This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft File: 9GRgXq8UuLXSjujQdsHjc491glM.mft (raw, json) Hash identifier: aG40WJak376loaKGmqBqwNnJg/1SDuaU/YFsFT5kNXI= Subject key identifier: BC:E5:80:40:F0:9D:CC:0F:7E:40:97:61:B8:E7:0C:7B:08:E6:A6:8D Authority key identifier: F4:64:60:5E:AF:14:B8:B5:D2:8E:E8:D0:76:C1:E3:73:8F:75:82:53 Certificate issuer: /CN=f464605eaf14b8b5d28ee8d076c1e3738f758253 Certificate serial: 019C42EB61A83716BDE691D630A201F36AC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9GRgXq8UuLXSjujQdsHjc491glM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft Manifest number: 12CF Signing time: Mon 09 Feb 2026 15:00:48 +0000 Manifest this update: Mon 09 Feb 2026 15:00:48 +0000 Manifest next update: Tue 10 Feb 2026 15:00:48 +0000 Files and hashes: 1: 9GRgXq8UuLXSjujQdsHjc491glM.crl (hash: W/RAaLv1EnhunDQ060pbqb3wHBA3Qc90EJZJ8bf0fj8=) 2: bvCBuuEdxAUjZ43AaqObXsCRP24.roa (hash: +knVgbiUviDOgcpEQ9q1n1I2+704D2tY8YWzgF0kEqA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft rsync://rpki.ripe.net/repository/DEFAULT/9GRgXq8UuLXSjujQdsHjc491glM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:61:a8:37:16:bd:e6:91:d6:30:a2:01:f3:6a:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f464605eaf14b8b5d28ee8d076c1e3738f758253 Validity Not Before: Feb 9 15:00:48 2026 GMT Not After : Feb 10 15:00:48 2026 GMT Subject: CN=bce58040f09dcc0f7e409761b8e70c7b08e6a68d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:04:64:d7:a5:00:1f:2f:9b:db:97:37:d2:58: 73:7c:9c:78:75:21:4a:a3:b6:0e:7c:b8:d7:64:89: 6e:91:ec:33:b1:c8:4a:0c:2d:54:8a:48:22:0c:cd: 8c:aa:f3:bf:b2:4a:2f:ae:6c:5e:fa:89:f8:7f:35: 70:17:ab:46:20:c0:25:8a:1b:11:e0:b3:08:b0:93: bd:4d:8c:98:f6:34:6a:fc:60:b5:3a:77:2f:21:db: 63:6b:0f:c7:b9:7c:a6:3c:fa:51:f5:e7:07:3f:3a: 19:0b:b4:3f:62:92:93:ad:ab:ca:0c:43:96:50:df: e6:d0:a8:68:18:ce:28:77:8b:dc:be:0c:44:91:96: f7:23:f8:8f:8f:df:50:2b:0f:60:72:3e:9f:0d:66: c0:83:77:41:91:d3:11:fe:78:01:f5:f9:1a:b6:d5: 31:53:d8:b9:df:52:35:0b:b4:e6:f6:81:4d:40:ff: 3e:d9:ec:e3:8f:31:c3:1a:6f:f7:7b:12:d7:13:af: b0:fb:25:f3:3d:0a:74:d5:e6:ee:db:6d:c0:6b:60: 07:e7:f1:02:bb:5c:a0:ea:a5:29:55:a9:e9:07:77: 2b:5a:01:31:7b:e7:5d:91:e7:2c:7c:8f:1d:8d:32: 43:14:e5:9e:00:7c:e8:24:9c:e0:8e:c5:6e:5e:09: 9f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E5:80:40:F0:9D:CC:0F:7E:40:97:61:B8:E7:0C:7B:08:E6:A6:8D X509v3 Authority Key Identifier: keyid:F4:64:60:5E:AF:14:B8:B5:D2:8E:E8:D0:76:C1:E3:73:8F:75:82:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9GRgXq8UuLXSjujQdsHjc491glM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:4e:65:e4:ec:4d:21:9e:bc:aa:37:93:24:2e:a1:0c:c9:9c: 69:55:08:89:73:69:aa:07:63:bb:29:7c:26:cc:4e:ae:9d:4f: 58:02:a6:f7:81:aa:b8:c0:2c:b6:88:b4:1e:ec:59:fc:90:58: 56:f0:4d:63:04:23:fa:c1:c8:96:a6:e0:63:db:2e:c7:82:03: 7d:f8:16:46:92:82:12:20:d6:ef:05:dd:98:b0:69:05:01:e1: 21:3d:5a:73:c8:66:5a:a2:eb:a3:0d:2c:d1:8d:94:bb:d7:93: 8b:d8:c5:f2:4c:a3:76:12:25:4f:1c:2c:28:e4:ed:23:39:94: 3d:aa:15:65:f5:94:49:e3:e3:25:8c:8d:14:52:7c:42:04:d6: 09:30:d0:7f:12:d8:ab:37:fe:6f:a7:cf:49:bb:b9:23:7c:8b: 00:ac:d4:90:89:f9:6f:1a:ed:57:cc:6f:e9:1e:1b:a2:fb:a2: 54:d1:42:22:cc:21:97:0d:e6:6e:8b:bd:17:9f:bd:b7:4a:ea: d2:aa:26:ca:b7:86:52:bd:7c:24:13:d2:b7:0d:a8:d0:f2:f7: 4b:44:10:f7:85:86:63:ae:93:03:62:d8:e2:16:3f:ff:7b:5a: e3:cf:e3:b5:27:e4:c3:33:4e:da:cd:86:9b:e3:60:a7:eb:a4: 89:19:4d:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC62GoNxa95pHWMKIB82rIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0NjQ2MDVlYWYxNGI4YjVkMjhlZThkMDc2YzFlMzczOGY3 NTgyNTMwHhcNMjYwMjA5MTUwMDQ4WhcNMjYwMjEwMTUwMDQ4WjAzMTEwLwYDVQQD EyhiY2U1ODA0MGYwOWRjYzBmN2U0MDk3NjFiOGU3MGM3YjA4ZTZhNjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQRk16UAHy+b25c30lhzfJx4dSFK o7YOfLjXZIlukewzschKDC1UikgiDM2MqvO/skovrmxe+on4fzVwF6tGIMAlihsR 4LMIsJO9TYyY9jRq/GC1OncvIdtjaw/HuXymPPpR9ecHPzoZC7Q/YpKTravKDEOW UN/m0KhoGM4od4vcvgxEkZb3I/iPj99QKw9gcj6fDWbAg3dBkdMR/ngB9fkattUx U9i531I1C7Tm9oFNQP8+2ezjjzHDGm/3exLXE6+w+yXzPQp01ebu223Aa2AH5/EC u1yg6qUpVanpB3crWgExe+ddkecsfI8djTJDFOWeAHzoJJzgjsVuXgmfHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLzlgEDwncwPfkCXYbjnDHsI5qaNMB8GA1UdIwQY MBaAFPRkYF6vFLi10o7o0HbB43OPdYJTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUdSZ1hxOFV1TFhTanVqUWRzSGpjNDkxZ2xNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi81MWU5OGQtZDQ4ZS00NWExLTkzMDMt ZTJkODY0N2ZlNWRkLzEvOUdSZ1hxOFV1TFhTanVqUWRzSGpjNDkxZ2xNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi81MWU5OGQtZDQ4ZS00NWExLTkzMDMtZTJkODY0N2ZlNWRk LzEvOUdSZ1hxOFV1TFhTanVqUWRzSGpjNDkxZ2xNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPk5l5OxN IZ68qjeTJC6hDMmcaVUIiXNpqgdjuyl8JsxOrp1PWAKm94GquMAstoi0HuxZ/JBY VvBNYwQj+sHIlqbgY9sux4IDffgWRpKCEiDW7wXdmLBpBQHhIT1ac8hmWqLrow0s 0Y2Uu9eTi9jF8kyjdhIlTxwsKOTtIzmUPaoVZfWUSePjJYyNFFJ8QgTWCTDQfxLY qzf+b6fPSbu5I3yLAKzUkIn5bxrtV8xv6R4bovuiVNFCIswhlw3mbou9F5+9t0rq 0qomyreGUr18JBPStw2o0PL3S0QQ94WGY66TA2LY4hY//3ta48/jtSfkwzNO2s2G m+Ngp+ukiRlNJA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:23 2026 by rpki-client