This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft File: 9LndnjT-ZtdROJA3CPjOH700LWQ.mft (raw, json) Hash identifier: OsKgjrm6hBXwpF/4WcT0SIrRTJPwPJWFy8m+yEuSSa8= Subject key identifier: 4D:6E:6F:D1:27:F3:7F:A0:B0:A0:92:14:82:09:3F:32:23:F6:1D:54 Authority key identifier: F4:B9:DD:9E:34:FE:66:D7:51:38:90:37:08:F8:CE:1F:BD:34:2D:64 Certificate issuer: /CN=f4b9dd9e34fe66d75138903708f8ce1fbd342d64 Certificate serial: 019C43590601E6559CFF2BEAA9AC37F083D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft Manifest number: 1814 Signing time: Mon 09 Feb 2026 17:00:33 +0000 Manifest this update: Mon 09 Feb 2026 17:00:33 +0000 Manifest next update: Tue 10 Feb 2026 17:00:33 +0000 Files and hashes: 1: 9LndnjT-ZtdROJA3CPjOH700LWQ.crl (hash: NvztTa8xe9roGcDDHzlwQ5+MlbSU70zA6pVdVaSjDqs=) 2: kseNmYdhBq1K_noazDOmBmDbF5s.roa (hash: ATubQciMVM4Jml+pZxIMMSnD/6uFD6UKEHkdr+OIXB0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:06:01:e6:55:9c:ff:2b:ea:a9:ac:37:f0:83:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4b9dd9e34fe66d75138903708f8ce1fbd342d64 Validity Not Before: Feb 9 17:00:33 2026 GMT Not After : Feb 10 17:00:33 2026 GMT Subject: CN=4d6e6fd127f37fa0b0a0921482093f3223f61d54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:5e:2d:30:5f:aa:42:50:5b:f1:4e:3e:50:d1: 96:7f:a1:df:5a:b9:cb:4c:52:12:61:8d:b8:65:16: 14:ea:cb:9a:d4:c2:5c:a4:b2:40:2a:22:e1:87:5f: 73:1c:e1:fd:4b:65:86:66:f5:8a:a7:fd:4d:8e:e1: 46:ad:90:42:c1:15:95:3e:60:2b:59:61:a8:b7:68: 9d:aa:2e:6f:0e:cd:b2:9d:0b:0b:9c:1b:26:22:f2: 0c:f6:00:c0:5b:77:37:3e:af:0b:a6:de:2c:f4:62: 90:5a:d5:0b:0b:26:6a:f2:58:dc:83:59:f0:54:4f: fd:e5:fa:9e:9c:63:01:95:67:e0:b8:ca:ac:3f:94: 64:45:85:c6:50:73:41:48:c7:50:c4:74:e3:ae:c5: 87:af:66:b4:25:fd:a2:21:02:c2:c2:04:a7:57:2c: b5:d8:f5:93:60:45:da:66:0b:a8:82:0b:73:06:5e: 05:ca:ab:08:b1:78:a2:4a:c6:09:f1:aa:00:56:de: 3d:3f:9e:94:7a:eb:f0:bb:0b:bb:af:5f:51:8e:87: 1f:18:cf:f0:06:0c:4a:73:fb:6b:1f:82:bc:fb:67: e2:c3:e2:2a:2a:f4:6d:54:60:8b:57:43:4f:aa:8d: f0:ca:e6:25:c9:e6:cc:04:fc:89:aa:55:2f:e4:56: c8:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:6E:6F:D1:27:F3:7F:A0:B0:A0:92:14:82:09:3F:32:23:F6:1D:54 X509v3 Authority Key Identifier: keyid:F4:B9:DD:9E:34:FE:66:D7:51:38:90:37:08:F8:CE:1F:BD:34:2D:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:72:2b:60:e0:df:f2:e1:b6:18:6e:8a:f0:75:01:60:6c:96: b6:a6:fb:07:27:83:b3:15:0d:b6:03:2d:97:34:bf:01:3b:42: ff:ab:81:b4:89:a9:3f:7a:0a:31:c6:dc:44:92:62:4e:64:86: bc:cd:7f:f0:d8:6e:2a:e2:97:e6:fe:c9:b0:62:8e:fa:48:ef: 2b:d4:ab:99:fb:93:00:b6:e1:ad:b8:fd:d7:05:65:cb:21:fe: 98:ef:43:9e:bb:0f:77:b2:72:80:54:dd:6b:45:07:29:20:2b: 0e:60:ff:5d:2e:1b:d1:72:67:79:e7:e0:02:f6:74:79:f0:34: 43:f6:12:c0:f5:25:c6:28:80:b7:98:42:e3:39:28:d1:96:5b: 77:83:31:56:73:b2:01:11:ea:a6:e5:c8:42:5f:c2:f0:2d:a6: 30:77:08:75:c0:5b:2b:19:1c:2c:4d:7b:e0:60:d0:df:4e:be: f6:48:6e:5a:85:19:2b:21:7b:bc:e0:96:b5:59:94:d2:f3:93: 00:90:74:62:d1:e2:b6:a2:ce:51:62:af:ad:f3:e3:5f:41:a4: 43:b6:9a:86:04:c2:26:cf:bf:b5:2a:48:90:1d:e4:59:e4:d4: d3:44:22:35:30:63:5d:78:9a:2c:d8:5b:09:1d:45:be:de:40: 86:81:2f:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWQYB5lWc/yvqqaw38IPRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0YjlkZDllMzRmZTY2ZDc1MTM4OTAzNzA4ZjhjZTFmYmQz NDJkNjQwHhcNMjYwMjA5MTcwMDMzWhcNMjYwMjEwMTcwMDMzWjAzMTEwLwYDVQQD Eyg0ZDZlNmZkMTI3ZjM3ZmEwYjBhMDkyMTQ4MjA5M2YzMjIzZjYxZDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl14tMF+qQlBb8U4+UNGWf6HfWrnL TFISYY24ZRYU6sua1MJcpLJAKiLhh19zHOH9S2WGZvWKp/1NjuFGrZBCwRWVPmAr WWGot2idqi5vDs2ynQsLnBsmIvIM9gDAW3c3Pq8Lpt4s9GKQWtULCyZq8ljcg1nw VE/95fqenGMBlWfguMqsP5RkRYXGUHNBSMdQxHTjrsWHr2a0Jf2iIQLCwgSnVyy1 2PWTYEXaZguoggtzBl4FyqsIsXiiSsYJ8aoAVt49P56Ueuvwuwu7r19RjocfGM/w BgxKc/trH4K8+2fiw+IqKvRtVGCLV0NPqo3wyuYlyebMBPyJqlUv5FbIUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE1ub9En83+gsKCSFIIJPzIj9h1UMB8GA1UdIwQY MBaAFPS53Z40/mbXUTiQNwj4zh+9NC1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUxuZG5qVC1adGRST0pBM0NQak9INzAwTFdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9lY2FmNDQtMDhjYy00MWJiLTgxZDMt MjYyYmVjNzE3YjE3LzEvOUxuZG5qVC1adGRST0pBM0NQak9INzAwTFdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9lY2FmNDQtMDhjYy00MWJiLTgxZDMtMjYyYmVjNzE3YjE3 LzEvOUxuZG5qVC1adGRST0pBM0NQak9INzAwTFdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp3IrYODf 8uG2GG6K8HUBYGyWtqb7ByeDsxUNtgMtlzS/ATtC/6uBtImpP3oKMcbcRJJiTmSG vM1/8NhuKuKX5v7JsGKO+kjvK9SrmfuTALbhrbj91wVlyyH+mO9DnrsPd7JygFTd a0UHKSArDmD/XS4b0XJneefgAvZ0efA0Q/YSwPUlxiiAt5hC4zko0ZZbd4MxVnOy ARHqpuXIQl/C8C2mMHcIdcBbKxkcLE174GDQ306+9khuWoUZKyF7vOCWtVmU0vOT AJB0YtHitqLOUWKvrfPjX0GkQ7aahgTCJs+/tSpIkB3kWeTU00QiNTBjXXiaLNhb CR1Fvt5AhoEv1A== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:40 2026 by rpki-client