This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft File: 9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft (raw, json) Hash identifier: u9aTQ3Q2Gi0DfrGnM1UExX0NpjLS4hRurT8afaDgSgw= Subject key identifier: 24:9E:A7:FC:FD:F9:39:5D:FA:3D:C5:9A:26:7E:CD:42:2E:D5:2C:78 Authority key identifier: F4:AC:99:D7:7A:7A:1C:84:DD:47:F4:3B:B7:20:51:AA:73:B1:AA:D6 Certificate issuer: /CN=f4ac99d77a7a1c84dd47f43bb72051aa73b1aad6 Certificate serial: 019C4321F9A2C43784E7AAC761A88219D5D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft Manifest number: 1317 Signing time: Mon 09 Feb 2026 16:00:25 +0000 Manifest this update: Mon 09 Feb 2026 16:00:25 +0000 Manifest next update: Tue 10 Feb 2026 16:00:25 +0000 Files and hashes: 1: 0mgkR8Oatppf6KwkGwCdocguoA0.roa (hash: xBRpWZu5TH9MlFJBVgXYiAXfSpweoxy68K+P+8afR20=) 2: 9KyZ13p6HITdR_Q7tyBRqnOxqtY.crl (hash: pgxtouxzPB4a8hrKqWO8soalm+8+ii2FtN9I8KKWZjI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft rsync://rpki.ripe.net/repository/DEFAULT/9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:f9:a2:c4:37:84:e7:aa:c7:61:a8:82:19:d5:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4ac99d77a7a1c84dd47f43bb72051aa73b1aad6 Validity Not Before: Feb 9 16:00:25 2026 GMT Not After : Feb 10 16:00:25 2026 GMT Subject: CN=249ea7fcfdf9395dfa3dc59a267ecd422ed52c78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f2:06:00:15:e0:6c:45:03:28:ac:63:c1:38: 4c:72:03:b3:d0:1c:33:c3:af:00:51:34:c2:f0:3b: f4:29:6a:44:f2:4a:08:06:8c:4a:83:3a:c1:58:8f: d0:cc:3c:7c:76:52:2b:0e:f9:e8:ef:4d:47:05:a4: a5:2e:72:b6:3f:68:a3:e8:af:58:68:e4:ba:a7:ce: 79:36:8d:8f:9e:25:29:cd:2d:d8:ad:82:f2:1e:bc: a6:c1:94:49:63:c7:2c:52:1e:7f:11:96:82:de:ea: 0b:d3:ce:4d:e3:36:05:af:91:82:e2:d7:b7:34:9f: 55:24:dc:48:83:06:eb:3f:07:94:14:82:02:e7:37: f3:3c:c3:23:db:22:95:78:1b:d3:e5:a2:1b:28:55: 67:c4:9d:62:b7:ed:c4:5e:66:25:f5:18:ca:81:39: 9b:a6:91:9a:0a:c6:b5:6d:0b:f0:15:d1:67:bc:98: 7e:cc:53:c0:bb:79:f4:ad:c7:7e:62:6b:c0:e1:c2: a3:fc:bc:4e:ba:2f:da:c3:4b:ba:46:07:94:9d:ed: ea:71:dd:14:65:1e:c2:14:bb:99:9e:55:76:fa:63: 21:bd:b7:34:ff:7c:3d:c2:6d:9d:7c:fe:a8:e5:cb: d0:2e:b9:e4:3e:5e:4c:7d:60:1e:23:b0:f3:47:48: 0a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:9E:A7:FC:FD:F9:39:5D:FA:3D:C5:9A:26:7E:CD:42:2E:D5:2C:78 X509v3 Authority Key Identifier: keyid:F4:AC:99:D7:7A:7A:1C:84:DD:47:F4:3B:B7:20:51:AA:73:B1:AA:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:c8:eb:9a:09:1d:3b:01:8a:d1:43:8e:e6:65:56:42:2b:48: 83:e9:a1:84:89:50:ea:fe:b4:2e:92:04:54:77:82:6a:6e:fe: 0d:10:1b:c4:ee:07:5f:88:9a:a2:4d:72:c4:75:63:be:49:26: e5:e3:7b:08:b6:75:f2:b9:58:c9:85:fc:38:47:c4:5f:0e:77: e2:e1:82:be:8c:7e:2a:09:13:b7:bf:ed:9e:20:ed:8d:f9:a1: 49:2b:fd:31:97:19:b0:3b:f5:30:96:45:6e:67:e9:68:94:26: 54:0c:ac:dd:d2:2a:d2:f6:44:14:7b:33:be:d3:bf:27:32:20: ba:b7:a5:7b:34:c2:ee:18:d4:2e:25:ef:f4:f3:cd:ff:4e:cb: 0c:30:27:b3:ea:69:a2:2d:75:f6:30:c3:aa:da:a3:25:33:fb: 3f:4d:60:e8:f2:b4:36:8c:e9:78:43:77:80:07:52:71:29:eb: 18:0c:0b:ad:9d:f9:c9:59:86:4c:1a:6c:b8:83:43:ff:e8:d7: 74:34:9b:72:b3:22:52:d9:2a:fc:10:dc:09:bf:cd:97:76:ed: 1a:bd:ea:28:fc:de:05:d9:cc:40:c8:d3:d5:28:8d:96:80:b9: 23:43:1d:d0:71:37:34:e0:55:2c:d3:30:e0:d4:77:f0:e1:4c: 7c:e4:eb:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIfmixDeE56rHYaiCGdXTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0YWM5OWQ3N2E3YTFjODRkZDQ3ZjQzYmI3MjA1MWFhNzNi MWFhZDYwHhcNMjYwMjA5MTYwMDI1WhcNMjYwMjEwMTYwMDI1WjAzMTEwLwYDVQQD EygyNDllYTdmY2ZkZjkzOTVkZmEzZGM1OWEyNjdlY2Q0MjJlZDUyYzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPIGABXgbEUDKKxjwThMcgOz0Bwz w68AUTTC8Dv0KWpE8koIBoxKgzrBWI/QzDx8dlIrDvno701HBaSlLnK2P2ij6K9Y aOS6p855No2PniUpzS3YrYLyHrymwZRJY8csUh5/EZaC3uoL085N4zYFr5GC4te3 NJ9VJNxIgwbrPweUFIIC5zfzPMMj2yKVeBvT5aIbKFVnxJ1it+3EXmYl9RjKgTmb ppGaCsa1bQvwFdFnvJh+zFPAu3n0rcd+YmvA4cKj/LxOui/aw0u6RgeUne3qcd0U ZR7CFLuZnlV2+mMhvbc0/3w9wm2dfP6o5cvQLrnkPl5MfWAeI7DzR0gKGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCSep/z9+Tld+j3FmiZ+zUIu1Sx4MB8GA1UdIwQY MBaAFPSsmdd6ehyE3Uf0O7cgUapzsarWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUt5WjEzcDZISVRkUl9RN3R5QlJxbk94cXRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNzY0NDUtMTk4YS00Zjg1LWJiZjgt NjZjY2E4MWU2YzA3LzEvOUt5WjEzcDZISVRkUl9RN3R5QlJxbk94cXRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNzY0NDUtMTk4YS00Zjg1LWJiZjgtNjZjY2E4MWU2YzA3 LzEvOUt5WjEzcDZISVRkUl9RN3R5QlJxbk94cXRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADcjrmgkd OwGK0UOO5mVWQitIg+mhhIlQ6v60LpIEVHeCam7+DRAbxO4HX4iaok1yxHVjvkkm 5eN7CLZ18rlYyYX8OEfEXw534uGCvox+KgkTt7/tniDtjfmhSSv9MZcZsDv1MJZF bmfpaJQmVAys3dIq0vZEFHszvtO/JzIgurelezTC7hjULiXv9PPN/07LDDAns+pp oi119jDDqtqjJTP7P01g6PK0NozpeEN3gAdScSnrGAwLrZ35yVmGTBpsuIND/+jX dDSbcrMiUtkq/BDcCb/Nl3btGr3qKPzeBdnMQMjT1SiNloC5I0Md0HE3NOBVLNMw 4NR38OFMfOTrRw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:07 2026 by rpki-client