This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.mft File: a1a9UK-T9GN-LAfi7EAya8ZABSc.mft (raw, json) Hash identifier: QHIu7Z1iWeFowbHSGzBI/MuDVwMLfKGbdcBkYuLKptU= Subject key identifier: E4:90:1D:58:68:25:68:4F:B5:B5:52:C0:03:F2:8D:37:C5:B2:0F:2B Authority key identifier: 6B:56:BD:50:AF:93:F4:63:7E:2C:07:E2:EC:40:32:6B:C6:40:05:27 Certificate issuer: /CN=6b56bd50af93f4637e2c07e2ec40326bc6400527 Certificate serial: 019C427DF399191E79C9C4350392DC170D83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1a9UK-T9GN-LAfi7EAya8ZABSc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.mft Manifest number: 046C Signing time: Mon 09 Feb 2026 13:01:16 +0000 Manifest this update: Mon 09 Feb 2026 13:01:16 +0000 Manifest next update: Tue 10 Feb 2026 13:01:16 +0000 Files and hashes: 1: a1a9UK-T9GN-LAfi7EAya8ZABSc.crl (hash: CxGIYV9FX6lnxJp3k6hWEWW1tM0oWG0GhybFeX0mNiU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.mft rsync://rpki.ripe.net/repository/DEFAULT/a1a9UK-T9GN-LAfi7EAya8ZABSc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:f3:99:19:1e:79:c9:c4:35:03:92:dc:17:0d:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b56bd50af93f4637e2c07e2ec40326bc6400527 Validity Not Before: Feb 9 13:01:16 2026 GMT Not After : Feb 10 13:01:16 2026 GMT Subject: CN=e4901d586825684fb5b552c003f28d37c5b20f2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2c:c2:81:77:ee:02:7b:58:67:00:64:ab:40: 21:f5:58:c3:7b:8f:94:5d:07:c8:15:ad:26:24:8a: 32:13:d7:b5:c8:6d:e4:8c:ff:96:13:7a:3a:bd:a4: c6:3d:45:00:de:59:54:19:3d:b0:3d:bd:aa:5d:71: c0:51:29:59:00:32:3a:cd:4c:70:52:5f:10:b4:a2: ba:a8:0b:ec:d6:d1:78:03:af:f5:fb:82:d9:15:91: 63:16:d6:be:69:2a:d6:93:02:51:5f:d0:a3:a2:45: 1e:48:eb:32:ce:df:02:f6:e5:3f:c0:58:69:76:49: 2f:22:33:f7:dc:e4:d0:97:98:74:e9:40:40:5e:88: b2:e0:5d:7f:cc:36:87:9f:03:b6:c2:b8:22:9f:ff: f3:8c:7c:6c:cb:09:bf:70:d7:2c:89:1b:e3:f9:1d: 7d:1a:37:07:a5:69:7b:d9:88:fc:c5:71:bd:4d:ac: 5a:6e:60:42:ef:00:75:aa:34:e5:e8:10:0a:6d:48: cf:29:2b:fc:fb:4d:35:25:37:9d:cc:e0:7b:14:a9: 00:75:c0:a6:8f:86:84:50:99:d7:0f:dc:d5:fc:f0: 81:93:d3:0d:ea:98:53:85:e9:86:c7:b2:ae:84:6c: 71:34:5a:c5:ce:f1:96:06:b0:bf:9d:65:d9:bc:53: 74:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:90:1D:58:68:25:68:4F:B5:B5:52:C0:03:F2:8D:37:C5:B2:0F:2B X509v3 Authority Key Identifier: keyid:6B:56:BD:50:AF:93:F4:63:7E:2C:07:E2:EC:40:32:6B:C6:40:05:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1a9UK-T9GN-LAfi7EAya8ZABSc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:f0:52:c7:a6:cf:4a:b5:7f:2f:7d:92:c9:17:87:00:7e:29: 3a:db:fb:8a:29:1e:1c:4e:a6:48:02:e4:db:8f:e0:8f:88:a7: 9e:03:f3:a9:aa:32:a9:de:e0:02:41:24:9a:52:1d:36:0e:06: ea:32:39:a6:21:62:8c:8c:37:ee:dd:2b:7e:34:d9:22:6d:8e: 4e:7d:ee:1c:b8:10:00:47:7a:00:5f:4b:49:e3:f2:1a:fb:59: 6c:29:bb:b6:dd:f9:79:ba:ed:40:b1:86:d9:af:e7:79:8c:f3: 06:e3:b3:ee:83:d0:93:59:22:04:53:0d:10:15:4c:69:dd:43: a8:93:6b:54:3e:db:c7:05:a4:08:3c:1f:6b:10:6f:7d:fb:bb: 0b:8b:d4:96:21:78:de:42:ba:2c:18:98:51:c2:3c:f5:2a:2f: 06:76:1a:e4:f2:6b:b6:db:ca:0b:91:e7:d8:42:3f:75:a3:4c: 04:b2:6f:0d:37:d1:11:87:e0:34:dd:b9:f4:61:41:71:ef:ed: 5b:5e:ea:41:be:d2:b2:00:26:00:11:82:f3:aa:cb:73:e8:0a: 37:f2:f1:d1:fc:48:27:89:59:c5:51:19:2d:68:7d:5c:19:76: 2f:ba:f8:d7:1b:74:1a:e9:1d:26:3c:34:87:36:a8:94:3e:0c: 3e:6b:c6:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCffOZGR55ycQ1A5LcFw2DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNTZiZDUwYWY5M2Y0NjM3ZTJjMDdlMmVjNDAzMjZiYzY0 MDA1MjcwHhcNMjYwMjA5MTMwMTE2WhcNMjYwMjEwMTMwMTE2WjAzMTEwLwYDVQQD EyhlNDkwMWQ1ODY4MjU2ODRmYjViNTUyYzAwM2YyOGQzN2M1YjIwZjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCzCgXfuAntYZwBkq0Ah9VjDe4+U XQfIFa0mJIoyE9e1yG3kjP+WE3o6vaTGPUUA3llUGT2wPb2qXXHAUSlZADI6zUxw Ul8QtKK6qAvs1tF4A6/1+4LZFZFjFta+aSrWkwJRX9CjokUeSOsyzt8C9uU/wFhp dkkvIjP33OTQl5h06UBAXoiy4F1/zDaHnwO2wrgin//zjHxsywm/cNcsiRvj+R19 GjcHpWl72Yj8xXG9TaxabmBC7wB1qjTl6BAKbUjPKSv8+001JTedzOB7FKkAdcCm j4aEUJnXD9zV/PCBk9MN6phThemGx7KuhGxxNFrFzvGWBrC/nWXZvFN0iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOSQHVhoJWhPtbVSwAPyjTfFsg8rMB8GA1UdIwQY MBaAFGtWvVCvk/RjfiwH4uxAMmvGQAUnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTFhOVVLLVQ5R04tTEFmaTdFQXlhOFpBQlNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mZDM0MjktNDUyNC00ZmNmLTk1OTIt Mjk5NmQ4ZmI2OTdlLzEvYTFhOVVLLVQ5R04tTEFmaTdFQXlhOFpBQlNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9mZDM0MjktNDUyNC00ZmNmLTk1OTItMjk5NmQ4ZmI2OTdl LzEvYTFhOVVLLVQ5R04tTEFmaTdFQXlhOFpBQlNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAffBSx6bP SrV/L32SyReHAH4pOtv7iikeHE6mSALk24/gj4inngPzqaoyqd7gAkEkmlIdNg4G 6jI5piFijIw37t0rfjTZIm2OTn3uHLgQAEd6AF9LSePyGvtZbCm7tt35ebrtQLGG 2a/neYzzBuOz7oPQk1kiBFMNEBVMad1DqJNrVD7bxwWkCDwfaxBvffu7C4vUliF4 3kK6LBiYUcI89SovBnYa5PJrttvKC5Hn2EI/daNMBLJvDTfREYfgNN259GFBce/t W17qQb7SsgAmABGC86rLc+gKN/Lx0fxIJ4lZxVEZLWh9XBl2L7r41xt0GukdJjw0 hzaolD4MPmvGcQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:46:10 2026 by rpki-client