This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft File: 9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft (raw, json) Hash identifier: gPm3/xzSRnCv0QctibXv5RQ0SzIcjmuQjOWQYz9T7PM= Subject key identifier: A3:85:A2:36:ED:79:44:0F:53:AC:A5:EC:22:5D:51:EC:AF:DA:E6:EE Authority key identifier: F5:87:71:25:85:94:7D:C5:51:9A:A8:6E:0B:D1:F4:35:DF:52:B5:EE Certificate issuer: /CN=f587712585947dc5519aa86e0bd1f435df52b5ee Certificate serial: 019C427DE5721F4FDD347D88CD7ED23D5816 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft Manifest number: 0444 Signing time: Mon 09 Feb 2026 13:01:12 +0000 Manifest this update: Mon 09 Feb 2026 13:01:12 +0000 Manifest next update: Tue 10 Feb 2026 13:01:12 +0000 Files and hashes: 1: 9YdxJYWUfcVRmqhuC9H0Nd9Ste4.crl (hash: aIozNFteChWauP3ONdkeDm17FTlrIlidpnp4ouSzGmQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft rsync://rpki.ripe.net/repository/DEFAULT/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:e5:72:1f:4f:dd:34:7d:88:cd:7e:d2:3d:58:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f587712585947dc5519aa86e0bd1f435df52b5ee Validity Not Before: Feb 9 13:01:12 2026 GMT Not After : Feb 10 13:01:12 2026 GMT Subject: CN=a385a236ed79440f53aca5ec225d51ecafdae6ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:85:6a:a0:2f:e1:3c:2a:31:9c:5a:4f:d6:b3: 89:9f:fa:58:16:dd:e4:ca:67:98:20:9d:65:a2:02: 65:89:62:ba:9f:28:c4:f2:34:4c:45:79:b2:5a:8d: d3:c9:c6:40:33:2c:d8:81:d8:b7:5a:e9:04:3a:b9: 1e:6d:ef:f6:05:f0:8e:69:80:74:21:86:3d:fc:d2: f7:d7:e5:c9:4a:27:c4:d1:92:b8:c7:6f:d8:50:a1: 78:34:4a:ee:e5:11:68:c5:91:81:b4:70:b2:07:bb: 3c:67:5d:c5:cf:0b:a2:c2:07:c6:ab:a0:cc:e4:5d: 18:b7:44:f3:57:73:a6:79:0b:c1:74:05:02:b0:d1: d2:2b:0f:87:ce:94:3c:6d:06:9b:c8:07:47:c1:68: ee:f3:f2:f2:6c:15:35:34:2d:97:3f:cd:df:31:f7: 9c:a0:6e:10:8a:80:b5:e3:11:a4:ce:25:97:75:2e: d8:29:8b:2a:95:cf:3d:d8:9b:ec:ad:03:bf:89:b0: 46:c8:15:09:e8:e5:a8:69:ba:e6:20:a5:43:43:ae: 69:14:d5:c4:e3:2d:83:86:fc:e8:fd:ff:fe:17:0a: 35:d3:10:f5:51:92:f7:e6:02:cf:1c:ad:88:f5:2c: f0:a8:79:3c:49:a7:50:10:94:86:4f:7c:0c:53:16: f0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:85:A2:36:ED:79:44:0F:53:AC:A5:EC:22:5D:51:EC:AF:DA:E6:EE X509v3 Authority Key Identifier: keyid:F5:87:71:25:85:94:7D:C5:51:9A:A8:6E:0B:D1:F4:35:DF:52:B5:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:e3:ee:10:c2:4a:fa:f6:59:15:b4:c2:02:37:e7:e4:f1:55: 9e:b4:82:43:49:51:7f:6f:67:1c:3f:98:f2:37:c2:e2:e8:89: a6:23:a2:f8:1a:5c:2c:5d:35:9a:0f:17:6d:32:f4:32:84:ba: a2:62:42:03:5a:23:ec:80:ae:02:03:f3:29:af:a2:7f:af:15: f7:9d:45:3d:32:4e:4f:c2:37:cd:8b:70:6d:9a:78:f8:29:bc: 12:9d:dd:1b:09:82:a2:8c:f7:1a:e9:46:14:a8:d0:11:64:0e: 17:32:c4:74:b9:5d:d5:6c:b7:b0:35:89:58:73:bc:55:b7:e0: 4a:e8:b2:88:ce:c5:cc:f9:ce:c7:4d:16:cf:43:fa:1c:9a:81: 33:d2:fa:ad:17:1c:12:5d:5a:b0:11:c6:cd:c3:64:37:7f:a8: 1e:1a:b4:e6:b2:49:71:6e:dc:0e:5e:d9:91:c8:5d:06:b4:79: df:e0:20:8f:51:0f:88:75:18:66:34:e7:10:e6:06:f5:1d:44: c2:39:bd:68:06:bc:c3:13:a7:c3:c1:49:c1:ce:90:f1:61:4e: 9e:60:c1:77:fe:c7:a2:e5:d3:0a:2a:d6:d2:2b:21:2d:a3:be: f0:b9:3e:88:58:67:73:b1:26:a5:50:81:8a:ac:5c:c0:3f:99: b2:c0:4b:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfeVyH0/dNH2IzX7SPVgWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ODc3MTI1ODU5NDdkYzU1MTlhYTg2ZTBiZDFmNDM1ZGY1 MmI1ZWUwHhcNMjYwMjA5MTMwMTEyWhcNMjYwMjEwMTMwMTEyWjAzMTEwLwYDVQQD EyhhMzg1YTIzNmVkNzk0NDBmNTNhY2E1ZWMyMjVkNTFlY2FmZGFlNmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4VqoC/hPCoxnFpP1rOJn/pYFt3k ymeYIJ1logJliWK6nyjE8jRMRXmyWo3TycZAMyzYgdi3WukEOrkebe/2BfCOaYB0 IYY9/NL31+XJSifE0ZK4x2/YUKF4NEru5RFoxZGBtHCyB7s8Z13FzwuiwgfGq6DM 5F0Yt0TzV3OmeQvBdAUCsNHSKw+HzpQ8bQabyAdHwWju8/LybBU1NC2XP83fMfec oG4QioC14xGkziWXdS7YKYsqlc892JvsrQO/ibBGyBUJ6OWoabrmIKVDQ65pFNXE 4y2Dhvzo/f/+Fwo10xD1UZL35gLPHK2I9SzwqHk8SadQEJSGT3wMUxbwgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKOFojbteUQPU6yl7CJdUeyv2ubuMB8GA1UdIwQY MBaAFPWHcSWFlH3FUZqobgvR9DXfUrXuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVlkeEpZV1VmY1ZSbXFodUM5SDBOZDlTdGU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC84YTE1MzgtNDgwMy00ZDcwLTljMmEt N2RjN2U2ZjkyZWQ0LzEvOVlkeEpZV1VmY1ZSbXFodUM5SDBOZDlTdGU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC84YTE1MzgtNDgwMy00ZDcwLTljMmEtN2RjN2U2ZjkyZWQ0 LzEvOVlkeEpZV1VmY1ZSbXFodUM5SDBOZDlTdGU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi+PuEMJK +vZZFbTCAjfn5PFVnrSCQ0lRf29nHD+Y8jfC4uiJpiOi+BpcLF01mg8XbTL0MoS6 omJCA1oj7ICuAgPzKa+if68V951FPTJOT8I3zYtwbZp4+Cm8Ep3dGwmCooz3GulG FKjQEWQOFzLEdLld1Wy3sDWJWHO8VbfgSuiyiM7FzPnOx00Wz0P6HJqBM9L6rRcc El1asBHGzcNkN3+oHhq05rJJcW7cDl7ZkchdBrR53+Agj1EPiHUYZjTnEOYG9R1E wjm9aAa8wxOnw8FJwc6Q8WFOnmDBd/7HouXTCirW0ishLaO+8Lk+iFhnc7EmpVCB iqxcwD+ZssBLLQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:08 2026 by rpki-client