This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft File: 9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft (raw, json) Hash identifier: RlSeeq2mURkqt6UIfji7lTrK7gyRknfW/AEToC1xwPE= Subject key identifier: EF:71:AA:3E:04:03:83:3B:46:CB:BF:B4:31:30:12:77:58:75:C8:93 Authority key identifier: F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A Certificate issuer: /CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a Certificate serial: 019C43FE7E5C6D2F61F23368B43510295243 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft Manifest number: 17A1 Signing time: Mon 09 Feb 2026 20:01:17 +0000 Manifest this update: Mon 09 Feb 2026 20:01:17 +0000 Manifest next update: Tue 10 Feb 2026 20:01:17 +0000 Files and hashes: 1: 7kGNbroThpMnN96LqRGM-Y-5t9Y.roa (hash: lxPWqX0/OpM/p7/y+8GA/oyT71oB2fzc6nqiYIWie7o=) 2: 9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl (hash: ZRJhm4OTJDIyfImGXfFrsF/UKeNOQFRuCh6H13LjM7I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:7e:5c:6d:2f:61:f2:33:68:b4:35:10:29:52:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a Validity Not Before: Feb 9 20:01:17 2026 GMT Not After : Feb 10 20:01:17 2026 GMT Subject: CN=ef71aa3e0403833b46cbbfb4313012775875c893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ce:d0:08:6a:8c:74:33:8e:1c:d5:3d:74:ba: 50:2d:1c:ac:4c:4b:70:ea:b2:9a:60:29:0c:06:af: 70:35:73:77:21:36:ce:8d:41:d4:64:7d:03:c3:49: 40:cb:a1:e9:a8:36:55:88:56:92:81:95:ef:d9:1b: 14:8c:e9:5f:2c:ce:4b:d8:da:e3:d9:ff:05:ce:79: eb:f6:6a:ab:cd:1e:4c:bd:0b:f9:e3:4b:a8:08:09: 46:48:dd:9f:35:9b:8e:41:eb:15:e6:c2:eb:1d:13: db:41:ef:b2:b5:29:58:c6:76:c4:2f:6c:3c:a0:56: f8:ae:f0:4d:64:b0:97:6d:5a:bd:d8:cd:d7:07:01: 6d:3c:9d:92:47:00:00:91:17:26:55:d1:dd:5f:76: 29:ca:6c:91:b3:80:ea:c9:74:1d:44:cb:81:b5:dc: b7:c4:20:2a:ca:41:ee:98:cc:50:5a:44:75:99:7c: 2d:6f:d3:6e:3a:5e:2a:0f:8f:7b:26:38:7d:89:a5: 2c:75:90:eb:00:41:c3:90:c4:d5:1f:09:0c:c6:5e: ad:55:6b:fc:a8:d3:3a:bc:e0:43:f2:63:18:bb:75: d8:6d:15:cd:53:10:97:c3:7e:4f:d7:f4:3f:b4:1f: dc:1f:24:69:48:20:7b:ff:9b:c7:3d:bf:ec:96:62: 8e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:71:AA:3E:04:03:83:3B:46:CB:BF:B4:31:30:12:77:58:75:C8:93 X509v3 Authority Key Identifier: keyid:F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:bd:d9:7a:ef:fb:c3:99:f9:19:eb:6f:4e:52:dd:9a:d8:bf: 0e:60:49:5e:89:4e:7b:d2:76:d0:c7:4d:78:93:75:53:a3:0c: b1:b1:b3:09:d5:f9:fc:94:b7:7b:8b:48:27:49:75:33:8a:50: 95:c3:5c:96:43:51:a0:c2:92:e8:de:00:bd:13:0d:2e:47:68: c5:03:c9:58:ef:5c:54:4f:35:d2:3d:e6:b7:0f:f4:86:ee:4c: 5d:f9:8d:f0:70:54:2d:2d:80:37:f6:60:94:fb:e5:3c:a4:06: 62:09:6c:08:74:2c:30:07:f3:5c:4d:3e:60:b2:b0:5a:ad:bf: c2:a1:3f:9b:f2:2c:94:76:cc:91:f6:fd:0b:e0:20:33:74:38: c7:c4:e3:77:06:5e:6b:19:2e:1c:87:60:a0:db:17:d3:87:c8: 7c:fa:d9:f6:d5:a4:57:53:a9:5e:5a:c6:18:ca:ac:9d:70:0f: 49:9e:a9:4c:0f:81:3d:eb:38:48:bf:a1:fb:29:05:2d:50:5f: 53:de:30:78:09:66:c3:da:e2:25:54:49:dc:82:5c:9b:9c:1c: 97:96:fb:92:d8:63:19:6e:97:7e:4d:36:5f:90:a8:3a:21:80: 8a:5a:e7:1a:33:bd:91:08:61:de:63:f0:24:f5:9f:25:2d:e4: 6d:00:cf:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/n5cbS9h8jNotDUQKVJDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZjQzMGQwODA1ZjQyZmZhM2JjZDBjMGI3YzU1MDgwNTEx NzkyM2EwHhcNMjYwMjA5MjAwMTE3WhcNMjYwMjEwMjAwMTE3WjAzMTEwLwYDVQQD EyhlZjcxYWEzZTA0MDM4MzNiNDZjYmJmYjQzMTMwMTI3NzU4NzVjODkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApc7QCGqMdDOOHNU9dLpQLRysTEtw 6rKaYCkMBq9wNXN3ITbOjUHUZH0Dw0lAy6HpqDZViFaSgZXv2RsUjOlfLM5L2Nrj 2f8Fznnr9mqrzR5MvQv540uoCAlGSN2fNZuOQesV5sLrHRPbQe+ytSlYxnbEL2w8 oFb4rvBNZLCXbVq92M3XBwFtPJ2SRwAAkRcmVdHdX3YpymyRs4DqyXQdRMuBtdy3 xCAqykHumMxQWkR1mXwtb9NuOl4qD497Jjh9iaUsdZDrAEHDkMTVHwkMxl6tVWv8 qNM6vOBD8mMYu3XYbRXNUxCXw35P1/Q/tB/cHyRpSCB7/5vHPb/slmKOJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO9xqj4EA4M7Rsu/tDEwEndYdciTMB8GA1UdIwQY MBaAFPT0MNCAX0L/o7zQwLfFUIBRF5I6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVBRdzBJQmZRdi1qdk5EQXQ4VlFnRkVYa2pvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8yOGJkMTMtOGEzYi00NTUwLTk3MDAt ZjBmOTNjY2EyNDc5LzEvOVBRdzBJQmZRdi1qdk5EQXQ4VlFnRkVYa2pvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8yOGJkMTMtOGEzYi00NTUwLTk3MDAtZjBmOTNjY2EyNDc5 LzEvOVBRdzBJQmZRdi1qdk5EQXQ4VlFnRkVYa2pvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACL3Zeu/7 w5n5GetvTlLdmti/DmBJXolOe9J20MdNeJN1U6MMsbGzCdX5/JS3e4tIJ0l1M4pQ lcNclkNRoMKS6N4AvRMNLkdoxQPJWO9cVE810j3mtw/0hu5MXfmN8HBULS2AN/Zg lPvlPKQGYglsCHQsMAfzXE0+YLKwWq2/wqE/m/IslHbMkfb9C+AgM3Q4x8TjdwZe axkuHIdgoNsX04fIfPrZ9tWkV1OpXlrGGMqsnXAPSZ6pTA+BPes4SL+h+ykFLVBf U94weAlmw9riJVRJ3IJcm5wcl5b7kthjGW6Xfk02X5CoOiGAilrnGjO9kQhh3mPw JPWfJS3kbQDPuw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:44:55 2026 by rpki-client