This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.mft File: l9nve9MDJN7fcLrOS72ldgwyaxo.mft (raw, json) Hash identifier: fuYHrMU0P2GtmUVDS6ozWZH/8QwGq6NHts0rfwbYT5g= Subject key identifier: B6:B1:E2:46:4F:A2:A5:8F:F1:65:AA:5E:EB:38:A1:1A:57:D2:D5:9D Authority key identifier: 97:D9:EF:7B:D3:03:24:DE:DF:70:BA:CE:4B:BD:A5:76:0C:32:6B:1A Certificate issuer: /CN=97d9ef7bd30324dedf70bace4bbda5760c326b1a Certificate serial: 019C42B47D29849DA6CC9E07E749A482EA1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9nve9MDJN7fcLrOS72ldgwyaxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.mft Manifest number: 10D8 Signing time: Mon 09 Feb 2026 14:00:50 +0000 Manifest this update: Mon 09 Feb 2026 14:00:50 +0000 Manifest next update: Tue 10 Feb 2026 14:00:50 +0000 Files and hashes: 1: l9nve9MDJN7fcLrOS72ldgwyaxo.crl (hash: QEdKH6HqE6+xnJPom1jGR5fkLKW7XH8ikraZQtMU0Ho=) 2: lJRouhsD89YwjETpjd4P5W7UKig.roa (hash: /VHTdnmw9oRohqnCjEDHZH7S7Q3gjl2OViU5nARXvlE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.crl rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.mft rsync://rpki.ripe.net/repository/DEFAULT/l9nve9MDJN7fcLrOS72ldgwyaxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:7d:29:84:9d:a6:cc:9e:07:e7:49:a4:82:ea:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97d9ef7bd30324dedf70bace4bbda5760c326b1a Validity Not Before: Feb 9 14:00:50 2026 GMT Not After : Feb 10 14:00:50 2026 GMT Subject: CN=b6b1e2464fa2a58ff165aa5eeb38a11a57d2d59d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:23:52:ef:68:17:84:5d:7c:8e:20:6e:a2:78: b4:15:c2:68:ff:56:69:10:31:e5:a9:65:62:5d:ef: ac:ee:c3:45:0a:f7:d2:ab:7b:0e:26:dc:bb:32:9f: ef:1d:d4:5f:41:6c:2c:e6:44:db:ef:82:19:ac:01: 5c:f3:ed:c5:ca:f0:f9:a8:c4:82:2d:46:82:2d:47: 93:e2:b7:49:57:c9:e9:d8:4b:cd:07:2e:7e:e1:30: fd:22:65:ab:d5:c3:e5:b2:bd:ac:b2:b0:97:b5:8c: 6f:8b:de:8f:35:40:e5:99:90:a5:03:b5:e1:c3:8f: 8a:7b:f6:33:cd:55:d2:69:d3:95:0d:2c:14:21:4f: 0a:88:95:24:6e:2e:63:75:96:5a:7e:96:12:c7:3a: ae:7f:72:5d:58:dc:19:f2:95:6c:21:8e:6a:00:06: fe:f4:c6:ca:39:e1:d1:11:be:db:79:70:a3:94:67: e9:b5:87:d3:33:e4:e4:7a:19:0b:6b:a7:ea:43:d4: 01:6a:3a:c6:28:be:e6:a0:d8:8f:a9:7f:bf:40:53: 23:58:b5:b9:68:22:46:8e:7d:a5:20:c6:bc:5d:5b: 3e:1b:d6:1a:fb:bb:7f:ec:01:94:0a:b6:94:45:8e: 87:ce:31:84:90:38:5b:a5:ee:51:07:41:c2:20:90: 16:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:B1:E2:46:4F:A2:A5:8F:F1:65:AA:5E:EB:38:A1:1A:57:D2:D5:9D X509v3 Authority Key Identifier: keyid:97:D9:EF:7B:D3:03:24:DE:DF:70:BA:CE:4B:BD:A5:76:0C:32:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9nve9MDJN7fcLrOS72ldgwyaxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:02:60:f5:b7:3c:a1:03:65:fb:0c:3e:9a:3a:ec:12:31:a7: 24:b4:6f:da:83:6e:50:da:18:ab:bf:61:11:a2:f9:7c:d3:c5: cb:ba:48:eb:db:25:e5:b0:8d:f5:7b:08:8c:9e:28:d1:45:67: a7:da:e8:f7:a6:0a:ce:c3:ec:05:ff:89:05:b1:90:6f:e0:1d: ba:9d:2d:37:6d:79:3d:ed:76:98:ac:31:a6:81:ef:14:44:e6: d1:f5:6d:22:d7:db:fa:1a:3f:c7:94:89:e4:62:a3:bb:21:92: 85:b0:45:83:bf:ab:0b:06:0e:8d:26:1d:ad:95:91:d3:92:cb: 75:4a:80:29:ea:03:ae:c8:62:63:55:f1:6a:8b:ad:be:40:f4: be:4e:a0:2f:79:ba:4b:33:1f:61:6b:9d:02:43:5e:0c:f1:3f: 47:e7:b5:d0:c1:b6:fb:b4:f6:0f:56:a3:44:72:6b:05:82:56: b9:28:fd:91:d9:3b:39:a2:dc:03:44:11:d4:d1:ba:6e:38:4d: 31:30:fd:90:82:6c:2c:fe:31:64:b6:79:be:f8:a9:07:01:3b: 84:72:fd:bc:57:e0:dc:71:65:a9:3e:0c:8f:9a:e4:4e:86:2e: df:c3:e7:7a:ec:5b:b7:4b:01:b8:3b:f2:f8:84:98:24:a6:ad: b9:92:92:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtH0phJ2mzJ4H50mkguoaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ZDllZjdiZDMwMzI0ZGVkZjcwYmFjZTRiYmRhNTc2MGMz MjZiMWEwHhcNMjYwMjA5MTQwMDUwWhcNMjYwMjEwMTQwMDUwWjAzMTEwLwYDVQQD EyhiNmIxZTI0NjRmYTJhNThmZjE2NWFhNWVlYjM4YTExYTU3ZDJkNTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCNS72gXhF18jiBuoni0FcJo/1Zp EDHlqWViXe+s7sNFCvfSq3sOJty7Mp/vHdRfQWws5kTb74IZrAFc8+3FyvD5qMSC LUaCLUeT4rdJV8np2EvNBy5+4TD9ImWr1cPlsr2ssrCXtYxvi96PNUDlmZClA7Xh w4+Ke/YzzVXSadOVDSwUIU8KiJUkbi5jdZZafpYSxzquf3JdWNwZ8pVsIY5qAAb+ 9MbKOeHREb7beXCjlGfptYfTM+TkehkLa6fqQ9QBajrGKL7moNiPqX+/QFMjWLW5 aCJGjn2lIMa8XVs+G9Ya+7t/7AGUCraURY6HzjGEkDhbpe5RB0HCIJAWSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLax4kZPoqWP8WWqXus4oRpX0tWdMB8GA1UdIwQY MBaAFJfZ73vTAyTe33C6zku9pXYMMmsaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDludmU5TURKTjdmY0xyT1M3MmxkZ3d5YXhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS80M2Q1MDgtZDE5ZS00ZjY2LWFlODUt ZjgwNWFiM2EzMjdlLzEvbDludmU5TURKTjdmY0xyT1M3MmxkZ3d5YXhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS80M2Q1MDgtZDE5ZS00ZjY2LWFlODUtZjgwNWFiM2EzMjdl LzEvbDludmU5TURKTjdmY0xyT1M3MmxkZ3d5YXhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUQJg9bc8 oQNl+ww+mjrsEjGnJLRv2oNuUNoYq79hEaL5fNPFy7pI69sl5bCN9XsIjJ4o0UVn p9ro96YKzsPsBf+JBbGQb+Adup0tN215Pe12mKwxpoHvFETm0fVtItfb+ho/x5SJ 5GKjuyGShbBFg7+rCwYOjSYdrZWR05LLdUqAKeoDrshiY1XxaoutvkD0vk6gL3m6 SzMfYWudAkNeDPE/R+e10MG2+7T2D1ajRHJrBYJWuSj9kdk7OaLcA0QR1NG6bjhN MTD9kIJsLP4xZLZ5vvipBwE7hHL9vFfg3HFlqT4Mj5rkToYu38Pneuxbt0sBuDvy +ISYJKatuZKSQQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:08:15 2026 by rpki-client