This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft File: 9yjCKwJQJ1-m63NLoA55D343pVA.mft (raw, json) Hash identifier: 4mDytuRQ7A1fwDSNXLEEc9LW6BvHHgk0JZpypBH5Hlc= Subject key identifier: 7C:67:19:96:8A:F7:55:B4:29:20:9C:4F:6D:4D:37:DC:8B:ED:EB:82 Authority key identifier: F7:28:C2:2B:02:50:27:5F:A6:EB:73:4B:A0:0E:79:0F:7E:37:A5:50 Certificate issuer: /CN=f728c22b0250275fa6eb734ba00e790f7e37a550 Certificate serial: 019C4322BD979FAEC2DD12506134963BE294 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yjCKwJQJ1-m63NLoA55D343pVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft Manifest number: 0B3D Signing time: Mon 09 Feb 2026 16:01:15 +0000 Manifest this update: Mon 09 Feb 2026 16:01:15 +0000 Manifest next update: Tue 10 Feb 2026 16:01:15 +0000 Files and hashes: 1: 9yjCKwJQJ1-m63NLoA55D343pVA.crl (hash: 1nCiPXlFjOGZKKLujF6zsFbvjZE+q+SOWLRTAQRBmso=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft rsync://rpki.ripe.net/repository/DEFAULT/9yjCKwJQJ1-m63NLoA55D343pVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:bd:97:9f:ae:c2:dd:12:50:61:34:96:3b:e2:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f728c22b0250275fa6eb734ba00e790f7e37a550 Validity Not Before: Feb 9 16:01:15 2026 GMT Not After : Feb 10 16:01:15 2026 GMT Subject: CN=7c6719968af755b429209c4f6d4d37dc8bedeb82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:64:69:ea:33:51:7a:22:25:63:ec:24:5d:64: 47:5a:c0:ed:fa:4d:f1:a0:96:d1:0e:52:5f:52:5a: b6:14:61:a4:25:d3:b3:3f:15:0c:88:f6:da:97:d4: b9:d6:3f:f0:12:f9:0e:71:3a:d8:1d:97:88:8e:58: 1b:8d:7d:7b:6a:45:94:63:56:80:97:8a:d5:cf:32: 50:bf:60:5e:2c:6e:1c:7c:76:ae:1e:3e:93:47:c7: 87:67:ae:a2:08:7e:b4:06:07:30:83:98:bb:07:d3: 64:bb:93:2f:e2:e6:68:50:4b:87:54:a4:f2:36:42: dc:73:84:65:fb:c1:3e:d7:65:64:a1:49:ee:14:7e: e2:f2:d0:4c:81:a8:6f:1f:84:1f:db:3b:2a:8e:ed: 49:6b:4e:2e:e4:32:0b:de:31:69:b7:0c:3a:63:91: 69:b6:80:b5:37:bb:9e:68:ed:f0:38:c8:b3:b2:b9: fe:f2:4c:52:28:0e:4e:10:64:a6:05:3d:c8:0b:8a: 10:fc:77:e7:ea:6a:ce:63:75:a5:0d:56:ad:4e:56: 6f:ff:50:2e:1c:b7:01:30:d7:71:54:3f:fe:44:a5: b6:31:49:a5:65:83:2a:16:8e:12:25:f7:77:37:e3: 0d:41:73:f9:e9:c4:1c:99:f2:4b:c3:df:8a:55:ea: 66:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:67:19:96:8A:F7:55:B4:29:20:9C:4F:6D:4D:37:DC:8B:ED:EB:82 X509v3 Authority Key Identifier: keyid:F7:28:C2:2B:02:50:27:5F:A6:EB:73:4B:A0:0E:79:0F:7E:37:A5:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yjCKwJQJ1-m63NLoA55D343pVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:c8:f3:ec:cf:22:3e:f3:5f:30:09:57:20:90:70:c2:22:f3: f2:95:f2:9f:c4:6b:91:6b:2e:7b:28:c3:93:2a:1d:fa:cb:c2: 28:f6:8a:93:17:63:a6:da:85:47:b4:cd:cd:c0:74:8b:e6:d0: 92:05:3b:ea:f8:f1:f1:e3:91:2f:e4:17:a7:83:4d:19:b5:6d: 72:f1:7e:a3:64:fc:85:2f:5e:62:2e:58:d5:59:7d:81:b2:58: 04:f0:b1:a9:75:80:f5:25:d2:5a:72:d4:bb:3d:bf:29:e6:4f: fc:01:16:15:06:61:0a:28:3e:d7:7b:06:07:2e:da:74:32:c3: 8a:41:14:b8:16:3f:83:6f:bf:c9:c4:9b:87:01:7d:c8:4e:c1: 2d:d6:6e:af:ae:be:22:63:f8:18:1a:ff:86:a5:96:31:0a:c6: 66:4d:40:d4:ab:8d:f5:f4:ed:44:26:9a:c9:54:1c:eb:cc:08: b0:b2:b0:e6:41:c2:ec:18:a4:c5:a0:5b:52:49:3f:56:b2:05: d1:8d:83:d8:8a:a4:c7:20:c2:ca:ef:91:94:ee:1f:f4:ba:d3: d7:72:d8:db:b4:23:27:df:e5:7b:3a:88:42:fd:80:43:ab:63: b6:8b:cc:99:6e:22:93:4e:b1:13:ad:d3:45:49:07:48:f9:09: db:cc:e9:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIr2Xn67C3RJQYTSWO+KUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3MjhjMjJiMDI1MDI3NWZhNmViNzM0YmEwMGU3OTBmN2Uz N2E1NTAwHhcNMjYwMjA5MTYwMTE1WhcNMjYwMjEwMTYwMTE1WjAzMTEwLwYDVQQD Eyg3YzY3MTk5NjhhZjc1NWI0MjkyMDljNGY2ZDRkMzdkYzhiZWRlYjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2Rp6jNReiIlY+wkXWRHWsDt+k3x oJbRDlJfUlq2FGGkJdOzPxUMiPbal9S51j/wEvkOcTrYHZeIjlgbjX17akWUY1aA l4rVzzJQv2BeLG4cfHauHj6TR8eHZ66iCH60Bgcwg5i7B9Nku5Mv4uZoUEuHVKTy NkLcc4Rl+8E+12VkoUnuFH7i8tBMgahvH4Qf2zsqju1Ja04u5DIL3jFptww6Y5Fp toC1N7ueaO3wOMizsrn+8kxSKA5OEGSmBT3IC4oQ/Hfn6mrOY3WlDVatTlZv/1Au HLcBMNdxVD/+RKW2MUmlZYMqFo4SJfd3N+MNQXP56cQcmfJLw9+KVepmlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHxnGZaK91W0KSCcT21NN9yL7euCMB8GA1UdIwQY MBaAFPcowisCUCdfputzS6AOeQ9+N6VQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXlqQ0t3SlFKMS1tNjNOTG9BNTVEMzQzcFZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9jOTEyZTYtYjM5ZC00MTY4LThjNWYt MDZmNjRlYjAwNTY2LzEvOXlqQ0t3SlFKMS1tNjNOTG9BNTVEMzQzcFZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9jOTEyZTYtYjM5ZC00MTY4LThjNWYtMDZmNjRlYjAwNTY2 LzEvOXlqQ0t3SlFKMS1tNjNOTG9BNTVEMzQzcFZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbMjz7M8i PvNfMAlXIJBwwiLz8pXyn8RrkWsueyjDkyod+svCKPaKkxdjptqFR7TNzcB0i+bQ kgU76vjx8eORL+QXp4NNGbVtcvF+o2T8hS9eYi5Y1Vl9gbJYBPCxqXWA9SXSWnLU uz2/KeZP/AEWFQZhCig+13sGBy7adDLDikEUuBY/g2+/ycSbhwF9yE7BLdZur66+ ImP4GBr/hqWWMQrGZk1A1KuN9fTtRCaayVQc68wIsLKw5kHC7BikxaBbUkk/VrIF 0Y2D2IqkxyDCyu+RlO4f9LrT13LY27QjJ9/lezqIQv2AQ6tjtovMmW4ik06xE63T RUkHSPkJ28zpUw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:29 2026 by rpki-client