This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft File: 9lQZ43AKNrorA5Bsn49NLf2EgHA.mft (raw, json) Hash identifier: l5XTxd32a1aELffPz+QJvWvuuUz5gfVXiATre9eK5+M= Subject key identifier: 05:B9:53:04:7B:C8:3F:DE:0F:B2:83:7E:07:9C:3F:D4:B4:CD:6A:0A Authority key identifier: F6:54:19:E3:70:0A:36:BA:2B:03:90:6C:9F:8F:4D:2D:FD:84:80:70 Certificate issuer: /CN=f65419e3700a36ba2b03906c9f8f4d2dfd848070 Certificate serial: 019C420FBD5A600FF76DD819E6A9B579649B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft Manifest number: 0F2B Signing time: Mon 09 Feb 2026 11:00:53 +0000 Manifest this update: Mon 09 Feb 2026 11:00:53 +0000 Manifest next update: Tue 10 Feb 2026 11:00:53 +0000 Files and hashes: 1: 9lQZ43AKNrorA5Bsn49NLf2EgHA.crl (hash: 9GOmtxbYOw6VcTKbQwZFEkIq+gh8jkV0MbbI60lOp/o=) 2: i1q-5ppGHZKen0mg4iu01mYnQM0.roa (hash: sIuyBrADQrDmfb4gofoZhceJ2ljMvz5t7ov19sRqXKo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.crl rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:bd:5a:60:0f:f7:6d:d8:19:e6:a9:b5:79:64:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f65419e3700a36ba2b03906c9f8f4d2dfd848070 Validity Not Before: Feb 9 11:00:53 2026 GMT Not After : Feb 10 11:00:53 2026 GMT Subject: CN=05b953047bc83fde0fb2837e079c3fd4b4cd6a0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8e:78:5d:2c:3a:07:90:fd:9f:11:44:88:a2: 49:5b:cc:fd:eb:22:84:54:b7:e5:85:11:0a:2f:1d: 46:b0:64:d3:73:ba:94:fb:12:75:53:05:72:e8:c0: ed:fb:d8:ea:b2:b1:fa:f7:b9:f2:61:11:af:d5:b3: 3f:8e:bc:eb:e7:36:22:c5:3f:32:f9:f7:52:74:16: 55:1c:63:9b:8e:2d:34:1b:6e:44:36:78:a6:88:96: f6:ad:44:23:77:59:ab:ca:de:30:4b:ef:b1:a8:eb: 52:dd:60:74:9b:3b:cd:a5:bc:8f:f3:f3:b3:78:9e: 83:b2:af:38:36:16:79:9a:e3:03:d9:1f:86:fa:6e: fb:03:33:48:6f:d7:86:c5:1f:cc:13:6e:88:0d:18: 0f:81:4b:84:e8:38:13:83:73:93:c8:15:63:76:59: 61:a9:87:7e:b7:6e:b5:42:61:73:2d:12:7a:c9:5f: ac:88:47:58:9c:ab:6c:4c:6a:4f:cc:f2:2f:ad:83: 09:77:2e:78:97:83:7e:35:2b:a7:8e:0e:b4:fe:20: 76:68:c6:d5:2a:9f:bf:0b:ea:75:dd:30:75:b8:ce: e3:13:bb:0f:a5:95:db:3f:48:ed:9d:28:7e:0f:d3: 54:0a:d5:23:a8:25:03:a5:b4:96:11:13:08:c6:f2: eb:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:B9:53:04:7B:C8:3F:DE:0F:B2:83:7E:07:9C:3F:D4:B4:CD:6A:0A X509v3 Authority Key Identifier: keyid:F6:54:19:E3:70:0A:36:BA:2B:03:90:6C:9F:8F:4D:2D:FD:84:80:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:03:94:fa:41:fb:de:29:04:bf:be:06:86:01:0f:ff:82:15: 30:b8:0a:da:24:15:1d:c8:9f:50:8c:fb:f6:42:b3:31:b2:f2: 40:1f:ff:a5:e8:7c:9f:54:5f:a7:c6:e2:a4:5f:26:2a:71:80: 6e:a1:d3:ec:da:d3:14:c7:80:4a:55:d4:0a:9d:0c:88:36:34: f2:7b:fb:26:3c:19:77:e8:38:31:ce:ea:81:95:c0:99:ae:04: cc:ef:46:42:f4:36:94:d8:70:6f:64:f1:bb:c7:ff:26:9f:8c: 15:f6:ce:7b:cb:ac:67:e0:e4:92:76:26:79:a8:2c:46:72:b7: f9:92:b3:1c:b6:bd:a9:d8:ba:e7:c0:00:59:f6:61:f4:c1:00: ef:f6:b7:e3:7d:d0:55:1a:fb:da:dc:ff:2e:a6:f1:62:6d:2a: e2:17:ea:c6:cc:70:7b:01:ae:53:8b:26:78:c8:d9:88:b8:a9: fa:e7:6a:8a:0c:a9:d7:c7:37:6e:cd:98:5c:eb:08:98:1d:73: e9:4a:b5:6e:ec:38:9b:7c:21:73:00:69:1e:71:f9:23:18:16: 58:66:78:b8:f7:81:bc:39:db:5d:22:50:c8:35:fd:e3:77:1e: d5:0c:63:4f:ac:9c:72:c4:5b:66:3f:f5:41:28:7e:d8:d4:3e: 3e:61:ec:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD71aYA/3bdgZ5qm1eWSbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NTQxOWUzNzAwYTM2YmEyYjAzOTA2YzlmOGY0ZDJkZmQ4 NDgwNzAwHhcNMjYwMjA5MTEwMDUzWhcNMjYwMjEwMTEwMDUzWjAzMTEwLwYDVQQD EygwNWI5NTMwNDdiYzgzZmRlMGZiMjgzN2UwNzljM2ZkNGI0Y2Q2YTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAro54XSw6B5D9nxFEiKJJW8z96yKE VLflhREKLx1GsGTTc7qU+xJ1UwVy6MDt+9jqsrH697nyYRGv1bM/jrzr5zYixT8y +fdSdBZVHGObji00G25ENnimiJb2rUQjd1mryt4wS++xqOtS3WB0mzvNpbyP8/Oz eJ6Dsq84NhZ5muMD2R+G+m77AzNIb9eGxR/ME26IDRgPgUuE6DgTg3OTyBVjdllh qYd+t261QmFzLRJ6yV+siEdYnKtsTGpPzPIvrYMJdy54l4N+NSunjg60/iB2aMbV Kp+/C+p13TB1uM7jE7sPpZXbP0jtnSh+D9NUCtUjqCUDpbSWERMIxvLrtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAW5UwR7yD/eD7KDfgecP9S0zWoKMB8GA1UdIwQY MBaAFPZUGeNwCja6KwOQbJ+PTS39hIBwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWxRWjQzQUtOcm9yQTVCc240OU5MZjJFZ0hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny80NDljMDItZjI2Mi00NWQzLThmOGYt ZDRiNzIzZWQ3ODFjLzEvOWxRWjQzQUtOcm9yQTVCc240OU5MZjJFZ0hBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny80NDljMDItZjI2Mi00NWQzLThmOGYtZDRiNzIzZWQ3ODFj LzEvOWxRWjQzQUtOcm9yQTVCc240OU5MZjJFZ0hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYwOU+kH7 3ikEv74GhgEP/4IVMLgK2iQVHcifUIz79kKzMbLyQB//peh8n1Rfp8bipF8mKnGA bqHT7NrTFMeASlXUCp0MiDY08nv7JjwZd+g4Mc7qgZXAma4EzO9GQvQ2lNhwb2Tx u8f/Jp+MFfbOe8usZ+DkknYmeagsRnK3+ZKzHLa9qdi658AAWfZh9MEA7/a3433Q VRr72tz/LqbxYm0q4hfqxsxwewGuU4smeMjZiLip+udqigyp18c3bs2YXOsImB1z 6Uq1buw4m3whcwBpHnH5IxgWWGZ4uPeBvDnbXSJQyDX943ce1QxjT6yccsRbZj/1 QSh+2NQ+PmHsvQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:19 2026 by rpki-client