This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft File: 9b9MGPes3uTH81jdS65egAmF5ww.mft (raw, json) Hash identifier: B5MooMcsUoMo+0VHf6njC9i7NyWz+TWISZGPARe0Kds= Subject key identifier: 3A:AA:73:2F:6D:A6:CC:FD:0A:C6:C7:30:9F:35:37:C3:C3:AD:34:7F Authority key identifier: F5:BF:4C:18:F7:AC:DE:E4:C7:F3:58:DD:4B:AE:5E:80:09:85:E7:0C Certificate issuer: /CN=f5bf4c18f7acdee4c7f358dd4bae5e800985e70c Certificate serial: 019C42EB3F901BBA28C2A9547B1051BDD8FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft Manifest number: 0877 Signing time: Mon 09 Feb 2026 15:00:39 +0000 Manifest this update: Mon 09 Feb 2026 15:00:39 +0000 Manifest next update: Tue 10 Feb 2026 15:00:39 +0000 Files and hashes: 1: 9b9MGPes3uTH81jdS65egAmF5ww.crl (hash: X2CmFXpy/R8Qk4LPPvQwuwqnCiwg3uey6NhPbb4RUdY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:3f:90:1b:ba:28:c2:a9:54:7b:10:51:bd:d8:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5bf4c18f7acdee4c7f358dd4bae5e800985e70c Validity Not Before: Feb 9 15:00:39 2026 GMT Not After : Feb 10 15:00:39 2026 GMT Subject: CN=3aaa732f6da6ccfd0ac6c7309f3537c3c3ad347f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a3:86:ab:23:4b:1c:9f:f0:ce:14:a7:02:b5: ea:32:00:57:88:20:48:cb:fc:b4:5b:6b:fb:1a:be: 60:5a:2d:1b:bb:07:a6:ae:48:95:b8:f1:be:fa:60: e2:5b:41:ec:03:a7:60:77:63:ce:d8:65:07:48:6e: 69:eb:02:7b:90:e1:c4:c3:dc:b2:7f:a4:87:ea:b6: f7:d8:dc:85:54:26:2a:3c:59:41:39:df:e0:7f:8b: 89:c4:6f:fd:f8:ef:b3:78:72:aa:a6:31:23:9d:ee: 96:b0:7a:ff:2b:d1:95:1a:21:c9:f0:12:12:fc:11: 4c:36:45:f8:0b:95:77:67:6f:c0:52:d6:03:2f:7a: 73:6d:8e:0b:8e:7f:08:29:50:17:ac:91:2b:80:f2: b3:ba:94:7c:9f:c4:b5:11:2f:52:db:75:33:2e:f1: f6:94:14:51:b0:68:4b:99:80:f8:d0:c6:8b:96:7a: ec:8c:4c:07:1b:32:4e:5d:de:dc:3b:4a:3d:44:b0: bb:27:ea:03:9f:be:02:22:54:bf:17:d2:4b:6c:6a: b5:07:19:15:9c:2b:61:9a:e2:03:d6:3c:7c:1a:61: ef:22:6e:55:d1:0a:e0:cd:c2:6b:4b:1b:1c:09:77: 46:7b:6f:66:de:6c:f0:0e:d2:a7:57:cc:e1:e6:b8: 6f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:AA:73:2F:6D:A6:CC:FD:0A:C6:C7:30:9F:35:37:C3:C3:AD:34:7F X509v3 Authority Key Identifier: keyid:F5:BF:4C:18:F7:AC:DE:E4:C7:F3:58:DD:4B:AE:5E:80:09:85:E7:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:f0:e9:31:7f:6a:2a:67:61:2d:b1:1c:25:4d:20:59:0e:2e: 17:65:61:db:8e:07:08:eb:3f:2b:91:71:ea:6a:89:46:61:ec: e4:84:1e:3f:9a:3d:c8:ce:f5:31:bd:78:77:fd:77:7a:7b:b8: 17:95:7d:36:6c:5d:52:11:f4:fb:de:68:e8:5d:72:fd:fa:77: fb:ee:ae:ba:f0:67:dc:87:a2:15:eb:93:e9:78:37:55:d5:57: 9c:05:c8:ea:c8:f6:16:8c:4a:28:cf:fe:f6:74:65:44:b2:8b: 3c:f1:19:53:8a:77:5b:a1:da:76:ae:e6:9e:02:25:6e:c8:9d: 44:ee:68:e7:f7:c5:b0:9f:72:59:d3:2c:31:f4:cd:ca:ad:54: ab:77:6e:61:16:a6:40:6f:39:50:f4:af:af:4e:90:8e:55:47: f0:d2:bf:57:46:8d:8b:e3:4a:fe:d0:de:00:d0:72:94:f4:c9: c5:f8:d6:86:72:c3:06:bc:90:22:13:e1:3b:08:37:0c:3d:d9: 44:f3:04:64:9e:d5:a0:fe:c3:d4:b0:61:62:07:11:22:c4:e6: b0:cc:4a:e4:62:7c:5d:67:d5:55:04:2c:b0:2a:6a:0c:47:5b: a2:a2:cd:92:76:5d:98:f3:d2:63:86:8b:c9:14:5f:ec:6f:5d: ab:fc:7f:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6z+QG7oowqlUexBRvdj9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1YmY0YzE4ZjdhY2RlZTRjN2YzNThkZDRiYWU1ZTgwMDk4 NWU3MGMwHhcNMjYwMjA5MTUwMDM5WhcNMjYwMjEwMTUwMDM5WjAzMTEwLwYDVQQD EygzYWFhNzMyZjZkYTZjY2ZkMGFjNmM3MzA5ZjM1MzdjM2MzYWQzNDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aOGqyNLHJ/wzhSnArXqMgBXiCBI y/y0W2v7Gr5gWi0buwemrkiVuPG++mDiW0HsA6dgd2PO2GUHSG5p6wJ7kOHEw9yy f6SH6rb32NyFVCYqPFlBOd/gf4uJxG/9+O+zeHKqpjEjne6WsHr/K9GVGiHJ8BIS /BFMNkX4C5V3Z2/AUtYDL3pzbY4Ljn8IKVAXrJErgPKzupR8n8S1ES9S23UzLvH2 lBRRsGhLmYD40MaLlnrsjEwHGzJOXd7cO0o9RLC7J+oDn74CIlS/F9JLbGq1BxkV nCthmuID1jx8GmHvIm5V0QrgzcJrSxscCXdGe29m3mzwDtKnV8zh5rhv/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDqqcy9tpsz9CsbHMJ81N8PDrTR/MB8GA1UdIwQY MBaAFPW/TBj3rN7kx/NY3UuuXoAJhecMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWI5TUdQZXMzdVRIODFqZFM2NWVnQW1GNXd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9mMDM1MGEtNWQ2Ni00OTcwLTlhNGMt ZDJhYmQzYTkxYzkwLzEvOWI5TUdQZXMzdVRIODFqZFM2NWVnQW1GNXd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9mMDM1MGEtNWQ2Ni00OTcwLTlhNGMtZDJhYmQzYTkxYzkw LzEvOWI5TUdQZXMzdVRIODFqZFM2NWVnQW1GNXd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtvDpMX9q KmdhLbEcJU0gWQ4uF2Vh244HCOs/K5Fx6mqJRmHs5IQeP5o9yM71Mb14d/13enu4 F5V9NmxdUhH0+95o6F1y/fp3++6uuvBn3IeiFeuT6Xg3VdVXnAXI6sj2FoxKKM/+ 9nRlRLKLPPEZU4p3W6Hadq7mngIlbsidRO5o5/fFsJ9yWdMsMfTNyq1Uq3duYRam QG85UPSvr06QjlVH8NK/V0aNi+NK/tDeANBylPTJxfjWhnLDBryQIhPhOwg3DD3Z RPMEZJ7VoP7D1LBhYgcRIsTmsMxK5GJ8XWfVVQQssCpqDEdboqLNknZdmPPSY4aL yRRf7G9dq/x/vw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:53:49 2026 by rpki-client