This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft File: 1-9F4zWAolpi3zZXd17FpF0kLRAc.mft (raw, json) Hash identifier: 7slPsRtXqbGdRPXuwJSEupOzK96RY12p+yXHO/b2fQM= Subject key identifier: 8A:E4:43:EE:AD:1A:B8:8E:F8:5B:BA:BB:42:A2:5C:21:95:E7:46:B5 Authority key identifier: FB:D1:78:CD:60:28:96:98:B7:CD:95:DD:D7:B1:69:17:49:0B:44:07 Certificate issuer: /CN=fbd178cd60289698b7cd95ddd7b16917490b4407 Certificate serial: 019C432262F7F22DF13F3F7733B77E7B83BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9F4zWAolpi3zZXd17FpF0kLRAc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft Manifest number: 0CDE Signing time: Mon 09 Feb 2026 16:00:52 +0000 Manifest this update: Mon 09 Feb 2026 16:00:52 +0000 Manifest next update: Tue 10 Feb 2026 16:00:52 +0000 Files and hashes: 1: 1-9F4zWAolpi3zZXd17FpF0kLRAc.crl (hash: On7nODYHpHll95NmN19hRN31keYbu2pOi1gfef1MWx4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft rsync://rpki.ripe.net/repository/DEFAULT/1-9F4zWAolpi3zZXd17FpF0kLRAc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:62:f7:f2:2d:f1:3f:3f:77:33:b7:7e:7b:83:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbd178cd60289698b7cd95ddd7b16917490b4407 Validity Not Before: Feb 9 16:00:52 2026 GMT Not After : Feb 10 16:00:52 2026 GMT Subject: CN=8ae443eead1ab88ef85bbabb42a25c2195e746b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6d:a2:ea:ee:2b:fc:a9:0c:88:06:3d:25:d1: 4b:9e:29:7d:db:07:30:10:c9:58:d1:95:10:66:62: 7a:fd:73:6c:2d:8b:6d:b2:93:a1:39:1c:84:bd:1a: 80:41:0f:e3:84:c0:00:3d:a8:9d:86:38:98:4e:b9: 71:61:99:9b:71:4a:c8:d1:9e:d7:f0:d2:c2:65:5a: 50:91:46:34:67:66:c3:3e:fd:03:2d:8f:67:ea:3f: 8b:8f:5b:7b:e1:11:61:dc:95:01:6b:03:e6:57:b2: 33:57:0a:5e:b3:d7:bd:08:1e:9e:e9:d9:60:e4:01: 93:6f:79:ac:f6:b5:26:f6:c6:79:97:1c:58:72:bd: 70:9f:71:c4:44:25:99:d9:ec:cb:37:6b:1f:f5:87: 94:ec:64:cc:c0:e1:fb:d2:11:1a:f9:39:7a:8b:be: 06:8c:82:08:ba:0f:ab:a6:74:58:2b:76:c1:cd:f7: f1:0d:34:60:50:8c:62:48:34:33:a0:de:c8:11:ea: f6:8d:fc:09:b7:a9:16:1b:b5:f2:d3:24:c0:89:fe: 30:a3:64:f6:6c:8c:97:5b:6e:32:b5:d7:43:72:a3: 4c:52:5f:40:8f:76:7b:7f:07:24:05:e7:fd:96:d2: 07:9f:e3:ec:2d:6f:2c:c3:af:12:d5:d4:bc:49:5c: ff:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E4:43:EE:AD:1A:B8:8E:F8:5B:BA:BB:42:A2:5C:21:95:E7:46:B5 X509v3 Authority Key Identifier: keyid:FB:D1:78:CD:60:28:96:98:B7:CD:95:DD:D7:B1:69:17:49:0B:44:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9F4zWAolpi3zZXd17FpF0kLRAc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:05:83:ff:ce:3e:93:34:aa:4d:90:d1:73:ef:f6:70:f2:54: 8c:a7:1a:f5:a1:be:a8:88:78:b7:b3:fa:16:71:7f:51:db:7e: 3e:a0:a2:5d:b3:7f:f9:02:c1:f7:ef:4e:5e:ea:42:6f:13:3f: 35:ad:f3:bc:8d:7c:89:ce:bd:33:5c:63:2e:a6:ae:c1:5b:ae: 54:ed:f4:59:81:f4:7f:29:60:7d:f7:2d:56:55:a5:38:a2:1c: 8b:dc:27:c3:a2:a4:54:d1:83:7d:8c:5e:b7:e7:57:f4:69:0e: 23:2e:87:8c:42:8a:41:b3:ac:9b:8f:bf:e3:33:3f:1e:7d:7f: ab:31:be:0f:a0:bd:37:ea:79:70:71:ba:cb:4d:3a:aa:96:30: 9f:f8:35:60:d2:ea:37:e7:78:e2:bd:14:96:94:df:4a:e2:57: 2d:02:47:9c:e8:24:70:00:7f:59:5e:2f:35:10:59:51:4e:96: 8b:42:54:d1:37:f3:96:d1:2e:3c:3a:91:9c:ec:bc:96:98:b5: 71:27:8f:25:9a:a6:86:06:f9:24:03:6e:79:b3:f4:cd:bc:c3: 31:ee:05:65:9b:c3:f1:26:fa:82:a8:1a:5a:38:90:13:79:b9: b5:cd:f5:45:66:94:5a:4d:92:30:58:e7:70:ed:8e:23:66:f3: d0:f0:32:f9 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZxDImL38i3xPz93M7d+e4O/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiZDE3OGNkNjAyODk2OThiN2NkOTVkZGQ3YjE2OTE3NDkw YjQ0MDcwHhcNMjYwMjA5MTYwMDUyWhcNMjYwMjEwMTYwMDUyWjAzMTEwLwYDVQQD Eyg4YWU0NDNlZWFkMWFiODhlZjg1YmJhYmI0MmEyNWMyMTk1ZTc0NmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz22i6u4r/KkMiAY9JdFLnil92wcw EMlY0ZUQZmJ6/XNsLYttspOhORyEvRqAQQ/jhMAAPaidhjiYTrlxYZmbcUrI0Z7X 8NLCZVpQkUY0Z2bDPv0DLY9n6j+Lj1t74RFh3JUBawPmV7IzVwpes9e9CB6e6dlg 5AGTb3ms9rUm9sZ5lxxYcr1wn3HERCWZ2ezLN2sf9YeU7GTMwOH70hEa+Tl6i74G jIIIug+rpnRYK3bBzffxDTRgUIxiSDQzoN7IEer2jfwJt6kWG7Xy0yTAif4wo2T2 bIyXW24ytddDcqNMUl9Aj3Z7fwckBef9ltIHn+PsLW8sw68S1dS8SVz/sQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFIrkQ+6tGriO+Fu6u0KiXCGV50a1MB8GA1UdIwQY MBaAFPvReM1gKJaYt82V3dexaRdJC0QHMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS05RjR6V0FvbHBpM3paWGQxN0ZwRjBrTFJBYy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvMjdiZjJhLTgyYTQtNDhkOS1iNGUy LTJiNzFmYzMzMzY2My8xLzEtOUY0eldBb2xwaTN6WlhkMTdGcEYwa0xSQWMubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2MzLzI3YmYyYS04MmE0LTQ4ZDktYjRlMi0yYjcxZmMzMzM2 NjMvMS8xLTlGNHpXQW9scGkzelpYZDE3RnBGMGtMUkFjLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWQWD /84+kzSqTZDRc+/2cPJUjKca9aG+qIh4t7P6FnF/Udt+PqCiXbN/+QLB9+9OXupC bxM/Na3zvI18ic69M1xjLqauwVuuVO30WYH0fylgffctVlWlOKIci9wnw6KkVNGD fYxet+dX9GkOIy6HjEKKQbOsm4+/4zM/Hn1/qzG+D6C9N+p5cHG6y006qpYwn/g1 YNLqN+d44r0UlpTfSuJXLQJHnOgkcAB/WV4vNRBZUU6Wi0JU0TfzltEuPDqRnOy8 lpi1cSePJZqmhgb5JANuebP0zbzDMe4FZZvD8Sb6gqgaWjiQE3m5tc31RWaUWk2S MFjncO2OI2bz0PAy+Q== -----END CERTIFICATE-----Generated at Mon Feb 9 22:17:53 2026 by rpki-client