This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft File: 0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft (raw, json) Hash identifier: IA9qUHQ2Dd6D7HfSpPoDGTN6lgRkfKE8cjhLok267cY= Subject key identifier: DF:17:8B:E6:B7:F0:D5:52:4F:F3:D9:43:35:84:A8:73:DB:19:16:B8 Authority key identifier: D1:2F:41:59:12:0A:A5:1B:B1:CD:F1:16:D0:6A:4F:C0:29:2F:F9:6C Certificate issuer: /CN=d12f4159120aa51bb1cdf116d06a4fc0292ff96c Certificate serial: 019C4322D113FFEDDC661CE244D0115DAC5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft Manifest number: 180C Signing time: Mon 09 Feb 2026 16:01:21 +0000 Manifest this update: Mon 09 Feb 2026 16:01:21 +0000 Manifest next update: Tue 10 Feb 2026 16:01:21 +0000 Files and hashes: 1: 0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl (hash: 6zFTxX5PTQA4wtFa134hlyu2SjxYRnk5VEUKNN4AcrM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:d1:13:ff:ed:dc:66:1c:e2:44:d0:11:5d:ac:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d12f4159120aa51bb1cdf116d06a4fc0292ff96c Validity Not Before: Feb 9 16:01:21 2026 GMT Not After : Feb 10 16:01:21 2026 GMT Subject: CN=df178be6b7f0d5524ff3d9433584a873db1916b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:58:03:a3:a4:ef:34:a5:40:51:84:d5:d9:02: e5:bc:bf:b7:07:6f:da:29:a1:d3:67:28:99:3b:0f: 15:f9:28:b4:94:f3:41:2c:66:ad:e6:e2:2f:ab:3a: 17:20:e7:e5:3c:c5:19:c4:2e:10:82:8c:2a:1e:b4: c3:33:fa:dc:45:b8:bf:7c:62:8b:d2:6a:23:e3:52: 0a:d9:bd:59:33:45:69:8d:23:fd:89:e7:a6:a6:e1: 8b:74:70:c7:bd:c2:1e:99:9b:00:99:a2:0c:01:d0: 67:ea:bb:5a:1f:13:55:67:fb:fe:42:18:e5:93:bc: c5:55:64:a9:23:48:f8:50:67:e3:8b:d3:03:b0:a7: e4:d0:00:4c:58:11:d7:bb:d7:cf:a3:ab:8f:25:44: 04:6a:0c:ed:fc:65:1b:34:78:d1:72:39:d5:a7:dc: d9:cc:f4:57:6b:50:f7:25:a7:81:4a:ce:8a:f2:d6: a1:39:b1:ec:2d:7f:86:20:cc:fe:d0:09:49:f6:13: 99:a5:1c:e2:45:b6:d5:75:36:95:8b:4d:20:e3:3d: d4:f3:f6:eb:aa:a3:5a:23:61:a1:df:c1:b4:01:51: 43:83:db:f8:ca:b9:36:d0:98:94:96:e1:cd:64:42: 9b:91:64:50:99:ef:aa:28:90:93:2d:b3:65:69:19: 78:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:17:8B:E6:B7:F0:D5:52:4F:F3:D9:43:35:84:A8:73:DB:19:16:B8 X509v3 Authority Key Identifier: keyid:D1:2F:41:59:12:0A:A5:1B:B1:CD:F1:16:D0:6A:4F:C0:29:2F:F9:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:5d:07:ec:54:e4:37:43:d3:75:48:db:40:8c:d6:22:b1:dd: 8e:e8:30:01:85:5c:be:03:35:b4:89:8d:e4:9e:2a:18:86:1c: 75:55:bf:fd:05:c3:f0:36:cd:35:6e:28:9c:76:ae:f5:d8:b3: 38:c4:ac:8a:83:cc:25:a8:d7:20:06:97:1b:54:33:67:b6:11: 08:32:89:5f:87:0f:68:6a:b0:df:db:a2:2a:49:07:0c:41:f0: 7c:98:f9:c3:ba:25:fe:20:99:cd:35:d1:d9:f8:1b:bb:8b:62: d9:ef:d1:b8:24:13:c9:61:59:19:e2:d8:64:64:a0:7d:de:7b: 23:2e:d8:36:36:23:af:e2:01:de:44:c3:61:2b:60:af:a8:fc: f6:1c:63:a0:a8:0a:0a:af:99:73:53:b2:4e:b7:b6:ad:dc:4b: ef:de:f6:b0:c6:8f:74:c9:0a:b1:e5:bb:f8:24:f0:90:d6:63: 4e:d7:41:0b:63:28:6b:a0:bd:8c:ba:72:9b:18:af:dc:65:4f: bb:64:e6:fa:91:c8:50:02:02:11:4a:ff:7d:d8:02:40:dd:97: 59:f2:e5:3d:95:ab:34:2b:f1:04:e9:92:9a:b9:4d:8c:b4:8e: b5:00:13:fd:5c:6b:32:83:9a:30:5e:66:ea:79:4d:7d:60:c6: b0:dc:18:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDItET/+3cZhziRNARXaxbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxMmY0MTU5MTIwYWE1MWJiMWNkZjExNmQwNmE0ZmMwMjky ZmY5NmMwHhcNMjYwMjA5MTYwMTIxWhcNMjYwMjEwMTYwMTIxWjAzMTEwLwYDVQQD EyhkZjE3OGJlNmI3ZjBkNTUyNGZmM2Q5NDMzNTg0YTg3M2RiMTkxNmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FgDo6TvNKVAUYTV2QLlvL+3B2/a KaHTZyiZOw8V+Si0lPNBLGat5uIvqzoXIOflPMUZxC4QgowqHrTDM/rcRbi/fGKL 0moj41IK2b1ZM0VpjSP9ieempuGLdHDHvcIemZsAmaIMAdBn6rtaHxNVZ/v+Qhjl k7zFVWSpI0j4UGfji9MDsKfk0ABMWBHXu9fPo6uPJUQEagzt/GUbNHjRcjnVp9zZ zPRXa1D3JaeBSs6K8tahObHsLX+GIMz+0AlJ9hOZpRziRbbVdTaVi00g4z3U8/br qqNaI2Gh38G0AVFDg9v4yrk20JiUluHNZEKbkWRQme+qKJCTLbNlaRl4AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN8Xi+a38NVST/PZQzWEqHPbGRa4MB8GA1UdIwQY MBaAFNEvQVkSCqUbsc3xFtBqT8ApL/lsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFM5QldSSUtwUnV4emZFVzBHcFB3Q2t2LVd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85ODk2N2EtZDM5Ni00OTIxLWEwOWYt ZmM0YTZhYjc4OGFkLzEvMFM5QldSSUtwUnV4emZFVzBHcFB3Q2t2LVd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy85ODk2N2EtZDM5Ni00OTIxLWEwOWYtZmM0YTZhYjc4OGFk LzEvMFM5QldSSUtwUnV4emZFVzBHcFB3Q2t2LVd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAll0H7FTk N0PTdUjbQIzWIrHdjugwAYVcvgM1tImN5J4qGIYcdVW//QXD8DbNNW4onHau9diz OMSsioPMJajXIAaXG1QzZ7YRCDKJX4cPaGqw39uiKkkHDEHwfJj5w7ol/iCZzTXR 2fgbu4ti2e/RuCQTyWFZGeLYZGSgfd57Iy7YNjYjr+IB3kTDYStgr6j89hxjoKgK Cq+Zc1OyTre2rdxL7972sMaPdMkKseW7+CTwkNZjTtdBC2Moa6C9jLpymxiv3GVP u2Tm+pHIUAICEUr/fdgCQN2XWfLlPZWrNCvxBOmSmrlNjLSOtQAT/VxrMoOaMF5m 6nlNfWDGsNwYrw== -----END CERTIFICATE-----Generated at Mon Feb 9 20:01:29 2026 by rpki-client