This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft File: 9ZrbAgii0qcY0wZLRhP9xDINKPk.mft (raw, json) Hash identifier: vrE5RoewtNR7s237vtiOt1/32ebwqf8v2C2aAAmU0g4= Subject key identifier: 14:2D:25:F5:A4:85:82:79:E4:66:64:31:B1:D5:26:E2:2B:73:E2:30 Authority key identifier: F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9 Certificate issuer: /CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9 Certificate serial: 019C1CF0DF408AA5CB9FD20FC2B4603B9597 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft Manifest number: 0F0A Signing time: Mon 02 Feb 2026 06:01:13 +0000 Manifest this update: Mon 02 Feb 2026 06:01:13 +0000 Manifest next update: Tue 03 Feb 2026 06:01:13 +0000 Files and hashes: 1: 9ZrbAgii0qcY0wZLRhP9xDINKPk.crl (hash: Qvuo2VT5P8PIri+TJPusltGLtFMwlauhyVVLoU6Yzb8=) 2: GdXLtakb-VVZb4sIMxasJO3C9e0.roa (hash: lYew3AcxBQCaUjqVtA2l1sMtRC1UlXtpZ4kuSqJbBQU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1c:f0:df:40:8a:a5:cb:9f:d2:0f:c2:b4:60:3b:95:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9 Validity Not Before: Feb 2 06:01:13 2026 GMT Not After : Feb 3 06:01:13 2026 GMT Subject: CN=142d25f5a4858279e4666431b1d526e22b73e230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:ce:54:1c:a9:98:cc:6a:cb:06:0a:db:80:10: 57:a9:f9:50:3a:18:90:03:30:90:7d:7d:2d:18:be: 6e:a9:2c:a5:e5:ed:02:0c:03:39:aa:84:a5:77:13: 0e:f2:3d:84:05:98:80:6f:22:32:19:73:8b:8c:38: a2:81:97:6b:1f:0a:3a:6c:86:5c:13:36:79:a3:ee: 50:bc:ee:d3:08:a3:6a:54:42:ea:8c:80:5b:80:fd: 1a:32:8d:1b:66:57:83:b8:6d:2b:b5:db:3a:4d:47: 34:84:6f:4f:7f:7f:de:8f:04:86:30:e3:ec:8b:a2: 4e:98:72:f1:90:ac:23:95:7a:91:ea:7c:99:06:0c: 24:53:bb:1b:6d:01:02:2c:c6:26:84:8f:93:17:cd: 54:bd:0f:0f:37:63:80:d3:3a:bb:75:68:4c:85:d7: c5:b2:64:71:0f:c5:75:77:a0:23:d4:1d:4a:fd:25: fb:c6:0d:6c:d6:c4:18:97:81:0f:22:13:77:55:5f: 4e:04:2d:09:c0:91:7e:92:dc:5f:45:44:95:7f:d4: a1:bc:89:3a:ad:20:d5:92:06:f7:b5:5e:04:de:c3: c0:8f:87:c0:1a:28:aa:c8:45:b0:34:b5:f1:cb:b3: 22:62:7d:1d:ec:5b:eb:20:06:a1:e3:b1:90:94:be: 4c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:2D:25:F5:A4:85:82:79:E4:66:64:31:B1:D5:26:E2:2B:73:E2:30 X509v3 Authority Key Identifier: keyid:F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:5e:f7:9f:ca:55:06:80:52:15:b4:69:0f:6b:13:08:74:17: 42:dd:dd:7b:69:ba:fd:7d:fa:68:d5:3d:55:6f:b5:50:bc:da: 76:9f:14:92:72:49:f2:82:a0:1f:86:44:88:af:57:60:13:70: d5:14:35:f9:c7:9c:c5:ca:ae:de:31:77:2f:8a:d6:6a:56:a3: 31:54:da:a5:6c:15:a9:49:e1:a4:62:e8:e5:c4:91:04:b4:59: 7e:c2:6c:60:23:b9:a2:d5:6d:4d:ea:8a:4a:09:a3:f2:a9:0e: 65:74:cc:2b:3a:40:29:81:f9:97:76:ca:e2:61:aa:3a:c5:0c: fc:50:67:e2:d2:6b:3a:c7:d3:4d:7c:a4:c5:fe:c8:0d:79:89: f5:15:48:c3:6e:f0:a7:7d:d0:26:40:80:7e:3e:e0:c2:5c:72: cc:df:8c:c2:3c:30:47:60:3f:6d:6d:0f:67:62:ee:79:c2:cb: ca:59:6e:b5:5b:16:4c:07:65:c9:19:fd:18:46:25:c0:9e:49: 54:c5:68:a7:6c:1b:e3:69:dd:3b:06:12:c3:e7:1a:61:cf:22: ce:04:bb:46:4e:23:05:d6:95:b0:c3:00:91:b1:fe:66:f1:42: c9:18:62:17:6a:a0:79:2a:d7:51:46:3e:ee:67:d3:fb:8a:25: 38:11:b2:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwc8N9AiqXLn9IPwrRgO5WXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1OWFkYjAyMDhhMmQyYTcxOGQzMDY0YjQ2MTNmZGM0MzIw ZDI4ZjkwHhcNMjYwMjAyMDYwMTEzWhcNMjYwMjAzMDYwMTEzWjAzMTEwLwYDVQQD EygxNDJkMjVmNWE0ODU4Mjc5ZTQ2NjY0MzFiMWQ1MjZlMjJiNzNlMjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA885UHKmYzGrLBgrbgBBXqflQOhiQ AzCQfX0tGL5uqSyl5e0CDAM5qoSldxMO8j2EBZiAbyIyGXOLjDiigZdrHwo6bIZc EzZ5o+5QvO7TCKNqVELqjIBbgP0aMo0bZleDuG0rtds6TUc0hG9Pf3/ejwSGMOPs i6JOmHLxkKwjlXqR6nyZBgwkU7sbbQECLMYmhI+TF81UvQ8PN2OA0zq7dWhMhdfF smRxD8V1d6Aj1B1K/SX7xg1s1sQYl4EPIhN3VV9OBC0JwJF+ktxfRUSVf9ShvIk6 rSDVkgb3tV4E3sPAj4fAGiiqyEWwNLXxy7MiYn0d7FvrIAah47GQlL5MdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBQtJfWkhYJ55GZkMbHVJuIrc+IwMB8GA1UdIwQY MBaAFPWa2wIIotKnGNMGS0YT/cQyDSj5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVpyYkFnaWkwcWNZMHdaTFJoUDl4RElOS1BrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9jMGZlZjktYWZmZi00OWRlLTgwOGEt ZTQ0NzhjNTUzMDhhLzEvOVpyYkFnaWkwcWNZMHdaTFJoUDl4RElOS1BrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9jMGZlZjktYWZmZi00OWRlLTgwOGEtZTQ0NzhjNTUzMDhh LzEvOVpyYkFnaWkwcWNZMHdaTFJoUDl4RElOS1BrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALV73n8pV BoBSFbRpD2sTCHQXQt3de2m6/X36aNU9VW+1ULzadp8UknJJ8oKgH4ZEiK9XYBNw 1RQ1+cecxcqu3jF3L4rWalajMVTapWwVqUnhpGLo5cSRBLRZfsJsYCO5otVtTeqK Sgmj8qkOZXTMKzpAKYH5l3bK4mGqOsUM/FBn4tJrOsfTTXykxf7IDXmJ9RVIw27w p33QJkCAfj7gwlxyzN+MwjwwR2A/bW0PZ2LuecLLyllutVsWTAdlyRn9GEYlwJ5J VMVop2wb42ndOwYSw+caYc8izgS7Rk4jBdaVsMMAkbH+ZvFCyRhiF2qgeSrXUUY+ 7mfT+4olOBGyJA== -----END CERTIFICATE-----Generated at Mon Feb 2 09:29:01 2026 by rpki-client