This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft File: v9P33PxgiR_DiPpcHb118nuVGeI.mft (raw, json) Hash identifier: TQwCTBXCobAuWRg1Cn73oYwegyVUHV6A3G8gkqAloA0= Subject key identifier: 76:64:E5:86:F8:CF:5C:45:95:18:6F:E2:80:70:71:4A:6A:D4:58:6E Authority key identifier: BF:D3:F7:DC:FC:60:89:1F:C3:88:FA:5C:1D:BD:75:F2:7B:95:19:E2 Certificate issuer: /CN=bfd3f7dcfc60891fc388fa5c1dbd75f27b9519e2 Certificate serial: 019C4321FD63E3814C44ED1FABA76EB3A641 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9P33PxgiR_DiPpcHb118nuVGeI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft Manifest number: 180F Signing time: Mon 09 Feb 2026 16:00:26 +0000 Manifest this update: Mon 09 Feb 2026 16:00:26 +0000 Manifest next update: Tue 10 Feb 2026 16:00:26 +0000 Files and hashes: 1: v9P33PxgiR_DiPpcHb118nuVGeI.crl (hash: zpqbsSDbEgQvNW3anNOlfMg8kjVkyaNOQ4vPF1pCxUw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft rsync://rpki.ripe.net/repository/DEFAULT/v9P33PxgiR_DiPpcHb118nuVGeI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:fd:63:e3:81:4c:44:ed:1f:ab:a7:6e:b3:a6:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfd3f7dcfc60891fc388fa5c1dbd75f27b9519e2 Validity Not Before: Feb 9 16:00:26 2026 GMT Not After : Feb 10 16:00:26 2026 GMT Subject: CN=7664e586f8cf5c4595186fe28070714a6ad4586e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:56:db:ef:ab:f4:27:fb:3a:36:22:a2:f3:fd: f3:fe:8c:ef:ec:cd:fa:31:00:b6:fa:cb:d2:88:fd: b8:97:67:6f:40:7c:8b:b0:de:e8:60:df:1c:c7:48: 7c:fb:38:e1:b7:db:e8:a5:a0:a9:78:bf:09:0b:93: ef:ae:fa:78:19:2d:14:76:16:15:21:4e:40:4a:f8: 01:51:e3:40:5d:44:94:b1:7e:75:c9:3d:36:d6:c3: 90:7a:21:b9:69:bd:49:fb:72:90:d7:8b:37:7a:4a: 77:73:c3:aa:47:1d:be:a8:4c:d7:db:63:10:84:8e: b1:ba:b1:ba:ee:ea:17:cd:82:9d:db:de:ac:1f:ec: 9e:0e:35:a8:1b:ca:4d:97:91:cf:f3:68:0d:93:d6: 22:ec:7c:04:6a:e1:d5:80:c8:96:20:6c:b9:ea:df: b9:af:0a:e4:02:53:50:d9:ce:1e:79:30:a7:00:25: 69:75:0e:60:1a:17:9a:af:cd:4c:0c:9e:ae:da:2c: d5:44:cc:b9:98:da:0a:f0:14:ec:8c:6d:64:24:15: 00:80:7b:d4:e2:07:37:7a:54:e7:a7:5b:20:f5:76: 06:03:0a:e1:2b:2c:29:81:d5:72:1a:6c:2d:8d:7d: 1c:e6:b3:e5:51:5a:95:18:da:3d:41:1d:23:9d:b3: 54:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:64:E5:86:F8:CF:5C:45:95:18:6F:E2:80:70:71:4A:6A:D4:58:6E X509v3 Authority Key Identifier: keyid:BF:D3:F7:DC:FC:60:89:1F:C3:88:FA:5C:1D:BD:75:F2:7B:95:19:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9P33PxgiR_DiPpcHb118nuVGeI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption df:d3:a2:3f:f9:56:2a:08:61:3d:2e:36:87:42:44:25:29:37: 40:df:5b:4e:7b:13:36:87:73:97:31:e4:6d:62:e5:88:8b:82: 31:90:a0:47:f9:f3:ef:32:fd:e9:88:a1:d6:21:8c:df:e0:1b: 49:f9:58:2c:37:78:d1:38:b1:c1:d6:c8:5f:db:15:f9:8f:5c: 69:94:a0:26:02:91:34:68:3b:1c:36:39:bd:c2:61:7e:a4:0e: 5e:93:23:3e:64:9d:e5:e3:84:c8:a4:a8:d5:30:ab:b5:15:2c: e1:c5:c3:b0:83:6d:1f:79:2c:3e:2b:9b:46:51:74:2e:16:30: 91:b9:83:99:92:16:ff:ec:13:d7:4c:58:04:82:bc:3b:a2:35: 58:fc:c4:2e:4e:9a:9f:f3:24:2b:06:b7:93:fb:9b:dd:6e:2c: 31:b0:e3:7a:f3:52:ba:71:b7:e4:e4:de:7c:39:7d:e6:4d:32: 7e:8a:e3:33:31:0e:ea:ca:35:7b:b6:1a:b6:d2:6b:73:20:c0: 09:fe:f4:95:3c:c6:31:55:bc:4a:e8:b4:c0:09:79:88:90:47: d2:74:41:27:94:ce:d8:03:b7:77:7b:7b:48:c0:e7:bf:74:5b: b8:5a:be:0f:c1:4b:c7:d8:a3:33:5c:8e:ae:f5:97:5d:8f:01: 42:dd:97:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIf1j44FMRO0fq6dus6ZBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmZDNmN2RjZmM2MDg5MWZjMzg4ZmE1YzFkYmQ3NWYyN2I5 NTE5ZTIwHhcNMjYwMjA5MTYwMDI2WhcNMjYwMjEwMTYwMDI2WjAzMTEwLwYDVQQD Eyg3NjY0ZTU4NmY4Y2Y1YzQ1OTUxODZmZTI4MDcwNzE0YTZhZDQ1ODZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVbb76v0J/s6NiKi8/3z/ozv7M36 MQC2+svSiP24l2dvQHyLsN7oYN8cx0h8+zjht9vopaCpeL8JC5Pvrvp4GS0UdhYV IU5ASvgBUeNAXUSUsX51yT021sOQeiG5ab1J+3KQ14s3ekp3c8OqRx2+qEzX22MQ hI6xurG67uoXzYKd296sH+yeDjWoG8pNl5HP82gNk9Yi7HwEauHVgMiWIGy56t+5 rwrkAlNQ2c4eeTCnACVpdQ5gGhear81MDJ6u2izVRMy5mNoK8BTsjG1kJBUAgHvU 4gc3elTnp1sg9XYGAwrhKywpgdVyGmwtjX0c5rPlUVqVGNo9QR0jnbNU1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHZk5Yb4z1xFlRhv4oBwcUpq1FhuMB8GA1UdIwQY MBaAFL/T99z8YIkfw4j6XB29dfJ7lRniMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjlQMzNQeGdpUl9EaVBwY0hiMTE4bnVWR2VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kM2E2OTUtNWFmZS00NmI2LWJlNTkt NThmZWQyODIyY2EzLzEvdjlQMzNQeGdpUl9EaVBwY0hiMTE4bnVWR2VJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9kM2E2OTUtNWFmZS00NmI2LWJlNTktNThmZWQyODIyY2Ez LzEvdjlQMzNQeGdpUl9EaVBwY0hiMTE4bnVWR2VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA39OiP/lW KghhPS42h0JEJSk3QN9bTnsTNodzlzHkbWLliIuCMZCgR/nz7zL96Yih1iGM3+Ab SflYLDd40TixwdbIX9sV+Y9caZSgJgKRNGg7HDY5vcJhfqQOXpMjPmSd5eOEyKSo 1TCrtRUs4cXDsINtH3ksPiubRlF0LhYwkbmDmZIW/+wT10xYBIK8O6I1WPzELk6a n/MkKwa3k/ub3W4sMbDjevNSunG35OTefDl95k0yforjMzEO6so1e7YattJrcyDA Cf70lTzGMVW8Sui0wAl5iJBH0nRBJ5TO2AO3d3t7SMDnv3RbuFq+D8FLx9ijM1yO rvWXXY8BQt2Xqg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:53:47 2026 by rpki-client