This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft File: 9Il_29x9JQjfzRTP9gCtQ7knkks.mft (raw, json) Hash identifier: CrSdnnGCpsUWCGLUQ+liliWROZb/H6eiUheYMXEYBLs= Subject key identifier: 5F:93:4C:99:73:64:2E:26:78:05:30:A6:AE:8B:DA:EF:E1:90:D7:D9 Authority key identifier: F4:89:7F:DB:DC:7D:25:08:DF:CD:14:CF:F6:00:AD:43:B9:27:92:4B Certificate issuer: /CN=f4897fdbdc7d2508dfcd14cff600ad43b927924b Certificate serial: 019C438FBADB4F0963075DA5EA9C62E4F068 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft Manifest number: 0D43 Signing time: Mon 09 Feb 2026 18:00:18 +0000 Manifest this update: Mon 09 Feb 2026 18:00:18 +0000 Manifest next update: Tue 10 Feb 2026 18:00:18 +0000 Files and hashes: 1: 9Il_29x9JQjfzRTP9gCtQ7knkks.crl (hash: Bbe7lwPJqKW6F/qt/Ey+FjVhppMlVNrgtlY+AZAHqgk=) 2: yCy_86dbJqoexnTrD2dlicXc2yE.roa (hash: JBNXmhezJRCIp5u3OP1UX59OO3DddhKcgHEEF7XBd38=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:ba:db:4f:09:63:07:5d:a5:ea:9c:62:e4:f0:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4897fdbdc7d2508dfcd14cff600ad43b927924b Validity Not Before: Feb 9 18:00:18 2026 GMT Not After : Feb 10 18:00:18 2026 GMT Subject: CN=5f934c9973642e26780530a6ae8bdaefe190d7d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9e:22:11:5b:22:bd:39:4d:15:29:5c:3f:e1: dc:72:c4:9a:62:cf:f4:95:cc:3b:dd:9e:23:46:ee: 63:2e:c4:cd:da:9e:8c:7e:85:cb:e4:03:66:d7:05: 70:d3:31:fc:57:93:6f:23:48:7d:bb:d7:fe:06:d7: c5:9f:17:7d:b2:b1:bd:7f:c7:b2:ca:4e:34:55:14: 92:3b:ff:e0:7d:6e:01:9b:ff:c2:0a:28:9e:12:be: 63:9c:e2:6c:25:69:16:22:0d:8f:e0:17:35:d9:57: 9f:b1:e2:01:a1:70:27:6b:c5:b5:93:c9:5c:df:d6: d7:f8:44:7f:73:99:dd:f4:96:e2:e1:be:85:e4:87: 72:4a:e3:7a:41:93:16:d5:a1:4a:2c:e4:d6:75:84: 0f:68:83:9b:0b:c6:73:07:a6:45:d0:91:57:ae:a4: 10:58:a1:40:5e:e8:5e:82:b0:84:87:4d:bf:47:ad: 3d:6f:25:5d:df:83:68:3b:12:e0:66:11:28:79:bb: e0:7c:f9:99:63:91:1e:c4:e8:ad:08:cd:0b:52:ed: 14:91:32:80:00:09:4e:15:a9:58:bc:9d:99:78:25: 62:c6:21:30:48:17:95:c8:56:34:0b:bb:82:bb:a3: 9b:3f:10:69:41:7a:f4:7c:2f:7e:6d:ae:4a:69:eb: 81:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:93:4C:99:73:64:2E:26:78:05:30:A6:AE:8B:DA:EF:E1:90:D7:D9 X509v3 Authority Key Identifier: keyid:F4:89:7F:DB:DC:7D:25:08:DF:CD:14:CF:F6:00:AD:43:B9:27:92:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:df:1e:28:ee:06:e4:9e:d3:ae:03:39:37:bd:c3:d3:7c:c5: 2c:1f:dc:2c:5b:3e:42:8a:e5:82:ab:ea:38:eb:5c:2b:c8:0e: 29:0e:79:bd:3d:41:68:7c:47:57:a7:33:cf:38:82:27:b9:19: 93:12:3f:08:f3:5d:f5:87:0b:68:2d:51:83:fe:62:49:fd:4b: e4:d6:84:41:39:f9:a2:75:ba:9a:34:60:6b:ed:40:33:3b:77: ba:6e:24:40:23:ff:fd:92:f3:4c:25:d5:ae:a4:5e:7c:83:a6: 90:66:56:f4:ad:1a:66:67:ba:3e:32:19:f3:15:2c:1d:3f:cb: 9b:05:9e:e5:43:4c:09:e1:ec:1a:e9:69:7b:26:c0:34:33:85: f2:89:64:12:39:59:4c:5a:3f:08:33:4d:eb:25:35:e8:0d:04: 6e:d6:c3:63:67:17:55:28:b7:60:2d:9c:70:72:d5:b1:be:ba: d0:6a:12:ee:99:46:3d:77:0c:fd:0c:ce:3a:97:20:42:7b:2c: cd:f7:ee:d1:69:bc:f8:32:bd:78:7d:06:0a:23:ce:17:e4:46: bb:a1:af:a6:bb:a5:f3:38:88:76:e8:c5:76:e7:52:e0:58:32: 09:18:0c:1a:bc:08:7f:fe:8e:77:cb:2f:a3:1f:4c:f2:a8:e0: 0e:6a:e8:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj7rbTwljB12l6pxi5PBoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ODk3ZmRiZGM3ZDI1MDhkZmNkMTRjZmY2MDBhZDQzYjky NzkyNGIwHhcNMjYwMjA5MTgwMDE4WhcNMjYwMjEwMTgwMDE4WjAzMTEwLwYDVQQD Eyg1ZjkzNGM5OTczNjQyZTI2NzgwNTMwYTZhZThiZGFlZmUxOTBkN2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0J4iEVsivTlNFSlcP+HccsSaYs/0 lcw73Z4jRu5jLsTN2p6MfoXL5ANm1wVw0zH8V5NvI0h9u9f+BtfFnxd9srG9f8ey yk40VRSSO//gfW4Bm//CCiieEr5jnOJsJWkWIg2P4Bc12VefseIBoXAna8W1k8lc 39bX+ER/c5nd9Jbi4b6F5IdySuN6QZMW1aFKLOTWdYQPaIObC8ZzB6ZF0JFXrqQQ WKFAXuhegrCEh02/R609byVd34NoOxLgZhEoebvgfPmZY5EexOitCM0LUu0UkTKA AAlOFalYvJ2ZeCVixiEwSBeVyFY0C7uCu6ObPxBpQXr0fC9+ba5KaeuBKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF+TTJlzZC4meAUwpq6L2u/hkNfZMB8GA1UdIwQY MBaAFPSJf9vcfSUI380Uz/YArUO5J5JLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUlsXzI5eDlKUWpmelJUUDlnQ3RRN2tua2tzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC83Yjk5N2ItYmVhNi00ODkxLTk1ZDEt OTRjNmY3NDRkZTQ2LzEvOUlsXzI5eDlKUWpmelJUUDlnQ3RRN2tua2tzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC83Yjk5N2ItYmVhNi00ODkxLTk1ZDEtOTRjNmY3NDRkZTQ2 LzEvOUlsXzI5eDlKUWpmelJUUDlnQ3RRN2tua2tzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf98eKO4G 5J7TrgM5N73D03zFLB/cLFs+QorlgqvqOOtcK8gOKQ55vT1BaHxHV6czzziCJ7kZ kxI/CPNd9YcLaC1Rg/5iSf1L5NaEQTn5onW6mjRga+1AMzt3um4kQCP//ZLzTCXV rqRefIOmkGZW9K0aZme6PjIZ8xUsHT/LmwWe5UNMCeHsGulpeybANDOF8olkEjlZ TFo/CDNN6yU16A0EbtbDY2cXVSi3YC2ccHLVsb660GoS7plGPXcM/QzOOpcgQnss zffu0Wm8+DK9eH0GCiPOF+RGu6Gvprul8ziIdujFdudS4FgyCRgMGrwIf/6Od8sv ox9M8qjgDmroGg== -----END CERTIFICATE-----Generated at Tue Feb 10 00:17:33 2026 by rpki-client