This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft File: 9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft (raw, json) Hash identifier: lQbnl7tgB3m5K2bNkaqI/+EjgOO+/KJWs2ThGS5NTok= Subject key identifier: B3:E2:98:97:1C:36:44:3A:D4:2D:A7:74:61:2D:FF:63:F2:15:28:DA Authority key identifier: F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12 Certificate issuer: /CN=f69527a06a035cbcaecf00daca2fd88399cf9d12 Certificate serial: 019C4322065AD6F7DE633CD5004B5D780A41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft Manifest number: 0DD9 Signing time: Mon 09 Feb 2026 16:00:29 +0000 Manifest this update: Mon 09 Feb 2026 16:00:29 +0000 Manifest next update: Tue 10 Feb 2026 16:00:29 +0000 Files and hashes: 1: 9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl (hash: W91XU4Uum/3FZLwMXtdEbnjlaMGKzlx0wQcM+xrQa6s=) 2: I3Cwe_JfIHDw-5FguYkJbkBPot8.roa (hash: NhXNbLKSK6Zii6NTvjleq3atjNt9Qq9hOl62FzoteKA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:06:5a:d6:f7:de:63:3c:d5:00:4b:5d:78:0a:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f69527a06a035cbcaecf00daca2fd88399cf9d12 Validity Not Before: Feb 9 16:00:29 2026 GMT Not After : Feb 10 16:00:29 2026 GMT Subject: CN=b3e298971c36443ad42da774612dff63f21528da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e1:62:cf:03:0a:fb:61:0a:16:16:6d:ec:c6: a3:a8:0b:26:48:fc:2c:93:52:51:1a:41:30:cd:a1: 93:39:db:62:e7:0d:a6:f5:eb:40:83:80:aa:fc:f7: d6:b8:6d:63:8f:dc:58:e4:82:e1:3b:b4:44:7b:51: 7b:cf:a7:fc:d8:2a:d8:da:11:52:82:1e:08:88:a6: 04:fd:33:9d:52:fe:08:0b:20:c8:96:c6:23:5e:1a: cf:78:ee:d4:f5:c1:f6:07:f6:ec:e4:fd:29:70:4a: d0:38:40:b7:7d:28:7c:37:a9:53:59:32:11:59:ac: 62:d1:c0:fa:5d:ae:97:63:07:a8:4c:4d:29:4f:6c: e4:b0:d8:54:97:71:8d:88:b7:69:cc:13:dd:99:76: a0:be:41:2e:c2:5f:0c:12:0e:2e:d7:6f:d7:c2:86: d5:95:8d:0b:a2:09:e7:51:bc:ab:a2:7c:81:e6:8c: 51:5d:26:f1:7a:8d:e8:16:77:f7:b1:c1:75:d2:dd: 4e:da:68:04:be:c4:a1:46:02:11:d6:a5:19:19:19: b9:fb:0e:cb:09:69:2c:c8:b4:b7:46:db:62:1a:0d: e7:0f:40:b4:d6:f9:a9:f6:3f:72:b0:72:4b:9b:bc: 07:3f:b5:36:15:7d:3b:73:38:ab:68:27:0f:0e:2d: ef:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:E2:98:97:1C:36:44:3A:D4:2D:A7:74:61:2D:FF:63:F2:15:28:DA X509v3 Authority Key Identifier: keyid:F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:20:ee:87:c8:99:03:2e:e3:90:dd:61:e1:73:cd:d0:55:10: de:4e:57:b4:a0:ff:77:fe:2b:bc:36:31:b1:bb:20:bf:9c:b2: 38:66:40:4c:9c:cb:e7:c1:24:67:76:0e:55:b0:f4:f9:14:e9: 72:d4:66:84:b4:65:bf:5c:73:d4:31:ec:a4:3e:59:cb:e2:1c: f8:07:87:aa:94:be:f6:d2:f7:33:f6:1a:db:02:f2:90:93:8b: b3:ef:33:01:6a:d2:52:e8:3e:ac:92:86:46:81:80:fa:1d:3e: 21:be:4d:d7:a3:20:51:01:11:d6:ab:2a:fe:37:20:cf:16:d0: f0:76:2b:fa:a4:02:1f:58:5c:27:3c:48:7b:36:ab:77:41:c0: ac:9d:ef:05:5e:b8:22:26:3b:8c:b4:24:61:ca:36:30:8c:f3: 65:69:b1:e0:fe:67:a9:ab:65:58:50:64:ed:f0:4a:ce:64:1d: 35:61:90:c1:a3:08:a9:af:ce:7f:ce:ba:38:34:29:19:4c:30: a2:ba:18:76:40:d3:c6:e2:dc:a8:99:33:eb:b5:56:40:1b:18: 16:46:41:44:7f:50:89:9b:2e:75:a7:a2:72:c7:f0:1d:32:d7: 86:7f:f9:82:f2:3a:6a:99:d8:5f:9f:e8:b6:17:95:e9:31:f8: 15:cc:5f:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIgZa1vfeYzzVAEtdeApBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2OTUyN2EwNmEwMzVjYmNhZWNmMDBkYWNhMmZkODgzOTlj ZjlkMTIwHhcNMjYwMjA5MTYwMDI5WhcNMjYwMjEwMTYwMDI5WjAzMTEwLwYDVQQD EyhiM2UyOTg5NzFjMzY0NDNhZDQyZGE3NzQ2MTJkZmY2M2YyMTUyOGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uFizwMK+2EKFhZt7MajqAsmSPws k1JRGkEwzaGTOdti5w2m9etAg4Cq/PfWuG1jj9xY5ILhO7REe1F7z6f82CrY2hFS gh4IiKYE/TOdUv4ICyDIlsYjXhrPeO7U9cH2B/bs5P0pcErQOEC3fSh8N6lTWTIR Waxi0cD6Xa6XYweoTE0pT2zksNhUl3GNiLdpzBPdmXagvkEuwl8MEg4u12/XwobV lY0LognnUbyronyB5oxRXSbxeo3oFnf3scF10t1O2mgEvsShRgIR1qUZGRm5+w7L CWksyLS3RttiGg3nD0C01vmp9j9ysHJLm7wHP7U2FX07cziraCcPDi3vLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLPimJccNkQ61C2ndGEt/2PyFSjaMB8GA1UdIwQY MBaAFPaVJ6BqA1y8rs8A2sov2IOZz50SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXBVbm9Hb0RYTHl1endEYXlpX1lnNW5QblJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9kNDU1MzEtZDZjOC00ZGNlLWI2MDYt ODVjODU1MjI3YjIzLzEvOXBVbm9Hb0RYTHl1endEYXlpX1lnNW5QblJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9kNDU1MzEtZDZjOC00ZGNlLWI2MDYtODVjODU1MjI3YjIz LzEvOXBVbm9Hb0RYTHl1endEYXlpX1lnNW5QblJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfiDuh8iZ Ay7jkN1h4XPN0FUQ3k5XtKD/d/4rvDYxsbsgv5yyOGZATJzL58EkZ3YOVbD0+RTp ctRmhLRlv1xz1DHspD5Zy+Ic+AeHqpS+9tL3M/Ya2wLykJOLs+8zAWrSUug+rJKG RoGA+h0+Ib5N16MgUQER1qsq/jcgzxbQ8HYr+qQCH1hcJzxIezard0HArJ3vBV64 IiY7jLQkYco2MIzzZWmx4P5nqatlWFBk7fBKzmQdNWGQwaMIqa/Of866ODQpGUww oroYdkDTxuLcqJkz67VWQBsYFkZBRH9QiZsudaeicsfwHTLXhn/5gvI6apnYX5/o theV6TH4FcxfJQ== -----END CERTIFICATE-----Generated at Mon Feb 9 20:54:28 2026 by rpki-client