This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft File: 9eQecyfCwxDOBmr6-HGYhtcfs4A.mft (raw, json) Hash identifier: uODRxZqzudZf0A+Owqqn2GwuFV8n439e4Kqv9RdchTc= Subject key identifier: 18:AE:33:12:46:17:B7:33:FB:1B:36:49:6E:71:DF:4E:E0:25:92:17 Authority key identifier: F5:E4:1E:73:27:C2:C3:10:CE:06:6A:FA:F8:71:98:86:D7:1F:B3:80 Certificate issuer: /CN=f5e41e7327c2c310ce066afaf8719886d71fb380 Certificate serial: 019C433F12AE8B2EBC2541E2388FAB7254A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft Manifest number: 016A Signing time: Mon 09 Feb 2026 16:32:12 +0000 Manifest this update: Mon 09 Feb 2026 16:32:12 +0000 Manifest next update: Tue 10 Feb 2026 16:32:12 +0000 Files and hashes: 1: 9eQecyfCwxDOBmr6-HGYhtcfs4A.crl (hash: ZDaihX27hpSefoJr159086t0iJ0GPCZWjkBVxNMWFqk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:3f:12:ae:8b:2e:bc:25:41:e2:38:8f:ab:72:54:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5e41e7327c2c310ce066afaf8719886d71fb380 Validity Not Before: Feb 9 16:32:12 2026 GMT Not After : Feb 10 16:32:12 2026 GMT Subject: CN=18ae33124617b733fb1b36496e71df4ee0259217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3b:f5:5b:31:ff:ff:e4:c7:5e:93:0f:58:ac: 5e:4c:a5:e9:f3:82:f1:a5:25:09:50:9a:9f:2e:00: f1:d7:40:29:62:24:b0:ed:c5:97:69:fe:b0:64:7f: a3:7e:92:9e:6b:7d:b2:06:5f:cd:c1:cf:80:e0:79: 56:b6:94:d7:04:73:06:ac:16:bd:eb:94:e7:7c:2f: 2e:bc:42:47:dc:db:05:40:a9:a1:44:38:9e:74:aa: bf:0d:a6:1c:b4:aa:0c:83:18:9e:a1:9a:40:29:c3: 7e:40:27:42:36:cc:a1:4a:cb:e4:e8:48:d6:ab:81: 7c:19:71:ae:99:01:4a:e8:f2:95:d9:9b:70:73:fc: 21:8d:75:4f:7c:a4:c4:3b:e7:7c:23:84:d6:b5:36: f0:a7:df:8b:cc:6a:27:a6:a7:29:3a:99:14:9f:38: 37:83:d3:6a:30:df:ec:76:ed:ae:23:b0:29:64:66: 4f:01:6e:4b:0f:b1:0a:b7:73:e9:dc:2c:b8:8f:08: b3:a8:93:ed:e6:1a:03:68:34:c3:c2:94:51:24:21: 52:80:32:03:44:97:7a:53:9f:35:38:b2:dc:ec:fc: a4:59:7c:e8:41:60:ee:2d:8e:db:f2:25:e8:4b:62: 98:61:53:45:01:cd:58:75:f0:83:f3:9a:ff:4e:ef: 4b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:AE:33:12:46:17:B7:33:FB:1B:36:49:6E:71:DF:4E:E0:25:92:17 X509v3 Authority Key Identifier: keyid:F5:E4:1E:73:27:C2:C3:10:CE:06:6A:FA:F8:71:98:86:D7:1F:B3:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:78:12:a9:8a:b3:7f:ec:5d:2b:84:ff:8e:42:4e:95:8b:46: e2:c3:41:d9:45:3d:7c:2f:34:b8:31:8e:29:14:9b:02:d3:e0: 70:38:58:a8:f3:3f:a2:d6:c0:e9:cf:9d:77:a4:3c:11:96:8f: 1f:f2:e2:af:94:9c:ee:0f:74:05:88:1d:6b:d6:ec:5d:3e:01: d8:1c:1d:8b:e9:df:45:91:d1:3d:55:13:da:21:b3:83:c0:15: 47:fc:c6:4a:1b:56:d2:cd:43:c9:07:ea:fb:ce:01:b8:62:ed: 14:01:36:be:d2:e2:b7:a2:8a:bf:87:c4:52:67:09:a1:a1:d6: 60:b2:10:f9:5a:b2:67:46:71:2a:4c:de:e3:03:5d:96:92:da: 75:bb:62:82:be:28:2a:73:9c:91:98:5c:af:f4:60:12:a5:d6: 8b:b3:12:0e:0f:5c:82:a4:b2:23:df:bd:e4:ad:00:28:2d:2b: 0b:6d:7b:57:11:96:ef:5b:d4:7b:b8:75:6f:57:69:d6:95:ee: 5f:6e:0a:25:b7:02:c8:5d:e9:a2:d5:28:99:4c:36:7e:bf:e0: 0a:d7:54:ef:06:a1:a3:49:3e:53:75:14:9a:e5:26:bd:14:0a: a6:0a:a3:d0:fc:79:4f:c5:bd:a2:6f:f0:34:5a:cf:8c:61:6c: b6:ac:f5:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDPxKuiy68JUHiOI+rclSoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZTQxZTczMjdjMmMzMTBjZTA2NmFmYWY4NzE5ODg2ZDcx ZmIzODAwHhcNMjYwMjA5MTYzMjEyWhcNMjYwMjEwMTYzMjEyWjAzMTEwLwYDVQQD EygxOGFlMzMxMjQ2MTdiNzMzZmIxYjM2NDk2ZTcxZGY0ZWUwMjU5MjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTv1WzH//+THXpMPWKxeTKXp84Lx pSUJUJqfLgDx10ApYiSw7cWXaf6wZH+jfpKea32yBl/Nwc+A4HlWtpTXBHMGrBa9 65TnfC8uvEJH3NsFQKmhRDiedKq/DaYctKoMgxieoZpAKcN+QCdCNsyhSsvk6EjW q4F8GXGumQFK6PKV2Ztwc/whjXVPfKTEO+d8I4TWtTbwp9+LzGonpqcpOpkUnzg3 g9NqMN/sdu2uI7ApZGZPAW5LD7EKt3Pp3Cy4jwizqJPt5hoDaDTDwpRRJCFSgDID RJd6U581OLLc7PykWXzoQWDuLY7b8iXoS2KYYVNFAc1YdfCD85r/Tu9LlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBiuMxJGF7cz+xs2SW5x307gJZIXMB8GA1UdIwQY MBaAFPXkHnMnwsMQzgZq+vhxmIbXH7OAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWVRZWN5ZkN3eERPQm1yNi1IR1lodGNmczRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9lZWMyZTktY2JhZS00NjU5LTkzODQt MTNiNzQ2YmJhMjYyLzEvOWVRZWN5ZkN3eERPQm1yNi1IR1lodGNmczRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9lZWMyZTktY2JhZS00NjU5LTkzODQtMTNiNzQ2YmJhMjYy LzEvOWVRZWN5ZkN3eERPQm1yNi1IR1lodGNmczRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMngSqYqz f+xdK4T/jkJOlYtG4sNB2UU9fC80uDGOKRSbAtPgcDhYqPM/otbA6c+dd6Q8EZaP H/Lir5Sc7g90BYgda9bsXT4B2Bwdi+nfRZHRPVUT2iGzg8AVR/zGShtW0s1DyQfq +84BuGLtFAE2vtLit6KKv4fEUmcJoaHWYLIQ+VqyZ0ZxKkze4wNdlpLadbtigr4o KnOckZhcr/RgEqXWi7MSDg9cgqSyI9+95K0AKC0rC217VxGW71vUe7h1b1dp1pXu X24KJbcCyF3potUomUw2fr/gCtdU7waho0k+U3UUmuUmvRQKpgqj0Px5T8W9om/w NFrPjGFstqz1cw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:53:48 2026 by rpki-client