This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft File: 9UPqUocUidhqqcpcoMKXyIq4KrY.mft (raw, json) Hash identifier: I276zTgM20/KKgrIVjLheq+CjIEHW1+Y5slswrctR2k= Subject key identifier: 78:86:C5:A1:E9:A0:03:DB:0A:FE:9F:A8:0E:E3:A8:0A:45:84:FF:BB Authority key identifier: F5:43:EA:52:87:14:89:D8:6A:A9:CA:5C:A0:C2:97:C8:8A:B8:2A:B6 Certificate issuer: /CN=f543ea52871489d86aa9ca5ca0c297c88ab82ab6 Certificate serial: 019C420FED6552526400DDB540752739F68D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft Manifest number: 180F Signing time: Mon 09 Feb 2026 11:01:05 +0000 Manifest this update: Mon 09 Feb 2026 11:01:05 +0000 Manifest next update: Tue 10 Feb 2026 11:01:05 +0000 Files and hashes: 1: 9UPqUocUidhqqcpcoMKXyIq4KrY.crl (hash: E1jHHzmlfE8PD0ts1BgA6glC9doTARel/GS5TGHdhFA=) 2: OfRVJ7_eaet9FZN9xLvW_dLglGI.roa (hash: YmesTPN7OCHhIKA0M4jl2Mh1wKjg/IKdK9qpKweokzc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:ed:65:52:52:64:00:dd:b5:40:75:27:39:f6:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f543ea52871489d86aa9ca5ca0c297c88ab82ab6 Validity Not Before: Feb 9 11:01:05 2026 GMT Not After : Feb 10 11:01:05 2026 GMT Subject: CN=7886c5a1e9a003db0afe9fa80ee3a80a4584ffbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:85:50:68:3a:dc:50:f2:fd:54:99:67:0c:24: 8f:fa:46:1b:f4:55:87:ca:4e:98:32:96:f3:f6:e6: ae:93:f0:2a:5f:9a:13:27:ff:87:50:e9:d4:30:5b: 8d:b1:cb:04:2c:4e:df:2b:e1:3d:78:39:f0:38:72: b0:fc:8c:19:c2:4f:ed:25:3c:f4:10:10:7e:e3:44: 11:23:df:80:27:f4:50:f4:f5:07:5c:c9:3a:27:59: f4:8c:a3:e0:c4:bc:4a:a0:91:a1:3d:ec:66:46:f4: 10:58:ed:4d:3a:3c:98:4f:2e:4a:af:63:b9:51:54: 6a:de:d3:68:6e:73:4b:7d:2d:b6:6e:21:79:9e:db: 18:69:62:d8:14:7e:9a:37:d0:5c:37:c4:3b:5d:6d: 67:28:89:dc:ac:47:33:3c:7b:b9:72:77:ab:e5:3c: 60:57:3c:40:98:44:6e:20:aa:b8:a4:25:85:44:41: 4f:c6:3d:e3:81:b5:06:30:61:ad:ed:b4:d2:73:31: a8:69:f8:4b:7d:69:4d:d1:37:37:0c:2c:4d:d2:cd: 40:9d:61:1e:52:ee:3f:70:15:4a:a9:3c:53:3b:cf: a0:9f:3f:05:e6:2b:bc:8d:4c:47:53:7b:9d:c9:40: b9:e7:8f:ef:24:d0:72:0f:71:1f:cc:22:de:8d:bb: 8b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:86:C5:A1:E9:A0:03:DB:0A:FE:9F:A8:0E:E3:A8:0A:45:84:FF:BB X509v3 Authority Key Identifier: keyid:F5:43:EA:52:87:14:89:D8:6A:A9:CA:5C:A0:C2:97:C8:8A:B8:2A:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:f5:6d:ef:27:cc:f6:85:24:dc:9a:01:28:d7:0f:48:90:fa: 17:70:d9:ed:a4:fd:02:34:f3:0d:0e:6d:53:5c:e9:c9:c9:a9: cf:52:b0:70:b0:a7:dc:fe:7d:74:ab:f8:4e:4d:c1:87:b9:40: 6c:cb:a8:c6:12:b3:77:f5:47:d3:42:6d:45:7c:79:07:bf:40: ea:6e:33:8f:b2:02:c9:4e:7a:42:72:18:20:62:34:43:74:fb: ed:a9:af:c1:ad:66:76:27:cf:49:eb:57:36:dc:f4:cd:95:72: 79:40:08:0e:fe:4a:8c:bc:6e:ad:c7:81:63:ed:98:01:52:6b: aa:38:b6:96:54:e7:c8:35:8a:50:f6:12:6a:46:92:8c:55:05: eb:8d:2c:9b:3e:e5:13:de:53:7b:f5:fc:35:65:d7:96:ed:e9: 2e:21:53:d5:34:f3:93:51:36:7e:80:e9:3f:32:fe:67:37:b3: c3:88:99:32:b0:ad:c6:95:b0:cc:8a:6e:03:d8:5c:48:5a:f8: 9d:58:05:50:70:86:81:08:20:30:8e:b3:b2:30:be:a9:e3:42: b4:d9:cc:c6:a5:6f:02:82:68:5b:46:ce:bd:61:f7:f8:27:db: ab:8d:68:8c:ed:b7:09:1c:b0:9f:58:7a:fa:27:b4:bf:03:b5: 03:a6:64:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD+1lUlJkAN21QHUnOfaNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1NDNlYTUyODcxNDg5ZDg2YWE5Y2E1Y2EwYzI5N2M4OGFi ODJhYjYwHhcNMjYwMjA5MTEwMTA1WhcNMjYwMjEwMTEwMTA1WjAzMTEwLwYDVQQD Eyg3ODg2YzVhMWU5YTAwM2RiMGFmZTlmYTgwZWUzYTgwYTQ1ODRmZmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4VQaDrcUPL9VJlnDCSP+kYb9FWH yk6YMpbz9uauk/AqX5oTJ/+HUOnUMFuNscsELE7fK+E9eDnwOHKw/IwZwk/tJTz0 EBB+40QRI9+AJ/RQ9PUHXMk6J1n0jKPgxLxKoJGhPexmRvQQWO1NOjyYTy5Kr2O5 UVRq3tNobnNLfS22biF5ntsYaWLYFH6aN9BcN8Q7XW1nKIncrEczPHu5cner5Txg VzxAmERuIKq4pCWFREFPxj3jgbUGMGGt7bTSczGoafhLfWlN0Tc3DCxN0s1AnWEe Uu4/cBVKqTxTO8+gnz8F5iu8jUxHU3udyUC554/vJNByD3EfzCLejbuLiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHiGxaHpoAPbCv6fqA7jqApFhP+7MB8GA1UdIwQY MBaAFPVD6lKHFInYaqnKXKDCl8iKuCq2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVVQcVVvY1VpZGhxcWNwY29NS1h5SXE0S3JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8xNmM0YjUtNmRkYS00YTM4LTg0OGYt ZGZiYmVkYTIxNTk0LzEvOVVQcVVvY1VpZGhxcWNwY29NS1h5SXE0S3JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8xNmM0YjUtNmRkYS00YTM4LTg0OGYtZGZiYmVkYTIxNTk0 LzEvOVVQcVVvY1VpZGhxcWNwY29NS1h5SXE0S3JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc/Vt7yfM 9oUk3JoBKNcPSJD6F3DZ7aT9AjTzDQ5tU1zpycmpz1KwcLCn3P59dKv4Tk3Bh7lA bMuoxhKzd/VH00JtRXx5B79A6m4zj7ICyU56QnIYIGI0Q3T77amvwa1mdifPSetX Ntz0zZVyeUAIDv5KjLxurceBY+2YAVJrqji2llTnyDWKUPYSakaSjFUF640smz7l E95Te/X8NWXXlu3pLiFT1TTzk1E2foDpPzL+Zzezw4iZMrCtxpWwzIpuA9hcSFr4 nVgFUHCGgQggMI6zsjC+qeNCtNnMxqVvAoJoW0bOvWH3+Cfbq41ojO23CRywn1h6 +ie0vwO1A6Zk/g== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:08 2026 by rpki-client