This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft File: 9Y-A0jqdiu1P4xH3IiCcldqarUY.mft (raw, json) Hash identifier: jeNeF603MAnT4L8rMW4ogbVf7mC+RYbdNHH1T0SHmxU= Subject key identifier: 2A:E4:8B:95:42:5E:02:4A:A3:A0:AF:CC:99:C8:38:50:EB:8A:7A:83 Authority key identifier: F5:8F:80:D2:3A:9D:8A:ED:4F:E3:11:F7:22:20:9C:95:DA:9A:AD:46 Certificate issuer: /CN=f58f80d23a9d8aed4fe311f722209c95da9aad46 Certificate serial: 019C446C0B2BD25544A4FD195703EB9810A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Y-A0jqdiu1P4xH3IiCcldqarUY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft Manifest number: 0EEE Signing time: Mon 09 Feb 2026 22:00:57 +0000 Manifest this update: Mon 09 Feb 2026 22:00:57 +0000 Manifest next update: Tue 10 Feb 2026 22:00:57 +0000 Files and hashes: 1: 9Y-A0jqdiu1P4xH3IiCcldqarUY.crl (hash: McQ2qn7uZjwYjOyTG7DcFZe47Q4QmxFnITauWbjTKU4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft rsync://rpki.ripe.net/repository/DEFAULT/9Y-A0jqdiu1P4xH3IiCcldqarUY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6c:0b:2b:d2:55:44:a4:fd:19:57:03:eb:98:10:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f58f80d23a9d8aed4fe311f722209c95da9aad46 Validity Not Before: Feb 9 22:00:57 2026 GMT Not After : Feb 10 22:00:57 2026 GMT Subject: CN=2ae48b95425e024aa3a0afcc99c83850eb8a7a83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d2:c8:62:bd:f3:d2:c0:5e:6e:26:83:93:bb: 5d:e6:20:1e:79:8e:0e:23:52:f1:6a:63:72:1c:fa: 4d:79:b4:db:30:68:40:ac:5f:46:07:a9:f9:57:b4: 83:f3:7c:61:11:f2:a6:97:ad:89:15:8a:be:78:da: 09:52:45:b6:18:00:b6:88:b2:3e:26:5b:c8:0f:25: 6e:3d:fc:f8:c8:e1:30:bd:e9:b0:45:08:b3:6b:c8: 6a:f0:cf:c9:40:c0:92:71:db:03:78:16:02:ac:7c: 5d:e5:02:82:08:42:cd:65:a0:41:7d:c3:27:7b:5a: cf:58:98:59:5f:e7:59:5f:eb:cb:f0:c3:35:c6:71: 69:f9:c7:c4:e7:6c:76:f6:d6:56:40:f7:70:f0:71: 04:62:02:c3:2e:6a:f7:72:95:77:fa:56:66:87:25: 54:eb:6a:83:87:a4:bb:db:3e:a4:65:8f:62:ee:17: 61:ea:a3:18:13:ba:d7:f3:26:7d:ee:f0:b7:98:b3: fd:f5:eb:61:1f:54:6f:cb:3e:16:c3:89:0a:9c:b8: 7b:72:ce:68:16:39:ae:4d:cc:f5:1c:18:4d:8b:97: 03:58:46:fe:65:08:8d:b0:eb:0a:4c:dd:0a:26:ae: 2b:fd:27:55:74:fc:e7:44:d1:ed:19:3f:b9:a0:a4: a1:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:E4:8B:95:42:5E:02:4A:A3:A0:AF:CC:99:C8:38:50:EB:8A:7A:83 X509v3 Authority Key Identifier: keyid:F5:8F:80:D2:3A:9D:8A:ED:4F:E3:11:F7:22:20:9C:95:DA:9A:AD:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y-A0jqdiu1P4xH3IiCcldqarUY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:c9:54:90:db:c0:a9:08:93:db:4d:43:80:34:22:2e:5e:88: 8a:5f:a6:75:35:ac:59:0d:cc:23:93:65:bb:07:ef:fe:70:4d: 99:a9:d4:10:4b:15:a0:75:da:1e:0f:be:47:cf:5d:18:f5:45: 57:d0:59:d9:2f:4e:ad:a4:e3:e3:c1:e0:aa:b8:93:f3:87:39: 56:2d:a8:6d:f7:20:e4:e1:4e:be:07:0c:dd:88:d8:29:d7:5f: 19:7e:19:4d:09:dd:a1:c2:a6:09:1c:d5:ef:d0:a9:de:85:04: 26:2b:1a:8c:ad:24:28:bf:0c:9a:c1:f8:46:4e:0e:8a:62:19: cd:14:83:5b:eb:85:6e:65:7f:0a:15:84:c0:e7:60:5d:1a:dd: b1:42:16:c9:99:8d:f6:e1:9d:02:06:35:0f:b4:49:82:d1:a9: 76:6d:13:c4:bd:0d:23:d6:e7:8d:db:17:c3:fe:88:2f:ce:ed: 4b:25:1f:f7:19:06:b3:55:a4:a9:aa:69:03:e8:90:c6:57:4a: 8c:00:1b:44:d7:54:6e:2e:3e:a0:53:48:7e:7d:28:b5:ab:34: 04:e8:85:d2:8b:60:cb:66:fd:cb:da:1b:7e:f9:45:e9:9b:7f: fb:f0:d6:9c:bc:f4:bd:88:e0:df:7f:e7:51:b9:3d:a9:22:26: 14:a6:67:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEbAsr0lVEpP0ZVwPrmBCnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1OGY4MGQyM2E5ZDhhZWQ0ZmUzMTFmNzIyMjA5Yzk1ZGE5 YWFkNDYwHhcNMjYwMjA5MjIwMDU3WhcNMjYwMjEwMjIwMDU3WjAzMTEwLwYDVQQD EygyYWU0OGI5NTQyNWUwMjRhYTNhMGFmY2M5OWM4Mzg1MGViOGE3YTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tLIYr3z0sBebiaDk7td5iAeeY4O I1LxamNyHPpNebTbMGhArF9GB6n5V7SD83xhEfKml62JFYq+eNoJUkW2GAC2iLI+ JlvIDyVuPfz4yOEwvemwRQiza8hq8M/JQMCScdsDeBYCrHxd5QKCCELNZaBBfcMn e1rPWJhZX+dZX+vL8MM1xnFp+cfE52x29tZWQPdw8HEEYgLDLmr3cpV3+lZmhyVU 62qDh6S72z6kZY9i7hdh6qMYE7rX8yZ97vC3mLP99ethH1Rvyz4Ww4kKnLh7cs5o FjmuTcz1HBhNi5cDWEb+ZQiNsOsKTN0KJq4r/SdVdPznRNHtGT+5oKSh8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCrki5VCXgJKo6CvzJnIOFDrinqDMB8GA1UdIwQY MBaAFPWPgNI6nYrtT+MR9yIgnJXamq1GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVktQTBqcWRpdTFQNHhIM0lpQ2NsZHFhclVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80ZGRhZjAtN2UwMy00NWMxLTgxMjkt YjI3MmE3OTgwNmYxLzEvOVktQTBqcWRpdTFQNHhIM0lpQ2NsZHFhclVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC80ZGRhZjAtN2UwMy00NWMxLTgxMjktYjI3MmE3OTgwNmYx LzEvOVktQTBqcWRpdTFQNHhIM0lpQ2NsZHFhclVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI8lUkNvA qQiT201DgDQiLl6Iil+mdTWsWQ3MI5Nluwfv/nBNmanUEEsVoHXaHg++R89dGPVF V9BZ2S9OraTj48HgqriT84c5Vi2obfcg5OFOvgcM3YjYKddfGX4ZTQndocKmCRzV 79Cp3oUEJisajK0kKL8MmsH4Rk4OimIZzRSDW+uFbmV/ChWEwOdgXRrdsUIWyZmN 9uGdAgY1D7RJgtGpdm0TxL0NI9bnjdsXw/6IL87tSyUf9xkGs1WkqappA+iQxldK jAAbRNdUbi4+oFNIfn0otas0BOiF0otgy2b9y9obfvlF6Zt/+/DWnLz0vYjg33/n Ubk9qSImFKZn9w== -----END CERTIFICATE-----Generated at Tue Feb 10 01:38:29 2026 by rpki-client