This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft File: 9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft (raw, json) Hash identifier: TPl6CdtGRZczp4CRY8btAsKZtj6RSXL+tJN0h2pcZD4= Subject key identifier: 43:71:28:9F:16:28:6B:F0:FE:14:06:E4:6C:1E:86:AF:12:68:BE:81 Authority key identifier: F6:43:F0:35:2A:DF:C9:8A:C8:80:1B:94:E5:A0:07:E7:07:0B:07:AC Certificate issuer: /CN=f643f0352adfc98ac8801b94e5a007e7070b07ac Certificate serial: 019C41A18651CB2F20B1CA9046159FCC6D7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kPwNSrfyYrIgBuU5aAH5wcLB6w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft Manifest number: 0EEF Signing time: Mon 09 Feb 2026 09:00:30 +0000 Manifest this update: Mon 09 Feb 2026 09:00:30 +0000 Manifest next update: Tue 10 Feb 2026 09:00:30 +0000 Files and hashes: 1: 9kPwNSrfyYrIgBuU5aAH5wcLB6w.crl (hash: bNF0YRvlPxkdSUJIbJ6xvUmdpjLiVrXiJ5xXfhxMAJ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft rsync://rpki.ripe.net/repository/DEFAULT/9kPwNSrfyYrIgBuU5aAH5wcLB6w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:86:51:cb:2f:20:b1:ca:90:46:15:9f:cc:6d:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f643f0352adfc98ac8801b94e5a007e7070b07ac Validity Not Before: Feb 9 09:00:30 2026 GMT Not After : Feb 10 09:00:30 2026 GMT Subject: CN=4371289f16286bf0fe1406e46c1e86af1268be81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e6:e7:d3:f1:63:0f:6b:0c:7a:ff:94:bc:56: 85:24:7c:3d:7f:15:60:61:f0:85:06:d8:57:7f:4f: 2b:d3:9d:98:92:53:8e:a5:18:db:2d:1a:0c:d7:ef: 6a:7e:2d:90:dd:03:8b:35:f8:aa:aa:2a:a4:56:e3: 18:e5:e9:d6:ac:54:1a:06:ea:9a:7b:cc:e4:6e:81: b8:af:49:30:18:a9:89:0f:f1:ec:60:fe:16:e5:fc: 90:35:40:7c:27:b8:4a:ea:d6:17:c0:18:b6:6e:13: 39:70:a1:3a:69:72:55:38:25:bf:b4:72:65:6c:7d: c2:db:7c:25:b0:54:61:f7:14:ae:e0:ab:ce:99:83: 13:c1:a8:ea:42:76:c4:12:e9:0d:11:f0:87:90:ee: 67:b6:5b:95:d9:60:9c:95:5a:03:ed:65:00:33:0e: 1f:fb:18:32:94:06:17:b9:a2:37:fc:21:ad:9e:da: 3d:36:90:71:f5:be:c1:d4:8f:18:a3:a6:5d:66:4d: a0:00:4c:e7:08:ee:9a:a2:9e:99:20:d0:31:5f:0d: 47:b9:30:01:c3:28:71:93:03:a7:c0:6a:95:b9:ad: 63:08:96:ce:ed:95:ce:08:1b:ed:d6:2f:d2:2f:d7: b4:7e:ed:8e:5b:db:03:95:20:69:49:83:08:aa:99: 2d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:71:28:9F:16:28:6B:F0:FE:14:06:E4:6C:1E:86:AF:12:68:BE:81 X509v3 Authority Key Identifier: keyid:F6:43:F0:35:2A:DF:C9:8A:C8:80:1B:94:E5:A0:07:E7:07:0B:07:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kPwNSrfyYrIgBuU5aAH5wcLB6w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:2f:31:6c:a3:81:29:9a:09:2e:54:eb:b8:20:82:db:13:69: e3:ed:00:8e:2e:89:97:16:09:bb:04:00:c5:57:0b:19:22:14: b8:e4:e8:69:ea:1a:ef:25:0a:5f:1f:d5:f0:b9:96:51:79:08: d2:73:87:52:43:ee:49:d8:09:28:30:59:16:20:af:88:09:e5: 84:2f:f6:c5:e4:e5:fd:38:3e:64:e5:f0:b6:8a:37:10:94:3a: 8a:0d:21:98:2f:a8:bb:1e:b8:a1:84:5e:9b:64:73:f8:ab:e5: 39:d5:e6:64:9a:ee:7f:aa:00:ce:8a:df:c0:11:97:73:66:07: 34:38:10:9a:33:45:cc:94:96:c0:28:87:24:39:2b:55:d7:7f: 10:b7:b0:0d:f3:73:12:09:84:62:d7:72:12:c1:1a:54:35:d7: 89:b1:27:ce:d8:e3:2b:3e:94:86:7b:b0:10:39:22:df:db:09: 6a:02:95:10:2a:3d:be:60:b0:cc:c7:3b:c6:68:77:4b:67:59: d1:8c:47:dc:bb:a3:25:2c:da:7c:7a:37:1f:eb:69:bf:9d:7d: 28:c6:79:27:02:bc:73:14:75:de:22:66:6c:29:ef:7a:ec:1d: 04:59:48:fb:18:87:fe:e3:8a:7c:d0:6f:7e:54:40:19:0a:5c: 95:e3:86:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoYZRyy8gscqQRhWfzG17MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NDNmMDM1MmFkZmM5OGFjODgwMWI5NGU1YTAwN2U3MDcw YjA3YWMwHhcNMjYwMjA5MDkwMDMwWhcNMjYwMjEwMDkwMDMwWjAzMTEwLwYDVQQD Eyg0MzcxMjg5ZjE2Mjg2YmYwZmUxNDA2ZTQ2YzFlODZhZjEyNjhiZTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ubn0/FjD2sMev+UvFaFJHw9fxVg YfCFBthXf08r052YklOOpRjbLRoM1+9qfi2Q3QOLNfiqqiqkVuMY5enWrFQaBuqa e8zkboG4r0kwGKmJD/HsYP4W5fyQNUB8J7hK6tYXwBi2bhM5cKE6aXJVOCW/tHJl bH3C23wlsFRh9xSu4KvOmYMTwajqQnbEEukNEfCHkO5ntluV2WCclVoD7WUAMw4f +xgylAYXuaI3/CGtnto9NpBx9b7B1I8Yo6ZdZk2gAEznCO6aop6ZINAxXw1HuTAB wyhxkwOnwGqVua1jCJbO7ZXOCBvt1i/SL9e0fu2OW9sDlSBpSYMIqpktgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFENxKJ8WKGvw/hQG5Gwehq8SaL6BMB8GA1UdIwQY MBaAFPZD8DUq38mKyIAblOWgB+cHCwesMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWtQd05TcmZ5WXJJZ0J1VTVhQUg1d2NMQjZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi82YWM3N2EtNGE1Zi00ZDM5LThjZmEt MDA1ZmMwN2NlZGM4LzEvOWtQd05TcmZ5WXJJZ0J1VTVhQUg1d2NMQjZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi82YWM3N2EtNGE1Zi00ZDM5LThjZmEtMDA1ZmMwN2NlZGM4 LzEvOWtQd05TcmZ5WXJJZ0J1VTVhQUg1d2NMQjZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoi8xbKOB KZoJLlTruCCC2xNp4+0Aji6JlxYJuwQAxVcLGSIUuOToaeoa7yUKXx/V8LmWUXkI 0nOHUkPuSdgJKDBZFiCviAnlhC/2xeTl/Tg+ZOXwtoo3EJQ6ig0hmC+oux64oYRe m2Rz+KvlOdXmZJruf6oAzorfwBGXc2YHNDgQmjNFzJSWwCiHJDkrVdd/ELewDfNz EgmEYtdyEsEaVDXXibEnztjjKz6UhnuwEDki39sJagKVECo9vmCwzMc7xmh3S2dZ 0YxH3LujJSzafHo3H+tpv519KMZ5JwK8cxR13iJmbCnveuwdBFlI+xiH/uOKfNBv flRAGQpcleOG1A== -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:00 2026 by rpki-client