This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft File: 9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft (raw, json) Hash identifier: Q5TEIxSRMZCfnuFPExPfcewH5MR15lKsNoC07QDmAAc= Subject key identifier: B7:BC:31:65:F5:49:EC:E6:AA:2A:C0:70:62:CB:FD:55:C2:21:39:3E Authority key identifier: F5:D6:B1:D9:0E:D4:BF:16:51:AA:22:70:E6:EC:BA:C2:D8:79:22:AC Certificate issuer: /CN=f5d6b1d90ed4bf1651aa2270e6ecbac2d87922ac Certificate serial: 019C420F305A14EFB5E70D0716C3473D863E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dax2Q7UvxZRqiJw5uy6wth5Iqw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft Manifest number: 01AB Signing time: Mon 09 Feb 2026 11:00:17 +0000 Manifest this update: Mon 09 Feb 2026 11:00:17 +0000 Manifest next update: Tue 10 Feb 2026 11:00:17 +0000 Files and hashes: 1: 9dax2Q7UvxZRqiJw5uy6wth5Iqw.crl (hash: Rjo/Dkv9M7AFHC+SX1sYlrgt4fA0SCYI+FCT8sXr67A=) 2: SHDXj_xwhAMVfYnaUaq_lG5zauc.roa (hash: MB2dIAduhPhYPhIRpSuDV9xRkl4km+qKHZKpVfYJMNs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft rsync://rpki.ripe.net/repository/DEFAULT/9dax2Q7UvxZRqiJw5uy6wth5Iqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:30:5a:14:ef:b5:e7:0d:07:16:c3:47:3d:86:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5d6b1d90ed4bf1651aa2270e6ecbac2d87922ac Validity Not Before: Feb 9 11:00:17 2026 GMT Not After : Feb 10 11:00:17 2026 GMT Subject: CN=b7bc3165f549ece6aa2ac07062cbfd55c221393e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ab:ab:2b:48:e1:2f:70:e4:25:d3:b5:2b:88: c3:87:c0:cd:fb:66:24:80:d1:af:44:53:57:f4:20: 6b:11:b0:09:f6:42:95:db:b5:28:27:51:2e:ba:f3: 18:9f:46:fe:98:07:70:71:fd:94:57:33:36:a1:d8: 0b:48:a7:80:e9:22:50:a8:66:0f:06:63:77:6b:af: e3:65:c0:1a:5f:72:c5:f8:f2:d7:82:dc:cb:1a:3d: dd:d2:21:13:3b:ae:dd:ea:86:a6:6e:5b:95:f0:b7: 5f:57:32:0d:e1:bd:07:e9:00:88:b9:3f:70:f2:80: df:16:8b:8b:4a:c4:15:bf:c7:ef:20:e6:31:63:64: 69:61:d6:cf:e3:a8:a8:73:3a:5a:4d:5c:c7:6a:0f: 77:8a:32:a3:09:9d:b9:68:d1:a5:0f:b2:07:f0:e6: 40:aa:05:e7:5e:65:ab:12:77:55:2f:df:44:a9:30: c3:c8:cb:5f:67:32:06:97:dd:75:18:ba:90:41:59: b9:0d:6d:7f:e1:b1:d5:d7:0d:18:30:7c:5d:48:4d: 06:0a:2f:51:88:5b:0a:5f:69:aa:f1:58:3b:fa:25: 24:03:cf:30:22:9e:24:4e:a3:0f:da:8d:57:de:b2: 74:56:b9:87:63:57:bc:d7:4d:7d:78:a0:ec:0c:08: 75:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:BC:31:65:F5:49:EC:E6:AA:2A:C0:70:62:CB:FD:55:C2:21:39:3E X509v3 Authority Key Identifier: keyid:F5:D6:B1:D9:0E:D4:BF:16:51:AA:22:70:E6:EC:BA:C2:D8:79:22:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dax2Q7UvxZRqiJw5uy6wth5Iqw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:9a:8a:ec:9f:b0:d6:1e:15:e0:9d:a3:55:d1:49:b0:8f:af: eb:7b:c0:2a:25:c3:e0:e3:4c:bc:3f:6e:5c:dd:87:65:97:88: e0:f0:98:03:ab:c1:2e:58:20:70:ab:6c:16:d6:53:ba:56:2c: 8d:88:71:6f:d6:6f:ff:69:92:96:06:05:b3:57:3d:fe:cd:29: cb:d9:90:80:29:a0:45:05:9f:ed:80:c8:e3:67:54:a3:da:ad: 3d:a0:48:01:98:f7:76:e5:4a:d8:ae:d9:ec:33:8e:5e:49:b8: a0:42:67:0d:c8:46:e2:75:15:dd:0c:24:59:7e:40:66:ba:05: ae:22:41:99:54:5b:47:0a:e9:b9:b7:4b:73:9f:ee:9c:e0:73: f8:26:fa:5f:e4:24:83:8e:96:33:02:40:d3:d3:2e:34:92:a7: 1a:c0:d2:8c:dd:cb:58:22:14:21:d4:9c:c6:10:b8:fd:af:ca: 84:d9:e6:90:6b:fd:fa:a5:04:3a:00:7f:e7:ee:d5:84:41:71: d9:a7:15:30:10:53:f2:65:75:fb:47:4f:b5:61:e3:6b:fd:e8: 4f:27:96:dd:05:85:40:e1:87:1b:52:60:16:9c:45:ce:1c:5a: f7:31:80:17:b1:ef:67:64:83:a0:c7:a1:6c:87:7f:6f:6f:9f: 4b:06:91:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCDzBaFO+15w0HFsNHPYY+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZDZiMWQ5MGVkNGJmMTY1MWFhMjI3MGU2ZWNiYWMyZDg3 OTIyYWMwHhcNMjYwMjA5MTEwMDE3WhcNMjYwMjEwMTEwMDE3WjAzMTEwLwYDVQQD EyhiN2JjMzE2NWY1NDllY2U2YWEyYWMwNzA2MmNiZmQ1NWMyMjEzOTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aurK0jhL3DkJdO1K4jDh8DN+2Yk gNGvRFNX9CBrEbAJ9kKV27UoJ1EuuvMYn0b+mAdwcf2UVzM2odgLSKeA6SJQqGYP BmN3a6/jZcAaX3LF+PLXgtzLGj3d0iETO67d6oambluV8LdfVzIN4b0H6QCIuT9w 8oDfFouLSsQVv8fvIOYxY2RpYdbP46ioczpaTVzHag93ijKjCZ25aNGlD7IH8OZA qgXnXmWrEndVL99EqTDDyMtfZzIGl911GLqQQVm5DW1/4bHV1w0YMHxdSE0GCi9R iFsKX2mq8Vg7+iUkA88wIp4kTqMP2o1X3rJ0VrmHY1e81019eKDsDAh1qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLe8MWX1SezmqirAcGLL/VXCITk+MB8GA1UdIwQY MBaAFPXWsdkO1L8WUaoicObsusLYeSKsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWRheDJRN1V2eFpScWlKdzV1eTZ3dGg1SXF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS80NWZlZTctNjk4NS00YWJlLWFmYWIt MDE0MmZlZjY3MmVjLzEvOWRheDJRN1V2eFpScWlKdzV1eTZ3dGg1SXF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS80NWZlZTctNjk4NS00YWJlLWFmYWItMDE0MmZlZjY3MmVj LzEvOWRheDJRN1V2eFpScWlKdzV1eTZ3dGg1SXF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP5qK7J+w 1h4V4J2jVdFJsI+v63vAKiXD4ONMvD9uXN2HZZeI4PCYA6vBLlggcKtsFtZTulYs jYhxb9Zv/2mSlgYFs1c9/s0py9mQgCmgRQWf7YDI42dUo9qtPaBIAZj3duVK2K7Z 7DOOXkm4oEJnDchG4nUV3QwkWX5AZroFriJBmVRbRwrpubdLc5/unOBz+Cb6X+Qk g46WMwJA09MuNJKnGsDSjN3LWCIUIdScxhC4/a/KhNnmkGv9+qUEOgB/5+7VhEFx 2acVMBBT8mV1+0dPtWHja/3oTyeW3QWFQOGHG1JgFpxFzhxa9zGAF7HvZ2SDoMeh bId/b2+fSwaRMg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:47 2026 by rpki-client