This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/8b6fcc-14ef-47f0-883e-8ebaa090cf6e/1/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.mft File: 9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.mft (raw, json) Hash identifier: q9f1Jl8Ar7hWF2VfPu4o5FhwbZgG4k36ucmkKuUjYCE= Subject key identifier: 53:D9:BD:A4:1C:2F:F0:F5:1C:D0:36:99:96:70:D5:A3:22:68:1A:B8 Authority key identifier: F6:38:7E:90:C4:FE:56:EE:1B:63:94:6F:E4:D4:63:1C:60:87:E7:ED Certificate issuer: /CN=f6387e90c4fe56ee1b63946fe4d4631c6087e7ed Certificate serial: 019C427CFE0AB215F38865DAACD1ADFA4E79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/8b6fcc-14ef-47f0-883e-8ebaa090cf6e/1/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.mft Manifest number: 08D4 Signing time: Mon 09 Feb 2026 13:00:13 +0000 Manifest this update: Mon 09 Feb 2026 13:00:13 +0000 Manifest next update: Tue 10 Feb 2026 13:00:13 +0000 Files and hashes: 1: 9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.crl (hash: ik0xMWvkyMZYi8dda/NmqjwrkCO6mpb7gYm7BA24lNU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/8b6fcc-14ef-47f0-883e-8ebaa090cf6e/1/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.crl rsync://rpki.ripe.net/repository/DEFAULT/59/8b6fcc-14ef-47f0-883e-8ebaa090cf6e/1/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.mft rsync://rpki.ripe.net/repository/DEFAULT/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7c:fe:0a:b2:15:f3:88:65:da:ac:d1:ad:fa:4e:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6387e90c4fe56ee1b63946fe4d4631c6087e7ed Validity Not Before: Feb 9 13:00:13 2026 GMT Not After : Feb 10 13:00:13 2026 GMT Subject: CN=53d9bda41c2ff0f51cd036999670d5a322681ab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:42:08:44:23:b6:ec:fc:c1:00:76:8a:55:78: c2:24:31:f4:b0:ed:73:49:f5:7e:27:14:1d:b6:39: 95:7d:99:ab:9e:f9:33:cd:c4:e3:ed:a1:49:bd:ec: b6:01:77:df:ea:60:42:00:ba:20:99:86:e9:90:46: 56:80:ec:94:dc:a8:79:9c:4c:92:02:f5:cc:17:3a: ae:85:88:50:d1:2e:83:a7:dd:b1:7a:7a:37:47:ab: ea:82:cb:e2:20:d1:2c:bd:c1:9e:32:2a:21:de:bb: 76:52:7e:0a:07:80:4a:b3:83:c7:62:10:96:2c:9c: 9c:87:df:40:36:15:3f:c9:d9:f3:ee:6a:a1:b8:3c: de:c5:2c:21:4f:4f:26:24:c1:04:45:55:db:32:9a: 96:ec:98:ba:dd:71:29:69:08:50:ac:52:61:e2:c6: 60:f7:69:d4:18:b3:4c:71:4f:b2:eb:54:c7:7b:53: 31:df:4e:0d:f7:f0:ef:ec:78:90:b8:34:66:0b:c2: dd:5b:4f:c1:03:7a:f9:a5:50:83:cf:d6:12:ff:18: 6c:13:4f:5d:2e:04:6c:cf:26:27:86:63:14:8e:54: 5f:e9:b8:26:e4:19:3b:17:c4:70:3c:ec:fa:dd:92: 0f:b1:4b:0d:71:43:d5:a8:ba:27:64:ce:a9:34:96: 47:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:D9:BD:A4:1C:2F:F0:F5:1C:D0:36:99:96:70:D5:A3:22:68:1A:B8 X509v3 Authority Key Identifier: keyid:F6:38:7E:90:C4:FE:56:EE:1B:63:94:6F:E4:D4:63:1C:60:87:E7:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/8b6fcc-14ef-47f0-883e-8ebaa090cf6e/1/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/8b6fcc-14ef-47f0-883e-8ebaa090cf6e/1/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:ee:02:5b:40:44:c9:1b:b9:5c:e4:bf:11:95:0a:f0:f8:81: 96:34:1d:f9:27:8b:51:ab:b5:2e:87:22:1a:88:a5:66:70:ae: 2f:11:3d:11:c7:66:46:a5:ee:8b:8e:d9:c0:30:85:ea:57:ff: 55:4a:a0:5e:31:3c:b2:8b:21:9b:f4:c7:41:1c:b9:09:41:1a: 60:17:30:93:00:69:5c:a3:bb:16:2e:9e:90:ae:45:3c:5e:a5: 9c:e9:56:a2:f8:83:5d:80:a0:c9:c3:7c:e7:f7:59:f6:c9:7a: 10:26:75:e4:59:8f:5e:00:96:e0:eb:c5:e4:f3:d3:3e:b3:a9: c5:32:1f:b9:4b:b5:ea:a9:dd:6a:80:8d:c8:21:8d:59:12:78: a9:6c:e7:b7:c1:d2:e7:fc:82:48:6f:a1:14:82:bc:97:09:1f: 97:51:f9:da:8a:77:12:fa:11:a3:d7:f0:4d:bf:e2:b7:d5:51: ba:83:af:f1:e1:49:c5:d2:92:b0:f8:bd:54:d8:e5:f9:01:ca: 5d:87:2a:4d:6a:c6:01:92:ca:9f:11:94:d8:1d:c8:21:f4:4d: a5:9a:d1:b5:a6:bb:ff:ce:f5:b6:f0:b7:45:43:4e:a0:7a:33: cd:87:b2:22:95:6a:de:7a:5d:76:c0:4c:7f:f8:2a:4e:2d:fd: 5c:2c:37:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfP4KshXziGXarNGt+k55MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2Mzg3ZTkwYzRmZTU2ZWUxYjYzOTQ2ZmU0ZDQ2MzFjNjA4 N2U3ZWQwHhcNMjYwMjA5MTMwMDEzWhcNMjYwMjEwMTMwMDEzWjAzMTEwLwYDVQQD Eyg1M2Q5YmRhNDFjMmZmMGY1MWNkMDM2OTk5NjcwZDVhMzIyNjgxYWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEIIRCO27PzBAHaKVXjCJDH0sO1z SfV+JxQdtjmVfZmrnvkzzcTj7aFJvey2AXff6mBCALogmYbpkEZWgOyU3Kh5nEyS AvXMFzquhYhQ0S6Dp92xeno3R6vqgsviINEsvcGeMioh3rt2Un4KB4BKs4PHYhCW LJych99ANhU/ydnz7mqhuDzexSwhT08mJMEERVXbMpqW7Ji63XEpaQhQrFJh4sZg 92nUGLNMcU+y61THe1Mx304N9/Dv7HiQuDRmC8LdW0/BA3r5pVCDz9YS/xhsE09d LgRszyYnhmMUjlRf6bgm5Bk7F8RwPOz63ZIPsUsNcUPVqLonZM6pNJZHpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFPZvaQcL/D1HNA2mZZw1aMiaBq4MB8GA1UdIwQY MBaAFPY4fpDE/lbuG2OUb+TUYxxgh+ftMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWpoLWtNVC1WdTRiWTVSdjVOUmpIR0NINS0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84YjZmY2MtMTRlZi00N2YwLTg4M2Ut OGViYWEwOTBjZjZlLzEvOWpoLWtNVC1WdTRiWTVSdjVOUmpIR0NINS0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS84YjZmY2MtMTRlZi00N2YwLTg4M2UtOGViYWEwOTBjZjZl LzEvOWpoLWtNVC1WdTRiWTVSdjVOUmpIR0NINS0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAre4CW0BE yRu5XOS/EZUK8PiBljQd+SeLUau1LociGoilZnCuLxE9EcdmRqXui47ZwDCF6lf/ VUqgXjE8soshm/THQRy5CUEaYBcwkwBpXKO7Fi6ekK5FPF6lnOlWoviDXYCgycN8 5/dZ9sl6ECZ15FmPXgCW4OvF5PPTPrOpxTIfuUu16qndaoCNyCGNWRJ4qWznt8HS 5/yCSG+hFIK8lwkfl1H52op3EvoRo9fwTb/it9VRuoOv8eFJxdKSsPi9VNjl+QHK XYcqTWrGAZLKnxGU2B3IIfRNpZrRtaa7/871tvC3RUNOoHozzYeyIpVq3npddsBM f/gqTi39XCw3VQ== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:45 2026 by rpki-client