This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft File: V9minRgOgZpHgvtsbqFtOn0ykQA.mft (raw, json) Hash identifier: B9KpwCguS9GakjeL8ClqroHFAC5aHhHMRbiZdt1Tv/Y= Subject key identifier: 0E:E8:7E:DC:95:2F:85:FA:7E:05:80:4F:AB:A2:AB:01:3B:1C:8E:46 Authority key identifier: 57:D9:A2:9D:18:0E:81:9A:47:82:FB:6C:6E:A1:6D:3A:7D:32:91:00 Certificate issuer: /CN=57d9a29d180e819a4782fb6c6ea16d3a7d329100 Certificate serial: 019C4133F708863BC4E3D3996AA5D6D28CFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V9minRgOgZpHgvtsbqFtOn0ykQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft Manifest number: 0A24 Signing time: Mon 09 Feb 2026 07:00:50 +0000 Manifest this update: Mon 09 Feb 2026 07:00:50 +0000 Manifest next update: Tue 10 Feb 2026 07:00:50 +0000 Files and hashes: 1: V9minRgOgZpHgvtsbqFtOn0ykQA.crl (hash: W7SB7mftUVuROh0KPsLXi13tVvUgHTWtMPd8OhrHvdo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft rsync://rpki.ripe.net/repository/DEFAULT/V9minRgOgZpHgvtsbqFtOn0ykQA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:33:f7:08:86:3b:c4:e3:d3:99:6a:a5:d6:d2:8c:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57d9a29d180e819a4782fb6c6ea16d3a7d329100 Validity Not Before: Feb 9 07:00:50 2026 GMT Not After : Feb 10 07:00:50 2026 GMT Subject: CN=0ee87edc952f85fa7e05804faba2ab013b1c8e46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cd:5a:ed:4e:8d:de:a5:44:43:31:bb:c5:24: f2:80:2e:0b:d4:7e:1f:75:8c:6f:be:e4:cd:3b:c6: 10:0f:a9:c4:c4:a2:11:29:51:b6:32:58:6e:e8:32: 2f:46:b2:53:c2:f7:04:87:d7:7b:75:1c:05:51:eb: 5c:9c:29:5e:09:6c:a5:62:93:15:7a:ee:53:ba:6b: 0a:80:bf:9d:d5:13:9d:fb:ce:5c:ba:30:6f:7f:c0: 6a:33:5b:e1:c5:e0:68:0d:7b:5c:d8:32:79:d8:e5: 02:32:78:37:9a:be:7e:6c:6b:65:69:46:4c:60:08: 66:43:b7:74:bc:86:0a:a5:0c:67:78:b2:bd:96:30: 0c:e3:b4:8e:56:07:56:d8:d8:3a:6e:e9:3d:89:48: 82:51:98:fb:cd:6d:6d:1c:ef:28:3a:90:31:bd:7c: 31:ab:21:f4:0a:78:ee:33:59:e0:39:ef:58:59:a2: 4b:e4:86:2e:cd:09:98:0c:45:81:e9:9d:47:05:c8: 54:43:c4:31:dd:20:7a:93:b8:30:b2:e0:80:e7:2e: 57:46:b3:fa:78:e4:95:1c:9d:18:98:45:f7:47:71: f6:76:17:8e:3d:28:ba:95:cb:4f:0d:2a:bd:81:8c: f4:23:bf:ce:e2:c6:84:4a:c9:42:8b:d8:cc:e9:68: 51:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:E8:7E:DC:95:2F:85:FA:7E:05:80:4F:AB:A2:AB:01:3B:1C:8E:46 X509v3 Authority Key Identifier: keyid:57:D9:A2:9D:18:0E:81:9A:47:82:FB:6C:6E:A1:6D:3A:7D:32:91:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9minRgOgZpHgvtsbqFtOn0ykQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:85:91:82:2b:ab:7e:50:09:bd:ec:4e:bb:a2:17:ea:56:24: 07:56:ba:fd:a6:47:8e:b3:8b:2e:bb:71:d3:f0:71:f4:61:fd: 8d:8c:c2:0a:40:41:e1:76:17:05:b5:87:29:a0:a3:8b:75:d7: 3d:b4:d1:90:3d:36:ec:59:58:a0:70:84:60:de:a6:8b:b8:44: a6:72:f4:52:42:88:c8:9e:36:51:9d:32:f1:f7:06:ed:24:2a: d8:97:9b:c2:56:12:76:a0:cb:c2:63:18:fc:d5:f0:f3:29:3c: 1e:73:56:2b:42:e3:f4:7a:36:81:eb:b8:fe:69:04:21:95:53: 4c:e0:ed:7e:5f:71:41:6f:50:d6:fa:71:8d:4f:24:a5:6d:b7: 27:bc:4e:68:74:54:69:0d:b0:da:97:df:7a:19:dd:02:6d:bb: a3:10:cc:a2:11:60:86:cb:37:e7:a8:ea:7d:79:95:48:19:2d: cb:5e:75:10:a9:67:f4:0c:1d:b6:18:c2:01:e3:95:dc:59:29: f0:d1:55:da:2e:58:33:7f:5f:c3:91:9b:79:c0:05:1f:2e:c2: 05:b2:80:66:ea:1b:d7:8a:b8:6f:d4:79:90:61:1f:0c:c7:1b: 4b:06:32:18:c2:a9:f6:c7:86:30:c8:15:0c:e9:56:8e:ca:ee: ce:af:5e:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBM/cIhjvE49OZaqXW0oz6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3ZDlhMjlkMTgwZTgxOWE0NzgyZmI2YzZlYTE2ZDNhN2Qz MjkxMDAwHhcNMjYwMjA5MDcwMDUwWhcNMjYwMjEwMDcwMDUwWjAzMTEwLwYDVQQD EygwZWU4N2VkYzk1MmY4NWZhN2UwNTgwNGZhYmEyYWIwMTNiMWM4ZTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs81a7U6N3qVEQzG7xSTygC4L1H4f dYxvvuTNO8YQD6nExKIRKVG2Mlhu6DIvRrJTwvcEh9d7dRwFUetcnCleCWylYpMV eu5TumsKgL+d1ROd+85cujBvf8BqM1vhxeBoDXtc2DJ52OUCMng3mr5+bGtlaUZM YAhmQ7d0vIYKpQxneLK9ljAM47SOVgdW2Ng6buk9iUiCUZj7zW1tHO8oOpAxvXwx qyH0CnjuM1ngOe9YWaJL5IYuzQmYDEWB6Z1HBchUQ8Qx3SB6k7gwsuCA5y5XRrP6 eOSVHJ0YmEX3R3H2dheOPSi6lctPDSq9gYz0I7/O4saESslCi9jM6WhRTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA7oftyVL4X6fgWAT6uiqwE7HI5GMB8GA1UdIwQY MBaAFFfZop0YDoGaR4L7bG6hbTp9MpEAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjltaW5SZ09nWnBIZ3Z0c2JxRnRPbjB5a1FBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9jMWFiNTMtZWNkZC00ZjNmLWI2MDQt MDE1Y2Y1NDdlNDQ3LzEvVjltaW5SZ09nWnBIZ3Z0c2JxRnRPbjB5a1FBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9jMWFiNTMtZWNkZC00ZjNmLWI2MDQtMDE1Y2Y1NDdlNDQ3 LzEvVjltaW5SZ09nWnBIZ3Z0c2JxRnRPbjB5a1FBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACIWRgiur flAJvexOu6IX6lYkB1a6/aZHjrOLLrtx0/Bx9GH9jYzCCkBB4XYXBbWHKaCji3XX PbTRkD027FlYoHCEYN6mi7hEpnL0UkKIyJ42UZ0y8fcG7SQq2JebwlYSdqDLwmMY /NXw8yk8HnNWK0Lj9Ho2geu4/mkEIZVTTODtfl9xQW9Q1vpxjU8kpW23J7xOaHRU aQ2w2pffehndAm27oxDMohFghss356jqfXmVSBkty151EKln9AwdthjCAeOV3Fkp 8NFV2i5YM39fw5GbecAFHy7CBbKAZuob14q4b9R5kGEfDMcbSwYyGMKp9seGMMgV DOlWjsruzq9exg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:35 2026 by rpki-client