This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft File: m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft (raw, json) Hash identifier: YQCZqtmNt860ZyxYVHqH7XZlnKgpI4p4P1wB9Fdx3wY= Subject key identifier: 86:2F:66:64:D6:01:CA:01:E3:77:78:D2:EF:4F:18:FF:5B:6C:AB:B9 Authority key identifier: 9B:D1:EA:AD:0D:7E:46:72:6B:87:08:39:14:C2:4A:12:7E:05:9D:D4 Certificate issuer: /CN=9bd1eaad0d7e46726b87083914c24a127e059dd4 Certificate serial: 019C427D5D0EE2A5D014605F6E0D65809DDF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft Manifest number: 06B6 Signing time: Mon 09 Feb 2026 13:00:37 +0000 Manifest this update: Mon 09 Feb 2026 13:00:37 +0000 Manifest next update: Tue 10 Feb 2026 13:00:37 +0000 Files and hashes: 1: m9HqrQ1-RnJrhwg5FMJKEn4FndQ.crl (hash: e0vJCLVGSZ3K8lYnplghjPMHaRGcUXI5x6GbKX4JKlU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft rsync://rpki.ripe.net/repository/DEFAULT/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:5d:0e:e2:a5:d0:14:60:5f:6e:0d:65:80:9d:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd1eaad0d7e46726b87083914c24a127e059dd4 Validity Not Before: Feb 9 13:00:37 2026 GMT Not After : Feb 10 13:00:37 2026 GMT Subject: CN=862f6664d601ca01e37778d2ef4f18ff5b6cabb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a2:d5:45:7f:19:83:5f:14:86:4e:cf:a2:e9: cd:90:de:76:ed:ec:0e:02:6e:de:c5:d7:90:35:6d: 48:5a:af:b8:d1:c9:25:03:15:dc:75:75:18:04:bc: 72:2c:ab:c2:44:1d:82:c5:a7:e1:1a:9a:9a:26:9a: 0e:4b:5d:12:a4:02:e6:25:f2:80:d5:41:f9:96:b3: 20:44:27:3b:5e:1c:e4:3a:e7:80:1b:d0:77:b1:0b: c5:7f:22:c2:e5:47:20:e6:dc:ab:9e:83:ff:3c:98: 58:40:b6:cd:e9:b1:6b:bb:4b:a5:e4:ca:f4:7c:97: cc:5a:e6:f2:09:84:bf:60:98:de:dc:41:60:68:01: 9c:34:f1:96:c1:d2:20:b5:4c:57:05:f9:66:3f:18: d6:7a:b9:c9:d0:f2:43:72:b6:b9:7c:83:79:31:10: 90:df:6c:79:5f:23:f4:3c:72:1c:6a:2d:61:92:f7: c9:8d:8a:4d:54:51:83:e8:db:e1:8c:36:c7:13:39: 8e:63:18:d6:8c:75:a3:00:16:c9:26:ed:14:e7:50: 75:9a:60:b3:d6:03:0f:a9:be:46:ce:48:2b:ec:4f: ac:e9:66:d7:9e:ca:33:91:16:d1:81:dd:35:1d:83: be:01:1f:d8:51:79:ff:91:81:68:c2:d9:53:7e:95: e1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:2F:66:64:D6:01:CA:01:E3:77:78:D2:EF:4F:18:FF:5B:6C:AB:B9 X509v3 Authority Key Identifier: keyid:9B:D1:EA:AD:0D:7E:46:72:6B:87:08:39:14:C2:4A:12:7E:05:9D:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:f7:cb:8d:5e:3c:66:47:8f:54:01:16:af:e7:50:a8:b2:79: ae:d0:52:1c:80:5c:2c:45:8f:bf:c8:96:1f:8d:78:39:6a:80: 7c:e6:49:cf:23:26:e2:b7:1e:77:20:75:28:c4:8f:a3:ec:8f: e8:71:5e:d4:8c:b0:e1:3b:88:97:cf:b0:2a:8d:de:51:f6:52: 36:fc:6b:66:87:0c:e3:5b:fd:34:9c:71:e9:3d:5e:5e:aa:ff: db:ec:8e:e8:18:2b:6f:6f:1e:57:c5:2a:47:91:71:78:d0:32: dc:1d:5d:c0:c1:15:7e:46:8a:79:4f:b4:0f:5c:99:96:d2:58: 90:f2:59:b5:9a:57:4d:80:86:d8:57:37:83:e2:f0:89:d4:93: 80:39:36:a0:b9:af:af:5f:2c:61:0a:c5:12:4d:f3:95:bf:12: cb:d4:91:c2:ad:dc:a5:44:d7:71:59:9b:8b:8b:d1:27:a6:de: 84:3d:85:c7:cd:e4:0e:31:39:d2:12:24:4f:bb:b9:7d:6a:d7: 31:78:41:3f:66:d6:57:6a:06:4f:7c:22:29:5a:7b:78:38:be: 15:b2:40:b5:28:9e:52:ee:28:5d:a1:ba:65:2c:6f:b2:08:d8: fb:49:c9:d9:01:8d:68:6a:a4:08:68:fc:05:15:43:a3:80:92: d0:a1:a5:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfV0O4qXQFGBfbg1lgJ3fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZDFlYWFkMGQ3ZTQ2NzI2Yjg3MDgzOTE0YzI0YTEyN2Uw NTlkZDQwHhcNMjYwMjA5MTMwMDM3WhcNMjYwMjEwMTMwMDM3WjAzMTEwLwYDVQQD Eyg4NjJmNjY2NGQ2MDFjYTAxZTM3Nzc4ZDJlZjRmMThmZjViNmNhYmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKLVRX8Zg18Uhk7PounNkN527ewO Am7exdeQNW1IWq+40cklAxXcdXUYBLxyLKvCRB2CxafhGpqaJpoOS10SpALmJfKA 1UH5lrMgRCc7XhzkOueAG9B3sQvFfyLC5Ucg5tyrnoP/PJhYQLbN6bFru0ul5Mr0 fJfMWubyCYS/YJje3EFgaAGcNPGWwdIgtUxXBflmPxjWernJ0PJDcra5fIN5MRCQ 32x5XyP0PHIcai1hkvfJjYpNVFGD6NvhjDbHEzmOYxjWjHWjABbJJu0U51B1mmCz 1gMPqb5Gzkgr7E+s6WbXnsozkRbRgd01HYO+AR/YUXn/kYFowtlTfpXhuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIYvZmTWAcoB43d40u9PGP9bbKu5MB8GA1UdIwQY MBaAFJvR6q0NfkZya4cIORTCShJ+BZ3UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTlIcXJRMS1SbkpyaHdnNUZNSktFbjRGbmRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9jMzRkZWQtZDNkOS00MjkyLTliYjct ZWYwNzk0NTMxYTI4LzEvbTlIcXJRMS1SbkpyaHdnNUZNSktFbjRGbmRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9jMzRkZWQtZDNkOS00MjkyLTliYjctZWYwNzk0NTMxYTI4 LzEvbTlIcXJRMS1SbkpyaHdnNUZNSktFbjRGbmRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoPfLjV48 ZkePVAEWr+dQqLJ5rtBSHIBcLEWPv8iWH414OWqAfOZJzyMm4rcedyB1KMSPo+yP 6HFe1Iyw4TuIl8+wKo3eUfZSNvxrZocM41v9NJxx6T1eXqr/2+yO6Bgrb28eV8Uq R5FxeNAy3B1dwMEVfkaKeU+0D1yZltJYkPJZtZpXTYCG2Fc3g+LwidSTgDk2oLmv r18sYQrFEk3zlb8Sy9SRwq3cpUTXcVmbi4vRJ6behD2Fx83kDjE50hIkT7u5fWrX MXhBP2bWV2oGT3wiKVp7eDi+FbJAtSieUu4oXaG6ZSxvsgjY+0nJ2QGNaGqkCGj8 BRVDo4CS0KGlvQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:05 2026 by rpki-client