This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft File: 9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft (raw, json) Hash identifier: BkED/b3IZ0GuuOX8KYh4/9weiARG2oH2wpej39zWFAo= Subject key identifier: 20:6E:CD:2A:A7:FF:25:F2:12:66:71:EA:DC:62:1C:41:2B:39:E7:B7 Authority key identifier: F4:99:88:18:80:C6:F9:95:C2:9C:17:7B:ED:33:A1:A6:E3:D4:FB:30 Certificate issuer: /CN=f499881880c6f995c29c177bed33a1a6e3d4fb30 Certificate serial: 019C42B42D99E703F6469D4B2FA5C158CA48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JmIGIDG-ZXCnBd77TOhpuPU-zA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft Manifest number: 0203 Signing time: Mon 09 Feb 2026 14:00:30 +0000 Manifest this update: Mon 09 Feb 2026 14:00:30 +0000 Manifest next update: Tue 10 Feb 2026 14:00:30 +0000 Files and hashes: 1: 9JmIGIDG-ZXCnBd77TOhpuPU-zA.crl (hash: PYVAqpkK4OOtxgSTUgTzOQ8W/+PDcDzBpAnN8rppS+c=) 2: wpr47QW5yPt3pCsYurF1J3o7Rg4.roa (hash: 0bSRAwMu0O91Emdt4EmzLACfG7UlbU7GDgVzgrcUSBg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft rsync://rpki.ripe.net/repository/DEFAULT/9JmIGIDG-ZXCnBd77TOhpuPU-zA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:2d:99:e7:03:f6:46:9d:4b:2f:a5:c1:58:ca:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f499881880c6f995c29c177bed33a1a6e3d4fb30 Validity Not Before: Feb 9 14:00:30 2026 GMT Not After : Feb 10 14:00:30 2026 GMT Subject: CN=206ecd2aa7ff25f2126671eadc621c412b39e7b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ac:97:ad:b6:50:f5:32:44:61:24:a9:91:b2: c2:e3:76:97:99:4f:b6:a0:b3:13:94:e3:8c:3e:af: 6b:de:d3:83:ac:0b:73:65:1b:55:21:ce:65:0a:bb: 6f:52:e4:bc:82:74:03:76:6f:4d:60:22:66:fd:03: 43:1e:2f:2c:ba:f6:2a:a3:52:25:88:b5:18:27:b0: 49:03:e0:16:b3:8c:d5:0a:d1:37:26:e3:88:9e:ac: 05:b9:95:0b:25:4b:cc:b0:f5:f7:5f:68:f3:4d:4b: f8:55:f3:96:60:2b:57:85:3f:ce:84:57:8e:f0:68: ef:30:7a:57:40:52:2b:cd:85:67:3d:59:5d:3d:a6: 4b:8a:22:85:78:b8:19:64:30:86:04:db:39:f4:b8: 87:54:7c:3f:29:b1:0b:d2:30:42:18:1f:cc:83:d2: fe:74:08:9a:e3:5b:05:16:17:08:5a:fe:d1:e4:8a: 6e:d3:68:56:e7:44:65:59:23:7d:72:61:e3:a6:60: c7:78:b7:7b:c4:5d:08:1a:60:7c:5f:e7:26:36:1c: 23:95:d2:52:78:67:13:43:e6:7d:17:57:b8:ca:3f: 7c:9c:de:60:12:bb:60:3d:1f:32:0b:56:3e:4a:31: a5:95:76:de:d9:33:49:d0:56:09:fe:e8:3f:3f:6c: b7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:6E:CD:2A:A7:FF:25:F2:12:66:71:EA:DC:62:1C:41:2B:39:E7:B7 X509v3 Authority Key Identifier: keyid:F4:99:88:18:80:C6:F9:95:C2:9C:17:7B:ED:33:A1:A6:E3:D4:FB:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JmIGIDG-ZXCnBd77TOhpuPU-zA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:f7:6b:3a:98:18:4e:01:af:87:61:00:44:62:ae:1e:83:14: 8c:de:1a:59:17:34:53:55:85:99:33:8c:5d:20:af:a5:1d:55: a9:05:f7:9d:ca:ca:02:40:7e:b8:ab:f6:36:2d:7d:c7:15:8e: f7:b6:34:45:5e:0e:1e:90:8c:ae:96:30:07:24:86:57:f0:aa: 15:08:88:9f:f3:9c:90:3d:7c:27:e4:d5:63:7e:59:ea:cd:64: 82:61:fa:94:03:b0:87:93:ec:2a:86:59:34:ed:cb:bd:49:02: 52:3b:5b:ad:64:ef:d0:09:d0:6e:7c:85:d5:e2:aa:39:87:88: 4a:fc:93:3c:c6:71:2f:95:ae:70:d8:3d:28:80:2f:80:fd:15: a9:74:cd:39:79:60:0e:52:7f:f2:83:ac:c9:08:8b:49:77:ff: ab:b1:4a:bf:3e:fd:fd:a5:f2:1f:70:85:af:67:22:84:40:84: e2:f4:b6:f5:00:67:a9:55:c8:b8:de:29:79:22:b0:85:13:d0: 35:bb:60:49:87:4f:16:9e:bd:87:ab:f9:f5:d0:e7:ab:7e:24: 6c:90:f4:3c:e0:fd:18:13:e5:0c:cc:a0:98:22:f7:4c:89:c1: 56:29:31:77:b0:9d:fd:76:01:90:5d:a9:0f:45:aa:7a:36:ea: 03:61:ec:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtC2Z5wP2Rp1LL6XBWMpIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0OTk4ODE4ODBjNmY5OTVjMjljMTc3YmVkMzNhMWE2ZTNk NGZiMzAwHhcNMjYwMjA5MTQwMDMwWhcNMjYwMjEwMTQwMDMwWjAzMTEwLwYDVQQD EygyMDZlY2QyYWE3ZmYyNWYyMTI2NjcxZWFkYzYyMWM0MTJiMzllN2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqyXrbZQ9TJEYSSpkbLC43aXmU+2 oLMTlOOMPq9r3tODrAtzZRtVIc5lCrtvUuS8gnQDdm9NYCJm/QNDHi8suvYqo1Il iLUYJ7BJA+AWs4zVCtE3JuOInqwFuZULJUvMsPX3X2jzTUv4VfOWYCtXhT/OhFeO 8GjvMHpXQFIrzYVnPVldPaZLiiKFeLgZZDCGBNs59LiHVHw/KbEL0jBCGB/Mg9L+ dAia41sFFhcIWv7R5Ipu02hW50RlWSN9cmHjpmDHeLd7xF0IGmB8X+cmNhwjldJS eGcTQ+Z9F1e4yj98nN5gErtgPR8yC1Y+SjGllXbe2TNJ0FYJ/ug/P2y3xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCBuzSqn/yXyEmZx6txiHEErOee3MB8GA1UdIwQY MBaAFPSZiBiAxvmVwpwXe+0zoabj1PswMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUptSUdJREctWlhDbkJkNzdUT2hwdVBVLXpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8zN2U2MzItNTI0Ni00NmFmLWE3Mjkt YjNhZjgzMDBhZGQzLzEvOUptSUdJREctWlhDbkJkNzdUT2hwdVBVLXpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy8zN2U2MzItNTI0Ni00NmFmLWE3MjktYjNhZjgzMDBhZGQz LzEvOUptSUdJREctWlhDbkJkNzdUT2hwdVBVLXpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqfdrOpgY TgGvh2EARGKuHoMUjN4aWRc0U1WFmTOMXSCvpR1VqQX3ncrKAkB+uKv2Ni19xxWO 97Y0RV4OHpCMrpYwBySGV/CqFQiIn/OckD18J+TVY35Z6s1kgmH6lAOwh5PsKoZZ NO3LvUkCUjtbrWTv0AnQbnyF1eKqOYeISvyTPMZxL5WucNg9KIAvgP0VqXTNOXlg DlJ/8oOsyQiLSXf/q7FKvz79/aXyH3CFr2cihECE4vS29QBnqVXIuN4peSKwhRPQ NbtgSYdPFp69h6v59dDnq34kbJD0POD9GBPlDMygmCL3TInBVikxd7Cd/XYBkF2p D0WqejbqA2HsxA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:44:51 2026 by rpki-client