This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/9mKtW4G4BxPe0-__RCmfzXZfKrE.mft File: 9mKtW4G4BxPe0-__RCmfzXZfKrE.mft (raw, json) Hash identifier: bgdVV/n613B/r1ioa8po1+NxU8d1U+nHk9yUVkbKwHs= Subject key identifier: 98:B5:FD:0D:C8:6C:77:B1:E1:FE:96:DF:77:A7:3F:92:AE:B3:2E:3D Authority key identifier: F6:62:AD:5B:81:B8:07:13:DE:D3:EF:FF:44:29:9F:CD:76:5F:2A:B1 Certificate issuer: /CN=f662ad5b81b80713ded3efff44299fcd765f2ab1 Certificate serial: 019C1C14E4F41E4BE605FB28C4187ABF22A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9mKtW4G4BxPe0-__RCmfzXZfKrE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/9mKtW4G4BxPe0-__RCmfzXZfKrE.mft Manifest number: 016E Signing time: Mon 02 Feb 2026 02:00:57 +0000 Manifest this update: Mon 02 Feb 2026 02:00:57 +0000 Manifest next update: Tue 03 Feb 2026 02:00:57 +0000 Files and hashes: 1: 9mKtW4G4BxPe0-__RCmfzXZfKrE.crl (hash: QgNUb9KGYllbh1w72zenF5UQAteLkbEjQDjrXGWNnKY=) 2: jO3T1-EOvm7phVXV6edT90rIeh0.asa (hash: 6/Ul++o9f4AGDv6T10uaHtnXB8UK/eOuxrUr++EWOSQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/9mKtW4G4BxPe0-__RCmfzXZfKrE.crl rsync://rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/9mKtW4G4BxPe0-__RCmfzXZfKrE.mft rsync://rpki.ripe.net/repository/DEFAULT/9mKtW4G4BxPe0-__RCmfzXZfKrE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1c:14:e4:f4:1e:4b:e6:05:fb:28:c4:18:7a:bf:22:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f662ad5b81b80713ded3efff44299fcd765f2ab1 Validity Not Before: Feb 2 02:00:57 2026 GMT Not After : Feb 3 02:00:57 2026 GMT Subject: CN=98b5fd0dc86c77b1e1fe96df77a73f92aeb32e3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7b:cd:a9:dd:a6:58:21:5c:31:24:f4:f6:b1: 3b:26:65:23:55:1a:7c:d9:b2:32:bc:f4:2a:fc:5a: fa:b3:6e:84:5c:3f:b6:28:fb:c8:b8:5f:b7:4a:26: 9b:15:47:ad:a7:c4:9d:da:9b:ce:56:88:dd:96:59: 77:7b:ab:37:c7:9a:bd:22:cd:35:ef:e7:55:a5:5f: e3:00:51:5f:64:da:a2:bc:81:21:0a:b1:94:6f:d2: c9:86:17:f2:3b:fa:dc:0e:f6:c4:91:60:cb:4b:65: 67:16:c7:7a:08:13:aa:ea:d9:12:41:01:86:91:85: 9b:d5:53:de:d9:ba:9e:4d:fb:38:34:92:37:4c:0e: 9e:45:e8:f0:fb:62:45:07:20:9b:00:9f:ec:bd:5f: 86:60:f6:69:d9:e9:14:2b:e5:7e:73:7e:94:b9:95: a5:ca:a7:6d:f3:20:cf:6c:d9:3d:89:e0:95:a6:34: fe:74:9b:33:c4:c9:d2:8b:da:72:11:61:75:19:a8: db:51:c7:ca:2b:f9:2a:0b:8b:63:86:78:17:e9:ba: 07:c9:40:cf:70:d3:f1:47:d1:40:3b:38:92:a1:04: b6:54:31:4a:8b:43:d7:96:88:6a:0e:1a:75:01:70: 11:d6:26:fb:82:70:0a:c1:cc:d5:4d:4f:83:2e:86: 0c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:B5:FD:0D:C8:6C:77:B1:E1:FE:96:DF:77:A7:3F:92:AE:B3:2E:3D X509v3 Authority Key Identifier: keyid:F6:62:AD:5B:81:B8:07:13:DE:D3:EF:FF:44:29:9F:CD:76:5F:2A:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9mKtW4G4BxPe0-__RCmfzXZfKrE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/9mKtW4G4BxPe0-__RCmfzXZfKrE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/9mKtW4G4BxPe0-__RCmfzXZfKrE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:1c:91:c8:82:48:2a:26:a0:fd:5a:5e:7d:4b:90:26:8d:f7: 52:22:b8:00:f8:ae:6c:a7:6b:02:1d:d4:71:00:e5:b3:b8:d7: e4:b7:97:9e:86:9a:2b:88:a9:92:d5:87:9c:33:10:98:06:2f: 54:cd:42:ff:d6:b8:03:05:ab:19:a3:ab:c5:87:bb:16:8a:94: c2:18:fc:ef:83:2c:97:a7:bf:b2:22:c1:05:8b:ef:45:4b:53: 67:d3:f5:6f:80:a9:33:87:94:3c:a9:fd:c0:35:a6:92:f8:bb: a6:e5:a5:83:bf:79:0b:3c:63:6e:d7:c2:ea:72:2a:2f:d0:5f: df:54:b0:37:de:87:a6:d4:20:35:ea:0e:c4:34:a4:c6:6a:39: 13:95:70:d7:ac:fb:c4:aa:08:49:45:7b:e0:25:a3:4c:57:0f: e3:17:ed:75:4c:58:1d:b0:8f:b6:6d:65:15:55:4d:60:e6:a6: ad:fa:26:db:cb:29:78:4d:bb:87:e4:9a:0b:89:84:85:c7:63: 67:4a:70:f2:86:bb:5a:d9:b9:4f:46:dd:88:88:5f:bc:9e:06: d6:dc:10:9e:87:e9:23:14:8d:f6:cb:fc:b4:1e:39:69:ad:9a: 2c:3c:27:ef:a1:2d:48:3a:83:7a:d0:be:53:17:bb:05:38:77: 6d:d2:7b:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwcFOT0HkvmBfsoxBh6vyKjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NjJhZDViODFiODA3MTNkZWQzZWZmZjQ0Mjk5ZmNkNzY1 ZjJhYjEwHhcNMjYwMjAyMDIwMDU3WhcNMjYwMjAzMDIwMDU3WjAzMTEwLwYDVQQD Eyg5OGI1ZmQwZGM4NmM3N2IxZTFmZTk2ZGY3N2E3M2Y5MmFlYjMyZTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXvNqd2mWCFcMST09rE7JmUjVRp8 2bIyvPQq/Fr6s26EXD+2KPvIuF+3SiabFUetp8Sd2pvOVojdlll3e6s3x5q9Is01 7+dVpV/jAFFfZNqivIEhCrGUb9LJhhfyO/rcDvbEkWDLS2VnFsd6CBOq6tkSQQGG kYWb1VPe2bqeTfs4NJI3TA6eRejw+2JFByCbAJ/svV+GYPZp2ekUK+V+c36UuZWl yqdt8yDPbNk9ieCVpjT+dJszxMnSi9pyEWF1GajbUcfKK/kqC4tjhngX6boHyUDP cNPxR9FAOziSoQS2VDFKi0PXlohqDhp1AXAR1ib7gnAKwczVTU+DLoYMeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJi1/Q3IbHex4f6W33enP5Kusy49MB8GA1UdIwQY MBaAFPZirVuBuAcT3tPv/0Qpn812XyqxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOW1LdFc0RzRCeFBlMC1fX1JDbWZ6WFpmS3JFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi80MDhhMzEtY2Q3ZS00NzlmLWJkMmEt YTY2MGZhZWViMWUyLzEvOW1LdFc0RzRCeFBlMC1fX1JDbWZ6WFpmS3JFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi80MDhhMzEtY2Q3ZS00NzlmLWJkMmEtYTY2MGZhZWViMWUy LzEvOW1LdFc0RzRCeFBlMC1fX1JDbWZ6WFpmS3JFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoByRyIJI Kiag/VpefUuQJo33UiK4APiubKdrAh3UcQDls7jX5LeXnoaaK4ipktWHnDMQmAYv VM1C/9a4AwWrGaOrxYe7FoqUwhj874Msl6e/siLBBYvvRUtTZ9P1b4CpM4eUPKn9 wDWmkvi7puWlg795CzxjbtfC6nIqL9Bf31SwN96HptQgNeoOxDSkxmo5E5Vw16z7 xKoISUV74CWjTFcP4xftdUxYHbCPtm1lFVVNYOamrfom28speE27h+SaC4mEhcdj Z0pw8oa7Wtm5T0bdiIhfvJ4G1twQnofpIxSN9sv8tB45aa2aLDwn76EtSDqDetC+ Uxe7BTh3bdJ7ew== -----END CERTIFICATE-----Generated at Mon Feb 2 08:13:30 2026 by rpki-client