This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft File: a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft (raw, json) Hash identifier: /9P16jPBK6gTLGKNzJlIkzYCS3pv0dk8Hr7V4+mOx88= Subject key identifier: 09:01:13:CC:8A:C9:48:BA:F2:32:C1:2B:CF:3A:7D:80:65:01:9F:46 Authority key identifier: 6B:D1:9D:69:70:1F:13:A5:97:7C:D2:29:6F:A8:7A:25:2F:BF:05:F7 Certificate issuer: /CN=6bd19d69701f13a5977cd2296fa87a252fbf05f7 Certificate serial: 019C427CFD99EAE71BE23AFF8DCCE2BC3A5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft Manifest number: 0946 Signing time: Mon 09 Feb 2026 13:00:13 +0000 Manifest this update: Mon 09 Feb 2026 13:00:13 +0000 Manifest next update: Tue 10 Feb 2026 13:00:13 +0000 Files and hashes: 1: a9GdaXAfE6WXfNIpb6h6JS-_Bfc.crl (hash: GgXNu0JPQaNQ/lf87pidKInfBJFBIWtBo+ibsdbnVKE=) 2: d5uZsHk5psUBNIiK0yURePVkIj4.roa (hash: s7XGbhnDoYFsLMagak/nA9yObweAfTDGqMpZ2d7pox0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.crl rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft rsync://rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7c:fd:99:ea:e7:1b:e2:3a:ff:8d:cc:e2:bc:3a:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bd19d69701f13a5977cd2296fa87a252fbf05f7 Validity Not Before: Feb 9 13:00:13 2026 GMT Not After : Feb 10 13:00:13 2026 GMT Subject: CN=090113cc8ac948baf232c12bcf3a7d8065019f46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e3:83:03:78:0b:64:61:49:84:dc:d4:b6:86: bf:27:55:25:a1:96:8a:59:48:fd:4a:c5:ce:b5:68: e2:4c:37:d9:b5:6b:e6:0a:26:95:61:22:c2:f8:3a: 73:5c:20:8e:aa:7b:0a:0d:33:f5:4d:53:2f:cd:37: 85:19:ba:2e:45:56:f2:86:19:f1:0d:d0:82:63:b9: 8c:89:b0:26:94:08:8e:96:5e:04:f2:8d:fc:0f:e4: 70:63:70:58:51:da:11:68:a3:7e:5d:70:4f:73:0b: 9e:99:4e:7e:b9:cf:f4:5b:3b:96:ea:3d:5c:2c:d3: 01:d8:b7:e5:3f:6d:69:fa:32:02:dd:ca:4e:1a:15: 09:ae:40:6c:04:d9:a5:34:11:1b:7d:4e:44:15:af: 4d:3b:03:40:0a:bf:9e:e2:c0:2b:18:6a:35:1a:22: ac:0f:de:52:02:2e:81:e5:f9:1c:f2:97:4e:7b:d0: e4:2d:45:78:2b:ed:cb:1f:48:a4:1e:fa:1d:b5:a4: e7:a9:de:90:61:3f:bc:ca:76:6f:2b:36:89:28:3b: 6e:b1:c2:32:c2:bb:4f:c1:0c:84:98:83:f6:18:0a: f6:d9:25:dd:d7:08:7c:35:08:9a:c5:fd:71:74:0a: eb:7b:25:6c:48:57:5a:61:6f:82:c2:a5:8e:c9:24: ff:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:01:13:CC:8A:C9:48:BA:F2:32:C1:2B:CF:3A:7D:80:65:01:9F:46 X509v3 Authority Key Identifier: keyid:6B:D1:9D:69:70:1F:13:A5:97:7C:D2:29:6F:A8:7A:25:2F:BF:05:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:f5:15:38:f8:39:d5:fc:13:78:cf:e4:96:c7:66:95:73:22: 57:f8:85:64:a0:51:19:bf:bf:e0:93:b6:65:9b:a2:40:a2:80: 42:e9:36:45:c5:e4:cb:d1:68:8b:89:28:9c:87:c0:ef:47:ab: 43:ea:06:63:29:2d:e3:05:98:46:8e:3a:42:b4:fa:bf:3a:72: 46:81:05:a4:aa:a7:96:5a:db:e7:0e:d7:e2:dd:31:7c:fa:ac: 2a:4b:3e:a3:17:78:7b:e5:11:e2:f2:dc:bc:0c:1c:a7:c9:52: 66:c0:4a:79:a1:01:f8:de:6e:fe:e9:bf:20:b5:e8:7f:0b:7f: f2:e9:55:62:d8:ba:ad:ba:89:4d:15:ab:bb:ff:c4:e0:06:22: 19:76:81:01:c2:e3:d1:4d:8b:02:91:b0:03:ac:d4:64:84:69: 4e:0b:06:41:6f:45:a6:9d:6c:96:dd:62:97:2e:ce:59:68:d6: 6e:3a:ab:05:8f:3c:dd:5e:ab:20:5b:0e:4d:ab:e9:8d:7f:6b: 57:85:72:97:ad:2f:50:8b:19:f9:c4:ea:37:25:81:01:0d:86: b7:0b:26:15:95:1f:cf:fd:fb:56:dc:0d:9c:60:9f:1c:8b:15: 81:6e:5f:5d:f2:af:20:54:0b:0c:ca:99:8b:de:2a:21:ad:be: 16:8e:cb:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfP2Z6ucb4jr/jczivDpfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiZDE5ZDY5NzAxZjEzYTU5NzdjZDIyOTZmYTg3YTI1MmZi ZjA1ZjcwHhcNMjYwMjA5MTMwMDEzWhcNMjYwMjEwMTMwMDEzWjAzMTEwLwYDVQQD EygwOTAxMTNjYzhhYzk0OGJhZjIzMmMxMmJjZjNhN2Q4MDY1MDE5ZjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseODA3gLZGFJhNzUtoa/J1UloZaK WUj9SsXOtWjiTDfZtWvmCiaVYSLC+DpzXCCOqnsKDTP1TVMvzTeFGbouRVbyhhnx DdCCY7mMibAmlAiOll4E8o38D+RwY3BYUdoRaKN+XXBPcwuemU5+uc/0WzuW6j1c LNMB2LflP21p+jIC3cpOGhUJrkBsBNmlNBEbfU5EFa9NOwNACr+e4sArGGo1GiKs D95SAi6B5fkc8pdOe9DkLUV4K+3LH0ikHvodtaTnqd6QYT+8ynZvKzaJKDtuscIy wrtPwQyEmIP2GAr22SXd1wh8NQiaxf1xdArreyVsSFdaYW+CwqWOyST/EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAkBE8yKyUi68jLBK886fYBlAZ9GMB8GA1UdIwQY MBaAFGvRnWlwHxOll3zSKW+oeiUvvwX3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTlHZGFYQWZFNldYZk5JcGI2aDZKUy1fQmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny80ZGFlYmEtMzZiNC00OTQ5LTgzODUt OGYwZDRlZWY2YWI1LzEvYTlHZGFYQWZFNldYZk5JcGI2aDZKUy1fQmZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny80ZGFlYmEtMzZiNC00OTQ5LTgzODUtOGYwZDRlZWY2YWI1 LzEvYTlHZGFYQWZFNldYZk5JcGI2aDZKUy1fQmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsPUVOPg5 1fwTeM/klsdmlXMiV/iFZKBRGb+/4JO2ZZuiQKKAQuk2RcXky9Foi4konIfA70er Q+oGYykt4wWYRo46QrT6vzpyRoEFpKqnllrb5w7X4t0xfPqsKks+oxd4e+UR4vLc vAwcp8lSZsBKeaEB+N5u/um/ILXofwt/8ulVYti6rbqJTRWru//E4AYiGXaBAcLj 0U2LApGwA6zUZIRpTgsGQW9Fpp1slt1ily7OWWjWbjqrBY883V6rIFsOTavpjX9r V4Vyl60vUIsZ+cTqNyWBAQ2GtwsmFZUfz/37VtwNnGCfHIsVgW5fXfKvIFQLDMqZ i94qIa2+Fo7LNA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:48:44 2026 by rpki-client