This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft File: T9a30KYwNXvDweDN2gbcqIo0Y-w.mft (raw, json) Hash identifier: z2Sp+zSy6V+OaryhqaglTJGBxhejLNAOA7QZdYxdmgQ= Subject key identifier: 73:10:24:ED:B1:A3:54:52:5C:54:06:5A:EE:B3:17:FB:D9:3B:C4:98 Authority key identifier: 4F:D6:B7:D0:A6:30:35:7B:C3:C1:E0:CD:DA:06:DC:A8:8A:34:63:EC Certificate issuer: /CN=4fd6b7d0a630357bc3c1e0cdda06dca88a3463ec Certificate serial: 019C420F4E97C93AABAAAD8F1286B14C80EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9a30KYwNXvDweDN2gbcqIo0Y-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft Manifest number: 06FE Signing time: Mon 09 Feb 2026 11:00:25 +0000 Manifest this update: Mon 09 Feb 2026 11:00:25 +0000 Manifest next update: Tue 10 Feb 2026 11:00:25 +0000 Files and hashes: 1: T9a30KYwNXvDweDN2gbcqIo0Y-w.crl (hash: IGZrs9QOjIoY3vP/MlQJ1jvm1ALVQd1GLN1foSHFCHE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft rsync://rpki.ripe.net/repository/DEFAULT/T9a30KYwNXvDweDN2gbcqIo0Y-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:4e:97:c9:3a:ab:aa:ad:8f:12:86:b1:4c:80:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fd6b7d0a630357bc3c1e0cdda06dca88a3463ec Validity Not Before: Feb 9 11:00:25 2026 GMT Not After : Feb 10 11:00:25 2026 GMT Subject: CN=731024edb1a354525c54065aeeb317fbd93bc498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:cc:54:34:93:ac:a9:62:ac:29:57:0b:00:4a: e5:a4:9d:db:66:57:72:59:d5:a6:f7:12:71:e5:1d: 19:69:3f:82:d1:71:9a:e4:9e:90:72:d5:4e:a5:27: 6e:d7:6f:72:1c:33:09:1f:52:a6:80:ec:32:65:d7: 76:fa:a4:57:7a:21:d9:53:89:94:54:81:ba:7d:82: 08:60:b9:30:65:c9:3f:a9:50:15:8b:9d:87:c4:85: d5:b8:a7:6a:b4:69:37:31:34:ce:54:0e:8f:e6:1b: 7c:05:51:d0:a8:62:2d:f2:79:ff:90:36:fb:93:ef: ed:f5:78:54:97:2a:d4:08:de:7c:e3:cb:2d:87:1f: 55:f2:cd:4a:61:97:a9:bd:92:0c:c5:68:b5:22:c8: c7:d6:0c:35:0f:44:e5:45:4d:30:f4:2e:6e:ca:e4: 36:63:e5:af:d6:2a:6e:ea:b7:47:7e:4e:21:49:33: a0:61:a5:d6:50:ec:f8:65:9a:c5:d6:7c:30:e8:be: 2b:b9:0d:d7:33:91:07:62:e9:d2:fe:46:08:8a:8a: 0e:46:11:b5:64:3e:c2:2f:c3:3e:38:0b:c5:03:13: a3:54:74:52:53:80:39:85:1b:1d:43:f3:dd:51:14: e6:0d:4a:dc:97:4f:ac:ff:1d:e9:ec:fe:d3:e1:42: e0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:10:24:ED:B1:A3:54:52:5C:54:06:5A:EE:B3:17:FB:D9:3B:C4:98 X509v3 Authority Key Identifier: keyid:4F:D6:B7:D0:A6:30:35:7B:C3:C1:E0:CD:DA:06:DC:A8:8A:34:63:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9a30KYwNXvDweDN2gbcqIo0Y-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:20:3b:4b:4b:b8:0b:d4:a2:8f:5b:19:2d:fe:ad:18:d2:97: 62:37:c3:58:e6:9c:73:7d:c7:73:8b:3f:c9:6a:ed:02:91:1f: dd:51:df:25:97:05:91:1e:39:5b:7a:c4:b6:9f:63:aa:ad:b4: a7:f7:cc:a1:0a:34:dc:db:2c:27:4d:72:1a:91:c4:21:1c:5a: 27:ec:07:2d:62:db:94:11:4b:57:90:97:5d:0e:ea:67:c6:b3: 1b:b0:f9:b4:62:3b:64:c3:17:8a:35:aa:88:de:d7:17:46:5f: dc:73:19:9d:8d:ad:82:2e:06:61:73:74:16:f0:fa:1e:32:48: b3:90:2b:63:8b:29:e6:1e:c6:99:c0:a2:33:7c:bf:75:70:68: 16:8a:2e:31:67:40:6f:e8:0c:8a:90:72:7b:c7:01:f5:80:c6: cd:32:9e:8d:d8:49:99:6b:0f:60:68:91:f2:3d:fb:d7:2b:cd: eb:83:72:62:b2:98:a3:c1:cb:8e:1d:60:a1:25:29:41:b0:3b: 91:69:ec:64:61:40:6c:ea:60:99:9f:c0:bf:89:f8:25:8b:29: b1:9b:34:f9:4f:d3:6f:ca:ee:3d:0f:65:1c:62:31:02:fb:ee: d3:35:6e:d6:84:4b:15:f2:9e:fe:68:7f:a6:44:cd:40:d4:0b: ce:68:88:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD06XyTqrqq2PEoaxTIDsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmZDZiN2QwYTYzMDM1N2JjM2MxZTBjZGRhMDZkY2E4OGEz NDYzZWMwHhcNMjYwMjA5MTEwMDI1WhcNMjYwMjEwMTEwMDI1WjAzMTEwLwYDVQQD Eyg3MzEwMjRlZGIxYTM1NDUyNWM1NDA2NWFlZWIzMTdmYmQ5M2JjNDk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMxUNJOsqWKsKVcLAErlpJ3bZldy WdWm9xJx5R0ZaT+C0XGa5J6QctVOpSdu129yHDMJH1KmgOwyZdd2+qRXeiHZU4mU VIG6fYIIYLkwZck/qVAVi52HxIXVuKdqtGk3MTTOVA6P5ht8BVHQqGIt8nn/kDb7 k+/t9XhUlyrUCN5848sthx9V8s1KYZepvZIMxWi1IsjH1gw1D0TlRU0w9C5uyuQ2 Y+Wv1ipu6rdHfk4hSTOgYaXWUOz4ZZrF1nww6L4ruQ3XM5EHYunS/kYIiooORhG1 ZD7CL8M+OAvFAxOjVHRSU4A5hRsdQ/PdURTmDUrcl0+s/x3p7P7T4ULg2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHMQJO2xo1RSXFQGWu6zF/vZO8SYMB8GA1UdIwQY MBaAFE/Wt9CmMDV7w8HgzdoG3KiKNGPsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDlhMzBLWXdOWHZEd2VETjJnYmNxSW8wWS13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9mZjMxZjAtNzk2MC00ZGYxLTk4ODUt ZDMxNDZiZmNkZGZmLzEvVDlhMzBLWXdOWHZEd2VETjJnYmNxSW8wWS13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9mZjMxZjAtNzk2MC00ZGYxLTk4ODUtZDMxNDZiZmNkZGZm LzEvVDlhMzBLWXdOWHZEd2VETjJnYmNxSW8wWS13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdCA7S0u4 C9Sij1sZLf6tGNKXYjfDWOacc33Hc4s/yWrtApEf3VHfJZcFkR45W3rEtp9jqq20 p/fMoQo03NssJ01yGpHEIRxaJ+wHLWLblBFLV5CXXQ7qZ8azG7D5tGI7ZMMXijWq iN7XF0Zf3HMZnY2tgi4GYXN0FvD6HjJIs5ArY4sp5h7GmcCiM3y/dXBoFoouMWdA b+gMipBye8cB9YDGzTKejdhJmWsPYGiR8j371yvN64NyYrKYo8HLjh1goSUpQbA7 kWnsZGFAbOpgmZ/Av4n4JYspsZs0+U/Tb8ruPQ9lHGIxAvvu0zVu1oRLFfKe/mh/ pkTNQNQLzmiICg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:46:35 2026 by rpki-client