This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.mft File: INS9SZ9YSUrA6CJjtVIKLGTWR34.mft (raw, json) Hash identifier: eWcos4xbvlIqSU3ykEirEtuPd5ynPFUTQXpS30SEw9w= Subject key identifier: CF:77:E1:B4:46:84:51:56:8D:0B:D4:1E:69:A7:DE:AC:57:55:2D:D8 Authority key identifier: 20:D4:BD:49:9F:58:49:4A:C0:E8:22:63:B5:52:0A:2C:64:D6:47:7E Certificate issuer: /CN=20d4bd499f58494ac0e82263b5520a2c64d6477e Certificate serial: 019C439050502D1A06F9B5AE54917F0D0D50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INS9SZ9YSUrA6CJjtVIKLGTWR34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.mft Manifest number: 17A3 Signing time: Mon 09 Feb 2026 18:00:56 +0000 Manifest this update: Mon 09 Feb 2026 18:00:56 +0000 Manifest next update: Tue 10 Feb 2026 18:00:56 +0000 Files and hashes: 1: INS9SZ9YSUrA6CJjtVIKLGTWR34.crl (hash: 8S2yT+jUu7H7N8Wl/QKPvpdGRkbCxg1DRXWgwpSmFQg=) 2: Wdpe-Cjtqyp1rkyz7rhcS-_jmXo.roa (hash: tUgn1ugpT0nLLmzVavep4vytxp4gMvvn8/6tvfWMBRM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.crl rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.mft rsync://rpki.ripe.net/repository/DEFAULT/INS9SZ9YSUrA6CJjtVIKLGTWR34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:50:50:2d:1a:06:f9:b5:ae:54:91:7f:0d:0d:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20d4bd499f58494ac0e82263b5520a2c64d6477e Validity Not Before: Feb 9 18:00:56 2026 GMT Not After : Feb 10 18:00:56 2026 GMT Subject: CN=cf77e1b4468451568d0bd41e69a7deac57552dd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:0c:33:11:d2:9d:fb:44:68:1e:11:d7:95:3c: c9:21:96:4a:93:0b:44:84:c9:78:3f:ba:c1:2f:c9: 2b:f5:05:96:2f:a6:9b:51:b5:53:98:0c:dd:19:47: 5b:62:6c:a3:d4:a1:1a:2b:48:5b:df:63:eb:c9:92: 70:8d:9e:ef:08:1e:07:8c:38:30:87:7b:19:2c:37: f7:c3:95:d5:9a:82:d7:c8:9e:af:68:3c:cb:d5:5b: d8:d0:64:f5:e8:8c:69:60:a3:b0:60:05:93:17:85: b6:f4:c1:0e:16:16:d3:c5:92:bc:05:08:9f:fa:d3: ed:de:3c:9e:4d:da:71:81:b4:b1:69:50:d2:5e:15: 44:ee:b5:73:82:78:5c:20:4b:ea:d0:14:9e:92:25: 30:9a:d3:41:63:24:2e:a0:85:49:0b:49:46:12:da: 1d:90:c7:30:7a:a8:8b:f1:1d:c2:db:70:aa:0e:36: 36:50:84:69:f9:e0:5f:17:d5:84:c4:00:b9:1b:6b: 36:6a:39:9a:e8:d1:a8:10:b3:ee:da:1b:80:49:0b: 2d:2a:48:e8:51:48:cc:4c:97:41:15:22:ab:be:80: 24:ed:51:d1:d0:5e:da:6f:b7:4b:ae:14:d5:6d:cc: 71:c9:40:d0:9f:66:68:51:df:f6:49:1c:67:d1:8b: 22:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:77:E1:B4:46:84:51:56:8D:0B:D4:1E:69:A7:DE:AC:57:55:2D:D8 X509v3 Authority Key Identifier: keyid:20:D4:BD:49:9F:58:49:4A:C0:E8:22:63:B5:52:0A:2C:64:D6:47:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INS9SZ9YSUrA6CJjtVIKLGTWR34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:fd:b0:49:ae:fd:a3:b6:96:15:d5:36:39:4b:40:5e:5d:25: 32:f0:eb:59:a0:f7:02:ae:96:45:e9:13:71:dc:ab:3c:5a:81: fb:1a:06:fb:c3:b9:98:15:a2:45:83:06:a4:f0:ff:ed:29:3a: f6:c6:45:71:d8:6f:37:90:47:52:83:67:76:79:7a:f9:af:2c: 6d:fb:ce:2c:85:6d:57:05:d7:3f:26:72:fc:bb:aa:74:ef:92: de:1e:3a:91:14:ae:e8:94:13:c5:f9:1d:6a:19:35:98:1b:aa: 5f:b1:ab:e1:61:ae:e1:b1:89:50:54:7f:a7:2d:45:ce:71:c9: 7f:bf:c2:20:dd:73:c4:f7:c7:2e:00:f6:7c:e8:c1:e7:c1:d4: f2:59:33:7e:20:0f:5c:70:f8:f0:ba:95:87:be:19:4a:b6:b7: 5d:b2:ea:62:7e:f6:7f:eb:0d:7d:7a:0c:12:bc:69:3a:8d:ff: b1:60:9d:e3:6e:28:25:97:a4:e5:8b:85:ef:8f:a1:77:c0:f8: 10:63:c9:26:d5:f3:ab:29:8a:15:a0:07:65:56:76:7f:2b:97: 1e:48:bf:1b:0c:14:ea:00:de:2a:0f:c9:9a:56:9f:60:fe:d1: 42:36:b1:d7:3e:ff:13:23:c4:b7:ce:01:5d:c0:47:23:5c:02: 29:76:74:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkFBQLRoG+bWuVJF/DQ1QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZDRiZDQ5OWY1ODQ5NGFjMGU4MjI2M2I1NTIwYTJjNjRk NjQ3N2UwHhcNMjYwMjA5MTgwMDU2WhcNMjYwMjEwMTgwMDU2WjAzMTEwLwYDVQQD EyhjZjc3ZTFiNDQ2ODQ1MTU2OGQwYmQ0MWU2OWE3ZGVhYzU3NTUyZGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQwzEdKd+0RoHhHXlTzJIZZKkwtE hMl4P7rBL8kr9QWWL6abUbVTmAzdGUdbYmyj1KEaK0hb32PryZJwjZ7vCB4HjDgw h3sZLDf3w5XVmoLXyJ6vaDzL1VvY0GT16IxpYKOwYAWTF4W29MEOFhbTxZK8BQif +tPt3jyeTdpxgbSxaVDSXhVE7rVzgnhcIEvq0BSekiUwmtNBYyQuoIVJC0lGEtod kMcweqiL8R3C23CqDjY2UIRp+eBfF9WExAC5G2s2ajma6NGoELPu2huASQstKkjo UUjMTJdBFSKrvoAk7VHR0F7ab7dLrhTVbcxxyUDQn2ZoUd/2SRxn0YsizQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM934bRGhFFWjQvUHmmn3qxXVS3YMB8GA1UdIwQY MBaAFCDUvUmfWElKwOgiY7VSCixk1kd+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU5TOVNaOVlTVXJBNkNKanRWSUtMR1RXUjM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9hZjYwMWUtYzJiZi00YTZhLWFhMzIt ZDJlZTE1Mzk5ZDA2LzEvSU5TOVNaOVlTVXJBNkNKanRWSUtMR1RXUjM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9hZjYwMWUtYzJiZi00YTZhLWFhMzItZDJlZTE1Mzk5ZDA2 LzEvSU5TOVNaOVlTVXJBNkNKanRWSUtMR1RXUjM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI/2wSa79 o7aWFdU2OUtAXl0lMvDrWaD3Aq6WRekTcdyrPFqB+xoG+8O5mBWiRYMGpPD/7Sk6 9sZFcdhvN5BHUoNndnl6+a8sbfvOLIVtVwXXPyZy/LuqdO+S3h46kRSu6JQTxfkd ahk1mBuqX7Gr4WGu4bGJUFR/py1FznHJf7/CIN1zxPfHLgD2fOjB58HU8lkzfiAP XHD48LqVh74ZSra3XbLqYn72f+sNfXoMErxpOo3/sWCd424oJZek5YuF74+hd8D4 EGPJJtXzqymKFaAHZVZ2fyuXHki/GwwU6gDeKg/JmlafYP7RQjax1z7/EyPEt84B XcBHI1wCKXZ0ZA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:57 2026 by rpki-client