This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a84dba-d7a1-4209-a20d-94ad487f2e01/1/9qiFSCQ7bikKBtKaKzcQS3et5vw.mft File: 9qiFSCQ7bikKBtKaKzcQS3et5vw.mft (raw, json) Hash identifier: d0BlkqkVFdH6h+bmMdLYWD+Z90bLjKbXOY2tZvpg8pQ= Subject key identifier: BB:E3:38:CE:16:16:8E:04:BD:C0:C9:46:E2:2E:E0:2D:76:3F:F2:41 Authority key identifier: F6:A8:85:48:24:3B:6E:29:0A:06:D2:9A:2B:37:10:4B:77:AD:E6:FC Certificate issuer: /CN=f6a88548243b6e290a06d29a2b37104b77ade6fc Certificate serial: 019C4321D3CCB76B4F33B80656615700BBB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9qiFSCQ7bikKBtKaKzcQS3et5vw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a84dba-d7a1-4209-a20d-94ad487f2e01/1/9qiFSCQ7bikKBtKaKzcQS3et5vw.mft Manifest number: 0333 Signing time: Mon 09 Feb 2026 16:00:16 +0000 Manifest this update: Mon 09 Feb 2026 16:00:16 +0000 Manifest next update: Tue 10 Feb 2026 16:00:16 +0000 Files and hashes: 1: 9qiFSCQ7bikKBtKaKzcQS3et5vw.crl (hash: JTGINaZ+tYCT2X4ZY/dISZwLYX5aMxr5kvwIRfg7sdQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a84dba-d7a1-4209-a20d-94ad487f2e01/1/9qiFSCQ7bikKBtKaKzcQS3et5vw.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/a84dba-d7a1-4209-a20d-94ad487f2e01/1/9qiFSCQ7bikKBtKaKzcQS3et5vw.mft rsync://rpki.ripe.net/repository/DEFAULT/9qiFSCQ7bikKBtKaKzcQS3et5vw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:d3:cc:b7:6b:4f:33:b8:06:56:61:57:00:bb:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6a88548243b6e290a06d29a2b37104b77ade6fc Validity Not Before: Feb 9 16:00:16 2026 GMT Not After : Feb 10 16:00:16 2026 GMT Subject: CN=bbe338ce16168e04bdc0c946e22ee02d763ff241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:7c:83:56:1b:f9:d7:52:3f:aa:00:8f:00:96: 03:f8:32:e0:19:55:99:c5:6a:93:be:94:fd:61:3e: 76:b9:f3:6e:a8:42:e2:d5:d0:fe:fb:e9:b8:be:e1: 82:6c:dc:e1:a2:5a:7e:7a:e6:dd:7a:4f:de:65:57: 64:75:47:2c:cb:ff:99:1a:dc:89:3d:16:e3:2f:42: 32:cb:a0:71:53:ac:14:13:01:d8:7f:a0:03:2d:37: c9:36:58:00:8b:c0:44:6f:66:b8:54:a5:78:10:b7: b5:93:03:48:a2:2b:56:b5:87:aa:1f:58:cc:0d:f2: cf:1d:1f:c7:61:9d:3e:59:5e:3d:a6:de:7a:87:ea: a1:11:48:31:6f:49:71:e4:1f:26:24:0e:5c:2e:20: 6b:9a:ac:f3:f2:76:56:38:0b:31:2f:ea:3b:18:1f: ae:c0:1e:8b:28:67:54:4f:95:6a:55:44:30:4c:26: cf:f5:df:72:c7:f0:ee:3b:05:6c:83:53:ce:fd:83: c3:b2:00:27:ea:79:37:e2:17:97:71:6b:70:48:f4: 4b:88:79:50:81:44:06:6c:dd:0e:ec:ce:39:ac:bc: 2a:95:99:ff:b5:f6:8a:c6:d2:f0:61:ba:62:bd:f4: 7a:27:eb:07:03:c2:95:a7:51:7c:21:92:3c:32:ff: 11:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:E3:38:CE:16:16:8E:04:BD:C0:C9:46:E2:2E:E0:2D:76:3F:F2:41 X509v3 Authority Key Identifier: keyid:F6:A8:85:48:24:3B:6E:29:0A:06:D2:9A:2B:37:10:4B:77:AD:E6:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qiFSCQ7bikKBtKaKzcQS3et5vw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a84dba-d7a1-4209-a20d-94ad487f2e01/1/9qiFSCQ7bikKBtKaKzcQS3et5vw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a84dba-d7a1-4209-a20d-94ad487f2e01/1/9qiFSCQ7bikKBtKaKzcQS3et5vw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:db:cf:ab:91:95:85:d2:78:36:18:ec:9d:d7:48:8a:4a:cd: 71:a1:99:57:9c:2e:5b:89:3f:75:c1:e7:ce:1c:92:df:e2:a3: c9:96:12:ae:05:ac:6e:86:41:5f:e2:55:2e:3f:a5:1a:e2:cd: f2:1f:45:7b:b1:ea:b6:51:96:ec:38:88:ff:b9:b1:7c:58:8b: 64:a7:94:93:0b:21:67:c1:f1:0d:1b:a1:6a:63:fe:c8:80:b9: 9a:d7:54:59:02:9d:1a:1c:65:d5:5d:06:ed:6f:62:09:55:2e: ec:ef:5b:9e:48:44:f0:5e:e1:43:2f:0c:de:bd:c5:3d:b5:f8: 64:c6:07:6a:17:11:e0:6a:3c:e3:cf:ba:8c:3a:f2:f1:fd:29: 5e:9b:76:6c:bc:ab:71:cd:a0:c8:8c:4a:29:c0:4f:4c:5b:cd: 1d:07:96:e7:3d:78:46:e3:cf:29:1e:52:1d:65:a7:22:b5:8f: 61:09:38:32:94:57:dc:9b:51:d3:e9:6c:3f:36:15:0f:da:8a: 67:e8:67:3c:30:94:11:b0:81:fc:c9:be:6d:85:af:53:8b:7e: 42:7a:1c:21:91:c3:70:97:ca:22:69:d9:c7:ab:a3:85:1b:d9: 77:bd:87:eb:d1:a9:5d:54:f7:61:b9:fd:ff:7d:c3:c9:0c:66: e2:60:f9:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIdPMt2tPM7gGVmFXALuxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YTg4NTQ4MjQzYjZlMjkwYTA2ZDI5YTJiMzcxMDRiNzdh ZGU2ZmMwHhcNMjYwMjA5MTYwMDE2WhcNMjYwMjEwMTYwMDE2WjAzMTEwLwYDVQQD EyhiYmUzMzhjZTE2MTY4ZTA0YmRjMGM5NDZlMjJlZTAyZDc2M2ZmMjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXyDVhv511I/qgCPAJYD+DLgGVWZ xWqTvpT9YT52ufNuqELi1dD+++m4vuGCbNzholp+eubdek/eZVdkdUcsy/+ZGtyJ PRbjL0Iyy6BxU6wUEwHYf6ADLTfJNlgAi8BEb2a4VKV4ELe1kwNIoitWtYeqH1jM DfLPHR/HYZ0+WV49pt56h+qhEUgxb0lx5B8mJA5cLiBrmqzz8nZWOAsxL+o7GB+u wB6LKGdUT5VqVUQwTCbP9d9yx/DuOwVsg1PO/YPDsgAn6nk34heXcWtwSPRLiHlQ gUQGbN0O7M45rLwqlZn/tfaKxtLwYbpivfR6J+sHA8KVp1F8IZI8Mv8RowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLvjOM4WFo4EvcDJRuIu4C12P/JBMB8GA1UdIwQY MBaAFPaohUgkO24pCgbSmis3EEt3reb8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXFpRlNDUTdiaWtLQnRLYUt6Y1FTM2V0NXZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9hODRkYmEtZDdhMS00MjA5LWEyMGQt OTRhZDQ4N2YyZTAxLzEvOXFpRlNDUTdiaWtLQnRLYUt6Y1FTM2V0NXZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9hODRkYmEtZDdhMS00MjA5LWEyMGQtOTRhZDQ4N2YyZTAx LzEvOXFpRlNDUTdiaWtLQnRLYUt6Y1FTM2V0NXZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZtvPq5GV hdJ4NhjsnddIikrNcaGZV5wuW4k/dcHnzhyS3+KjyZYSrgWsboZBX+JVLj+lGuLN 8h9Fe7HqtlGW7DiI/7mxfFiLZKeUkwshZ8HxDRuhamP+yIC5mtdUWQKdGhxl1V0G 7W9iCVUu7O9bnkhE8F7hQy8M3r3FPbX4ZMYHahcR4Go848+6jDry8f0pXpt2bLyr cc2gyIxKKcBPTFvNHQeW5z14RuPPKR5SHWWnIrWPYQk4MpRX3JtR0+lsPzYVD9qK Z+hnPDCUEbCB/Mm+bYWvU4t+QnocIZHDcJfKImnZx6ujhRvZd72H69GpXVT3Ybn9 /33DyQxm4mD5Rw== -----END CERTIFICATE-----Generated at Mon Feb 9 20:54:10 2026 by rpki-client