This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft File: r9rCQfMBCxrkhLwx9YStD50gZzQ.mft (raw, json) Hash identifier: OBjl3Looqn+FT0bJF5IubmH6Uja8jIL1z5ah34TwGRQ= Subject key identifier: 46:AE:7A:6E:D8:8A:04:40:01:6B:7A:98:1F:41:CF:8A:D9:AE:4C:6D Authority key identifier: AF:DA:C2:41:F3:01:0B:1A:E4:84:BC:31:F5:84:AD:0F:9D:20:67:34 Certificate issuer: /CN=afdac241f3010b1ae484bc31f584ad0f9d206734 Certificate serial: 019C438FC5502EA22AC9AC96332DBD1C1388 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft Manifest number: 0DD7 Signing time: Mon 09 Feb 2026 18:00:21 +0000 Manifest this update: Mon 09 Feb 2026 18:00:21 +0000 Manifest next update: Tue 10 Feb 2026 18:00:21 +0000 Files and hashes: 1: NYQTyqXhO5SfIKalilF-9jPbRJo.roa (hash: 5lrctU6hrWDAzuX+vKa0ZLHPNzNKbXOgcE47QemStpE=) 2: r9rCQfMBCxrkhLwx9YStD50gZzQ.crl (hash: 9nmIBiugrs3neXeeJlwbc779SZzk/mmiOT+BiXv46Fw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.crl rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:c5:50:2e:a2:2a:c9:ac:96:33:2d:bd:1c:13:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afdac241f3010b1ae484bc31f584ad0f9d206734 Validity Not Before: Feb 9 18:00:21 2026 GMT Not After : Feb 10 18:00:21 2026 GMT Subject: CN=46ae7a6ed88a0440016b7a981f41cf8ad9ae4c6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:61:c3:05:cc:7f:8f:24:8c:05:2f:2b:93:1b: 31:63:b5:90:84:e1:4e:ae:be:2f:a9:d3:02:b8:42: 2e:00:66:a9:c5:9b:0c:86:f8:04:32:af:d2:cd:c2: 83:17:8d:b4:36:e4:de:b5:54:8d:a8:6d:d9:4c:4a: 0e:e5:cb:9c:a2:70:db:0a:1e:22:4d:a1:31:11:9e: 3a:79:ed:94:dd:ad:55:09:c7:69:3e:01:8b:da:55: 43:8b:0c:b6:a5:ec:f7:17:fc:7a:1d:36:1a:c4:86: 90:ac:4d:01:34:3a:df:76:e6:ff:fe:00:2d:4e:c0: 6c:8d:92:a1:cc:3a:a5:1f:db:99:01:07:da:2b:10: 99:54:8f:5e:75:08:50:0e:4b:39:0c:2e:a5:03:a2: 5d:37:56:f1:af:6e:4a:fa:cb:cc:91:3b:6a:ab:75: 08:24:d9:73:b7:d7:ac:97:80:73:d4:55:24:9b:9d: 71:33:eb:92:1a:cf:6e:7a:ec:25:a6:a6:02:03:4b: fe:e6:e2:20:5b:5c:92:5e:b8:d6:74:2f:10:cb:f3: e7:5a:f2:4f:af:9e:fd:94:9f:05:54:63:c1:36:76: 1d:aa:ca:4d:5b:16:c6:8e:a9:64:a6:7e:fe:e2:5a: 6f:b6:b7:15:cb:46:48:bc:4c:83:f8:b8:b8:98:0e: 52:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:AE:7A:6E:D8:8A:04:40:01:6B:7A:98:1F:41:CF:8A:D9:AE:4C:6D X509v3 Authority Key Identifier: keyid:AF:DA:C2:41:F3:01:0B:1A:E4:84:BC:31:F5:84:AD:0F:9D:20:67:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:c9:50:7e:26:35:91:b3:3b:9f:a2:90:23:c9:d0:3c:1e:67: 12:39:f1:e1:54:aa:04:cf:12:a2:f2:7a:d3:61:bb:b7:de:ce: 06:c1:4d:37:b5:56:7b:6c:98:e9:a4:e8:36:46:f5:d9:bf:07: 85:73:c9:41:07:b5:02:dc:7a:1c:6c:1f:4b:d9:d5:19:fd:cb: ef:36:4d:4d:b1:38:b3:f0:d5:1c:22:43:ab:cd:0e:81:55:61: b1:ca:6a:8d:9e:d0:b4:f1:47:b1:39:0c:80:d4:15:8b:e4:db: d3:2f:f6:aa:02:e9:ec:4e:91:23:98:91:d7:00:11:97:39:88: 42:e4:2d:e2:f7:0e:2d:3f:09:e5:ce:e3:17:9d:5d:50:f4:7b: e1:da:46:99:34:65:10:92:a8:1d:5e:ea:82:ed:5d:49:35:cd: c1:b3:62:03:b4:64:39:55:ec:2b:75:db:ad:78:f1:cc:47:16: 6f:d1:66:50:0f:ac:67:b4:34:e4:43:ae:93:3c:6a:99:1f:5c: 76:04:d9:35:c5:93:53:71:b3:6e:07:a7:70:bc:50:64:cf:06: 08:b9:6a:65:4f:6b:50:7e:58:10:5d:17:26:b5:e2:90:c8:d8: 09:83:66:81:9d:08:5d:45:cb:86:50:1b:62:53:9e:45:ae:1a: 16:63:ae:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj8VQLqIqyayWMy29HBOIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZGFjMjQxZjMwMTBiMWFlNDg0YmMzMWY1ODRhZDBmOWQy MDY3MzQwHhcNMjYwMjA5MTgwMDIxWhcNMjYwMjEwMTgwMDIxWjAzMTEwLwYDVQQD Eyg0NmFlN2E2ZWQ4OGEwNDQwMDE2YjdhOTgxZjQxY2Y4YWQ5YWU0YzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmHDBcx/jySMBS8rkxsxY7WQhOFO rr4vqdMCuEIuAGapxZsMhvgEMq/SzcKDF420NuTetVSNqG3ZTEoO5cuconDbCh4i TaExEZ46ee2U3a1VCcdpPgGL2lVDiwy2pez3F/x6HTYaxIaQrE0BNDrfdub//gAt TsBsjZKhzDqlH9uZAQfaKxCZVI9edQhQDks5DC6lA6JdN1bxr25K+svMkTtqq3UI JNlzt9esl4Bz1FUkm51xM+uSGs9ueuwlpqYCA0v+5uIgW1ySXrjWdC8Qy/PnWvJP r579lJ8FVGPBNnYdqspNWxbGjqlkpn7+4lpvtrcVy0ZIvEyD+Li4mA5SaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEauem7YigRAAWt6mB9Bz4rZrkxtMB8GA1UdIwQY MBaAFK/awkHzAQsa5IS8MfWErQ+dIGc0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjlyQ1FmTUJDeHJraEx3eDlZU3RENTBnWnpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9lYjdhNjUtZjllNi00Nzg0LThmZjct NGI0ZjBmNmY3NTIyLzEvcjlyQ1FmTUJDeHJraEx3eDlZU3RENTBnWnpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9lYjdhNjUtZjllNi00Nzg0LThmZjctNGI0ZjBmNmY3NTIy LzEvcjlyQ1FmTUJDeHJraEx3eDlZU3RENTBnWnpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZMlQfiY1 kbM7n6KQI8nQPB5nEjnx4VSqBM8SovJ602G7t97OBsFNN7VWe2yY6aToNkb12b8H hXPJQQe1Atx6HGwfS9nVGf3L7zZNTbE4s/DVHCJDq80OgVVhscpqjZ7QtPFHsTkM gNQVi+Tb0y/2qgLp7E6RI5iR1wARlzmIQuQt4vcOLT8J5c7jF51dUPR74dpGmTRl EJKoHV7qgu1dSTXNwbNiA7RkOVXsK3XbrXjxzEcWb9FmUA+sZ7Q05EOukzxqmR9c dgTZNcWTU3GzbgencLxQZM8GCLlqZU9rUH5YEF0XJrXikMjYCYNmgZ0IXUXLhlAb YlOeRa4aFmOuOw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:09:44 2026 by rpki-client