This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft File: 9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft (raw, json) Hash identifier: zRgz7LxY1y5XzU+bR+9E84HTYmKsj/TkiXbtxPsjXU0= Subject key identifier: AA:52:1B:4A:A1:CF:91:0E:1B:CD:04:67:2C:48:36:0F:AE:8A:93:0A Authority key identifier: F4:DB:83:AD:C7:6B:AF:F6:05:70:0C:CA:48:CC:4F:6F:8C:52:9F:66 Certificate issuer: /CN=f4db83adc76baff605700cca48cc4f6f8c529f66 Certificate serial: 019C42EB35B50D8547D1C1F9D7E230BF9E40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft Manifest number: 1174 Signing time: Mon 09 Feb 2026 15:00:36 +0000 Manifest this update: Mon 09 Feb 2026 15:00:36 +0000 Manifest next update: Tue 10 Feb 2026 15:00:36 +0000 Files and hashes: 1: 9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl (hash: sIWyJKFFa3HgUvRYWT2vih6ZnLEuzDZMsKhDpjjSfB0=) 2: vybKFSnUUtCvuNDjBmPdlEc4moI.roa (hash: NvnlzgrButbUBUuTuJIYrEkvgNvaHTxK68ujFnkuVpg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:35:b5:0d:85:47:d1:c1:f9:d7:e2:30:bf:9e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4db83adc76baff605700cca48cc4f6f8c529f66 Validity Not Before: Feb 9 15:00:36 2026 GMT Not After : Feb 10 15:00:36 2026 GMT Subject: CN=aa521b4aa1cf910e1bcd04672c48360fae8a930a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:83:8d:33:6c:fd:cb:d9:bf:54:45:e0:ef:a6: 65:ac:5d:a8:52:29:77:0b:e6:70:91:a4:a6:a1:cd: 54:69:07:3f:e4:e0:25:70:2b:e9:65:96:0e:31:9c: 04:49:33:aa:53:b9:2f:32:80:8c:93:92:c9:10:2d: 16:58:42:98:15:25:98:66:65:07:83:c5:22:cc:cd: 2c:72:f7:f1:d8:62:4d:7b:0d:0c:82:c6:b5:58:4f: 0f:78:7f:56:cf:97:a5:cc:ea:02:99:3c:78:8f:3d: 6f:48:a2:a7:e6:d5:25:4b:d5:d0:fd:ec:88:50:85: 0d:ee:af:34:8d:84:f0:90:28:f1:b4:a7:1c:4e:85: 0b:4a:1c:64:58:31:c7:c8:39:3a:3c:58:20:75:f0: a3:c4:ae:a5:ad:0f:bb:0f:8d:f0:3e:e5:40:c3:32: 05:63:20:11:8f:24:2d:e4:57:19:0a:dd:73:6d:44: 44:e3:9e:6f:99:f1:29:9e:d1:f6:b0:50:bc:17:e6: 31:a8:85:9c:4a:89:1b:b4:3f:3c:2a:e5:e3:81:6c: c5:f6:ca:4a:98:c8:6e:0b:80:d0:bf:3d:8f:66:a9: 3e:cd:d9:96:76:a3:d2:53:30:b8:28:a3:c4:5f:4e: bc:25:77:03:14:70:d2:93:25:71:bb:b7:cb:ab:61: e8:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:52:1B:4A:A1:CF:91:0E:1B:CD:04:67:2C:48:36:0F:AE:8A:93:0A X509v3 Authority Key Identifier: keyid:F4:DB:83:AD:C7:6B:AF:F6:05:70:0C:CA:48:CC:4F:6F:8C:52:9F:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:8e:dc:e8:10:4c:7d:a0:27:63:6c:11:24:3d:16:44:b1:e6: fc:c7:43:ba:d6:db:96:a2:14:39:0e:34:a3:bc:57:15:1a:0c: b0:46:7b:e3:a1:6d:a6:bc:69:5e:12:7e:44:03:6f:80:0d:26: 90:1f:bd:c7:46:07:0f:8c:9c:15:dc:e1:89:31:5c:4c:99:d1: f9:43:0e:8a:5b:96:09:ff:be:c0:f4:e9:4e:08:91:c3:39:ea: 3f:ab:da:c4:4a:07:1f:da:26:ce:74:d9:ff:07:96:c0:e9:80: 68:8b:2b:e3:8e:26:84:e6:50:73:12:cc:17:dd:40:12:c7:00: 4d:9d:61:b3:0e:bb:27:c0:cb:66:f3:f0:ba:7b:bb:5d:73:fc: ef:03:60:47:c9:11:ba:9d:8e:bf:c9:16:82:72:09:6e:e4:52: 8e:65:33:24:ba:ce:0a:5a:2d:7c:8b:7e:dd:4d:f0:2b:fb:63: 56:5d:13:bb:85:f2:25:4a:4b:13:43:3c:68:f0:83:40:d3:c8: 04:5e:ed:12:7e:e8:cb:3e:48:41:1b:f2:fd:54:d4:3b:40:2b: 26:44:f2:34:35:d5:23:14:bb:5d:96:9d:e6:4b:e2:cb:24:38: 36:5b:1f:d6:3b:f3:75:df:bb:5e:7d:55:2a:93:4a:d1:18:5b: 60:63:05:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6zW1DYVH0cH51+Iwv55AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZGI4M2FkYzc2YmFmZjYwNTcwMGNjYTQ4Y2M0ZjZmOGM1 MjlmNjYwHhcNMjYwMjA5MTUwMDM2WhcNMjYwMjEwMTUwMDM2WjAzMTEwLwYDVQQD EyhhYTUyMWI0YWExY2Y5MTBlMWJjZDA0NjcyYzQ4MzYwZmFlOGE5MzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYONM2z9y9m/VEXg76ZlrF2oUil3 C+ZwkaSmoc1UaQc/5OAlcCvpZZYOMZwESTOqU7kvMoCMk5LJEC0WWEKYFSWYZmUH g8UizM0scvfx2GJNew0Mgsa1WE8PeH9Wz5elzOoCmTx4jz1vSKKn5tUlS9XQ/eyI UIUN7q80jYTwkCjxtKccToULShxkWDHHyDk6PFggdfCjxK6lrQ+7D43wPuVAwzIF YyARjyQt5FcZCt1zbURE455vmfEpntH2sFC8F+YxqIWcSokbtD88KuXjgWzF9spK mMhuC4DQvz2PZqk+zdmWdqPSUzC4KKPEX068JXcDFHDSkyVxu7fLq2HorwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKpSG0qhz5EOG80EZyxINg+uipMKMB8GA1UdIwQY MBaAFPTbg63Ha6/2BXAMykjMT2+MUp9mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU51RHJjZHJyX1lGY0F6S1NNeFBiNHhTbjJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81MDFlYTgtMTgzOS00N2ZlLWFhNDQt MWI0MTdkNWUxZmJkLzEvOU51RHJjZHJyX1lGY0F6S1NNeFBiNHhTbjJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi81MDFlYTgtMTgzOS00N2ZlLWFhNDQtMWI0MTdkNWUxZmJk LzEvOU51RHJjZHJyX1lGY0F6S1NNeFBiNHhTbjJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALI7c6BBM faAnY2wRJD0WRLHm/MdDutbblqIUOQ40o7xXFRoMsEZ746FtprxpXhJ+RANvgA0m kB+9x0YHD4ycFdzhiTFcTJnR+UMOiluWCf++wPTpTgiRwznqP6vaxEoHH9omznTZ /weWwOmAaIsr444mhOZQcxLMF91AEscATZ1hsw67J8DLZvPwunu7XXP87wNgR8kR up2Ov8kWgnIJbuRSjmUzJLrOClotfIt+3U3wK/tjVl0Tu4XyJUpLE0M8aPCDQNPI BF7tEn7oyz5IQRvy/VTUO0ArJkTyNDXVIxS7XZad5kviyyQ4Nlsf1jvzdd+7Xn1V KpNK0RhbYGMFqw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:49 2026 by rpki-client