This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.mft File: rrc9JyyxdKRjjbIVZ44-57kin_o.mft (raw, json) Hash identifier: RWj1b9LKBD9mxN4+74gfjxzyg9zqNvfiVvjSL4MQXls= Subject key identifier: 85:11:53:F7:6C:0C:00:86:42:8C:07:D7:C4:A9:67:CC:DD:4C:5E:15 Authority key identifier: AE:B7:3D:27:2C:B1:74:A4:63:8D:B2:15:67:8E:3E:E7:B9:22:9F:FA Certificate issuer: /CN=aeb73d272cb174a4638db215678e3ee7b9229ffa Certificate serial: 019C41A15BD0B8EDCD63C37EFEB3273304FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrc9JyyxdKRjjbIVZ44-57kin_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 09:00:19 +0000 Manifest this update: Mon 09 Feb 2026 09:00:19 +0000 Manifest next update: Tue 10 Feb 2026 09:00:19 +0000 Files and hashes: 1: rrc9JyyxdKRjjbIVZ44-57kin_o.crl (hash: XOslNQE1gkwELPbB3WeSqboTfJLbClHXA+5qfb0JOKA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.mft rsync://rpki.ripe.net/repository/DEFAULT/rrc9JyyxdKRjjbIVZ44-57kin_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:5b:d0:b8:ed:cd:63:c3:7e:fe:b3:27:33:04:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aeb73d272cb174a4638db215678e3ee7b9229ffa Validity Not Before: Feb 9 09:00:19 2026 GMT Not After : Feb 10 09:00:19 2026 GMT Subject: CN=851153f76c0c0086428c07d7c4a967ccdd4c5e15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c0:a6:cc:ef:e1:48:8b:16:28:81:94:83:a1: c3:7d:3d:2b:69:3f:02:4a:dc:08:be:97:2d:d9:52: 3e:8e:fe:09:60:1b:3d:6d:3c:e8:a8:8d:1b:12:9b: 26:83:9f:4f:0e:07:ef:d0:56:a3:60:44:c0:3c:ad: 63:76:e4:c8:b3:bb:a4:fc:3d:b3:e0:52:c4:06:80: 10:b4:ee:46:13:8c:ba:2e:ba:b2:a8:23:d6:92:12: c8:59:be:37:f9:b4:8c:99:0c:43:68:7e:77:34:52: c8:96:56:17:db:2b:b8:e4:13:66:d3:6b:0a:12:70: a5:9b:66:65:88:76:17:0b:b1:8a:f5:f8:69:e0:61: 17:79:16:c2:b3:5c:72:47:c0:3a:9c:55:19:41:03: 4b:a4:9e:5c:3d:f5:78:cf:c9:28:15:b5:c8:d2:95: b3:32:58:2d:73:cb:6c:6b:dd:d3:61:0a:f5:10:7f: e2:6b:f8:38:79:18:b7:91:a6:29:11:03:7f:40:84: ff:b5:a8:aa:3b:0f:fb:25:2d:90:be:8c:1a:02:79: 91:20:5d:fe:fc:c1:03:d0:d6:11:37:61:07:ae:1c: 9e:66:fa:78:a6:9e:36:5f:57:75:c8:72:78:c1:98: 9e:2e:5c:3e:1e:f6:4c:15:e4:56:34:85:cc:cb:c0: ea:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:11:53:F7:6C:0C:00:86:42:8C:07:D7:C4:A9:67:CC:DD:4C:5E:15 X509v3 Authority Key Identifier: keyid:AE:B7:3D:27:2C:B1:74:A4:63:8D:B2:15:67:8E:3E:E7:B9:22:9F:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrc9JyyxdKRjjbIVZ44-57kin_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:74:da:aa:22:e8:7c:d6:a3:59:69:e1:1e:d4:0e:6a:5e:60: 88:db:e0:eb:a2:6a:6c:60:02:93:2a:53:ee:bf:ea:36:7b:10: 32:4d:b7:46:96:9e:e0:49:86:92:ae:26:e4:0d:19:d8:15:df: 27:6b:e4:70:90:db:b0:8e:3b:28:64:14:67:ef:df:76:cd:d4: f5:ec:3d:61:1a:0b:4b:ad:71:f0:f3:f9:38:7e:7e:73:10:8b: 56:c9:01:3d:bb:c0:42:b1:a0:62:97:36:d7:33:4c:46:d2:ab: ca:51:e6:f0:4c:2e:0d:39:3c:9d:e3:f9:a4:e2:64:4d:0f:3e: a8:d2:f6:1d:e0:04:4b:09:68:e6:2f:0a:df:6b:78:61:72:e3: 03:f5:c2:34:89:66:22:51:6e:1a:ae:c3:d6:b0:b7:28:df:20: da:5e:9e:20:49:15:f3:3b:e6:ec:bf:40:49:33:d6:96:20:7a: f4:25:bd:a7:5d:48:a4:e0:c1:1d:08:50:5b:cf:4c:9f:77:ac: c9:49:5d:08:95:f6:e9:9e:51:cc:b4:5e:8e:1d:8b:aa:2a:38: 00:bf:68:f5:8e:04:58:da:22:4e:fa:fc:08:f5:f9:02:54:80: 49:fa:83:85:9d:2b:db:5a:fd:72:7f:52:bc:d9:c3:64:de:35: f8:82:e7:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoVvQuO3NY8N+/rMnMwT8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYjczZDI3MmNiMTc0YTQ2MzhkYjIxNTY3OGUzZWU3Yjky MjlmZmEwHhcNMjYwMjA5MDkwMDE5WhcNMjYwMjEwMDkwMDE5WjAzMTEwLwYDVQQD Eyg4NTExNTNmNzZjMGMwMDg2NDI4YzA3ZDdjNGE5NjdjY2RkNGM1ZTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8CmzO/hSIsWKIGUg6HDfT0raT8C StwIvpct2VI+jv4JYBs9bTzoqI0bEpsmg59PDgfv0FajYETAPK1jduTIs7uk/D2z 4FLEBoAQtO5GE4y6LrqyqCPWkhLIWb43+bSMmQxDaH53NFLIllYX2yu45BNm02sK EnClm2ZliHYXC7GK9fhp4GEXeRbCs1xyR8A6nFUZQQNLpJ5cPfV4z8koFbXI0pWz Mlgtc8tsa93TYQr1EH/ia/g4eRi3kaYpEQN/QIT/taiqOw/7JS2QvowaAnmRIF3+ /MED0NYRN2EHrhyeZvp4pp42X1d1yHJ4wZieLlw+HvZMFeRWNIXMy8DqoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIURU/dsDACGQowH18SpZ8zdTF4VMB8GA1UdIwQY MBaAFK63PScssXSkY42yFWeOPue5Ip/6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnJjOUp5eXhkS1JqamJJVlo0NC01N2tpbl9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8yOTQ2MTMtOTAxOS00N2Q0LWIwNjUt NWMxYWMyYWYzNjcyLzEvcnJjOUp5eXhkS1JqamJJVlo0NC01N2tpbl9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8yOTQ2MTMtOTAxOS00N2Q0LWIwNjUtNWMxYWMyYWYzNjcy LzEvcnJjOUp5eXhkS1JqamJJVlo0NC01N2tpbl9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkXTaqiLo fNajWWnhHtQOal5giNvg66JqbGACkypT7r/qNnsQMk23Rpae4EmGkq4m5A0Z2BXf J2vkcJDbsI47KGQUZ+/fds3U9ew9YRoLS61x8PP5OH5+cxCLVskBPbvAQrGgYpc2 1zNMRtKrylHm8EwuDTk8neP5pOJkTQ8+qNL2HeAESwlo5i8K32t4YXLjA/XCNIlm IlFuGq7D1rC3KN8g2l6eIEkV8zvm7L9ASTPWliB69CW9p11IpODBHQhQW89Mn3es yUldCJX26Z5RzLRejh2Lqio4AL9o9Y4EWNoiTvr8CPX5AlSASfqDhZ0r21r9cn9S vNnDZN41+ILn4Q== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:47 2026 by rpki-client