This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/adbe17-1b78-4534-b405-a47a957c962d/1/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.mft File: 9xQ-hX4hVDD-DLUsLfTL7Rs0c40.mft (raw, json) Hash identifier: oMg3xL+APJHA5Q6W3ztAXexwARbfT/N9mTkwIcnuwkU= Subject key identifier: C1:83:81:7A:63:DF:C0:19:03:AC:0E:D6:06:1C:12:6A:52:AB:1B:3A Authority key identifier: F7:14:3E:85:7E:21:54:30:FE:0C:B5:2C:2D:F4:CB:ED:1B:34:73:8D Certificate issuer: /CN=f7143e857e215430fe0cb52c2df4cbed1b34738d Certificate serial: 019C42B4046EDF891B872C6C318FD4C29885 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/adbe17-1b78-4534-b405-a47a957c962d/1/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.mft Manifest number: 01B2 Signing time: Mon 09 Feb 2026 14:00:19 +0000 Manifest this update: Mon 09 Feb 2026 14:00:19 +0000 Manifest next update: Tue 10 Feb 2026 14:00:19 +0000 Files and hashes: 1: 9xQ-hX4hVDD-DLUsLfTL7Rs0c40.crl (hash: vBSiNDF61BFLixZf9DvxK/xh8qwET1QOBkXfC4Rg24Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/adbe17-1b78-4534-b405-a47a957c962d/1/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.crl rsync://rpki.ripe.net/repository/DEFAULT/36/adbe17-1b78-4534-b405-a47a957c962d/1/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.mft rsync://rpki.ripe.net/repository/DEFAULT/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:04:6e:df:89:1b:87:2c:6c:31:8f:d4:c2:98:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7143e857e215430fe0cb52c2df4cbed1b34738d Validity Not Before: Feb 9 14:00:19 2026 GMT Not After : Feb 10 14:00:19 2026 GMT Subject: CN=c183817a63dfc01903ac0ed6061c126a52ab1b3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:58:2b:f7:ec:b8:41:74:00:50:f5:aa:ca:fd: 5f:b5:aa:43:d7:23:60:81:28:bc:f8:2a:36:96:58: cb:31:d2:13:dc:43:c9:6e:45:09:ac:4a:2a:76:5c: 6c:59:94:e2:da:e6:0e:63:f9:8b:09:b2:5f:3d:8b: d6:88:38:20:be:07:03:ad:a2:6c:71:53:c9:92:a5: da:a2:10:48:f5:3e:b1:13:27:dc:9d:78:c0:01:f6: bf:ed:43:b8:52:46:20:b7:45:08:6b:f5:04:01:5a: 5f:4a:f3:0b:56:66:02:83:2f:78:a4:19:2f:22:cf: 96:fa:03:42:33:fb:bb:1a:2d:8d:3d:5b:fc:45:86: 91:2d:09:c5:f4:7b:e3:03:23:d2:b2:69:36:3c:12: e6:0a:b3:69:be:5e:00:cb:27:ac:c5:34:e4:73:a9: 59:f8:c9:f5:45:4f:be:e7:56:29:30:c5:cc:bf:e3: 71:cf:58:c3:bf:1e:24:98:7c:0c:f8:71:c2:5f:21: d1:30:01:22:cc:c9:58:fc:e8:e3:df:8d:dd:8f:99: 6e:b7:ad:92:fe:46:45:8a:d3:13:f9:71:c4:5f:7b: 18:17:2e:9a:01:e8:d0:de:f3:20:ef:46:d7:c4:04: fe:b0:0e:ce:0e:d8:b5:a0:51:e6:97:46:2a:d4:52: 8d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:83:81:7A:63:DF:C0:19:03:AC:0E:D6:06:1C:12:6A:52:AB:1B:3A X509v3 Authority Key Identifier: keyid:F7:14:3E:85:7E:21:54:30:FE:0C:B5:2C:2D:F4:CB:ED:1B:34:73:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/adbe17-1b78-4534-b405-a47a957c962d/1/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/adbe17-1b78-4534-b405-a47a957c962d/1/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:db:40:11:58:11:16:6b:bd:f7:b3:1d:b2:bb:f9:f4:70:bc: 84:70:d3:4a:3b:10:5f:bc:d5:73:df:56:ee:fb:60:ea:db:89: 77:46:51:29:e1:4a:7f:c8:50:ed:55:f1:07:d4:16:9b:f6:47: 92:2f:b1:61:1a:bb:41:93:b6:62:7e:b2:70:7a:36:ae:a0:3e: 80:6f:13:1e:4b:9a:cb:73:23:24:f8:10:dc:47:a6:66:2e:e8: 02:b1:6e:02:98:d5:e3:0b:33:40:48:95:4f:64:3e:05:5a:28: 9e:0b:7b:39:0f:65:af:e6:5f:4d:99:33:0c:ad:ed:72:dd:4f: f4:18:f8:be:35:43:b5:89:09:eb:a0:6e:43:46:b0:33:9a:23: 22:5c:d3:31:0e:22:67:bf:22:16:44:a8:f6:7c:70:fe:26:47: 9f:51:43:6d:5f:58:05:62:78:d2:2c:38:4e:06:af:c0:f7:08: 70:d7:48:c1:24:86:b8:72:e4:28:7c:27:dc:19:97:aa:42:73: de:d4:ba:6d:e1:04:06:3c:14:97:df:61:52:af:43:45:22:89: df:f5:02:5e:1b:9a:aa:a2:76:ec:0b:f7:09:bf:4b:0d:2f:56: a5:f6:24:a5:ad:b0:0c:2a:d9:66:a7:e2:09:11:37:b1:01:9d: c6:51:3c:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtARu34kbhyxsMY/UwpiFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3MTQzZTg1N2UyMTU0MzBmZTBjYjUyYzJkZjRjYmVkMWIz NDczOGQwHhcNMjYwMjA5MTQwMDE5WhcNMjYwMjEwMTQwMDE5WjAzMTEwLwYDVQQD EyhjMTgzODE3YTYzZGZjMDE5MDNhYzBlZDYwNjFjMTI2YTUyYWIxYjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1gr9+y4QXQAUPWqyv1ftapD1yNg gSi8+Co2lljLMdIT3EPJbkUJrEoqdlxsWZTi2uYOY/mLCbJfPYvWiDggvgcDraJs cVPJkqXaohBI9T6xEyfcnXjAAfa/7UO4UkYgt0UIa/UEAVpfSvMLVmYCgy94pBkv Is+W+gNCM/u7Gi2NPVv8RYaRLQnF9HvjAyPSsmk2PBLmCrNpvl4AyyesxTTkc6lZ +Mn1RU++51YpMMXMv+Nxz1jDvx4kmHwM+HHCXyHRMAEizMlY/Ojj343dj5lut62S /kZFitMT+XHEX3sYFy6aAejQ3vMg70bXxAT+sA7ODti1oFHml0Yq1FKNEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMGDgXpj38AZA6wO1gYcEmpSqxs6MB8GA1UdIwQY MBaAFPcUPoV+IVQw/gy1LC30y+0bNHONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXhRLWhYNGhWREQtRExVc0xmVEw3UnMwYzQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hZGJlMTctMWI3OC00NTM0LWI0MDUt YTQ3YTk1N2M5NjJkLzEvOXhRLWhYNGhWREQtRExVc0xmVEw3UnMwYzQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hZGJlMTctMWI3OC00NTM0LWI0MDUtYTQ3YTk1N2M5NjJk LzEvOXhRLWhYNGhWREQtRExVc0xmVEw3UnMwYzQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAattAEVgR Fmu997Mdsrv59HC8hHDTSjsQX7zVc99W7vtg6tuJd0ZRKeFKf8hQ7VXxB9QWm/ZH ki+xYRq7QZO2Yn6ycHo2rqA+gG8THkuay3MjJPgQ3EemZi7oArFuApjV4wszQEiV T2Q+BVoongt7OQ9lr+ZfTZkzDK3tct1P9Bj4vjVDtYkJ66BuQ0awM5ojIlzTMQ4i Z78iFkSo9nxw/iZHn1FDbV9YBWJ40iw4TgavwPcIcNdIwSSGuHLkKHwn3BmXqkJz 3tS6beEEBjwUl99hUq9DRSKJ3/UCXhuaqqJ27Av3Cb9LDS9WpfYkpa2wDCrZZqfi CRE3sQGdxlE8ew== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:56 2026 by rpki-client