This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft File: 9X3FmWyBeMDeLqIEme696t5AI-s.mft (raw, json) Hash identifier: hDatFSHjYtM/d1dbPYDaNsPwH1LeDM1R6tUaSi5Ven4= Subject key identifier: DE:B3:C5:6C:93:B6:7C:BA:43:FC:0A:E8:B4:68:DE:0F:8F:21:ED:D3 Authority key identifier: F5:7D:C5:99:6C:81:78:C0:DE:2E:A2:04:99:EE:BD:EA:DE:40:23:EB Certificate issuer: /CN=f57dc5996c8178c0de2ea20499eebdeade4023eb Certificate serial: 019C42B464A20AC34BE9DAE9ABF57910E9FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9X3FmWyBeMDeLqIEme696t5AI-s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 14:00:44 +0000 Manifest this update: Mon 09 Feb 2026 14:00:44 +0000 Manifest next update: Tue 10 Feb 2026 14:00:44 +0000 Files and hashes: 1: 4ghPvO8O8ubg-UpOgj-hc0SbXTA.roa (hash: JypQzsIdWOc7a9gykbPnzDsycctJC1lDHtCOuiPvEAA=) 2: 9X3FmWyBeMDeLqIEme696t5AI-s.crl (hash: 0w4UHTYNMix8HjvEmLthpkjCZUdmeYrfomCH6zYF0kg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.crl rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft rsync://rpki.ripe.net/repository/DEFAULT/9X3FmWyBeMDeLqIEme696t5AI-s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:64:a2:0a:c3:4b:e9:da:e9:ab:f5:79:10:e9:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f57dc5996c8178c0de2ea20499eebdeade4023eb Validity Not Before: Feb 9 14:00:44 2026 GMT Not After : Feb 10 14:00:44 2026 GMT Subject: CN=deb3c56c93b67cba43fc0ae8b468de0f8f21edd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:86:49:e2:fc:00:e8:f3:77:2e:a1:f3:72:60: 9b:51:eb:f2:fd:ba:55:b9:31:e1:a6:30:6f:74:ad: 37:f3:b5:af:5c:1d:aa:5f:a5:db:7e:64:22:f0:cf: cc:0b:ef:b4:1c:22:76:b3:16:bd:33:e8:0f:53:79: 3e:fb:ec:a2:f3:76:25:80:66:8c:14:46:c6:0a:21: d8:cf:3e:df:2b:42:47:c5:48:45:4b:36:e4:4b:30: 38:ab:fa:98:9d:d6:7c:40:75:d1:86:db:d9:f0:ab: 65:41:58:05:8b:07:15:c8:7e:85:8e:4d:09:a0:90: cf:8d:3b:aa:3e:c5:ac:dc:45:bf:1f:57:e3:03:f1: e5:4d:7c:9d:d9:06:80:eb:4d:ee:28:5c:9f:31:54: c5:3c:77:4d:c6:ee:18:df:a6:79:e2:ce:3b:07:4c: 7a:e8:d8:18:04:c3:cc:da:5d:79:53:ab:15:fe:a9: 4d:0a:0d:c0:28:7c:30:9f:3c:3f:d5:47:5c:36:a3: 42:d4:98:ae:36:c4:15:37:37:0a:51:77:e1:e8:9c: 0f:a1:b8:86:b3:5f:26:f9:c9:f2:36:ca:90:3c:54: 5c:18:5a:b5:69:10:ae:00:8b:98:75:d4:1f:0a:48: 24:ac:2b:89:fe:b4:a6:d5:f9:68:92:9d:73:99:f8: 26:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:B3:C5:6C:93:B6:7C:BA:43:FC:0A:E8:B4:68:DE:0F:8F:21:ED:D3 X509v3 Authority Key Identifier: keyid:F5:7D:C5:99:6C:81:78:C0:DE:2E:A2:04:99:EE:BD:EA:DE:40:23:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X3FmWyBeMDeLqIEme696t5AI-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:6c:64:02:20:00:34:17:64:bb:77:3e:87:81:bd:74:fb:5c: 76:e7:10:66:f4:7e:53:a4:41:67:55:44:13:0d:ae:67:e3:78: 01:b6:bf:48:a9:2c:ca:6e:31:ec:ab:e0:2f:c6:4f:70:93:4d: 8d:fe:c1:42:c4:a7:83:e1:6e:f6:2b:85:b6:c9:2a:6c:28:44: 25:eb:ac:04:4c:6e:07:0a:75:a2:6d:f3:f8:9e:91:14:0b:b5: be:86:2f:52:a5:ab:0a:28:f0:42:08:5a:61:04:03:2e:b1:24: e4:cf:fa:9a:84:d7:43:07:6e:ed:3c:12:c2:cf:3f:7a:fb:9f: 2c:3e:96:3a:6d:25:dd:8a:de:64:51:53:b1:7a:d3:41:9c:61: 85:fe:42:48:10:e5:fd:9e:f1:96:84:a6:7e:6e:54:5f:b4:02: 10:69:86:2a:47:45:a0:38:99:5b:cc:51:64:88:97:78:11:44: e6:bf:b9:c0:53:aa:6b:71:77:7b:e7:5f:84:56:a0:3a:f5:2a: 57:12:96:e7:5a:a0:1d:bc:7c:a8:b8:14:f9:61:f6:b2:96:82: 4b:f8:45:b2:65:e5:2e:03:37:8c:7f:be:c4:c5:e9:c6:73:79: 65:92:eb:b0:67:c1:68:1a:63:78:0e:06:e8:81:59:25:87:e1: 4a:d5:c1:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtGSiCsNL6drpq/V5EOn+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1N2RjNTk5NmM4MTc4YzBkZTJlYTIwNDk5ZWViZGVhZGU0 MDIzZWIwHhcNMjYwMjA5MTQwMDQ0WhcNMjYwMjEwMTQwMDQ0WjAzMTEwLwYDVQQD EyhkZWIzYzU2YzkzYjY3Y2JhNDNmYzBhZThiNDY4ZGUwZjhmMjFlZGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIZJ4vwA6PN3LqHzcmCbUevy/bpV uTHhpjBvdK0387WvXB2qX6XbfmQi8M/MC++0HCJ2sxa9M+gPU3k+++yi83YlgGaM FEbGCiHYzz7fK0JHxUhFSzbkSzA4q/qYndZ8QHXRhtvZ8KtlQVgFiwcVyH6Fjk0J oJDPjTuqPsWs3EW/H1fjA/HlTXyd2QaA603uKFyfMVTFPHdNxu4Y36Z54s47B0x6 6NgYBMPM2l15U6sV/qlNCg3AKHwwnzw/1UdcNqNC1JiuNsQVNzcKUXfh6JwPobiG s18m+cnyNsqQPFRcGFq1aRCuAIuYddQfCkgkrCuJ/rSm1flokp1zmfgmuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN6zxWyTtny6Q/wK6LRo3g+PIe3TMB8GA1UdIwQY MBaAFPV9xZlsgXjA3i6iBJnuvereQCPrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVgzRm1XeUJlTURlTHFJRW1lNjk2dDVBSS1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My82N2UzYWMtYzMzMi00ZDEzLTgzZWYt YzdiMTBkNTA1Y2ZlLzEvOVgzRm1XeUJlTURlTHFJRW1lNjk2dDVBSS1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My82N2UzYWMtYzMzMi00ZDEzLTgzZWYtYzdiMTBkNTA1Y2Zl LzEvOVgzRm1XeUJlTURlTHFJRW1lNjk2dDVBSS1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMWxkAiAA NBdku3c+h4G9dPtcducQZvR+U6RBZ1VEEw2uZ+N4Aba/SKksym4x7KvgL8ZPcJNN jf7BQsSng+Fu9iuFtskqbChEJeusBExuBwp1om3z+J6RFAu1voYvUqWrCijwQgha YQQDLrEk5M/6moTXQwdu7TwSws8/evufLD6WOm0l3YreZFFTsXrTQZxhhf5CSBDl /Z7xloSmfm5UX7QCEGmGKkdFoDiZW8xRZIiXeBFE5r+5wFOqa3F3e+dfhFagOvUq VxKW51qgHbx8qLgU+WH2spaCS/hFsmXlLgM3jH++xMXpxnN5ZZLrsGfBaBpjeA4G 6IFZJYfhStXBIA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:55:34 2026 by rpki-client