This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft File: 9TNT82jdgBzWECIy36HOpp3Yy2w.mft (raw, json) Hash identifier: nu0NyRD57TE4XRq+5FnEPd6MpJphTXy5jR9Y6L2uSlI= Subject key identifier: EA:8F:FC:00:81:0F:56:CC:67:A8:F5:BA:97:F4:97:90:98:79:43:C1 Authority key identifier: F5:33:53:F3:68:DD:80:1C:D6:10:22:32:DF:A1:CE:A6:9D:D8:CB:6C Certificate issuer: /CN=f53353f368dd801cd6102232dfa1cea69dd8cb6c Certificate serial: 019C41347793520F65EACA365F81EC9BFE02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft Manifest number: 1813 Signing time: Mon 09 Feb 2026 07:01:23 +0000 Manifest this update: Mon 09 Feb 2026 07:01:23 +0000 Manifest next update: Tue 10 Feb 2026 07:01:23 +0000 Files and hashes: 1: 9TNT82jdgBzWECIy36HOpp3Yy2w.crl (hash: x5wImymRfYuMxJ+tAl4fvVhgY6Z6UkNnl89jgzei3wc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:34:77:93:52:0f:65:ea:ca:36:5f:81:ec:9b:fe:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f53353f368dd801cd6102232dfa1cea69dd8cb6c Validity Not Before: Feb 9 07:01:23 2026 GMT Not After : Feb 10 07:01:23 2026 GMT Subject: CN=ea8ffc00810f56cc67a8f5ba97f49790987943c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:94:49:54:82:ea:ff:4a:d5:d5:6a:57:e3:7a: d2:40:00:0a:e2:10:6a:48:29:24:8e:82:8f:39:7e: ff:2d:ed:e6:99:cc:56:c0:0c:f0:e7:4b:50:0e:77: dc:51:6d:95:4e:2c:5b:53:d5:71:a8:3d:0a:71:94: dc:c6:bd:ef:9b:ec:80:1d:11:9b:7a:72:d3:84:95: d6:dd:d1:36:f6:96:8b:d3:44:1d:04:f6:cc:0c:55: 43:87:62:e6:00:96:d2:42:69:4a:c2:87:a6:80:14: b9:29:8a:ef:ba:00:f5:37:29:30:a2:5a:8f:c3:04: 37:db:67:df:ff:0e:e2:f7:49:47:ac:53:a1:f2:64: d0:9c:34:08:fa:23:56:b2:80:c1:57:dc:9f:0a:a3: 39:8a:23:64:fd:6a:b2:be:50:78:ea:b2:ff:c1:e8: b4:c5:f3:25:1d:a4:98:29:76:03:db:93:dd:e1:11: 1b:b9:02:d7:6f:a4:0b:d3:28:f2:20:42:a3:0e:7e: 54:1c:a6:83:73:b7:d2:a8:10:8d:27:4e:fb:b6:5c: 70:9f:35:cc:1b:9e:a9:44:4f:ee:cd:c8:39:21:d4: e6:98:bf:0d:fa:5a:af:e4:ea:e2:2e:b7:b7:24:13: fb:79:c0:34:8c:9d:ad:7a:b0:cd:61:9d:59:ee:18: 4a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:8F:FC:00:81:0F:56:CC:67:A8:F5:BA:97:F4:97:90:98:79:43:C1 X509v3 Authority Key Identifier: keyid:F5:33:53:F3:68:DD:80:1C:D6:10:22:32:DF:A1:CE:A6:9D:D8:CB:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:2f:42:12:f6:f9:1d:83:ff:95:78:c9:f8:9d:72:46:cc:95: 01:43:3d:57:03:e2:23:27:d0:1a:52:be:78:a9:53:72:5b:f6: 07:fc:cd:f5:6e:72:75:c5:fe:3f:ef:fd:1a:c8:a7:3e:98:ea: 7d:e4:1b:fb:b5:72:5d:a1:85:f5:a7:00:8c:3d:1e:44:1e:0f: ec:85:3e:3c:e1:fe:f6:00:a5:00:2f:8d:b6:5f:7c:63:ec:e5: 60:65:0b:a1:74:ef:fc:52:9c:53:ee:c5:ec:ee:2a:64:13:1b: d9:0a:64:89:2d:95:30:0b:c0:d1:0c:6c:db:87:e5:8d:d5:60: 2f:ff:75:14:48:1a:fe:fd:bb:27:03:ec:92:45:b3:d8:2c:ed: 59:4d:62:7b:40:e9:fc:39:38:ae:0a:b0:75:b1:c1:0d:fc:ce: a5:af:b8:d5:ae:31:39:d8:2b:ef:bd:79:3f:94:59:09:79:55: 9a:a6:c2:81:89:ee:29:46:50:81:27:06:b3:69:5a:0e:d4:9b: b8:a1:50:9f:36:c0:75:c6:b7:c7:5b:7a:96:53:20:d9:d9:bc: a9:7c:b9:f3:65:59:95:38:a3:ce:a4:0d:c9:78:e5:66:8e:4e: 5a:08:5a:27:23:2c:2c:67:96:ab:42:ae:f9:fc:ee:76:0e:27: a9:b9:59:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBNHeTUg9l6so2X4Hsm/4CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MzM1M2YzNjhkZDgwMWNkNjEwMjIzMmRmYTFjZWE2OWRk OGNiNmMwHhcNMjYwMjA5MDcwMTIzWhcNMjYwMjEwMDcwMTIzWjAzMTEwLwYDVQQD EyhlYThmZmMwMDgxMGY1NmNjNjdhOGY1YmE5N2Y0OTc5MDk4Nzk0M2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5RJVILq/0rV1WpX43rSQAAK4hBq SCkkjoKPOX7/Le3mmcxWwAzw50tQDnfcUW2VTixbU9VxqD0KcZTcxr3vm+yAHRGb enLThJXW3dE29paL00QdBPbMDFVDh2LmAJbSQmlKwoemgBS5KYrvugD1NykwolqP wwQ322ff/w7i90lHrFOh8mTQnDQI+iNWsoDBV9yfCqM5iiNk/WqyvlB46rL/wei0 xfMlHaSYKXYD25Pd4REbuQLXb6QL0yjyIEKjDn5UHKaDc7fSqBCNJ077tlxwnzXM G56pRE/uzcg5IdTmmL8N+lqv5OriLre3JBP7ecA0jJ2terDNYZ1Z7hhKWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOqP/ACBD1bMZ6j1upf0l5CYeUPBMB8GA1UdIwQY MBaAFPUzU/No3YAc1hAiMt+hzqad2MtsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVROVDgyamRnQnpXRUNJeTM2SE9wcDNZeTJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9iODA5N2EtNGVlZC00NjNiLWI2NWEt MGVjN2VjYjI1MDMwLzEvOVROVDgyamRnQnpXRUNJeTM2SE9wcDNZeTJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9iODA5N2EtNGVlZC00NjNiLWI2NWEtMGVjN2VjYjI1MDMw LzEvOVROVDgyamRnQnpXRUNJeTM2SE9wcDNZeTJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHy9CEvb5 HYP/lXjJ+J1yRsyVAUM9VwPiIyfQGlK+eKlTclv2B/zN9W5ydcX+P+/9GsinPpjq feQb+7VyXaGF9acAjD0eRB4P7IU+POH+9gClAC+Ntl98Y+zlYGULoXTv/FKcU+7F 7O4qZBMb2QpkiS2VMAvA0Qxs24fljdVgL/91FEga/v27JwPskkWz2CztWU1ie0Dp /Dk4rgqwdbHBDfzOpa+41a4xOdgr7715P5RZCXlVmqbCgYnuKUZQgScGs2laDtSb uKFQnzbAdca3x1t6llMg2dm8qXy582VZlTijzqQNyXjlZo5OWghaJyMsLGeWq0Ku +fzudg4nqblZSg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:49 2026 by rpki-client