This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft File: 9H1LS48bGIg-rDtJnA8EKsomsKk.mft (raw, json) Hash identifier: k9s225Cc2h1INaV1tFi/MCQK/DM2vCr4qEMxM8nKxRg= Subject key identifier: 75:C9:A3:3A:6F:89:EC:52:34:6F:A4:32:76:F8:F6:27:A6:62:EB:0E Authority key identifier: F4:7D:4B:4B:8F:1B:18:88:3E:AC:3B:49:9C:0F:04:2A:CA:26:B0:A9 Certificate issuer: /CN=f47d4b4b8f1b18883eac3b499c0f042aca26b0a9 Certificate serial: 019C42EAE883FE3E596557F6F5DB5AC7F34A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9H1LS48bGIg-rDtJnA8EKsomsKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft Manifest number: 0B42 Signing time: Mon 09 Feb 2026 15:00:17 +0000 Manifest this update: Mon 09 Feb 2026 15:00:17 +0000 Manifest next update: Tue 10 Feb 2026 15:00:17 +0000 Files and hashes: 1: 9H1LS48bGIg-rDtJnA8EKsomsKk.crl (hash: S46+y6IaZ4UlcIJtysTRCaxZJCZbRfQTjaQmOa6AX5s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft rsync://rpki.ripe.net/repository/DEFAULT/9H1LS48bGIg-rDtJnA8EKsomsKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:ea:e8:83:fe:3e:59:65:57:f6:f5:db:5a:c7:f3:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f47d4b4b8f1b18883eac3b499c0f042aca26b0a9 Validity Not Before: Feb 9 15:00:17 2026 GMT Not After : Feb 10 15:00:17 2026 GMT Subject: CN=75c9a33a6f89ec52346fa43276f8f627a662eb0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:8e:a7:21:b6:51:17:1f:7b:27:37:3d:31:e5: b0:69:80:92:e5:a1:0a:9d:11:07:44:40:84:e0:c3: 5a:49:81:90:d5:d1:01:45:89:f4:fc:f3:24:68:cb: 0a:54:17:fa:4a:6b:d3:80:a2:da:f8:15:46:e0:f6: 25:ef:2c:e0:47:97:39:35:f6:01:f7:09:9f:86:f7: 90:c3:a7:10:4d:ed:f7:6f:a8:0b:0d:ab:db:44:f3: 1e:38:a8:b0:e4:d0:2b:f1:b1:04:92:97:3d:ed:a5: d4:e0:f7:62:b5:d9:ea:13:d0:10:7e:64:43:36:22: e1:aa:ba:cb:13:09:67:79:95:fc:50:ce:82:e4:cd: ba:22:93:ba:27:46:0c:e8:95:16:ea:be:d7:a7:de: 55:90:7b:9e:df:f1:ab:2c:5c:89:19:12:5f:aa:95: 2c:7c:a1:a4:c5:64:98:97:51:e1:bc:cf:6d:f8:02: 9a:c5:bd:a4:b3:94:d5:56:ec:05:3f:0d:66:0a:27: 7d:11:8c:85:21:3a:28:0f:62:b5:a6:79:95:ef:94: 03:37:92:7a:c7:34:bb:2c:25:10:b3:3d:64:9b:be: 54:58:5b:6c:2e:d1:ae:58:89:63:da:f2:a6:f2:da: b2:0f:7e:7a:9a:93:c3:23:43:18:90:56:79:e9:81: fb:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:C9:A3:3A:6F:89:EC:52:34:6F:A4:32:76:F8:F6:27:A6:62:EB:0E X509v3 Authority Key Identifier: keyid:F4:7D:4B:4B:8F:1B:18:88:3E:AC:3B:49:9C:0F:04:2A:CA:26:B0:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9H1LS48bGIg-rDtJnA8EKsomsKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:40:f1:59:c5:ea:54:4f:eb:6e:8a:20:2b:78:5c:de:23:1e: 80:d3:14:18:02:7f:64:18:5f:5d:5f:cf:82:8a:82:a6:7b:de: 00:e3:2b:c5:fe:c8:66:30:c7:f0:cb:23:da:04:b9:12:fd:9f: 66:bc:fe:f0:f3:76:f9:dc:26:f1:f1:05:6a:bf:ab:ff:cf:7b: f5:cb:18:df:df:00:67:81:c3:1f:ba:29:08:16:a5:24:99:9c: 15:e2:52:e1:47:4e:db:27:a6:f0:54:a5:e8:9b:b7:d2:3c:9a: de:88:92:01:51:78:8a:12:52:71:4a:4d:15:d3:f1:5e:71:ce: 22:f6:7f:c8:b7:c2:b9:23:60:25:4e:7a:ef:fb:6f:65:82:fb: e9:b4:7e:a9:99:1f:58:c4:ea:c9:57:60:ea:fb:73:10:be:2e: 4b:7c:4f:4e:04:16:f7:a6:91:3a:04:17:f9:ef:87:ec:81:69: e8:dc:be:b4:c0:4d:73:1b:5c:43:6a:9e:ac:4c:bc:bf:40:24: f4:05:22:1c:8b:1c:2e:32:89:82:98:ee:df:e5:e3:8f:3b:a8: c2:b8:78:fc:52:eb:03:0d:ec:66:ef:79:25:78:84:a0:75:31: 68:4b:c6:d0:3e:bb:11:ec:33:83:7c:2a:79:f8:0a:b7:24:a6: 46:b4:f1:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6uiD/j5ZZVf29dtax/NKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0N2Q0YjRiOGYxYjE4ODgzZWFjM2I0OTljMGYwNDJhY2Ey NmIwYTkwHhcNMjYwMjA5MTUwMDE3WhcNMjYwMjEwMTUwMDE3WjAzMTEwLwYDVQQD Eyg3NWM5YTMzYTZmODllYzUyMzQ2ZmE0MzI3NmY4ZjYyN2E2NjJlYjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Y6nIbZRFx97Jzc9MeWwaYCS5aEK nREHRECE4MNaSYGQ1dEBRYn0/PMkaMsKVBf6SmvTgKLa+BVG4PYl7yzgR5c5NfYB 9wmfhveQw6cQTe33b6gLDavbRPMeOKiw5NAr8bEEkpc97aXU4PditdnqE9AQfmRD NiLhqrrLEwlneZX8UM6C5M26IpO6J0YM6JUW6r7Xp95VkHue3/GrLFyJGRJfqpUs fKGkxWSYl1HhvM9t+AKaxb2ks5TVVuwFPw1mCid9EYyFITooD2K1pnmV75QDN5J6 xzS7LCUQsz1km75UWFtsLtGuWIlj2vKm8tqyD356mpPDI0MYkFZ56YH78QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHXJozpviexSNG+kMnb49iemYusOMB8GA1UdIwQY MBaAFPR9S0uPGxiIPqw7SZwPBCrKJrCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUgxTFM0OGJHSWctckR0Sm5BOEVLc29tc0trLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mNzZkMWYtZWVkZi00YTRkLTg5NWIt MjcxNjY3NTNkZjA4LzEvOUgxTFM0OGJHSWctckR0Sm5BOEVLc29tc0trLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9mNzZkMWYtZWVkZi00YTRkLTg5NWItMjcxNjY3NTNkZjA4 LzEvOUgxTFM0OGJHSWctckR0Sm5BOEVLc29tc0trLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD0DxWcXq VE/rboogK3hc3iMegNMUGAJ/ZBhfXV/PgoqCpnveAOMrxf7IZjDH8Msj2gS5Ev2f Zrz+8PN2+dwm8fEFar+r/8979csY398AZ4HDH7opCBalJJmcFeJS4UdO2yem8FSl 6Ju30jya3oiSAVF4ihJScUpNFdPxXnHOIvZ/yLfCuSNgJU567/tvZYL76bR+qZkf WMTqyVdg6vtzEL4uS3xPTgQW96aROgQX+e+H7IFp6Ny+tMBNcxtcQ2qerEy8v0Ak 9AUiHIscLjKJgpju3+Xjjzuowrh4/FLrAw3sZu95JXiEoHUxaEvG0D67Eewzg3wq efgKtySmRrTx7A== -----END CERTIFICATE-----Generated at Mon Feb 9 22:44:57 2026 by rpki-client