This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft File: 9PpnFz_1YpCIuXCWGuG-dGldxmE.mft (raw, json) Hash identifier: 7LRUcYtzwiph5h10XiDDWJewi6cOoAYOd0NMyhypltQ= Subject key identifier: 6D:CB:25:0D:C0:52:EC:B9:D9:DC:27:22:4B:AE:96:FB:39:BC:37:A6 Authority key identifier: F4:FA:67:17:3F:F5:62:90:88:B9:70:96:1A:E1:BE:74:69:5D:C6:61 Certificate issuer: /CN=f4fa67173ff5629088b970961ae1be74695dc661 Certificate serial: 019C4510DC53F50689B206CF82C8AE8F3E45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PpnFz_1YpCIuXCWGuG-dGldxmE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft Manifest number: 180D Signing time: Tue 10 Feb 2026 01:00:58 +0000 Manifest this update: Tue 10 Feb 2026 01:00:58 +0000 Manifest next update: Wed 11 Feb 2026 01:00:58 +0000 Files and hashes: 1: 9PpnFz_1YpCIuXCWGuG-dGldxmE.crl (hash: OEhwKu+t9S+K492xEfzeB88L1c1IFFvUJrC1XhRcFAk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft rsync://rpki.ripe.net/repository/DEFAULT/9PpnFz_1YpCIuXCWGuG-dGldxmE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:45:10:dc:53:f5:06:89:b2:06:cf:82:c8:ae:8f:3e:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4fa67173ff5629088b970961ae1be74695dc661 Validity Not Before: Feb 10 01:00:58 2026 GMT Not After : Feb 11 01:00:58 2026 GMT Subject: CN=6dcb250dc052ecb9d9dc27224bae96fb39bc37a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:02:f1:f9:97:38:e4:83:0c:4e:23:83:5b:50: 37:38:bb:cc:00:18:0f:33:55:ea:13:52:be:fc:de: b0:cf:fb:86:13:36:b4:29:f4:fc:8d:28:d0:12:a1: 07:91:d8:18:d1:c5:96:5b:e2:c3:cf:bc:3b:25:fa: c1:c8:0e:92:49:4a:44:1d:63:55:65:c6:7e:73:1a: ab:0d:a3:1b:ff:ab:ec:9e:b7:78:9f:c0:ed:a3:fe: 65:79:b3:0a:3a:68:57:d7:16:99:3c:34:7c:1c:82: 3e:1e:1c:e7:3f:09:e5:98:4c:53:69:ab:9c:b3:05: 4f:71:c8:84:10:2c:8a:8c:04:9a:fb:59:2e:83:dc: 35:7c:aa:4f:af:df:df:d5:4c:8c:bb:40:e1:a2:b2: 33:3b:56:8f:30:df:97:ce:eb:a2:38:32:e4:03:1a: 78:6c:69:1b:26:ed:84:4f:f3:61:3f:19:30:0f:80: ce:d8:f3:60:e1:03:96:6a:99:77:ce:77:0a:11:59: b1:39:eb:10:19:a1:dd:d7:0d:54:0b:32:86:01:61: 9a:17:21:fa:6b:1c:6d:6a:22:ef:44:b3:83:cb:31: 65:66:c5:dd:12:bf:28:60:87:b3:60:db:62:d7:9e: 83:76:38:73:17:75:98:bf:f0:82:f7:89:f7:8d:cb: 7e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:CB:25:0D:C0:52:EC:B9:D9:DC:27:22:4B:AE:96:FB:39:BC:37:A6 X509v3 Authority Key Identifier: keyid:F4:FA:67:17:3F:F5:62:90:88:B9:70:96:1A:E1:BE:74:69:5D:C6:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PpnFz_1YpCIuXCWGuG-dGldxmE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:c3:3a:fc:f7:8f:5d:e9:bc:9f:0b:a4:35:a4:2d:7f:17:d5: fb:2f:4e:5e:b3:08:0b:4a:bb:e1:5f:c6:e0:99:6b:95:25:6f: 41:6d:b3:6d:94:e4:fa:ff:f6:40:74:0d:ee:c9:67:c4:ac:de: 75:69:b5:44:bf:78:67:7e:4e:05:9d:0b:67:28:79:a4:e2:fe: 58:ef:e6:f5:4b:e1:0d:11:0c:bb:4b:bb:c2:7f:bf:fe:d0:d5: 1a:20:6f:47:28:59:0a:69:15:45:da:9e:b5:b6:2c:6d:8e:bf: 40:99:af:c6:f8:c1:19:d3:ce:f9:64:5a:75:dd:0f:2e:9b:4c: 0c:91:f2:ad:05:a4:ae:5b:e6:ce:d0:01:f0:9f:aa:c4:e3:75: 67:fc:9a:19:cc:b7:ff:dc:af:1d:18:44:81:4b:bb:8c:b1:72: 96:ff:a2:55:ee:82:05:eb:53:e1:a0:1a:dd:10:ff:5c:06:56: 83:45:75:42:60:a2:08:84:c9:ed:ea:c5:7b:d0:ad:a3:a2:36: 08:d4:00:28:52:1e:fc:ae:e6:19:20:f0:96:78:ad:01:c0:b5: 4a:34:89:28:d4:9d:c5:64:51:00:5d:f6:fc:6f:f2:b3:d5:f6: 89:f1:f2:65:8a:81:d6:8d:84:9f:b5:81:d2:58:96:4c:86:0f: a7:90:68:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxFENxT9QaJsgbPgsiujz5FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZmE2NzE3M2ZmNTYyOTA4OGI5NzA5NjFhZTFiZTc0Njk1 ZGM2NjEwHhcNMjYwMjEwMDEwMDU4WhcNMjYwMjExMDEwMDU4WjAzMTEwLwYDVQQD Eyg2ZGNiMjUwZGMwNTJlY2I5ZDlkYzI3MjI0YmFlOTZmYjM5YmMzN2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QLx+Zc45IMMTiODW1A3OLvMABgP M1XqE1K+/N6wz/uGEza0KfT8jSjQEqEHkdgY0cWWW+LDz7w7JfrByA6SSUpEHWNV ZcZ+cxqrDaMb/6vsnrd4n8Dto/5lebMKOmhX1xaZPDR8HII+HhznPwnlmExTaauc swVPcciEECyKjASa+1kug9w1fKpPr9/f1UyMu0DhorIzO1aPMN+XzuuiODLkAxp4 bGkbJu2ET/NhPxkwD4DO2PNg4QOWapl3zncKEVmxOesQGaHd1w1UCzKGAWGaFyH6 axxtaiLvRLODyzFlZsXdEr8oYIezYNti156DdjhzF3WYv/CC94n3jct+gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG3LJQ3AUuy52dwnIkuulvs5vDemMB8GA1UdIwQY MBaAFPT6Zxc/9WKQiLlwlhrhvnRpXcZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVBwbkZ6XzFZcENJdVhDV0d1Ry1kR2xkeG1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi82ODRkZjQtNzI1Ny00Y2NhLTgyNGUt ZDg1ZWJjNWVhOThkLzEvOVBwbkZ6XzFZcENJdVhDV0d1Ry1kR2xkeG1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi82ODRkZjQtNzI1Ny00Y2NhLTgyNGUtZDg1ZWJjNWVhOThk LzEvOVBwbkZ6XzFZcENJdVhDV0d1Ry1kR2xkeG1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAesM6/PeP Xem8nwukNaQtfxfV+y9OXrMIC0q74V/G4JlrlSVvQW2zbZTk+v/2QHQN7slnxKze dWm1RL94Z35OBZ0LZyh5pOL+WO/m9UvhDREMu0u7wn+//tDVGiBvRyhZCmkVRdqe tbYsbY6/QJmvxvjBGdPO+WRadd0PLptMDJHyrQWkrlvmztAB8J+qxON1Z/yaGcy3 /9yvHRhEgUu7jLFylv+iVe6CBetT4aAa3RD/XAZWg0V1QmCiCITJ7erFe9Cto6I2 CNQAKFIe/K7mGSDwlnitAcC1SjSJKNSdxWRRAF32/G/ys9X2ifHyZYqB1o2En7WB 0liWTIYPp5BoVg== -----END CERTIFICATE-----Generated at Tue Feb 10 02:55:06 2026 by rpki-client