This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/73c966-3dba-42c5-b55c-d364426577cc/1/9I2q8EbhmDbp4poD5DzVNeIXYXY.mft File: 9I2q8EbhmDbp4poD5DzVNeIXYXY.mft (raw, json) Hash identifier: wSmsZGX4AnoMeI2/3Xeg/N72Qb1zw2dlKoM+Wj+WGYc= Subject key identifier: 27:EC:7B:B5:01:7F:B9:00:01:D2:08:DF:CF:41:60:AA:9A:33:27:0F Authority key identifier: F4:8D:AA:F0:46:E1:98:36:E9:E2:9A:03:E4:3C:D5:35:E2:17:61:76 Certificate issuer: /CN=f48daaf046e19836e9e29a03e43cd535e2176176 Certificate serial: 019C42EAEB90DBCBECEE09ADBCB8C20E98E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9I2q8EbhmDbp4poD5DzVNeIXYXY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/73c966-3dba-42c5-b55c-d364426577cc/1/9I2q8EbhmDbp4poD5DzVNeIXYXY.mft Manifest number: 0171 Signing time: Mon 09 Feb 2026 15:00:17 +0000 Manifest this update: Mon 09 Feb 2026 15:00:17 +0000 Manifest next update: Tue 10 Feb 2026 15:00:17 +0000 Files and hashes: 1: 9I2q8EbhmDbp4poD5DzVNeIXYXY.crl (hash: fI0lSHq2GmeROLaS+p3lV6XDHjwFmzZ7ZZsBBgHqzbg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/73c966-3dba-42c5-b55c-d364426577cc/1/9I2q8EbhmDbp4poD5DzVNeIXYXY.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/73c966-3dba-42c5-b55c-d364426577cc/1/9I2q8EbhmDbp4poD5DzVNeIXYXY.mft rsync://rpki.ripe.net/repository/DEFAULT/9I2q8EbhmDbp4poD5DzVNeIXYXY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:ea:eb:90:db:cb:ec:ee:09:ad:bc:b8:c2:0e:98:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f48daaf046e19836e9e29a03e43cd535e2176176 Validity Not Before: Feb 9 15:00:17 2026 GMT Not After : Feb 10 15:00:17 2026 GMT Subject: CN=27ec7bb5017fb90001d208dfcf4160aa9a33270f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:32:7f:34:f9:fe:43:4e:1d:ed:87:dc:53:0f: de:a4:6f:ca:06:4b:74:c9:79:3b:00:9d:df:9a:1f: cb:76:1e:95:94:bf:b9:35:e6:54:57:01:df:50:c5: 40:30:86:03:6d:cb:ac:da:8e:d3:7e:21:85:b5:09: cd:04:40:5f:ab:bb:ca:7c:bd:da:bf:e5:2c:37:29: b6:18:91:a2:88:6f:25:3a:ff:ba:cf:b1:24:43:79: 7b:8f:74:7e:a1:0e:dc:5f:8a:3f:92:a0:24:91:e4: 89:78:47:2d:39:ec:e3:fc:e8:59:e0:68:e3:86:08: 6e:49:1a:0e:ad:72:02:52:e2:b1:31:1a:e2:d8:ae: b7:14:72:06:f3:e1:28:3b:95:9b:37:bf:d2:d1:be: 83:0e:35:95:00:c8:7c:eb:64:f5:85:f1:4c:c4:82: ae:22:1a:19:3f:83:0a:91:ef:fc:dd:e6:94:1f:32: 3a:3c:d6:73:da:3a:50:85:b3:2c:ed:2d:e7:f3:b5: 18:7e:6f:0d:18:f5:6e:d8:60:f6:48:9a:b6:3f:86: 4e:2c:9f:51:fd:42:f0:3c:ac:29:59:d4:ac:35:15: e4:14:a7:7b:66:6b:de:70:55:c8:94:13:94:31:dd: bd:3a:76:87:13:71:f3:af:46:9c:6b:d8:28:96:e4: 3f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:EC:7B:B5:01:7F:B9:00:01:D2:08:DF:CF:41:60:AA:9A:33:27:0F X509v3 Authority Key Identifier: keyid:F4:8D:AA:F0:46:E1:98:36:E9:E2:9A:03:E4:3C:D5:35:E2:17:61:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9I2q8EbhmDbp4poD5DzVNeIXYXY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/73c966-3dba-42c5-b55c-d364426577cc/1/9I2q8EbhmDbp4poD5DzVNeIXYXY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/73c966-3dba-42c5-b55c-d364426577cc/1/9I2q8EbhmDbp4poD5DzVNeIXYXY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:34:a2:80:26:95:9b:d1:79:be:a0:d8:dc:a9:e0:b6:f6:3a: 67:00:91:68:47:5a:ae:de:1c:7a:1d:75:02:46:79:22:b9:df: 12:92:7a:2f:b6:8c:52:01:df:c9:38:7b:7c:e6:45:9a:7b:f3: 86:06:da:85:74:d2:9c:85:f8:e6:cd:7f:63:93:1c:43:de:ed: 9b:19:f5:06:d4:9a:d4:ab:76:61:a2:3b:ab:f8:3f:5a:97:2b: 70:95:15:13:97:03:88:de:1c:28:fd:4e:1e:5a:52:ed:92:8b: 49:65:8d:17:ac:80:71:e3:49:d2:db:2a:9b:21:a7:85:c9:a4: bd:33:b7:e7:c6:b9:ae:29:29:fc:a3:7c:b8:15:5d:bf:52:08: e3:17:a0:b7:09:e5:bd:e8:25:b3:1c:01:43:03:28:4c:b0:1d: 38:53:45:6d:0a:d6:28:45:5b:c2:cf:e1:1d:da:a2:3f:38:4c: 35:92:fd:48:9f:55:5a:e1:78:83:92:d7:b1:0f:5f:0a:0f:64: 98:fa:6a:68:d4:05:a8:6e:1b:89:dd:95:de:4b:8a:a3:d6:b8: 88:9e:e2:a4:6b:14:28:97:c3:fe:5f:88:0a:f0:b6:d3:a2:44: 1b:36:b3:66:65:93:40:14:bc:56:20:7e:0d:a0:44:7f:12:e4: 88:32:9f:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6uuQ28vs7gmtvLjCDpjkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0OGRhYWYwNDZlMTk4MzZlOWUyOWEwM2U0M2NkNTM1ZTIx NzYxNzYwHhcNMjYwMjA5MTUwMDE3WhcNMjYwMjEwMTUwMDE3WjAzMTEwLwYDVQQD EygyN2VjN2JiNTAxN2ZiOTAwMDFkMjA4ZGZjZjQxNjBhYTlhMzMyNzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzJ/NPn+Q04d7YfcUw/epG/KBkt0 yXk7AJ3fmh/Ldh6VlL+5NeZUVwHfUMVAMIYDbcus2o7TfiGFtQnNBEBfq7vKfL3a v+UsNym2GJGiiG8lOv+6z7EkQ3l7j3R+oQ7cX4o/kqAkkeSJeEctOezj/OhZ4Gjj hghuSRoOrXICUuKxMRri2K63FHIG8+EoO5WbN7/S0b6DDjWVAMh862T1hfFMxIKu IhoZP4MKke/83eaUHzI6PNZz2jpQhbMs7S3n87UYfm8NGPVu2GD2SJq2P4ZOLJ9R /ULwPKwpWdSsNRXkFKd7ZmvecFXIlBOUMd29OnaHE3Hzr0aca9goluQ/9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCfse7UBf7kAAdII389BYKqaMycPMB8GA1UdIwQY MBaAFPSNqvBG4Zg26eKaA+Q81TXiF2F2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUkycThFYmhtRGJwNHBvRDVEelZOZUlYWVhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS83M2M5NjYtM2RiYS00MmM1LWI1NWMt ZDM2NDQyNjU3N2NjLzEvOUkycThFYmhtRGJwNHBvRDVEelZOZUlYWVhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS83M2M5NjYtM2RiYS00MmM1LWI1NWMtZDM2NDQyNjU3N2Nj LzEvOUkycThFYmhtRGJwNHBvRDVEelZOZUlYWVhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHzSigCaV m9F5vqDY3KngtvY6ZwCRaEdart4ceh11AkZ5IrnfEpJ6L7aMUgHfyTh7fOZFmnvz hgbahXTSnIX45s1/Y5McQ97tmxn1BtSa1Kt2YaI7q/g/WpcrcJUVE5cDiN4cKP1O HlpS7ZKLSWWNF6yAceNJ0tsqmyGnhcmkvTO358a5rikp/KN8uBVdv1II4xegtwnl veglsxwBQwMoTLAdOFNFbQrWKEVbws/hHdqiPzhMNZL9SJ9VWuF4g5LXsQ9fCg9k mPpqaNQFqG4bid2V3kuKo9a4iJ7ipGsUKJfD/l+ICvC206JEGzazZmWTQBS8ViB+ DaBEfxLkiDKfbA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:44 2026 by rpki-client