This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft File: 9E8rYv2EXJFI4OImQldIw8bpdTk.mft (raw, json) Hash identifier: khr3I0QyRNl9bZhTpn1ycHiGVgVTpEfBxP7vqNblWuE= Subject key identifier: 44:5C:F4:3D:BB:0B:E5:3F:3E:8C:10:05:95:1F:CB:53:DF:BB:3B:5D Authority key identifier: F4:4F:2B:62:FD:84:5C:91:48:E0:E2:26:42:57:48:C3:C6:E9:75:39 Certificate issuer: /CN=f44f2b62fd845c9148e0e226425748c3c6e97539 Certificate serial: 019C42468A4FE09D20F2FC019F404F28E1E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9E8rYv2EXJFI4OImQldIw8bpdTk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft Manifest number: 0791 Signing time: Mon 09 Feb 2026 12:00:45 +0000 Manifest this update: Mon 09 Feb 2026 12:00:45 +0000 Manifest next update: Tue 10 Feb 2026 12:00:45 +0000 Files and hashes: 1: 9E8rYv2EXJFI4OImQldIw8bpdTk.crl (hash: OZVPAvLMrAPl+zEL27SqBstrK9qwxvCEsFRhJr6jNuA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.crl rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft rsync://rpki.ripe.net/repository/DEFAULT/9E8rYv2EXJFI4OImQldIw8bpdTk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:8a:4f:e0:9d:20:f2:fc:01:9f:40:4f:28:e1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f44f2b62fd845c9148e0e226425748c3c6e97539 Validity Not Before: Feb 9 12:00:45 2026 GMT Not After : Feb 10 12:00:45 2026 GMT Subject: CN=445cf43dbb0be53f3e8c1005951fcb53dfbb3b5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:bf:97:b6:65:7e:67:1c:e6:7b:72:c4:fb:84: 9b:dc:7e:db:5d:4b:eb:0c:e9:9b:ff:70:84:50:a9: 52:a7:26:eb:d5:cd:e7:15:d1:c4:ed:b1:87:19:91: 2a:3e:a1:85:f9:67:20:71:a8:14:e8:3c:16:ae:ce: 1d:0c:f0:df:0a:93:09:4a:03:ac:38:82:2a:4e:e9: 96:3e:82:ea:4e:89:2a:71:10:10:dc:c1:a8:c8:f3: 98:41:ea:d6:22:ec:66:39:1b:a6:d3:be:77:e0:16: 94:31:b4:9e:cb:f3:02:ca:1d:bb:27:c4:b4:3c:23: 13:6a:ca:ae:7b:3f:ae:99:32:9e:59:ad:d8:22:6e: 35:f1:8e:f9:a0:df:ea:58:fd:fe:6b:61:6c:63:69: 75:14:4b:53:0f:3d:43:ce:4e:84:89:c9:01:8b:7a: 80:01:15:5d:d0:0f:f5:a7:59:68:aa:8c:6c:6b:9f: 21:03:f5:3d:9c:53:98:a0:28:20:c3:ab:f9:00:73: eb:1d:4d:ba:1b:cd:48:e1:90:8f:53:3b:ef:e1:be: 79:d5:37:2f:93:be:7a:c0:80:ac:da:e5:52:e9:61: 8c:5c:f3:ad:68:a4:42:ca:2d:90:75:a9:c9:dd:6a: 41:92:5f:90:e0:f8:6d:13:40:92:db:80:7f:bc:ad: c2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:5C:F4:3D:BB:0B:E5:3F:3E:8C:10:05:95:1F:CB:53:DF:BB:3B:5D X509v3 Authority Key Identifier: keyid:F4:4F:2B:62:FD:84:5C:91:48:E0:E2:26:42:57:48:C3:C6:E9:75:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9E8rYv2EXJFI4OImQldIw8bpdTk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:39:60:bc:30:1b:b3:10:c3:82:a7:91:de:8a:fd:fd:f0:29: 66:14:de:7c:4f:00:10:f8:e1:29:b4:28:7b:39:e0:e8:92:49: 9f:99:43:89:82:b5:cc:92:52:0c:55:98:7e:3a:89:c1:2b:a9: a9:f7:64:d3:fb:56:9a:32:64:13:c7:e2:cb:2e:ed:a6:77:ac: 41:fa:3a:de:81:e1:24:53:47:c7:1d:91:5a:f9:1e:8a:0f:8e: 91:ba:ee:51:a0:55:0f:f1:62:2d:36:d3:5a:bf:92:f2:26:e1: a1:1c:5b:ed:98:a9:a9:54:77:7c:8b:1c:39:f7:9c:2f:f1:34: 0f:d2:a4:56:12:1a:8f:02:f5:36:b7:05:f2:73:1e:9b:d4:a4: 9e:3d:bc:5a:93:02:be:44:30:c4:61:5c:97:59:d4:a6:06:92: 9f:e0:1c:34:cd:e6:74:5f:d2:d1:9e:b0:13:c4:a9:be:f4:fb: 2a:8a:3b:9c:a9:e2:cd:f0:84:51:b5:a3:63:cd:c8:9e:02:d7: 48:05:1c:d6:c3:fd:9f:01:aa:29:34:a0:5a:e3:31:97:1d:4f: 4f:31:5a:bb:f1:80:4f:d1:25:3b:88:d8:00:67:97:48:a1:81: de:9f:75:bf:88:ec:b1:71:95:83:bb:83:d6:7a:70:4d:5d:36: f2:93:99:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRopP4J0g8vwBn0BPKOHgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0NGYyYjYyZmQ4NDVjOTE0OGUwZTIyNjQyNTc0OGMzYzZl OTc1MzkwHhcNMjYwMjA5MTIwMDQ1WhcNMjYwMjEwMTIwMDQ1WjAzMTEwLwYDVQQD Eyg0NDVjZjQzZGJiMGJlNTNmM2U4YzEwMDU5NTFmY2I1M2RmYmIzYjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2r+XtmV+Zxzme3LE+4Sb3H7bXUvr DOmb/3CEUKlSpybr1c3nFdHE7bGHGZEqPqGF+WcgcagU6DwWrs4dDPDfCpMJSgOs OIIqTumWPoLqTokqcRAQ3MGoyPOYQerWIuxmORum07534BaUMbSey/MCyh27J8S0 PCMTasquez+umTKeWa3YIm418Y75oN/qWP3+a2FsY2l1FEtTDz1Dzk6EickBi3qA ARVd0A/1p1loqoxsa58hA/U9nFOYoCggw6v5AHPrHU26G81I4ZCPUzvv4b551Tcv k756wICs2uVS6WGMXPOtaKRCyi2QdanJ3WpBkl+Q4PhtE0CS24B/vK3CNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFERc9D27C+U/PowQBZUfy1PfuztdMB8GA1UdIwQY MBaAFPRPK2L9hFyRSODiJkJXSMPG6XU5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUU4cll2MkVYSkZJNE9JbVFsZEl3OGJwZFRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8xNDlhZDQtZTRhNi00YmRjLWE0ZDAt NzdhNTQ3N2ZiYWJmLzEvOUU4cll2MkVYSkZJNE9JbVFsZEl3OGJwZFRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi8xNDlhZDQtZTRhNi00YmRjLWE0ZDAtNzdhNTQ3N2ZiYWJm LzEvOUU4cll2MkVYSkZJNE9JbVFsZEl3OGJwZFRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABDlgvDAb sxDDgqeR3or9/fApZhTefE8AEPjhKbQoezng6JJJn5lDiYK1zJJSDFWYfjqJwSup qfdk0/tWmjJkE8fiyy7tpnesQfo63oHhJFNHxx2RWvkeig+OkbruUaBVD/FiLTbT Wr+S8ibhoRxb7ZipqVR3fIscOfecL/E0D9KkVhIajwL1NrcF8nMem9Sknj28WpMC vkQwxGFcl1nUpgaSn+AcNM3mdF/S0Z6wE8SpvvT7Koo7nKnizfCEUbWjY83IngLX SAUc1sP9nwGqKTSgWuMxlx1PTzFau/GAT9ElO4jYAGeXSKGB3p91v4jssXGVg7uD 1npwTV028pOZiA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:56:01 2026 by rpki-client