This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.mft File: 9jOGnDZCtefqAii_DgspXO_MTd8.mft (raw, json) Hash identifier: HNwPIDDhIdmgVRi2LhzTapyK2TRUHznsEMRk/28AMsU= Subject key identifier: 18:61:36:DC:27:EA:F7:E7:5A:D6:32:88:5C:49:4F:1F:59:C8:8B:A9 Authority key identifier: F6:33:86:9C:36:42:B5:E7:EA:02:28:BF:0E:0B:29:5C:EF:CC:4D:DF Certificate issuer: /CN=f633869c3642b5e7ea0228bf0e0b295cefcc4ddf Certificate serial: 019C41D859417192738EC6AD9ACAD9546B2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9jOGnDZCtefqAii_DgspXO_MTd8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.mft Manifest number: 1285 Signing time: Mon 09 Feb 2026 10:00:23 +0000 Manifest this update: Mon 09 Feb 2026 10:00:23 +0000 Manifest next update: Tue 10 Feb 2026 10:00:23 +0000 Files and hashes: 1: 9jOGnDZCtefqAii_DgspXO_MTd8.crl (hash: 4Bog2/l4ogDd3ZBPCFME8YMRBw1hweeEKfzazKYtoPM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.mft rsync://rpki.ripe.net/repository/DEFAULT/9jOGnDZCtefqAii_DgspXO_MTd8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:59:41:71:92:73:8e:c6:ad:9a:ca:d9:54:6b:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f633869c3642b5e7ea0228bf0e0b295cefcc4ddf Validity Not Before: Feb 9 10:00:23 2026 GMT Not After : Feb 10 10:00:23 2026 GMT Subject: CN=186136dc27eaf7e75ad632885c494f1f59c88ba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7a:b5:44:9e:3c:ce:14:45:27:dc:66:59:89: b3:3d:ce:92:4d:76:24:bb:5d:3c:48:ca:bd:f2:68: e5:47:4d:fc:95:d1:4b:a3:af:a6:eb:fe:23:f2:e0: 07:fc:10:f1:09:95:7e:21:3f:8a:40:63:c2:e0:ab: 44:40:7b:d5:3a:5a:9b:ed:2a:5c:08:0d:b5:ac:57: 4d:d1:41:c2:03:aa:83:34:a9:e4:4f:be:2d:19:01: 14:76:ac:3b:48:97:6d:bf:c8:02:68:3d:a0:51:b4: a4:47:44:c4:06:56:6e:65:21:6e:b5:75:6c:28:11: 7d:95:e6:37:56:c1:5f:12:e7:48:ed:0c:44:b4:5e: b1:fa:27:8a:5d:e1:ec:b6:fe:a3:fb:c4:0a:46:0b: 6a:f1:b4:d2:a0:81:28:12:a1:a7:29:d4:50:49:8c: e7:40:87:43:73:1b:25:e2:e6:1a:62:5c:fd:0e:65: 64:08:51:de:c8:49:d1:cb:3e:b9:4e:53:b2:b4:c0: 17:b4:c2:0a:2e:5d:0e:46:9c:c2:bc:c2:1c:0b:da: 46:cd:40:6d:af:3f:70:e0:54:ab:b8:74:6f:85:a6: a8:54:06:12:9f:4f:03:3d:9b:42:71:c7:9d:1e:cc: 3a:e8:48:d1:15:6e:c2:76:3b:31:92:45:9c:c7:ac: 98:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:61:36:DC:27:EA:F7:E7:5A:D6:32:88:5C:49:4F:1F:59:C8:8B:A9 X509v3 Authority Key Identifier: keyid:F6:33:86:9C:36:42:B5:E7:EA:02:28:BF:0E:0B:29:5C:EF:CC:4D:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jOGnDZCtefqAii_DgspXO_MTd8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:c2:2d:f2:98:5d:3d:ab:c2:91:f6:e3:5d:34:d7:d1:e6:e8: bd:ec:34:e8:8a:67:05:8b:ff:83:b9:e8:1d:ce:cd:55:04:95: 2a:cc:f6:e6:08:8a:d9:72:52:df:ab:91:9b:cf:0e:28:5b:33: 7c:d5:59:5d:c4:ef:bb:23:2c:48:70:cc:b7:25:cb:e6:c3:0e: 96:35:a6:76:6c:de:4a:70:12:93:6b:f5:d7:7b:b9:07:72:76: 8c:c4:8e:fc:14:2b:9f:11:bf:a6:f6:ef:5a:df:ec:c7:85:f7: 4e:c6:02:fc:56:3c:f5:6e:b9:32:98:4a:70:0b:3e:f5:67:2c: 51:52:b6:c6:57:d2:a8:ec:8c:f4:1e:9f:82:1a:ea:d5:9c:e5: 4e:71:e4:b6:5f:73:18:dc:76:e6:27:f2:52:b2:b9:c5:49:3a: 92:49:1a:d7:26:b9:00:8f:26:f3:d7:8f:ce:90:55:67:f8:e3: 9d:da:4b:e4:d8:33:71:56:29:59:00:84:4d:18:57:fe:6e:94: b3:4e:28:ae:9c:c7:cc:f4:60:11:0b:35:9c:e9:ce:e0:ff:60: 73:64:1c:ad:83:f6:c1:5e:d3:e4:94:9c:47:ad:32:47:4c:1e: 15:2c:e0:d3:fc:7f:e5:34:6d:cb:4f:78:ee:5e:01:46:39:7b: 10:f3:52:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2FlBcZJzjsatmsrZVGsqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2MzM4NjljMzY0MmI1ZTdlYTAyMjhiZjBlMGIyOTVjZWZj YzRkZGYwHhcNMjYwMjA5MTAwMDIzWhcNMjYwMjEwMTAwMDIzWjAzMTEwLwYDVQQD EygxODYxMzZkYzI3ZWFmN2U3NWFkNjMyODg1YzQ5NGYxZjU5Yzg4YmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3q1RJ48zhRFJ9xmWYmzPc6STXYk u108SMq98mjlR038ldFLo6+m6/4j8uAH/BDxCZV+IT+KQGPC4KtEQHvVOlqb7Spc CA21rFdN0UHCA6qDNKnkT74tGQEUdqw7SJdtv8gCaD2gUbSkR0TEBlZuZSFutXVs KBF9leY3VsFfEudI7QxEtF6x+ieKXeHstv6j+8QKRgtq8bTSoIEoEqGnKdRQSYzn QIdDcxsl4uYaYlz9DmVkCFHeyEnRyz65TlOytMAXtMIKLl0ORpzCvMIcC9pGzUBt rz9w4FSruHRvhaaoVAYSn08DPZtCccedHsw66EjRFW7CdjsxkkWcx6yYxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBhhNtwn6vfnWtYyiFxJTx9ZyIupMB8GA1UdIwQY MBaAFPYzhpw2QrXn6gIovw4LKVzvzE3fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWpPR25EWkN0ZWZxQWlpX0Rnc3BYT19NVGQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC82ZGE1NjItYTgzNi00OGNjLWFhNTct OGM0YmI0NDg1ZjM0LzEvOWpPR25EWkN0ZWZxQWlpX0Rnc3BYT19NVGQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC82ZGE1NjItYTgzNi00OGNjLWFhNTctOGM0YmI0NDg1ZjM0 LzEvOWpPR25EWkN0ZWZxQWlpX0Rnc3BYT19NVGQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAesIt8phd PavCkfbjXTTX0ebovew06IpnBYv/g7noHc7NVQSVKsz25giK2XJS36uRm88OKFsz fNVZXcTvuyMsSHDMtyXL5sMOljWmdmzeSnASk2v113u5B3J2jMSO/BQrnxG/pvbv Wt/sx4X3TsYC/FY89W65MphKcAs+9WcsUVK2xlfSqOyM9B6fghrq1ZzlTnHktl9z GNx25ifyUrK5xUk6kkka1ya5AI8m89ePzpBVZ/jjndpL5NgzcVYpWQCETRhX/m6U s04orpzHzPRgEQs1nOnO4P9gc2QcrYP2wV7T5JScR60yR0weFSzg0/x/5TRty094 7l4BRjl7EPNSZA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:27 2026 by rpki-client