This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft File: 35me_9SQo7jQzTGumZ8ObT6Y5oI.mft (raw, json) Hash identifier: zKmf7ukS9ohYiQcAfHApMQa6LTFWBIf5/nugjgHTOIQ= Subject key identifier: C6:C4:DD:99:C0:E5:09:A2:E7:92:5A:62:68:A8:8A:C7:CC:0A:92:2D Authority key identifier: DF:99:9E:FF:D4:90:A3:B8:D0:CD:31:AE:99:9F:0E:6D:3E:98:E6:82 Certificate issuer: /CN=df999effd490a3b8d0cd31ae999f0e6d3e98e682 Certificate serial: 019C420FA08270646D13BD9BCF542B504FB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft Manifest number: 0F19 Signing time: Mon 09 Feb 2026 11:00:46 +0000 Manifest this update: Mon 09 Feb 2026 11:00:46 +0000 Manifest next update: Tue 10 Feb 2026 11:00:46 +0000 Files and hashes: 1: 35me_9SQo7jQzTGumZ8ObT6Y5oI.crl (hash: 8tkLy84bNgQl9VlvZ+Rr4PLoJBE0JIHc2Cyd6fqLZEw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:a0:82:70:64:6d:13:bd:9b:cf:54:2b:50:4f:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df999effd490a3b8d0cd31ae999f0e6d3e98e682 Validity Not Before: Feb 9 11:00:46 2026 GMT Not After : Feb 10 11:00:46 2026 GMT Subject: CN=c6c4dd99c0e509a2e7925a6268a88ac7cc0a922d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1c:06:cd:65:46:c0:5a:a3:3a:f4:a7:e6:26: 70:99:02:69:89:71:70:11:ae:43:64:e7:86:5f:22: ce:b1:38:94:64:14:ba:b6:b8:b8:ac:52:56:a8:06: 40:89:b0:15:f8:0e:b5:79:b5:dc:2b:c0:12:85:9b: db:71:e8:4e:c5:f2:4e:a6:75:63:ca:f5:bf:ae:62: 45:ce:85:c2:b7:0b:67:f7:4c:45:ca:93:47:3e:57: de:29:34:4c:ca:34:eb:9f:47:c5:56:81:5b:b5:34: bb:78:08:df:08:5c:8b:8d:74:f9:d0:d2:53:a1:fe: 72:51:81:78:3f:89:e0:89:6d:37:87:72:5d:0c:c3: 30:e1:9d:4e:85:34:05:30:bd:13:b6:a4:6d:1c:78: e1:6b:7a:87:12:cb:a0:84:b3:c6:c7:0a:5e:65:ef: f7:0b:79:b4:8d:14:be:e1:79:46:49:a9:41:74:6e: a6:55:f0:f2:b7:d6:c8:17:d1:bf:e8:7f:50:9a:76: c6:1a:c8:f0:e3:c4:ff:8d:15:27:c1:7b:ff:a9:4d: ae:2f:80:47:75:9c:c9:c6:a3:16:26:29:67:04:06: f5:71:11:3c:8d:22:33:20:17:c9:fa:04:51:19:29: 50:e9:71:e5:0b:b3:97:ba:d6:f3:c2:51:19:87:c8: 41:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:C4:DD:99:C0:E5:09:A2:E7:92:5A:62:68:A8:8A:C7:CC:0A:92:2D X509v3 Authority Key Identifier: keyid:DF:99:9E:FF:D4:90:A3:B8:D0:CD:31:AE:99:9F:0E:6D:3E:98:E6:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:ab:5f:5a:da:da:a7:5e:3f:1f:c6:67:04:74:77:65:03:04: 1a:08:b2:89:96:3d:f9:a1:dd:0e:21:62:2e:ff:41:bd:20:22: b2:c7:52:12:8d:ea:14:19:59:4b:a9:8a:34:9a:6b:91:e3:c2: 6f:df:8e:65:86:51:51:5e:98:78:b6:c4:09:7b:69:c2:64:f0: 2d:e7:a2:77:6f:fa:65:2f:80:cf:b4:a6:e3:17:43:c0:3a:2e: 0b:63:9d:82:71:13:ed:df:ad:de:1b:be:3b:4e:7b:a2:4f:05: a8:95:64:b8:cd:cf:99:1c:0f:9d:75:5b:77:08:94:51:4d:46: 60:23:b5:a8:54:91:9e:46:24:13:89:a3:03:41:cd:20:c4:b1: 89:92:ec:ad:4c:ab:fa:f3:8f:82:6e:2d:e9:be:29:61:68:b6: 82:3e:85:66:9d:3b:99:cf:1d:0c:20:68:ec:92:b0:1e:dc:79: ad:52:2a:40:23:f1:01:fc:70:8e:78:f9:69:7e:9b:9e:51:06: 22:e3:a3:31:46:4f:51:5b:67:09:b0:ab:ef:81:b4:57:be:99: 41:3a:52:dc:0b:2e:fe:93:b2:b7:29:fe:e1:b2:7d:74:c6:07: a1:0f:99:1c:b4:47:de:ff:e8:24:e8:76:73:04:9b:bd:45:49: dd:d2:49:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD6CCcGRtE72bz1QrUE+0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmOTk5ZWZmZDQ5MGEzYjhkMGNkMzFhZTk5OWYwZTZkM2U5 OGU2ODIwHhcNMjYwMjA5MTEwMDQ2WhcNMjYwMjEwMTEwMDQ2WjAzMTEwLwYDVQQD EyhjNmM0ZGQ5OWMwZTUwOWEyZTc5MjVhNjI2OGE4OGFjN2NjMGE5MjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxwGzWVGwFqjOvSn5iZwmQJpiXFw Ea5DZOeGXyLOsTiUZBS6tri4rFJWqAZAibAV+A61ebXcK8AShZvbcehOxfJOpnVj yvW/rmJFzoXCtwtn90xFypNHPlfeKTRMyjTrn0fFVoFbtTS7eAjfCFyLjXT50NJT of5yUYF4P4ngiW03h3JdDMMw4Z1OhTQFML0TtqRtHHjha3qHEsughLPGxwpeZe/3 C3m0jRS+4XlGSalBdG6mVfDyt9bIF9G/6H9QmnbGGsjw48T/jRUnwXv/qU2uL4BH dZzJxqMWJilnBAb1cRE8jSIzIBfJ+gRRGSlQ6XHlC7OXutbzwlEZh8hBIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMbE3ZnA5Qmi55JaYmioisfMCpItMB8GA1UdIwQY MBaAFN+Znv/UkKO40M0xrpmfDm0+mOaCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzVtZV85U1FvN2pRelRHdW1aOE9iVDZZNW9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9kMDNkMDgtMjcwZi00ZGExLTlhMjQt NTAxNTM4YzBkZDAxLzEvMzVtZV85U1FvN2pRelRHdW1aOE9iVDZZNW9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9kMDNkMDgtMjcwZi00ZGExLTlhMjQtNTAxNTM4YzBkZDAx LzEvMzVtZV85U1FvN2pRelRHdW1aOE9iVDZZNW9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMKtfWtra p14/H8ZnBHR3ZQMEGgiyiZY9+aHdDiFiLv9BvSAissdSEo3qFBlZS6mKNJprkePC b9+OZYZRUV6YeLbECXtpwmTwLeeid2/6ZS+Az7Sm4xdDwDouC2OdgnET7d+t3hu+ O057ok8FqJVkuM3PmRwPnXVbdwiUUU1GYCO1qFSRnkYkE4mjA0HNIMSxiZLsrUyr +vOPgm4t6b4pYWi2gj6FZp07mc8dDCBo7JKwHtx5rVIqQCPxAfxwjnj5aX6bnlEG IuOjMUZPUVtnCbCr74G0V76ZQTpS3Asu/pOytyn+4bJ9dMYHoQ+ZHLRH3v/oJOh2 cwSbvUVJ3dJJ7A== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:54 2026 by rpki-client