This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft File: 9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft (raw, json) Hash identifier: BjTj8Rjw45H8WBaQLxLsXBXM07a4sfRWksKrwK0gc1g= Subject key identifier: DA:40:EE:7D:F5:86:D9:21:21:0A:D0:43:3F:00:D5:11:F8:6B:81:2D Authority key identifier: F6:DB:1B:69:1B:30:DB:E4:8E:78:8B:7C:CA:4A:D3:1D:CD:C8:5C:76 Certificate issuer: /CN=f6db1b691b30dbe48e788b7cca4ad31dcdc85c76 Certificate serial: 019C439024E53A77316C849BCFA0FA6B5CB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9tsbaRsw2-SOeIt8ykrTHc3IXHY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft Manifest number: 180C Signing time: Mon 09 Feb 2026 18:00:45 +0000 Manifest this update: Mon 09 Feb 2026 18:00:45 +0000 Manifest next update: Tue 10 Feb 2026 18:00:45 +0000 Files and hashes: 1: 9tsbaRsw2-SOeIt8ykrTHc3IXHY.crl (hash: 1coIIArbGMXlGnRIOqwMVk9bfQ3ZY3XMdpR7FiGcQhw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft rsync://rpki.ripe.net/repository/DEFAULT/9tsbaRsw2-SOeIt8ykrTHc3IXHY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:24:e5:3a:77:31:6c:84:9b:cf:a0:fa:6b:5c:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6db1b691b30dbe48e788b7cca4ad31dcdc85c76 Validity Not Before: Feb 9 18:00:45 2026 GMT Not After : Feb 10 18:00:45 2026 GMT Subject: CN=da40ee7df586d921210ad0433f00d511f86b812d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d3:9a:4e:c7:47:6d:57:2a:ca:3e:c1:cb:cd: 69:79:2b:3a:1c:c4:12:06:e9:3f:97:39:dd:7c:bf: 86:fb:9e:bf:d0:dd:7a:10:10:1a:31:f9:96:07:6d: 18:22:e8:64:e5:73:5a:51:df:5f:7b:71:e5:fc:92: 3a:6d:d6:e2:cd:d2:62:55:b2:34:c5:06:fc:93:9a: 53:5b:7c:5e:be:7e:a1:66:03:f8:de:29:2f:4d:0a: 6b:32:6d:21:42:28:eb:d2:5e:59:6c:d3:c8:bb:5d: 1f:a9:76:36:c4:1f:3f:8c:13:5d:08:70:e4:41:44: ff:6a:10:2f:e8:98:3e:27:12:ef:29:91:64:10:12: d7:f9:49:b7:05:42:09:39:92:18:28:ec:df:82:27: c7:6e:df:08:70:e3:f3:99:ad:7d:e7:f8:68:a9:1d: 04:35:03:d2:30:be:55:d2:1c:dc:97:54:fb:b2:b8: df:5b:f3:74:61:c1:58:e6:40:11:58:cc:a5:d4:b8: 89:1c:3e:ac:06:2b:f3:34:54:93:d5:0a:ec:46:7e: d4:79:7c:b3:fc:75:4d:85:c8:3c:e8:56:ea:31:43: 5f:1c:44:3e:fa:19:58:5f:7c:ea:90:5d:24:89:63: f8:d9:0c:5b:55:7e:3c:a1:db:65:3d:76:3b:bc:45: 26:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:40:EE:7D:F5:86:D9:21:21:0A:D0:43:3F:00:D5:11:F8:6B:81:2D X509v3 Authority Key Identifier: keyid:F6:DB:1B:69:1B:30:DB:E4:8E:78:8B:7C:CA:4A:D3:1D:CD:C8:5C:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9tsbaRsw2-SOeIt8ykrTHc3IXHY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:93:6c:97:fb:5a:0b:80:a9:ba:19:a2:7b:50:31:86:ae:51: e7:6b:41:ba:4c:7e:9c:2d:6d:18:b4:75:6e:55:fb:cb:29:1a: 6a:ea:d8:14:e3:50:9a:11:b9:62:23:83:60:98:f8:ad:d8:3f: 20:1f:e4:03:ef:cf:d1:d3:ff:2d:0e:6f:f7:b2:85:fc:bc:96: 1d:70:e3:9e:b1:c9:ac:d1:99:d6:19:f2:a3:7f:b7:58:10:74: 30:fb:2f:cd:5d:3e:04:51:f4:53:9e:f0:5f:cf:1f:76:03:20: 12:2c:46:0a:fe:07:a2:9d:f0:03:23:58:7f:31:f4:fa:4f:7f: a3:7d:cc:7f:59:0f:0c:58:c6:eb:57:30:dc:07:72:d9:51:13: 6e:f4:dc:f9:e4:dc:18:cd:42:6b:b1:b8:f3:36:b4:25:a9:75: ec:29:d8:c0:5a:f3:2e:0f:1f:5a:4a:a5:60:79:f9:72:ed:ca: df:ec:d4:ea:d9:43:d3:d5:a8:3f:97:7d:d8:01:eb:7a:b4:cf: ea:b2:5a:aa:79:92:fe:26:d9:36:8c:be:41:1b:d6:14:ae:88: 41:ce:31:c7:90:d5:67:50:5e:03:7c:30:b2:59:46:24:79:7c: a4:df:f3:fe:10:c2:4f:70:67:e1:1a:14:22:20:35:dd:27:d9: 98:ca:e6:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkCTlOncxbISbz6D6a1y4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2ZGIxYjY5MWIzMGRiZTQ4ZTc4OGI3Y2NhNGFkMzFkY2Rj ODVjNzYwHhcNMjYwMjA5MTgwMDQ1WhcNMjYwMjEwMTgwMDQ1WjAzMTEwLwYDVQQD EyhkYTQwZWU3ZGY1ODZkOTIxMjEwYWQwNDMzZjAwZDUxMWY4NmI4MTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndOaTsdHbVcqyj7By81peSs6HMQS Buk/lzndfL+G+56/0N16EBAaMfmWB20YIuhk5XNaUd9fe3Hl/JI6bdbizdJiVbI0 xQb8k5pTW3xevn6hZgP43ikvTQprMm0hQijr0l5ZbNPIu10fqXY2xB8/jBNdCHDk QUT/ahAv6Jg+JxLvKZFkEBLX+Um3BUIJOZIYKOzfgifHbt8IcOPzma195/hoqR0E NQPSML5V0hzcl1T7srjfW/N0YcFY5kARWMyl1LiJHD6sBivzNFST1QrsRn7UeXyz /HVNhcg86FbqMUNfHEQ++hlYX3zqkF0kiWP42QxbVX48odtlPXY7vEUm8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNpA7n31htkhIQrQQz8A1RH4a4EtMB8GA1UdIwQY MBaAFPbbG2kbMNvkjniLfMpK0x3NyFx2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXRzYmFSc3cyLVNPZUl0OHlrclRIYzNJWEhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9lMzRmYTUtNGU4ZC00YjQxLWJiYjgt ZTMxY2UxYjk2N2U5LzEvOXRzYmFSc3cyLVNPZUl0OHlrclRIYzNJWEhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9lMzRmYTUtNGU4ZC00YjQxLWJiYjgtZTMxY2UxYjk2N2U5 LzEvOXRzYmFSc3cyLVNPZUl0OHlrclRIYzNJWEhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY5Nsl/ta C4Cpuhmie1Axhq5R52tBukx+nC1tGLR1blX7yykaaurYFONQmhG5YiODYJj4rdg/ IB/kA+/P0dP/LQ5v97KF/LyWHXDjnrHJrNGZ1hnyo3+3WBB0MPsvzV0+BFH0U57w X88fdgMgEixGCv4Hop3wAyNYfzH0+k9/o33Mf1kPDFjG61cw3Ady2VETbvTc+eTc GM1Ca7G48za0Jal17CnYwFrzLg8fWkqlYHn5cu3K3+zU6tlD09WoP5d92AHrerTP 6rJaqnmS/ibZNoy+QRvWFK6IQc4xx5DVZ1BeA3wwsllGJHl8pN/z/hDCT3Bn4RoU IiA13SfZmMrm/w== -----END CERTIFICATE-----Generated at Mon Feb 9 22:34:12 2026 by rpki-client