificate serial: 019C43905BBA143A171EF3E7625FA41FA16F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft Manifest number: 0902 Signing time: Mon 09 Feb 2026 18:00:59 +0000 Manifest this update: Mon 09 Feb 2026 18:00:59 +0000 Manifest next update: Tue 10 Feb 2026 18:00:59 +0000 Files and hashes: 1: t9KW1pBZRXvjnDyCRmrO7QJ2aDY.crl (hash: YLzt6gyrRIdOl61Q2wYnKigSb9oRnPVlgXu215XM2XM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft rsync://rpki.ripe.net/repository/DEFAULT/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:5b:ba:14:3a:17:1e:f3:e7:62:5f:a4:1f:a1:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7d296d69059457be39c3c82466aceed02766836 Validity Not Before: Feb 9 18:00:59 2026 GMT Not After : Feb 10 18:00:59 2026 GMT Subject: CN=a6d7517841fe295ced6c79f3f159343b2012f07e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:22:3e:6d:8b:69:fe:b2:ec:1f:2f:89:74:3c: 43:a1:f5:f2:70:fe:c0:9e:bb:64:65:4c:00:05:ed: e3:51:af:13:56:e7:72:f1:da:8b:a8:59:83:6f:81: 29:fa:a3:1c:f5:65:6f:69:1f:a3:76:74:c6:47:b2: 84:a9:36:c2:30:ff:e9:b3:5a:e6:d0:3f:9b:49:54: d8:98:f3:2e:ec:37:6c:01:a4:8e:c0:a6:73:c1:68: 9e:8c:b2:3f:dd:bb:d3:b3:7f:96:d1:e6:cd:1a:cf: 6b:e7:df:0e:2e:14:26:1f:8b:82:d0:81:c5:e3:f8: 26:cd:3b:76:d5:c5:3f:4b:1d:0d:a0:00:bb:e8:7a: 39:0e:0a:5f:45:0b:31:28:6c:27:2d:84:b2:39:99: cf:a9:87:d0:fc:66:85:7a:4b:8f:78:c9:3c:90:6c: 04:e1:0e:0e:93:5b:db:65:a9:b2:34:76:60:b8:f5: db:7f:12:01:61:b7:56:7e:6c:1c:88:c8:c3:96:e0: 18:26:09:b4:e9:11:b3:ee:6f:71:29:6c:9e:49:75: d6:10:52:f3:5d:8c:09:17:d8:31:6c:bd:d4:a2:cb: ff:8f:8f:00:e8:58:05:5f:ad:ac:92:44:74:22:14: 2b:96:4a:e6:12:75:f8:fa:45:c3:d6:09:d5:79:cc: 40:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:D7:51:78:41:FE:29:5C:ED:6C:79:F3:F1:59:34:3B:20:12:F0:7E X509v3 Authority Key Identifier: keyid:B7:D2:96:D6:90:59:45:7B:E3:9C:3C:82:46:6A:CE:ED:02:76:68:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:2c:fb:71:6a:c5:d2:74:ff:0c:93:5c:7f:7f:6e:19:67:81: eb:6f:7d:6c:be:62:de:97:30:32:16:db:4a:09:b8:40:e5:32: 77:13:fa:85:c6:9d:ad:30:d5:b9:7b:05:ae:f4:78:58:2b:0d: 5e:6e:99:42:32:0a:fc:cc:6b:c2:85:2c:7b:bc:a0:5f:59:12: 4e:d1:50:bf:4a:cc:93:43:73:e6:05:8b:f9:7e:b4:a7:48:26: 53:f4:f5:5b:1b:5d:f9:40:4f:90:c2:cb:6a:18:df:54:d8:04: 1e:b0:82:a3:85:4d:3e:62:4a:8b:43:d8:31:16:72:cb:67:14: a8:93:73:66:c7:d7:2d:e2:83:cb:b8:16:dc:5b:81:28:95:98: 54:ae:ff:36:a5:7a:cc:8e:df:5f:1a:79:46:09:ce:f0:96:3d: 3f:85:f5:fd:f1:88:06:43:f9:60:df:8c:66:37:de:4f:86:d4: b0:b1:2e:5d:4e:88:97:47:72:67:5d:66:f8:88:28:6c:66:4b: 48:6b:8a:d2:41:10:e3:73:c7:8d:48:87:41:24:b8:cb:7c:57: 89:22:84:e2:49:1d:d6:b4:f5:99:48:61:4f:a0:ea:c5:4b:69: 00:fd:62:40:86:a3:bf:6f:c2:b6:82:f8:fa:97:ed:9b:f8:41: 35:44:5d:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkFu6FDoXHvPnYl+kH6FvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3ZDI5NmQ2OTA1OTQ1N2JlMzljM2M4MjQ2NmFjZWVkMDI3 NjY4MzYwHhcNMjYwMjA5MTgwMDU5WhcNMjYwMjEwMTgwMDU5WjAzMTEwLwYDVQQD EyhhNmQ3NTE3ODQxZmUyOTVjZWQ2Yzc5ZjNmMTU5MzQzYjIwMTJmMDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yI+bYtp/rLsHy+JdDxDofXycP7A nrtkZUwABe3jUa8TVudy8dqLqFmDb4Ep+qMc9WVvaR+jdnTGR7KEqTbCMP/ps1rm 0D+bSVTYmPMu7DdsAaSOwKZzwWiejLI/3bvTs3+W0ebNGs9r598OLhQmH4uC0IHF 4/gmzTt21cU/Sx0NoAC76Ho5DgpfRQsxKGwnLYSyOZnPqYfQ/GaFekuPeMk8kGwE 4Q4Ok1vbZamyNHZguPXbfxIBYbdWfmwciMjDluAYJgm06RGz7m9xKWyeSXXWEFLz XYwJF9gxbL3Uosv/j48A6FgFX62skkR0IhQrlkrmEnX4+kXD1gnVecxA4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKbXUXhB/ilc7Wx58/FZNDsgEvB+MB8GA1UdIwQY MBaAFLfSltaQWUV745w8gkZqzu0Cdmg2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDlLVzFwQlpSWHZqbkR5Q1Jtck83UUoyYURZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8zNzQ5NDctM2UyYy00MDI2LTgzMjQt MTU5MjlkMDJmZDBjLzEvdDlLVzFwQlpSWHZqbkR5Q1Jtck83UUoyYURZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8zNzQ5NDctM2UyYy00MDI2LTgzMjQtMTU5MjlkMDJmZDBj LzEvdDlLVzFwQlpSWHZqbkR5Q1Jtck83UUoyYURZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdSz7cWrF 0nT/DJNcf39uGWeB6299bL5i3pcwMhbbSgm4QOUydxP6hcadrTDVuXsFrvR4WCsN Xm6ZQjIK/MxrwoUse7ygX1kSTtFQv0rMk0Nz5gWL+X60p0gmU/T1Wxtd+UBPkMLL ahjfVNgEHrCCo4VNPmJKi0PYMRZyy2cUqJNzZsfXLeKDy7gW3FuBKJWYVK7/NqV6 zI7fXxp5RgnO8JY9P4X1/fGIBkP5YN+MZjfeT4bUsLEuXU6Il0dyZ11m+IgobGZL SGuK0kEQ43PHjUiHQSS4y3xXiSKE4kkd1rT1mUhhT6DqxUtpAP1iQIajv2/CtoL4 +pftm/hBNURdnA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:37 2026 by rpki-client