This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft File: J9TWlrrbEJTKoV176Gw5pxLg7hI.mft (raw, json) Hash identifier: Xg726PI6H4GLJdeixBsgDWA5tW1uIWbu/QYur5kFWyQ= Subject key identifier: E1:66:20:3C:CF:94:88:43:B1:F7:EB:76:43:CF:0D:29:79:70:57:C0 Authority key identifier: 27:D4:D6:96:BA:DB:10:94:CA:A1:5D:7B:E8:6C:39:A7:12:E0:EE:12 Certificate issuer: /CN=27d4d696badb1094caa15d7be86c39a712e0ee12 Certificate serial: 019C43FDE34877D925087BDC0BF7FE8E2521 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9TWlrrbEJTKoV176Gw5pxLg7hI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft Manifest number: 179F Signing time: Mon 09 Feb 2026 20:00:38 +0000 Manifest this update: Mon 09 Feb 2026 20:00:38 +0000 Manifest next update: Tue 10 Feb 2026 20:00:38 +0000 Files and hashes: 1: J9TWlrrbEJTKoV176Gw5pxLg7hI.crl (hash: A5kNEak5bM6HaitZybwoKBSD3hc0OmDDhtn4JnbvQHs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft rsync://rpki.ripe.net/repository/DEFAULT/J9TWlrrbEJTKoV176Gw5pxLg7hI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:e3:48:77:d9:25:08:7b:dc:0b:f7:fe:8e:25:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27d4d696badb1094caa15d7be86c39a712e0ee12 Validity Not Before: Feb 9 20:00:38 2026 GMT Not After : Feb 10 20:00:38 2026 GMT Subject: CN=e166203ccf948843b1f7eb7643cf0d29797057c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:19:f6:39:b5:2e:81:4d:d7:8a:6c:9b:12:38: bb:48:99:90:fd:ed:1b:56:92:a8:e6:1a:20:a5:18: 37:f2:74:93:60:0d:ef:da:70:10:01:03:9c:66:b8: 70:f1:86:c2:30:39:d2:11:4f:b6:f2:07:4a:fb:a1: 7a:e3:d0:fc:73:18:f9:e1:53:7b:d8:75:61:af:e0: 9e:26:1d:af:50:d7:e9:44:38:27:33:98:b3:c0:eb: bb:cf:cd:52:89:bc:2f:01:8a:b0:5d:23:b7:10:33: 83:c6:ce:82:98:30:31:60:a6:ef:93:60:c7:76:1f: dc:ff:f3:b8:93:dd:30:ae:a0:cf:ca:4d:80:8a:54: d4:05:5f:10:bc:bf:38:33:03:84:89:2c:95:68:26: f3:ae:f8:64:41:23:81:24:fd:da:f8:bb:db:df:e3: 13:de:fd:d7:a8:9b:f1:09:89:19:5a:0a:a9:36:9a: f0:f3:5e:6e:d2:87:22:9f:7b:1e:69:19:24:5d:96: 46:36:5c:03:12:6e:3e:50:0a:15:f3:c7:76:1c:8f: 13:c6:ee:f0:f6:c4:6d:d4:61:68:49:35:64:cf:f8: b0:96:da:d2:3f:03:0b:88:97:15:20:21:f0:41:0f: 21:95:81:1b:63:54:fd:97:12:22:33:db:87:b7:bd: f2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:66:20:3C:CF:94:88:43:B1:F7:EB:76:43:CF:0D:29:79:70:57:C0 X509v3 Authority Key Identifier: keyid:27:D4:D6:96:BA:DB:10:94:CA:A1:5D:7B:E8:6C:39:A7:12:E0:EE:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9TWlrrbEJTKoV176Gw5pxLg7hI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:0e:4d:92:0d:c2:86:dd:20:11:d8:27:e7:77:fc:5a:d6:cd: d1:33:b8:b5:27:de:d2:e5:47:59:43:ff:af:bf:66:0d:de:e5: 93:94:a3:ca:a1:0c:ed:a3:08:ce:11:3c:fa:d7:85:9d:eb:e5: ac:74:30:a1:1d:24:9a:8e:7b:01:40:97:ff:97:2f:4f:0c:8e: 70:ab:12:2b:ef:a1:03:c4:34:4f:f1:81:6a:73:bb:06:df:ef: b0:17:10:18:47:bc:c9:69:78:b8:d1:27:23:5c:c9:5b:b4:ae: c4:ac:1b:48:3f:61:c7:3b:c6:9e:2e:99:92:af:3b:7c:e4:8c: 13:47:8b:3f:c5:ac:4c:2e:81:f6:05:b6:d2:43:c9:80:52:cb: a4:36:43:9a:fa:5a:35:14:f4:69:35:7e:7f:43:f1:00:46:f3: ff:98:02:58:16:00:98:8f:e2:bd:51:de:c2:84:e4:09:41:ce: 53:56:58:32:35:1f:d8:c1:d3:66:98:66:99:bb:49:0d:0e:e9: 4f:03:f3:5e:07:a9:16:4e:a9:a2:9c:4e:48:6d:90:7c:b6:8d: f1:a1:b3:77:06:b8:6b:47:ad:a8:ef:50:fc:61:03:c0:79:7e: ed:5c:58:40:fc:ec:9c:8c:95:02:2b:74:d9:bd:4d:1e:42:64: 9b:28:9a:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/eNId9klCHvcC/f+jiUhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ZDRkNjk2YmFkYjEwOTRjYWExNWQ3YmU4NmMzOWE3MTJl MGVlMTIwHhcNMjYwMjA5MjAwMDM4WhcNMjYwMjEwMjAwMDM4WjAzMTEwLwYDVQQD EyhlMTY2MjAzY2NmOTQ4ODQzYjFmN2ViNzY0M2NmMGQyOTc5NzA1N2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxn2ObUugU3XimybEji7SJmQ/e0b VpKo5hogpRg38nSTYA3v2nAQAQOcZrhw8YbCMDnSEU+28gdK+6F649D8cxj54VN7 2HVhr+CeJh2vUNfpRDgnM5izwOu7z81SibwvAYqwXSO3EDODxs6CmDAxYKbvk2DH dh/c//O4k90wrqDPyk2AilTUBV8QvL84MwOEiSyVaCbzrvhkQSOBJP3a+Lvb3+MT 3v3XqJvxCYkZWgqpNprw815u0ocin3seaRkkXZZGNlwDEm4+UAoV88d2HI8Txu7w 9sRt1GFoSTVkz/iwltrSPwMLiJcVICHwQQ8hlYEbY1T9lxIiM9uHt73yxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOFmIDzPlIhDsffrdkPPDSl5cFfAMB8GA1UdIwQY MBaAFCfU1pa62xCUyqFde+hsOacS4O4SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjlUV2xycmJFSlRLb1YxNzZHdzVweExnN2hJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9kMGNlZDgtZjFiNS00Y2Y1LWI0NGQt ZThhNGVjZTkzYTM1LzEvSjlUV2xycmJFSlRLb1YxNzZHdzVweExnN2hJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9kMGNlZDgtZjFiNS00Y2Y1LWI0NGQtZThhNGVjZTkzYTM1 LzEvSjlUV2xycmJFSlRLb1YxNzZHdzVweExnN2hJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXQ5Nkg3C ht0gEdgn53f8WtbN0TO4tSfe0uVHWUP/r79mDd7lk5SjyqEM7aMIzhE8+teFnevl rHQwoR0kmo57AUCX/5cvTwyOcKsSK++hA8Q0T/GBanO7Bt/vsBcQGEe8yWl4uNEn I1zJW7SuxKwbSD9hxzvGni6Zkq87fOSME0eLP8WsTC6B9gW20kPJgFLLpDZDmvpa NRT0aTV+f0PxAEbz/5gCWBYAmI/ivVHewoTkCUHOU1ZYMjUf2MHTZphmmbtJDQ7p TwPzXgepFk6popxOSG2QfLaN8aGzdwa4a0etqO9Q/GEDwHl+7VxYQPzsnIyVAit0 2b1NHkJkmyiaow== -----END CERTIFICATE-----Generated at Mon Feb 9 22:40:19 2026 by rpki-client