This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/9i4OVeXFow7AS9bcRtFUs-S3tfU.mft File: 9i4OVeXFow7AS9bcRtFUs-S3tfU.mft (raw, json) Hash identifier: UVYQ9dP4pj7j68O45NVqlwX4jScbjVbh+vIVNP77KC0= Subject key identifier: E5:3C:31:79:18:A5:FF:E1:30:2C:8F:87:B4:F8:B6:93:71:92:CA:66 Authority key identifier: F6:2E:0E:55:E5:C5:A3:0E:C0:4B:D6:DC:46:D1:54:B3:E4:B7:B5:F5 Certificate issuer: /CN=f62e0e55e5c5a30ec04bd6dc46d154b3e4b7b5f5 Certificate serial: 019C4390CBF91AEB60BBD062E926FDDBBE9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i4OVeXFow7AS9bcRtFUs-S3tfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/9i4OVeXFow7AS9bcRtFUs-S3tfU.mft Manifest number: 0C4D Signing time: Mon 09 Feb 2026 18:01:28 +0000 Manifest this update: Mon 09 Feb 2026 18:01:28 +0000 Manifest next update: Tue 10 Feb 2026 18:01:28 +0000 Files and hashes: 1: 9i4OVeXFow7AS9bcRtFUs-S3tfU.crl (hash: End9adHijPK+Hkdkno7O6IceGKjTSQLe9lhlWbdzXKQ=) 2: tFVRD_-pjyGAXBK1B4RnTlbS06Y.roa (hash: rxdXUltbYBZphQ4R9SWeek1/7cVm9u/f4Eo1gHxec1o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/9i4OVeXFow7AS9bcRtFUs-S3tfU.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/9i4OVeXFow7AS9bcRtFUs-S3tfU.mft rsync://rpki.ripe.net/repository/DEFAULT/9i4OVeXFow7AS9bcRtFUs-S3tfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:cb:f9:1a:eb:60:bb:d0:62:e9:26:fd:db:be:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f62e0e55e5c5a30ec04bd6dc46d154b3e4b7b5f5 Validity Not Before: Feb 9 18:01:28 2026 GMT Not After : Feb 10 18:01:28 2026 GMT Subject: CN=e53c317918a5ffe1302c8f87b4f8b6937192ca66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:65:fc:29:9f:1a:a0:34:4f:e2:82:ce:00:7e: 93:cb:56:44:d0:22:38:cc:e3:36:5e:cb:44:0a:4f: 90:52:52:61:dd:26:59:05:7c:18:90:4c:cf:a9:f4: be:f0:28:68:a2:c4:bd:62:01:62:13:b3:da:e7:c2: 9b:1f:cb:1d:2e:22:15:b0:66:4b:c0:b9:16:47:68: d7:40:fc:aa:3c:1d:7a:de:b8:84:9b:79:2c:cb:4d: 57:c8:2b:87:4d:4d:5c:6a:ea:1b:6d:e5:3c:87:a2: ba:e7:d4:e8:f1:b8:0e:77:0d:14:4b:cb:54:b9:a3: 6f:2b:0f:fb:f5:dc:9b:a3:eb:15:91:63:4c:b3:a4: ca:2e:4a:05:aa:18:b1:cc:b5:e5:e0:4b:93:b7:8e: 43:0f:25:ee:79:35:78:2f:bb:c4:22:47:59:c8:ef: 7f:5a:62:84:4f:9a:9b:e4:d5:ab:b1:be:82:49:eb: 4b:5f:8a:68:04:a8:71:60:16:94:a4:c3:61:3a:8e: 7e:2f:b7:34:ab:09:cd:14:e6:1c:92:f6:a0:ab:87: 61:61:30:91:d2:c7:bf:a8:e6:4a:e8:e4:aa:09:ba: 35:f4:14:19:da:9c:e0:85:5a:81:bd:b7:5c:94:fc: 80:5d:ca:8d:65:e7:cb:45:a5:47:87:e1:60:03:d7: 93:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:3C:31:79:18:A5:FF:E1:30:2C:8F:87:B4:F8:B6:93:71:92:CA:66 X509v3 Authority Key Identifier: keyid:F6:2E:0E:55:E5:C5:A3:0E:C0:4B:D6:DC:46:D1:54:B3:E4:B7:B5:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i4OVeXFow7AS9bcRtFUs-S3tfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/9i4OVeXFow7AS9bcRtFUs-S3tfU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/9i4OVeXFow7AS9bcRtFUs-S3tfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:44:1b:a4:c7:2d:07:24:20:9f:db:04:57:77:96:31:88:06: 51:ea:df:75:61:9e:69:40:11:06:fa:0c:a5:c9:87:1d:4e:50: b4:3d:69:57:4e:76:f7:55:cf:a5:a6:a6:b9:54:de:4b:12:72: fa:b2:3a:ea:0e:d6:83:21:9d:ee:01:bb:3a:71:a5:3f:ba:a8: dd:a3:d2:06:a5:4a:ba:35:26:1b:cd:30:2a:51:6c:da:62:f7: 3e:1a:25:a1:6c:78:93:2d:67:37:08:ca:73:57:46:df:77:64: 26:04:10:c5:54:25:65:fe:ed:3b:ee:0b:3f:94:74:4b:ce:49: cb:72:27:06:49:4c:e1:a2:dd:48:6b:99:a2:38:12:b6:c1:a9: c7:d5:0a:f8:ae:97:af:ed:2b:fd:0a:ab:a8:66:62:3e:e4:a8: 8c:10:8c:a3:fb:1b:ba:04:0e:18:26:ee:99:dc:c0:7c:d7:b5: a1:b2:fc:b7:62:86:fb:2d:58:c0:a7:f1:70:f2:e9:4d:9b:33: 57:c0:ea:ca:b1:22:29:50:00:2a:48:d6:a5:a2:af:0e:2c:91: 21:5f:77:3a:0b:4f:83:c9:a9:d5:5e:b6:3d:74:24:5e:46:29: 68:c4:46:6f:a8:32:da:92:9e:90:b8:9d:57:17:1a:3c:cb:10: d0:7b:02:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkMv5Gutgu9Bi6Sb9276fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2MmUwZTU1ZTVjNWEzMGVjMDRiZDZkYzQ2ZDE1NGIzZTRi N2I1ZjUwHhcNMjYwMjA5MTgwMTI4WhcNMjYwMjEwMTgwMTI4WjAzMTEwLwYDVQQD EyhlNTNjMzE3OTE4YTVmZmUxMzAyYzhmODdiNGY4YjY5MzcxOTJjYTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWX8KZ8aoDRP4oLOAH6Ty1ZE0CI4 zOM2XstECk+QUlJh3SZZBXwYkEzPqfS+8ChoosS9YgFiE7Pa58KbH8sdLiIVsGZL wLkWR2jXQPyqPB163riEm3ksy01XyCuHTU1cauobbeU8h6K659To8bgOdw0US8tU uaNvKw/79dybo+sVkWNMs6TKLkoFqhixzLXl4EuTt45DDyXueTV4L7vEIkdZyO9/ WmKET5qb5NWrsb6CSetLX4poBKhxYBaUpMNhOo5+L7c0qwnNFOYckvagq4dhYTCR 0se/qOZK6OSqCbo19BQZ2pzghVqBvbdclPyAXcqNZefLRaVHh+FgA9eTIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOU8MXkYpf/hMCyPh7T4tpNxkspmMB8GA1UdIwQY MBaAFPYuDlXlxaMOwEvW3EbRVLPkt7X1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWk0T1ZlWEZvdzdBUzliY1J0RlVzLVMzdGZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mOTk3YzgtZGY3MC00ZDdmLWI4NmQt MTkyY2IzNjk0MjNmLzEvOWk0T1ZlWEZvdzdBUzliY1J0RlVzLVMzdGZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9mOTk3YzgtZGY3MC00ZDdmLWI4NmQtMTkyY2IzNjk0MjNm LzEvOWk0T1ZlWEZvdzdBUzliY1J0RlVzLVMzdGZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJEQbpMct ByQgn9sEV3eWMYgGUerfdWGeaUARBvoMpcmHHU5QtD1pV05291XPpaamuVTeSxJy +rI66g7WgyGd7gG7OnGlP7qo3aPSBqVKujUmG80wKlFs2mL3PholoWx4ky1nNwjK c1dG33dkJgQQxVQlZf7tO+4LP5R0S85Jy3InBklM4aLdSGuZojgStsGpx9UK+K6X r+0r/QqrqGZiPuSojBCMo/sbugQOGCbumdzAfNe1obL8t2KG+y1YwKfxcPLpTZsz V8DqyrEiKVAAKkjWpaKvDiyRIV93OgtPg8mp1V62PXQkXkYpaMRGb6gy2pKekLid VxcaPMsQ0HsCGg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:48:33 2026 by rpki-client