This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft File: 9f9GumzY4vNa_bW1-fhlAvg0w0o.mft (raw, json) Hash identifier: tSaIZWfd0mAIOMuDlb/9m0IgwFJu2O5AOtpBprHbyEU= Subject key identifier: 4B:DE:F5:EB:47:6A:BF:D5:CF:53:E5:B1:62:45:A3:8B:99:5B:11:D5 Authority key identifier: F5:FF:46:BA:6C:D8:E2:F3:5A:FD:B5:B5:F9:F8:65:02:F8:34:C3:4A Certificate issuer: /CN=f5ff46ba6cd8e2f35afdb5b5f9f86502f834c34a Certificate serial: 019C43900423ACF2C13817C1E13A8B82B7CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft Manifest number: 13FC Signing time: Mon 09 Feb 2026 18:00:37 +0000 Manifest this update: Mon 09 Feb 2026 18:00:37 +0000 Manifest next update: Tue 10 Feb 2026 18:00:37 +0000 Files and hashes: 1: 9f9GumzY4vNa_bW1-fhlAvg0w0o.crl (hash: 7nkPqB6vJZCRw/GC1R/6cNvC0DDGWKn8eDUlnFkct78=) 2: YlUOJaq43NpuLvhyIjdUpjtIh5k.roa (hash: CQMT/ddbiL7hLzG2QkDs7berkHQrguNEVB/e2zlXUlk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:04:23:ac:f2:c1:38:17:c1:e1:3a:8b:82:b7:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5ff46ba6cd8e2f35afdb5b5f9f86502f834c34a Validity Not Before: Feb 9 18:00:37 2026 GMT Not After : Feb 10 18:00:37 2026 GMT Subject: CN=4bdef5eb476abfd5cf53e5b16245a38b995b11d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:42:de:ee:5b:77:20:3a:2a:50:c0:8d:2b:d9: 16:00:89:c3:a4:6f:0f:0e:ba:7d:e6:2d:33:a8:7b: 7f:60:33:03:7e:0b:d5:c3:90:0d:ce:04:b2:ec:c6: 57:e4:73:cc:2a:6d:fe:e3:0a:1f:68:d1:6f:31:00: bb:a8:3a:89:86:5e:04:bb:01:1f:63:36:64:a6:f5: 1c:b6:47:31:b6:4f:b8:1b:2c:40:dc:b5:3d:75:eb: 55:63:5f:57:ee:99:53:06:9c:6a:14:5d:6e:4c:9a: 93:54:17:78:55:41:99:67:ce:9c:53:f0:56:c1:aa: 6d:ae:09:b4:ea:c5:4b:fa:12:08:bc:79:a1:68:7b: b7:56:da:7c:72:49:e0:19:45:d3:b0:b5:1c:f5:5b: c1:18:c1:15:2f:a5:7e:50:ae:55:55:ff:fd:7f:47: 04:72:95:3f:ca:84:dd:82:60:d7:45:54:1f:c5:50: c2:c8:52:4c:e8:a0:cd:f7:8c:f8:54:da:71:d8:ee: a8:9c:88:38:24:9c:5d:4a:9f:43:f8:d6:08:a2:04: 06:30:3e:e0:91:c9:8a:f2:3e:1a:5a:51:19:f3:02: 80:39:73:3a:ba:a1:50:40:93:41:fe:d7:a7:c7:b5: 1e:6d:ab:f2:00:1f:05:ad:1e:96:d4:fa:4e:a3:26: 1e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:DE:F5:EB:47:6A:BF:D5:CF:53:E5:B1:62:45:A3:8B:99:5B:11:D5 X509v3 Authority Key Identifier: keyid:F5:FF:46:BA:6C:D8:E2:F3:5A:FD:B5:B5:F9:F8:65:02:F8:34:C3:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:9e:9c:ab:68:c6:71:05:93:5d:ca:62:6d:4b:6d:ec:df:3c: 71:92:84:22:b7:b0:43:44:17:9e:14:cc:c9:c3:90:20:b1:f8: f4:5e:38:d0:51:ec:66:5c:d7:c3:6b:33:de:4a:ab:c0:b2:32: 10:5c:79:29:70:d2:06:0c:24:42:85:9c:81:e0:b5:1b:ac:1a: 70:07:5f:4d:94:d9:13:82:04:e8:29:e8:bc:8c:f7:bc:eb:9c: c3:81:d0:cf:a9:08:cd:21:f7:df:0e:b8:2a:4f:44:f9:aa:ae: 10:6e:d9:52:34:b2:e7:de:f4:17:d8:5f:73:51:9b:ec:88:eb: c2:aa:3a:63:75:b0:60:9d:fe:08:c8:24:18:6e:85:3c:31:97: 89:45:ff:f5:8c:51:40:ae:6b:30:37:2a:72:c8:e5:5f:1a:1d: ad:5c:33:e3:38:d5:e2:92:77:8e:b3:db:da:da:0a:5e:c3:39: b7:1d:45:54:e9:63:ac:21:fa:1f:64:2d:95:eb:30:c8:cc:bd: d5:de:41:a0:5a:f2:b0:9f:74:87:76:c0:16:8a:bf:73:24:c0: 4f:63:15:51:86:39:e4:3f:ec:07:c2:49:7a:84:ac:18:55:8d: 03:ab:eb:dc:6e:0b:6f:2b:55:9e:c1:d9:d0:b3:05:30:4a:90: c7:7f:5d:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkAQjrPLBOBfB4TqLgrfKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZmY0NmJhNmNkOGUyZjM1YWZkYjViNWY5Zjg2NTAyZjgz NGMzNGEwHhcNMjYwMjA5MTgwMDM3WhcNMjYwMjEwMTgwMDM3WjAzMTEwLwYDVQQD Eyg0YmRlZjVlYjQ3NmFiZmQ1Y2Y1M2U1YjE2MjQ1YTM4Yjk5NWIxMWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkLe7lt3IDoqUMCNK9kWAInDpG8P Drp95i0zqHt/YDMDfgvVw5ANzgSy7MZX5HPMKm3+4wofaNFvMQC7qDqJhl4EuwEf YzZkpvUctkcxtk+4GyxA3LU9detVY19X7plTBpxqFF1uTJqTVBd4VUGZZ86cU/BW waptrgm06sVL+hIIvHmhaHu3Vtp8ckngGUXTsLUc9VvBGMEVL6V+UK5VVf/9f0cE cpU/yoTdgmDXRVQfxVDCyFJM6KDN94z4VNpx2O6onIg4JJxdSp9D+NYIogQGMD7g kcmK8j4aWlEZ8wKAOXM6uqFQQJNB/tenx7UebavyAB8FrR6W1PpOoyYeVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEve9etHar/Vz1PlsWJFo4uZWxHVMB8GA1UdIwQY MBaAFPX/Rrps2OLzWv21tfn4ZQL4NMNKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWY5R3Vtelk0dk5hX2JXMS1maGxBdmcwdzBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xZmRlMDQtNTg3Yi00MDg1LWI1ODUt NmFkMjBhMmVhY2I4LzEvOWY5R3Vtelk0dk5hX2JXMS1maGxBdmcwdzBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8xZmRlMDQtNTg3Yi00MDg1LWI1ODUtNmFkMjBhMmVhY2I4 LzEvOWY5R3Vtelk0dk5hX2JXMS1maGxBdmcwdzBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZZ6cq2jG cQWTXcpibUtt7N88cZKEIrewQ0QXnhTMycOQILH49F440FHsZlzXw2sz3kqrwLIy EFx5KXDSBgwkQoWcgeC1G6wacAdfTZTZE4IE6CnovIz3vOucw4HQz6kIzSH33w64 Kk9E+aquEG7ZUjSy5970F9hfc1Gb7Ijrwqo6Y3WwYJ3+CMgkGG6FPDGXiUX/9YxR QK5rMDcqcsjlXxodrVwz4zjV4pJ3jrPb2toKXsM5tx1FVOljrCH6H2QtleswyMy9 1d5BoFrysJ90h3bAFoq/cyTAT2MVUYY55D/sB8JJeoSsGFWNA6vr3G4LbytVnsHZ 0LMFMEqQx39dfA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:06:29 2026 by rpki-client