This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.mft File: ct9pdDDLtXxJoKGZMCTW0yn35WU.mft (raw, json) Hash identifier: 9jpJeTxYxuyFLoKNMx0SQMTyFcYulyKJ8JiHPyin9iE= Subject key identifier: EC:93:DC:48:DE:FA:19:59:4A:DB:92:AE:1F:93:73:CD:F5:C6:0C:90 Authority key identifier: 72:DF:69:74:30:CB:B5:7C:49:A0:A1:99:30:24:D6:D3:29:F7:E5:65 Certificate issuer: /CN=72df697430cbb57c49a0a1993024d6d329f7e565 Certificate serial: 019C42EB9B2C6FADF1AC29CFBDFFEA69C0A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ct9pdDDLtXxJoKGZMCTW0yn35WU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.mft Manifest number: 12BC Signing time: Mon 09 Feb 2026 15:01:02 +0000 Manifest this update: Mon 09 Feb 2026 15:01:02 +0000 Manifest next update: Tue 10 Feb 2026 15:01:02 +0000 Files and hashes: 1: ct9pdDDLtXxJoKGZMCTW0yn35WU.crl (hash: zi8kK7KV/9739aA5DvonyIPwkq11EeaWucCgNqps/5E=) 2: h4TyPM-lSUzBFc-GVJsAqMyi_Q8.roa (hash: QRRCqIhfzgSfHjTwanuS+mvIUE37zMG7bc9JISZqHPA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.mft rsync://rpki.ripe.net/repository/DEFAULT/ct9pdDDLtXxJoKGZMCTW0yn35WU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:9b:2c:6f:ad:f1:ac:29:cf:bd:ff:ea:69:c0:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72df697430cbb57c49a0a1993024d6d329f7e565 Validity Not Before: Feb 9 15:01:02 2026 GMT Not After : Feb 10 15:01:02 2026 GMT Subject: CN=ec93dc48defa19594adb92ae1f9373cdf5c60c90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:a5:6f:d6:3d:67:38:90:bc:24:19:d7:a3:c2: b9:77:60:03:18:4b:7a:3a:b5:27:20:d0:7f:ca:59: ad:08:63:a9:31:b5:6c:5a:59:b8:4f:03:34:0e:51: 71:39:8f:60:33:38:9b:66:38:79:08:1f:5e:13:d5: 46:74:67:ba:98:d4:24:b6:d3:b5:a1:ad:75:18:ad: 34:b8:ad:6f:8e:bc:d6:c7:6b:6e:bd:83:57:eb:82: 4c:cc:31:63:7e:33:ef:6d:1d:c0:4e:02:eb:c7:f0: 52:94:56:e0:4f:9b:d4:c9:18:c1:ea:f7:de:eb:4c: 1f:07:95:0f:39:3c:d5:e0:28:51:f9:a2:e1:d5:a6: aa:a7:5a:f5:f0:0c:d1:13:8e:37:26:c7:45:9f:c5: 54:4a:6a:c0:ce:54:b8:69:55:64:61:7f:25:4a:63: 9e:e2:bf:60:c0:97:90:7d:cb:d6:1e:93:52:6e:97: d9:19:69:aa:65:fd:18:21:3e:8b:15:f5:28:39:24: d7:40:85:43:1e:70:93:6c:56:b3:19:05:da:1b:e3: ca:09:b4:ba:77:0b:34:65:e0:06:55:2a:bc:c3:36: eb:83:d7:61:93:c2:56:b6:e3:a8:76:7f:3d:5b:04: 14:29:b9:cc:ba:af:8b:01:1b:28:90:59:ae:5d:81: 82:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:93:DC:48:DE:FA:19:59:4A:DB:92:AE:1F:93:73:CD:F5:C6:0C:90 X509v3 Authority Key Identifier: keyid:72:DF:69:74:30:CB:B5:7C:49:A0:A1:99:30:24:D6:D3:29:F7:E5:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ct9pdDDLtXxJoKGZMCTW0yn35WU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:19:8c:99:0e:96:7b:ad:05:85:33:f4:14:27:2b:91:1a:85: c5:51:ed:0a:e5:81:d2:92:f3:14:1f:5e:19:03:e8:35:dd:22: ac:e9:7c:bb:d3:d6:48:56:9c:f4:91:a9:9a:46:7a:93:cc:71: 09:23:ea:bc:af:c6:76:3e:d2:d3:59:aa:4b:44:da:e1:af:7a: 3d:ac:56:ea:4f:77:3b:1f:fd:93:14:7e:ac:2e:3f:fe:a1:df: c5:be:33:f9:c4:98:c0:f0:56:58:b3:d5:8b:72:62:06:57:3b: 86:9a:a1:e5:fa:37:03:8d:66:8d:2e:65:0b:c2:ae:5c:4f:84: 0a:95:8c:45:15:18:88:94:f2:7d:3f:53:f3:b7:cf:28:63:31: d8:a7:c8:6c:27:c4:b4:62:01:18:c0:59:cb:e9:14:89:5b:dc: 96:6b:bf:87:db:03:df:fe:33:02:82:52:88:e5:95:4c:e4:84: bd:4e:38:f9:26:eb:c1:6e:10:d7:9d:40:0a:c5:60:94:31:86: 08:dd:10:9a:16:6b:80:97:36:12:a5:db:11:52:18:fa:ae:f7: 27:d0:34:da:24:df:33:b4:04:03:1b:a5:f3:5e:2b:45:8d:46: 04:7b:13:18:75:63:f0:84:d0:e3:1d:e5:19:51:62:b4:37:46: 94:7e:0c:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC65ssb63xrCnPvf/qacCpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZGY2OTc0MzBjYmI1N2M0OWEwYTE5OTMwMjRkNmQzMjlm N2U1NjUwHhcNMjYwMjA5MTUwMTAyWhcNMjYwMjEwMTUwMTAyWjAzMTEwLwYDVQQD EyhlYzkzZGM0OGRlZmExOTU5NGFkYjkyYWUxZjkzNzNjZGY1YzYwYzkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7KVv1j1nOJC8JBnXo8K5d2ADGEt6 OrUnINB/ylmtCGOpMbVsWlm4TwM0DlFxOY9gMzibZjh5CB9eE9VGdGe6mNQkttO1 oa11GK00uK1vjrzWx2tuvYNX64JMzDFjfjPvbR3ATgLrx/BSlFbgT5vUyRjB6vfe 60wfB5UPOTzV4ChR+aLh1aaqp1r18AzRE443JsdFn8VUSmrAzlS4aVVkYX8lSmOe 4r9gwJeQfcvWHpNSbpfZGWmqZf0YIT6LFfUoOSTXQIVDHnCTbFazGQXaG+PKCbS6 dws0ZeAGVSq8wzbrg9dhk8JWtuOodn89WwQUKbnMuq+LARsokFmuXYGCDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOyT3Eje+hlZStuSrh+Tc831xgyQMB8GA1UdIwQY MBaAFHLfaXQwy7V8SaChmTAk1tMp9+VlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3Q5cGREREx0WHhKb0tHWk1DVFcweW4zNVdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9mODE2ZDYtMDE2YS00MTM1LTk5ZTMt OGM0MmJiMjIzMWFiLzEvY3Q5cGREREx0WHhKb0tHWk1DVFcweW4zNVdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9mODE2ZDYtMDE2YS00MTM1LTk5ZTMtOGM0MmJiMjIzMWFi LzEvY3Q5cGREREx0WHhKb0tHWk1DVFcweW4zNVdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXBmMmQ6W e60FhTP0FCcrkRqFxVHtCuWB0pLzFB9eGQPoNd0irOl8u9PWSFac9JGpmkZ6k8xx CSPqvK/Gdj7S01mqS0Ta4a96PaxW6k93Ox/9kxR+rC4//qHfxb4z+cSYwPBWWLPV i3JiBlc7hpqh5fo3A41mjS5lC8KuXE+ECpWMRRUYiJTyfT9T87fPKGMx2KfIbCfE tGIBGMBZy+kUiVvclmu/h9sD3/4zAoJSiOWVTOSEvU44+SbrwW4Q151ACsVglDGG CN0QmhZrgJc2EqXbEVIY+q73J9A02iTfM7QEAxul814rRY1GBHsTGHVj8ITQ4x3l GVFitDdGlH4MlA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:38 2026 by rpki-client