This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft File: 9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft (raw, json) Hash identifier: Iwu6u5LsYdWS7JgCrQSEUILBJLfwtFNrYyG7OZXIQ08= Subject key identifier: D0:C1:78:0E:91:9D:9B:66:9B:4D:6B:AB:0C:7B:8E:04:2E:EF:5F:CA Authority key identifier: F5:77:66:F0:72:6C:FF:86:18:AF:96:82:58:F5:BB:22:9E:93:7C:6E Certificate issuer: /CN=f57766f0726cff8618af968258f5bb229e937c6e Certificate serial: 019C427D6035051C2DC9E933611EEE350CAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft Manifest number: 0F3C Signing time: Mon 09 Feb 2026 13:00:38 +0000 Manifest this update: Mon 09 Feb 2026 13:00:38 +0000 Manifest next update: Tue 10 Feb 2026 13:00:38 +0000 Files and hashes: 1: 9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl (hash: nBRxR3wPlJckTO0ebOB1nIAdGzqh6NXZcX+/Yi+dJ7A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:60:35:05:1c:2d:c9:e9:33:61:1e:ee:35:0c:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f57766f0726cff8618af968258f5bb229e937c6e Validity Not Before: Feb 9 13:00:38 2026 GMT Not After : Feb 10 13:00:38 2026 GMT Subject: CN=d0c1780e919d9b669b4d6bab0c7b8e042eef5fca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:7d:68:39:5a:57:57:da:27:3e:60:d5:92:c2: 41:a0:01:f7:97:1b:db:78:99:87:50:48:8b:96:b7: 93:9b:3c:95:50:17:19:e1:07:3e:1e:dc:24:51:13: 68:72:4b:e8:3a:8f:77:c2:67:ae:f0:5c:c5:3b:74: fd:6b:26:af:6e:f0:7f:a8:3e:d1:cb:83:3f:9a:95: 93:ab:f3:80:09:18:8a:64:cf:93:95:25:f5:26:8f: 93:74:a1:e3:e4:aa:92:72:79:40:4d:67:58:d1:df: 1f:2a:09:1b:c4:14:37:66:34:d3:74:31:07:63:ac: 2e:f6:74:3d:74:f7:f7:f2:ee:a8:ef:06:6f:2b:df: 48:89:3b:73:ff:8a:43:29:62:c3:56:6e:de:ba:dc: 5f:f4:3a:1c:aa:50:fd:b0:4b:28:56:9f:e8:dd:3e: dd:1e:04:c6:79:99:15:e0:61:f3:e8:fd:a1:ba:08: 59:35:18:77:28:c0:77:ec:2c:66:55:47:99:d9:60: 9d:70:9e:d8:e7:6f:58:7d:cb:9a:27:8f:1b:02:ca: 4a:46:71:97:89:5d:f8:08:03:95:cf:04:84:89:27: b6:0b:5e:b0:7e:e2:78:46:03:05:7a:42:c9:9c:68: 2c:ae:d0:9e:fb:95:0f:09:ea:28:04:93:e9:b6:8b: 9f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C1:78:0E:91:9D:9B:66:9B:4D:6B:AB:0C:7B:8E:04:2E:EF:5F:CA X509v3 Authority Key Identifier: keyid:F5:77:66:F0:72:6C:FF:86:18:AF:96:82:58:F5:BB:22:9E:93:7C:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:ba:05:a9:c4:2f:be:bc:bb:84:fe:9e:23:d8:b5:b0:d5:99: f7:07:5f:3c:bb:9d:d2:80:4a:ee:2e:fe:e1:20:4d:dc:72:59: 01:46:14:45:ed:13:50:7d:87:03:4c:be:d9:54:de:21:bc:cb: e9:89:40:69:90:0d:e9:b7:bf:1d:b6:07:de:2f:a1:34:2e:98: 4f:a9:ed:d3:81:83:70:d1:36:ce:2c:ce:e4:9a:db:64:e8:fd: 0a:8d:8c:da:0d:be:d7:f9:07:5e:aa:e0:92:3e:13:21:86:1c: cf:36:bc:3e:65:3d:2d:4a:e3:4e:d8:a4:28:71:f8:52:69:15: 56:fa:82:0d:64:69:8e:77:73:d1:48:41:32:89:cb:5b:ec:2b: 58:5e:bc:83:20:f2:fe:1c:e2:04:b8:ea:96:d3:d3:29:25:73: 63:5e:6d:b7:07:e5:7b:d2:3b:bf:3e:d2:cb:e9:f4:61:67:53: 6f:e3:6f:23:0c:0d:61:b7:0c:c3:fa:ac:4b:e9:c2:fc:f8:a6: ee:e0:0c:c6:af:8f:ef:03:2b:4e:f9:35:d5:81:84:17:8a:29: 3a:4f:fb:47:5c:19:da:a1:b5:4f:50:6e:ae:33:9f:cd:c3:3d: 3a:b9:a3:8e:40:3c:88:2b:b5:4f:78:d8:eb:fa:86:d8:66:dc: 58:ec:0f:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfWA1BRwtyekzYR7uNQytMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1Nzc2NmYwNzI2Y2ZmODYxOGFmOTY4MjU4ZjViYjIyOWU5 MzdjNmUwHhcNMjYwMjA5MTMwMDM4WhcNMjYwMjEwMTMwMDM4WjAzMTEwLwYDVQQD EyhkMGMxNzgwZTkxOWQ5YjY2OWI0ZDZiYWIwYzdiOGUwNDJlZWY1ZmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk31oOVpXV9onPmDVksJBoAH3lxvb eJmHUEiLlreTmzyVUBcZ4Qc+HtwkURNockvoOo93wmeu8FzFO3T9ayavbvB/qD7R y4M/mpWTq/OACRiKZM+TlSX1Jo+TdKHj5KqScnlATWdY0d8fKgkbxBQ3ZjTTdDEH Y6wu9nQ9dPf38u6o7wZvK99IiTtz/4pDKWLDVm7eutxf9DocqlD9sEsoVp/o3T7d HgTGeZkV4GHz6P2hughZNRh3KMB37CxmVUeZ2WCdcJ7Y529YfcuaJ48bAspKRnGX iV34CAOVzwSEiSe2C16wfuJ4RgMFekLJnGgsrtCe+5UPCeooBJPptoufdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNDBeA6RnZtmm01rqwx7jgQu71/KMB8GA1UdIwQY MBaAFPV3ZvBybP+GGK+Wglj1uyKek3xuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVhkbThISnNfNFlZcjVhQ1dQVzdJcDZUZkc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC81OTBiN2YtYmJkMi00NjY2LWI4ZmMt YTgwMjI0NjA0ZjI1LzEvOVhkbThISnNfNFlZcjVhQ1dQVzdJcDZUZkc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC81OTBiN2YtYmJkMi00NjY2LWI4ZmMtYTgwMjI0NjA0ZjI1 LzEvOVhkbThISnNfNFlZcjVhQ1dQVzdJcDZUZkc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADboFqcQv vry7hP6eI9i1sNWZ9wdfPLud0oBK7i7+4SBN3HJZAUYURe0TUH2HA0y+2VTeIbzL 6YlAaZAN6be/HbYH3i+hNC6YT6nt04GDcNE2zizO5JrbZOj9Co2M2g2+1/kHXqrg kj4TIYYczza8PmU9LUrjTtikKHH4UmkVVvqCDWRpjndz0UhBMonLW+wrWF68gyDy /hziBLjqltPTKSVzY15ttwfle9I7vz7Sy+n0YWdTb+NvIwwNYbcMw/qsS+nC/Pim 7uAMxq+P7wMrTvk11YGEF4opOk/7R1wZ2qG1T1BurjOfzcM9OrmjjkA8iCu1T3jY 6/qG2GbcWOwPfA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:36 2026 by rpki-client