This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft File: 9n1n2ohguDIsTyBNYRsAYTjxs5E.mft (raw, json) Hash identifier: zkUphZnFjtzCAlXudZhw9AdQ++HNUrYBIJla5qX3YyU= Subject key identifier: 6C:F9:E7:4E:D8:75:02:B1:6B:C4:97:B8:80:39:B8:27:DE:E0:31:14 Authority key identifier: F6:7D:67:DA:88:60:B8:32:2C:4F:20:4D:61:1B:00:61:38:F1:B3:91 Certificate issuer: /CN=f67d67da8860b8322c4f204d611b006138f1b391 Certificate serial: 019C41D84FAF128C67021144D92BFD3BA23E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9n1n2ohguDIsTyBNYRsAYTjxs5E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft Manifest number: 050E Signing time: Mon 09 Feb 2026 10:00:21 +0000 Manifest this update: Mon 09 Feb 2026 10:00:21 +0000 Manifest next update: Tue 10 Feb 2026 10:00:21 +0000 Files and hashes: 1: 9n1n2ohguDIsTyBNYRsAYTjxs5E.crl (hash: iJ/sz6fSkOJSszzoKJHr/YQ3BOrfP1YdxV1QytrRxos=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.crl rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft rsync://rpki.ripe.net/repository/DEFAULT/9n1n2ohguDIsTyBNYRsAYTjxs5E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:4f:af:12:8c:67:02:11:44:d9:2b:fd:3b:a2:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f67d67da8860b8322c4f204d611b006138f1b391 Validity Not Before: Feb 9 10:00:21 2026 GMT Not After : Feb 10 10:00:21 2026 GMT Subject: CN=6cf9e74ed87502b16bc497b88039b827dee03114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:67:4b:4c:50:18:5f:41:be:7a:26:3e:ec:ed: 9b:d8:99:88:f3:9b:ea:23:58:bf:85:3e:74:ef:e3: a1:42:35:6a:bc:37:47:3f:d8:69:f2:5d:85:2e:5d: d2:a0:4f:88:b1:4f:63:b3:f1:d7:e3:c6:67:c3:ef: d3:7a:26:24:c3:29:f6:2c:02:43:2d:e2:f2:0c:8c: ef:ef:b1:85:0f:c5:4f:9d:47:89:7f:4c:05:c0:17: 05:c3:e3:12:92:73:38:b6:9f:03:f6:c5:a4:93:1a: 8b:87:b4:50:b7:5b:0c:e4:b3:cd:f3:8a:d6:32:23: 28:e2:78:0a:e1:1d:56:37:e2:4d:cb:09:d6:37:a5: 54:e6:72:7b:52:2f:01:93:61:48:45:46:74:4e:7f: 24:4f:0e:10:44:1b:0f:69:38:38:bd:d6:1f:85:95: 38:d1:ee:2b:2d:f6:3f:8b:1c:0b:23:44:23:d9:63: 4a:fd:30:c8:bf:8b:d0:98:3f:5b:aa:cd:47:95:6d: b4:85:a2:0a:00:5e:6f:ed:de:bc:33:93:76:d6:08: d7:ab:ea:ff:78:30:d0:59:1f:62:91:90:30:dd:f9: 9c:21:13:30:52:ff:9c:16:b0:82:45:2e:8e:9b:b1: cd:71:f3:cd:d5:5f:30:5f:9a:1d:8c:95:3e:16:3b: b3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:F9:E7:4E:D8:75:02:B1:6B:C4:97:B8:80:39:B8:27:DE:E0:31:14 X509v3 Authority Key Identifier: keyid:F6:7D:67:DA:88:60:B8:32:2C:4F:20:4D:61:1B:00:61:38:F1:B3:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9n1n2ohguDIsTyBNYRsAYTjxs5E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:0c:1e:c6:38:a7:c6:e5:14:2a:66:22:eb:17:94:1b:73:a0: 21:24:54:a0:c5:34:4d:d0:bb:c2:b9:d9:40:fc:de:12:7d:d2: da:93:d1:a3:95:8f:7d:de:c6:d1:f7:fa:af:8e:36:2a:42:6a: a8:fc:11:ae:00:91:fa:5e:b4:57:85:ce:d2:30:99:e3:43:94: 8d:54:1f:51:bf:a0:84:0c:a7:a1:07:da:22:f7:29:7d:72:b4: 68:14:95:df:01:9d:d5:ab:86:2e:3b:cf:a8:d9:55:ed:85:1c: e0:d1:ae:dd:f5:22:63:1d:71:c1:ed:46:bb:89:2f:83:d9:1e: 6e:2d:e0:5d:4e:02:3a:ec:e5:74:72:7e:94:4c:9f:ee:ae:a1: 18:2f:d7:40:1a:ad:be:88:56:46:15:e8:4b:57:6c:fc:d8:cb: 69:3f:1e:4b:15:06:f5:b3:d4:02:c3:a1:10:39:9a:31:9c:ef: 55:ed:c2:06:73:e2:6a:27:fc:fd:9c:aa:50:e7:5b:bb:73:c2: 30:04:28:25:da:6e:b3:26:3e:38:31:31:49:18:f3:50:67:73: d4:16:16:bf:c5:30:0d:2d:37:79:cb:50:7c:c9:5c:61:df:fc: d1:77:e7:ee:58:af:77:34:38:52:59:9f:4c:89:5f:b6:aa:6a: fe:0b:74:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2E+vEoxnAhFE2Sv9O6I+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2N2Q2N2RhODg2MGI4MzIyYzRmMjA0ZDYxMWIwMDYxMzhm MWIzOTEwHhcNMjYwMjA5MTAwMDIxWhcNMjYwMjEwMTAwMDIxWjAzMTEwLwYDVQQD Eyg2Y2Y5ZTc0ZWQ4NzUwMmIxNmJjNDk3Yjg4MDM5YjgyN2RlZTAzMTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGdLTFAYX0G+eiY+7O2b2JmI85vq I1i/hT507+OhQjVqvDdHP9hp8l2FLl3SoE+IsU9js/HX48Znw+/TeiYkwyn2LAJD LeLyDIzv77GFD8VPnUeJf0wFwBcFw+MSknM4tp8D9sWkkxqLh7RQt1sM5LPN84rW MiMo4ngK4R1WN+JNywnWN6VU5nJ7Ui8Bk2FIRUZ0Tn8kTw4QRBsPaTg4vdYfhZU4 0e4rLfY/ixwLI0Qj2WNK/TDIv4vQmD9bqs1HlW20haIKAF5v7d68M5N21gjXq+r/ eDDQWR9ikZAw3fmcIRMwUv+cFrCCRS6Om7HNcfPN1V8wX5odjJU+FjuzqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGz5507YdQKxa8SXuIA5uCfe4DEUMB8GA1UdIwQY MBaAFPZ9Z9qIYLgyLE8gTWEbAGE48bORMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOW4xbjJvaGd1RElzVHlCTllSc0FZVGp4czVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS85Y2YyNzAtZTY1NC00MzM3LTg4MTQt YmYyYjhiNDg0NjVmLzEvOW4xbjJvaGd1RElzVHlCTllSc0FZVGp4czVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS85Y2YyNzAtZTY1NC00MzM3LTg4MTQtYmYyYjhiNDg0NjVm LzEvOW4xbjJvaGd1RElzVHlCTllSc0FZVGp4czVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhAwexjin xuUUKmYi6xeUG3OgISRUoMU0TdC7wrnZQPzeEn3S2pPRo5WPfd7G0ff6r442KkJq qPwRrgCR+l60V4XO0jCZ40OUjVQfUb+ghAynoQfaIvcpfXK0aBSV3wGd1auGLjvP qNlV7YUc4NGu3fUiYx1xwe1Gu4kvg9kebi3gXU4COuzldHJ+lEyf7q6hGC/XQBqt vohWRhXoS1ds/NjLaT8eSxUG9bPUAsOhEDmaMZzvVe3CBnPiaif8/ZyqUOdbu3PC MAQoJdpusyY+ODExSRjzUGdz1BYWv8UwDS03ectQfMlcYd/80Xfn7livdzQ4Ulmf TIlftqpq/gt0Og== -----END CERTIFICATE-----Generated at Mon Feb 9 18:46:00 2026 by rpki-client