This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft File: 9M3Ux8i_hxhwMKZEcCColvQeSZM.mft (raw, json) Hash identifier: BskeDHe9ebcKgX+zrAMjW69jrG72h/XXt+2JSz5MARo= Subject key identifier: 03:6B:F8:33:8A:D3:6D:64:E2:B3:61:22:0C:0B:9E:54:EE:2C:7C:AD Authority key identifier: F4:CD:D4:C7:C8:BF:87:18:70:30:A6:44:70:20:A8:96:F4:1E:49:93 Certificate issuer: /CN=f4cdd4c7c8bf87187030a6447020a896f41e4993 Certificate serial: 019C432200A5084D77985EDEEA6E29AEF37C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9M3Ux8i_hxhwMKZEcCColvQeSZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft Manifest number: 149E Signing time: Mon 09 Feb 2026 16:00:27 +0000 Manifest this update: Mon 09 Feb 2026 16:00:27 +0000 Manifest next update: Tue 10 Feb 2026 16:00:27 +0000 Files and hashes: 1: 9M3Ux8i_hxhwMKZEcCColvQeSZM.crl (hash: 3RpRe8YPdChekucNKBwOpvVz+TcmRTn3DJIsU1bjc0A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft rsync://rpki.ripe.net/repository/DEFAULT/9M3Ux8i_hxhwMKZEcCColvQeSZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:00:a5:08:4d:77:98:5e:de:ea:6e:29:ae:f3:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4cdd4c7c8bf87187030a6447020a896f41e4993 Validity Not Before: Feb 9 16:00:27 2026 GMT Not After : Feb 10 16:00:27 2026 GMT Subject: CN=036bf8338ad36d64e2b361220c0b9e54ee2c7cad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:33:8d:1e:01:3c:cd:fe:aa:d2:1a:47:36:8a: 91:a9:b4:c1:dc:3c:8d:7b:4f:47:dc:c0:d3:f5:8e: 15:de:27:c8:3d:76:a8:4a:da:26:f1:0e:26:f6:c9: eb:a7:8e:27:c5:45:03:a2:da:f5:45:1f:f8:8e:50: b0:51:8c:9c:44:ab:8e:97:77:2f:9b:e2:f6:2d:9c: 7d:d6:73:99:c4:7d:cd:26:0d:5e:bc:92:74:f4:31: ea:c3:ed:28:c9:86:a7:56:bc:e5:75:a7:76:78:fd: d9:7a:7e:92:cc:0d:00:33:d6:bd:40:03:a8:d5:cf: 35:c1:dc:b0:a0:39:c2:ee:b7:d2:d0:66:f1:f3:0a: 77:c2:c4:65:74:57:18:ac:90:b3:57:f2:1d:f4:db: dc:8c:2e:eb:67:28:68:17:89:cb:ac:ce:40:a3:d6: de:30:98:63:80:3b:5c:95:47:cd:a5:e6:68:5f:16: 10:fd:50:b2:43:a6:3b:f6:ac:05:87:c6:dc:52:ff: e7:51:51:8e:db:95:2d:a0:bf:06:da:c0:fc:41:da: 5a:fd:c8:c1:a2:90:43:e4:38:b3:ed:cb:c7:9a:b2: 90:a3:c5:fb:e4:c3:a8:3c:b6:8e:fa:24:90:00:d3: 27:33:74:c4:83:ef:13:2e:2b:95:94:80:32:9c:c6: 5e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:6B:F8:33:8A:D3:6D:64:E2:B3:61:22:0C:0B:9E:54:EE:2C:7C:AD X509v3 Authority Key Identifier: keyid:F4:CD:D4:C7:C8:BF:87:18:70:30:A6:44:70:20:A8:96:F4:1E:49:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9M3Ux8i_hxhwMKZEcCColvQeSZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:e3:31:b0:a1:d0:8f:33:f1:a6:06:43:23:56:ac:b9:3f:9c: a9:70:35:04:d3:39:f3:91:a0:e4:5e:7a:50:75:6e:ac:36:bc: 0c:87:de:11:b7:12:4b:97:c0:0b:d6:bf:fd:b5:a7:eb:b8:8c: 0a:ca:1a:bb:d6:3b:8e:c8:0d:c6:9f:27:f2:1b:42:1a:a2:58: 4d:a9:d0:b7:63:92:14:4d:ed:ec:a4:51:6a:7c:d5:ee:bf:92: 20:fe:d2:c7:42:43:85:d4:7a:75:4e:c3:2b:b3:bc:ec:ed:89: 3d:74:19:c7:a9:a5:b7:84:a5:32:86:04:b0:29:52:6c:40:24: d4:de:c4:3b:c6:ed:9f:69:48:52:83:54:d0:1a:9f:1c:bc:e6: 84:c9:97:90:2c:d6:ff:b7:28:45:d7:4c:a7:cc:92:f8:e7:05: 62:33:55:fb:7a:3f:4e:8f:5f:7b:78:e1:3d:55:69:30:e6:b9: 52:83:d8:6e:34:7d:ab:68:db:87:8f:0c:2b:5d:5d:67:e3:a2: a6:77:47:ef:91:bd:83:7b:63:82:58:f7:ff:af:f7:0c:01:eb: de:9b:99:ae:0c:65:77:82:64:6d:5b:4d:83:cf:15:1f:37:69: 77:ac:c6:7e:70:c6:29:61:7d:d1:cd:1e:8f:7e:9d:72:e2:46: 82:98:5d:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIgClCE13mF7e6m4prvN8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0Y2RkNGM3YzhiZjg3MTg3MDMwYTY0NDcwMjBhODk2ZjQx ZTQ5OTMwHhcNMjYwMjA5MTYwMDI3WhcNMjYwMjEwMTYwMDI3WjAzMTEwLwYDVQQD EygwMzZiZjgzMzhhZDM2ZDY0ZTJiMzYxMjIwYzBiOWU1NGVlMmM3Y2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTONHgE8zf6q0hpHNoqRqbTB3DyN e09H3MDT9Y4V3ifIPXaoStom8Q4m9snrp44nxUUDotr1RR/4jlCwUYycRKuOl3cv m+L2LZx91nOZxH3NJg1evJJ09DHqw+0oyYanVrzldad2eP3Zen6SzA0AM9a9QAOo 1c81wdywoDnC7rfS0Gbx8wp3wsRldFcYrJCzV/Id9NvcjC7rZyhoF4nLrM5Ao9be MJhjgDtclUfNpeZoXxYQ/VCyQ6Y79qwFh8bcUv/nUVGO25UtoL8G2sD8Qdpa/cjB opBD5Diz7cvHmrKQo8X75MOoPLaO+iSQANMnM3TEg+8TLiuVlIAynMZe0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFANr+DOK021k4rNhIgwLnlTuLHytMB8GA1UdIwQY MBaAFPTN1MfIv4cYcDCmRHAgqJb0HkmTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU0zVXg4aV9oeGh3TUtaRWNDQ29sdlFlU1pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9lY2Q4YzgtMTNlMS00MGVhLTk4YzAt ZjFlMTk4YTI0ZGJmLzEvOU0zVXg4aV9oeGh3TUtaRWNDQ29sdlFlU1pNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9lY2Q4YzgtMTNlMS00MGVhLTk4YzAtZjFlMTk4YTI0ZGJm LzEvOU0zVXg4aV9oeGh3TUtaRWNDQ29sdlFlU1pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN+MxsKHQ jzPxpgZDI1asuT+cqXA1BNM585Gg5F56UHVurDa8DIfeEbcSS5fAC9a//bWn67iM Csoau9Y7jsgNxp8n8htCGqJYTanQt2OSFE3t7KRRanzV7r+SIP7Sx0JDhdR6dU7D K7O87O2JPXQZx6mlt4SlMoYEsClSbEAk1N7EO8btn2lIUoNU0BqfHLzmhMmXkCzW /7coRddMp8yS+OcFYjNV+3o/To9fe3jhPVVpMOa5UoPYbjR9q2jbh48MK11dZ+Oi pndH75G9g3tjglj3/6/3DAHr3puZrgxld4JkbVtNg88VHzdpd6zGfnDGKWF90c0e j36dcuJGgphdgw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:27 2026 by rpki-client