This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft File: 9URgWW1tUyQB3jE9-JA2blN21gI.mft (raw, json) Hash identifier: WhndrQJPvP+PC7OXxqu15YB370WWaPqilaFyI9rvZKY= Subject key identifier: C2:C4:7D:1B:A8:C8:BE:6C:75:1F:E7:7F:CC:D8:9F:49:A5:0B:EF:DC Authority key identifier: F5:44:60:59:6D:6D:53:24:01:DE:31:3D:F8:90:36:6E:53:76:D6:02 Certificate issuer: /CN=f54460596d6d532401de313df890366e5376d602 Certificate serial: 019C43902C36E82798249E0833226D7451AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft Manifest number: 07E2 Signing time: Mon 09 Feb 2026 18:00:47 +0000 Manifest this update: Mon 09 Feb 2026 18:00:47 +0000 Manifest next update: Tue 10 Feb 2026 18:00:47 +0000 Files and hashes: 1: 9URgWW1tUyQB3jE9-JA2blN21gI.crl (hash: P+y/hHJLCxcLY3Q5i9QklM0vH/0f230vSWg/o2AvCgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.crl rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:2c:36:e8:27:98:24:9e:08:33:22:6d:74:51:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f54460596d6d532401de313df890366e5376d602 Validity Not Before: Feb 9 18:00:47 2026 GMT Not After : Feb 10 18:00:47 2026 GMT Subject: CN=c2c47d1ba8c8be6c751fe77fccd89f49a50befdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:11:c4:4e:2b:85:26:56:63:8a:fe:76:23:40: 20:bf:42:c3:d6:d8:85:0f:1c:ff:e1:94:b9:28:e3: c3:10:67:9d:5e:ba:88:fe:a4:d4:2b:ff:d7:4f:5c: a5:fd:77:52:49:fb:65:93:ea:83:6e:7e:25:90:2d: 1d:a3:8f:ad:2f:06:ba:5d:72:bf:c9:fb:a5:10:03: e5:de:7a:54:4a:90:58:4f:63:e6:8b:2e:e8:fe:3a: 47:c7:45:04:7d:7d:91:84:b9:6f:94:2d:83:7d:8b: c6:c6:37:2d:8b:c2:1a:c8:d3:a0:12:9e:84:88:f9: 48:0c:93:d6:bb:9d:bf:a7:25:95:40:59:a2:b0:9e: 51:3a:f4:e5:22:88:16:97:36:6c:36:c1:06:2c:b4: 68:5b:a2:bd:25:9b:bd:56:26:6c:b5:5e:4e:a6:76: 4c:80:aa:68:56:3f:59:d7:b2:9e:c4:71:be:1e:d4: 38:1c:3c:d1:3e:af:69:aa:53:d2:81:2a:f7:dc:64: b4:f3:eb:1b:30:47:00:fa:d3:8b:c5:eb:6b:5d:be: 22:8f:db:d8:3f:3e:46:b3:3d:b0:b1:b5:f2:f7:c3: d2:b1:d8:de:b1:86:06:f0:6f:6e:3a:25:94:5e:24: e0:a9:23:bc:54:07:88:20:44:22:c2:33:90:04:e0: 55:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C4:7D:1B:A8:C8:BE:6C:75:1F:E7:7F:CC:D8:9F:49:A5:0B:EF:DC X509v3 Authority Key Identifier: keyid:F5:44:60:59:6D:6D:53:24:01:DE:31:3D:F8:90:36:6E:53:76:D6:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:2c:aa:cd:2b:9e:07:4e:b8:bd:51:a3:31:de:18:23:ec:d5: 68:c0:08:94:13:dc:86:08:e6:25:26:3c:78:00:1d:c5:ca:54: 78:93:29:01:a8:11:73:56:01:a2:d3:00:d6:3d:e4:3c:5b:7f: 27:a5:c2:27:a9:1c:05:c2:1a:f6:43:13:f3:25:44:d0:29:2c: f2:9d:e1:d5:70:0c:34:a1:b8:a4:e4:8a:7e:6c:af:66:05:32: c5:14:37:4e:fd:a1:2d:b2:76:d3:35:76:9c:10:12:0e:04:a4: 76:ba:b0:96:02:ea:be:99:d8:2a:54:1d:c3:2a:90:d8:c1:c9: a7:7e:bd:00:9c:ee:2c:a2:4a:68:10:b8:38:98:5f:97:16:72: 55:68:8b:41:86:da:1d:91:6b:3e:8d:80:de:35:91:4a:41:e6: 67:99:a4:b6:b9:2e:9d:31:9f:bb:d0:b9:28:e8:38:1e:08:76: f7:55:b6:d6:55:a0:f3:3e:0f:bc:e7:c2:0f:37:21:f8:11:8c: 3f:c2:be:d9:23:c8:4b:ab:c6:c0:13:9a:d1:58:d2:64:62:7b: 72:08:70:e9:89:8c:95:6d:97:5d:15:a3:40:7a:ae:14:17:23: a6:c6:fc:26:ca:ec:db:a7:87:46:f3:be:a1:7d:1b:fc:12:e1: 3f:e8:cb:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkCw26CeYJJ4IMyJtdFGuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1NDQ2MDU5NmQ2ZDUzMjQwMWRlMzEzZGY4OTAzNjZlNTM3 NmQ2MDIwHhcNMjYwMjA5MTgwMDQ3WhcNMjYwMjEwMTgwMDQ3WjAzMTEwLwYDVQQD EyhjMmM0N2QxYmE4YzhiZTZjNzUxZmU3N2ZjY2Q4OWY0OWE1MGJlZmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRHETiuFJlZjiv52I0Agv0LD1tiF Dxz/4ZS5KOPDEGedXrqI/qTUK//XT1yl/XdSSftlk+qDbn4lkC0do4+tLwa6XXK/ yfulEAPl3npUSpBYT2Pmiy7o/jpHx0UEfX2RhLlvlC2DfYvGxjcti8IayNOgEp6E iPlIDJPWu52/pyWVQFmisJ5ROvTlIogWlzZsNsEGLLRoW6K9JZu9ViZstV5OpnZM gKpoVj9Z17KexHG+HtQ4HDzRPq9pqlPSgSr33GS08+sbMEcA+tOLxetrXb4ij9vY Pz5Gsz2wsbXy98PSsdjesYYG8G9uOiWUXiTgqSO8VAeIIEQiwjOQBOBVeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMLEfRuoyL5sdR/nf8zYn0mlC+/cMB8GA1UdIwQY MBaAFPVEYFltbVMkAd4xPfiQNm5TdtYCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVVSZ1dXMXRVeVFCM2pFOS1KQTJibE4yMWdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9hOWVkZTItMjhjMi00YmVmLTliZWYt YzgwOWMwYTQwODg4LzEvOVVSZ1dXMXRVeVFCM2pFOS1KQTJibE4yMWdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9hOWVkZTItMjhjMi00YmVmLTliZWYtYzgwOWMwYTQwODg4 LzEvOVVSZ1dXMXRVeVFCM2pFOS1KQTJibE4yMWdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlyyqzSue B064vVGjMd4YI+zVaMAIlBPchgjmJSY8eAAdxcpUeJMpAagRc1YBotMA1j3kPFt/ J6XCJ6kcBcIa9kMT8yVE0Cks8p3h1XAMNKG4pOSKfmyvZgUyxRQ3Tv2hLbJ20zV2 nBASDgSkdrqwlgLqvpnYKlQdwyqQ2MHJp369AJzuLKJKaBC4OJhflxZyVWiLQYba HZFrPo2A3jWRSkHmZ5mktrkunTGfu9C5KOg4Hgh291W21lWg8z4PvOfCDzch+BGM P8K+2SPIS6vGwBOa0VjSZGJ7cghw6YmMlW2XXRWjQHquFBcjpsb8Jsrs26eHRvO+ oX0b/BLhP+jLVA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:06:39 2026 by rpki-client