This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft File: S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft (raw, json) Hash identifier: i7cDzhZkJ7DqixybRHWKUhYaZoUkTLzeJdNAFQglIuw= Subject key identifier: 3B:AE:B4:0B:A6:95:2C:1B:A9:66:F5:2D:F2:CA:B7:B4:AC:82:32:03 Authority key identifier: 4B:D1:F5:0D:F2:63:FE:50:9F:C5:DE:9C:5A:47:3A:28:E3:81:26:39 Certificate issuer: /CN=4bd1f50df263fe509fc5de9c5a473a28e3812639 Certificate serial: 019C420F6A2E3E93C03EA5AA3454E81D9027 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9H1DfJj_lCfxd6cWkc6KOOBJjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft Manifest number: 137F Signing time: Mon 09 Feb 2026 11:00:32 +0000 Manifest this update: Mon 09 Feb 2026 11:00:32 +0000 Manifest next update: Tue 10 Feb 2026 11:00:32 +0000 Files and hashes: 1: S9H1DfJj_lCfxd6cWkc6KOOBJjk.crl (hash: cZ4r3RN4VeF4KGTOp77qSEG+F9EatB9r3BvfBoF/Kkc=) 2: WSR87e3Ee1tCNbfum8rM02_xB8c.roa (hash: qVtjtU8RmU9TX2RXNkWcIFQwTFAnao/WjTXbBMNqj5k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.crl rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft rsync://rpki.ripe.net/repository/DEFAULT/S9H1DfJj_lCfxd6cWkc6KOOBJjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:6a:2e:3e:93:c0:3e:a5:aa:34:54:e8:1d:90:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bd1f50df263fe509fc5de9c5a473a28e3812639 Validity Not Before: Feb 9 11:00:32 2026 GMT Not After : Feb 10 11:00:32 2026 GMT Subject: CN=3baeb40ba6952c1ba966f52df2cab7b4ac823203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:cd:95:f8:c1:70:bd:3d:04:10:5d:a1:c0:3f: 90:e8:99:01:d7:4b:89:05:f4:3c:d8:34:f4:3b:51: fb:cb:b1:0f:7d:1a:35:81:34:4d:7f:ee:c3:11:ea: 5c:06:eb:39:05:40:ed:d0:9c:34:0e:7d:b0:e5:1a: 34:da:f2:9a:b3:dc:33:42:a9:4d:e2:a8:33:10:8c: d8:ae:79:24:84:08:bb:46:db:65:d9:63:14:b3:47: 02:e5:b9:b1:6f:e9:b8:39:c7:83:a8:69:f6:f4:2f: ba:1b:8d:1f:97:de:39:41:ab:63:8f:e4:66:69:90: 70:d3:2f:50:8b:1f:df:e2:87:e6:73:0b:e3:fd:7d: 40:98:c7:06:00:fc:0e:d1:94:84:90:41:81:85:21: 13:5a:49:8a:2c:32:51:83:5a:c0:1e:86:6f:92:db: 43:34:e3:da:4a:59:d8:23:5b:12:51:22:93:f8:5d: 1e:4a:6c:f3:42:80:bd:47:dc:8c:00:7a:b7:0f:c7: 94:a3:5b:63:54:dc:64:0b:ad:05:8f:5f:02:ee:2d: f1:7d:6f:2e:5c:05:72:d6:45:e2:78:26:e1:79:d6: ba:f1:95:80:fe:25:e7:a2:5e:f3:10:a9:d8:72:bc: 82:fc:a9:8f:d5:25:37:1d:4c:21:7e:f8:24:2a:05: b1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:AE:B4:0B:A6:95:2C:1B:A9:66:F5:2D:F2:CA:B7:B4:AC:82:32:03 X509v3 Authority Key Identifier: keyid:4B:D1:F5:0D:F2:63:FE:50:9F:C5:DE:9C:5A:47:3A:28:E3:81:26:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9H1DfJj_lCfxd6cWkc6KOOBJjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:18:93:2c:5a:7a:50:ce:c6:e0:9c:ce:05:42:e5:3f:ff:2a: e5:e7:c7:7c:5c:eb:0f:6d:60:fb:dd:ce:aa:93:7d:4a:84:c7: c9:0d:84:f2:eb:56:3f:fd:e0:13:56:02:39:f5:6b:56:13:e9: e6:08:45:69:85:ab:be:bc:44:fe:5a:14:9e:fe:df:ee:4b:e0: 43:1d:41:47:bb:e8:1b:94:36:81:4a:18:9e:a2:6c:14:22:27: 46:d0:69:dc:28:08:10:79:74:73:ca:24:73:a3:19:10:57:fd: b9:fc:45:f4:4f:7e:6b:25:e2:c7:6b:22:6e:5d:36:dc:a2:a5: 5c:04:96:3a:c9:25:c3:25:02:53:09:3f:2d:40:77:6a:14:6e: 65:36:b6:2e:ef:ab:db:86:4c:ff:35:f2:07:f6:8a:82:48:a4: a2:21:e4:c1:83:62:e4:b6:d8:ba:6f:b8:71:f9:3c:8a:b0:70: cb:92:d3:2e:8f:52:75:de:ff:80:52:6d:05:6c:b0:50:13:ca: ef:68:de:23:c9:af:d1:f8:90:03:7e:9e:d6:a1:99:ce:8a:b5: 5f:c4:6f:ec:58:7e:cd:45:e0:6e:6b:64:9c:a1:45:4d:60:41: fd:13:22:21:13:d6:d6:2d:6d:63:ec:88:f7:ca:da:87:ee:f8: 34:87:2c:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD2ouPpPAPqWqNFToHZAnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZDFmNTBkZjI2M2ZlNTA5ZmM1ZGU5YzVhNDczYTI4ZTM4 MTI2MzkwHhcNMjYwMjA5MTEwMDMyWhcNMjYwMjEwMTEwMDMyWjAzMTEwLwYDVQQD EygzYmFlYjQwYmE2OTUyYzFiYTk2NmY1MmRmMmNhYjdiNGFjODIzMjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzM2V+MFwvT0EEF2hwD+Q6JkB10uJ BfQ82DT0O1H7y7EPfRo1gTRNf+7DEepcBus5BUDt0Jw0Dn2w5Ro02vKas9wzQqlN 4qgzEIzYrnkkhAi7Rttl2WMUs0cC5bmxb+m4OceDqGn29C+6G40fl945Qatjj+Rm aZBw0y9Qix/f4ofmcwvj/X1AmMcGAPwO0ZSEkEGBhSETWkmKLDJRg1rAHoZvkttD NOPaSlnYI1sSUSKT+F0eSmzzQoC9R9yMAHq3D8eUo1tjVNxkC60Fj18C7i3xfW8u XAVy1kXieCbheda68ZWA/iXnol7zEKnYcryC/KmP1SU3HUwhfvgkKgWxfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDuutAumlSwbqWb1LfLKt7SsgjIDMB8GA1UdIwQY MBaAFEvR9Q3yY/5Qn8XenFpHOijjgSY5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzlIMURmSmpfbENmeGQ2Y1drYzZLT09CSmprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83ZDIwYTItYjg4MS00NjFjLWJiZjUt MmI2ODA5MzM5NzAyLzEvUzlIMURmSmpfbENmeGQ2Y1drYzZLT09CSmprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC83ZDIwYTItYjg4MS00NjFjLWJiZjUtMmI2ODA5MzM5NzAy LzEvUzlIMURmSmpfbENmeGQ2Y1drYzZLT09CSmprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApRiTLFp6 UM7G4JzOBULlP/8q5efHfFzrD21g+93OqpN9SoTHyQ2E8utWP/3gE1YCOfVrVhPp 5ghFaYWrvrxE/loUnv7f7kvgQx1BR7voG5Q2gUoYnqJsFCInRtBp3CgIEHl0c8ok c6MZEFf9ufxF9E9+ayXix2sibl023KKlXASWOsklwyUCUwk/LUB3ahRuZTa2Lu+r 24ZM/zXyB/aKgkikoiHkwYNi5LbYum+4cfk8irBwy5LTLo9Sdd7/gFJtBWywUBPK 72jeI8mv0fiQA36e1qGZzoq1X8Rv7Fh+zUXgbmtknKFFTWBB/RMiIRPW1i1tY+yI 98rah+74NIcs3w== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:30 2026 by rpki-client