This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft File: 9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft (raw, json) Hash identifier: t7ZY04u+3aDcB09Ic2QZGviaowhRjsUoH1IryNhTbso= Subject key identifier: 03:48:8B:65:D9:A1:E9:AF:F4:47:6E:A3:8D:B0:B4:40:AF:15:6A:BC Authority key identifier: F5:5E:5E:0D:81:58:93:A6:8A:40:00:08:05:A1:8A:E6:B9:F6:03:C0 Certificate issuer: /CN=f55e5e0d815893a68a40000805a18ae6b9f603c0 Certificate serial: 019C438FC6DD64D021FC33D273E014876686 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9V5eDYFYk6aKQAAIBaGK5rn2A8A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft Manifest number: 179E Signing time: Mon 09 Feb 2026 18:00:21 +0000 Manifest this update: Mon 09 Feb 2026 18:00:21 +0000 Manifest next update: Tue 10 Feb 2026 18:00:21 +0000 Files and hashes: 1: 9V5eDYFYk6aKQAAIBaGK5rn2A8A.crl (hash: +tMRoOR3JE8PvhPxwJJLmmgKgr54cnd+adyE+fKe1Mo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft rsync://rpki.ripe.net/repository/DEFAULT/9V5eDYFYk6aKQAAIBaGK5rn2A8A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:c6:dd:64:d0:21:fc:33:d2:73:e0:14:87:66:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f55e5e0d815893a68a40000805a18ae6b9f603c0 Validity Not Before: Feb 9 18:00:21 2026 GMT Not After : Feb 10 18:00:21 2026 GMT Subject: CN=03488b65d9a1e9aff4476ea38db0b440af156abc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:51:7c:45:71:8b:24:55:ac:76:03:72:2e:fe: d6:43:2d:a8:35:33:25:45:61:16:fc:e0:12:b9:b4: 34:19:85:27:40:1b:c8:39:2e:b2:b2:05:88:7c:d4: a4:20:cb:3d:7d:95:fc:39:0e:6a:16:5d:9b:3d:54: f0:3d:7a:b2:5d:5b:38:6f:00:b3:09:cc:24:fd:60: 23:6f:05:45:8a:ad:06:01:35:96:56:ce:fe:13:0e: 80:67:3f:3c:e9:34:9b:f7:39:b1:88:9c:3f:b7:42: 4f:6e:e4:6b:9d:fa:68:86:8e:78:81:e8:bc:04:ef: 27:9a:fe:6e:92:4a:1a:0b:90:0e:e1:29:2e:d7:5f: 39:95:2e:bb:74:f1:71:c6:b9:74:84:35:8d:8a:ba: 3c:eb:96:af:53:04:6e:8b:01:6c:d5:07:67:1e:24: 10:0c:86:22:73:bb:8e:b6:04:9d:90:0c:38:07:57: e3:8b:02:96:0f:18:39:8b:99:8d:67:a6:8e:cd:21: c4:c2:77:72:b5:df:84:b9:a9:68:6a:d3:73:26:21: 4b:b6:ce:e4:31:97:d1:94:8c:77:0f:09:d8:a1:61: c7:43:b0:66:0b:eb:fd:5b:07:6f:f4:e1:b2:16:26: 05:97:17:40:2c:ab:fb:f3:8c:f8:ea:43:30:90:ff: e3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:48:8B:65:D9:A1:E9:AF:F4:47:6E:A3:8D:B0:B4:40:AF:15:6A:BC X509v3 Authority Key Identifier: keyid:F5:5E:5E:0D:81:58:93:A6:8A:40:00:08:05:A1:8A:E6:B9:F6:03:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9V5eDYFYk6aKQAAIBaGK5rn2A8A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:79:48:10:18:31:a2:6e:fe:bb:45:72:4b:5e:31:41:3f:32: 4b:36:a3:cb:34:e5:b0:d9:b2:e3:34:88:2f:b6:33:d3:0c:06: 21:20:b6:f1:93:5c:73:6a:a9:73:8b:00:3f:10:09:8d:86:7f: 43:2a:89:6d:db:1e:98:af:c5:9d:58:f4:3c:49:1a:2d:11:bf: f0:bb:b6:88:1b:d4:18:94:6b:2d:d4:ce:95:15:c1:5f:fb:50: ce:22:ae:f6:74:8e:77:4e:31:37:08:50:05:97:7a:5a:7a:6d: ba:da:83:a9:ac:1b:1b:9d:96:cc:ff:00:31:98:ee:65:71:64: b2:97:0c:06:fc:45:d0:e5:e4:d8:f2:33:10:ec:ba:2f:d6:91: 93:a0:c4:7c:b1:90:cd:44:41:7a:b9:74:8c:23:41:3a:9f:99: 38:28:0e:09:07:8a:bb:64:dd:fa:44:73:29:f7:08:f7:bb:b9: 95:c2:d6:8e:f9:95:3f:87:42:1b:9a:e2:21:79:38:fe:c7:21: 6c:b5:e9:0c:0c:93:5c:d4:1c:43:67:29:c2:70:1b:b2:00:0d: 1b:07:1a:9b:94:78:61:e8:20:f4:17:af:e5:5d:81:ea:91:bc: 65:62:01:14:2d:ff:42:f9:58:8b:5c:74:06:9d:50:c8:ee:d3: a9:97:c7:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj8bdZNAh/DPSc+AUh2aGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1NWU1ZTBkODE1ODkzYTY4YTQwMDAwODA1YTE4YWU2Yjlm NjAzYzAwHhcNMjYwMjA5MTgwMDIxWhcNMjYwMjEwMTgwMDIxWjAzMTEwLwYDVQQD EygwMzQ4OGI2NWQ5YTFlOWFmZjQ0NzZlYTM4ZGIwYjQ0MGFmMTU2YWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllF8RXGLJFWsdgNyLv7WQy2oNTMl RWEW/OASubQ0GYUnQBvIOS6ysgWIfNSkIMs9fZX8OQ5qFl2bPVTwPXqyXVs4bwCz Ccwk/WAjbwVFiq0GATWWVs7+Ew6AZz886TSb9zmxiJw/t0JPbuRrnfpoho54gei8 BO8nmv5ukkoaC5AO4Sku1185lS67dPFxxrl0hDWNiro865avUwRuiwFs1QdnHiQQ DIYic7uOtgSdkAw4B1fjiwKWDxg5i5mNZ6aOzSHEwndytd+EualoatNzJiFLts7k MZfRlIx3DwnYoWHHQ7BmC+v9Wwdv9OGyFiYFlxdALKv784z46kMwkP/jwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFANIi2XZoemv9Eduo42wtECvFWq8MB8GA1UdIwQY MBaAFPVeXg2BWJOmikAACAWhiua59gPAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVY1ZURZRllrNmFLUUFBSUJhR0s1cm4yQThBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8yOWY3MDctNDhlMC00MGU0LTk0Y2Et OGZjYjUwY2FkODQwLzEvOVY1ZURZRllrNmFLUUFBSUJhR0s1cm4yQThBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8yOWY3MDctNDhlMC00MGU0LTk0Y2EtOGZjYjUwY2FkODQw LzEvOVY1ZURZRllrNmFLUUFBSUJhR0s1cm4yQThBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYXlIEBgx om7+u0VyS14xQT8ySzajyzTlsNmy4zSIL7Yz0wwGISC28ZNcc2qpc4sAPxAJjYZ/ QyqJbdsemK/FnVj0PEkaLRG/8Lu2iBvUGJRrLdTOlRXBX/tQziKu9nSOd04xNwhQ BZd6WnptutqDqawbG52WzP8AMZjuZXFkspcMBvxF0OXk2PIzEOy6L9aRk6DEfLGQ zURBerl0jCNBOp+ZOCgOCQeKu2Td+kRzKfcI97u5lcLWjvmVP4dCG5riIXk4/sch bLXpDAyTXNQcQ2cpwnAbsgANGwcam5R4Yegg9Bev5V2B6pG8ZWIBFC3/QvlYi1x0 Bp1QyO7TqZfHLg== -----END CERTIFICATE-----Generated at Mon Feb 9 23:53:01 2026 by rpki-client