This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft File: 9XwaqtuDIN2EMjVFjPLFy_RwStY.mft (raw, json) Hash identifier: ts617hvRNvfucPvvGwhn2r3oUaVginyUKUyY6llwY34= Subject key identifier: CD:EC:3B:AD:1E:D2:A6:0F:8E:D1:1A:5F:97:23:C9:48:34:DE:87:98 Authority key identifier: F5:7C:1A:AA:DB:83:20:DD:84:32:35:45:8C:F2:C5:CB:F4:70:4A:D6 Certificate issuer: /CN=f57c1aaadb8320dd843235458cf2c5cbf4704ad6 Certificate serial: 019C43907A8151CAE5592696584320C62868 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft Manifest number: 0A00 Signing time: Mon 09 Feb 2026 18:01:07 +0000 Manifest this update: Mon 09 Feb 2026 18:01:07 +0000 Manifest next update: Tue 10 Feb 2026 18:01:07 +0000 Files and hashes: 1: 9XwaqtuDIN2EMjVFjPLFy_RwStY.crl (hash: +L/oTqS82Z8CDnsNbBRidI0J7esAphD6ZEPS0JiY0hk=) 2: DASQ8NU1yHanG6tnp7TCLgdJSB8.roa (hash: W/n6G98Zq5gjZZSilKHseC4jqvetgfkl6TxxF14gb54=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:7a:81:51:ca:e5:59:26:96:58:43:20:c6:28:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f57c1aaadb8320dd843235458cf2c5cbf4704ad6 Validity Not Before: Feb 9 18:01:07 2026 GMT Not After : Feb 10 18:01:07 2026 GMT Subject: CN=cdec3bad1ed2a60f8ed11a5f9723c94834de8798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1d:e3:1e:3c:a9:8e:b0:17:51:96:62:c0:da: 7a:bc:70:c4:e5:d5:d6:5d:15:11:12:7b:8b:66:a1: f8:e8:1e:d8:a3:48:c0:78:c8:24:1d:e2:75:25:29: 72:4a:21:38:5f:65:c0:18:61:8f:ad:3e:dd:e6:d5: 7b:04:6d:9c:a4:26:54:e8:7f:64:8f:ca:7e:42:72: 4f:ec:25:9e:ec:82:0a:6a:4b:9e:97:e5:8a:89:b7: 40:4b:5a:89:c7:1c:34:0b:05:1a:56:1d:11:52:d2: 42:fd:f8:67:b7:5b:ee:d7:19:ee:1c:01:c8:5b:12: 8d:8f:04:74:24:45:a1:60:d1:cf:f7:20:38:b9:1b: 6d:7d:53:73:bb:8a:d8:04:b2:27:90:67:25:c5:ab: c6:0c:a9:a7:24:24:f6:32:e6:09:4d:a0:b0:c5:b5: c1:04:21:20:81:40:5a:d4:78:02:a8:9f:a9:5f:4d: 32:5e:9f:5c:06:aa:f4:9e:e2:b0:21:21:17:04:47: 4d:ee:f2:04:43:a4:5a:7c:c0:65:d1:23:1d:51:af: 33:5a:25:c8:e8:be:db:d9:06:a6:a4:61:66:f3:39: ec:f7:7b:88:b8:86:32:0f:68:b6:d0:3a:80:7e:51: 3f:04:2d:5f:97:9e:c3:70:d4:e4:d7:11:e6:f2:09: 52:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:EC:3B:AD:1E:D2:A6:0F:8E:D1:1A:5F:97:23:C9:48:34:DE:87:98 X509v3 Authority Key Identifier: keyid:F5:7C:1A:AA:DB:83:20:DD:84:32:35:45:8C:F2:C5:CB:F4:70:4A:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:4f:fb:55:db:dc:a6:bb:df:e4:03:ed:4c:d5:30:ee:a2:51: 31:15:74:4b:6a:2e:7f:e2:e1:c6:b8:c3:ec:1b:67:18:0a:19: 1d:3e:01:87:8c:09:1d:e1:1b:9a:20:b8:57:76:4b:40:ab:4d: 3c:1d:1b:94:c0:7f:77:64:fc:95:a0:69:85:1a:bf:9f:fe:99: 4e:67:09:41:fe:43:2b:29:a0:30:44:d9:84:cf:96:22:62:4c: f3:19:49:60:4c:ca:b6:d0:1f:b1:35:be:fc:03:5d:19:73:fe: 60:77:d1:e7:b7:50:c9:c5:8d:89:2f:cc:96:f9:98:40:8e:16: 89:b8:0b:3f:90:18:a7:d9:64:f5:ef:b0:61:77:98:e8:43:bc: 17:67:8b:5c:4b:21:c4:52:37:da:96:1b:a5:ac:6c:f2:82:17: bb:1b:af:c9:4a:2d:42:50:03:ac:7a:08:f5:d0:90:a6:82:4b: c7:f8:6d:8a:af:6c:f3:b1:d6:99:e2:4f:18:c3:0c:00:74:0c: 97:2f:0f:24:43:66:1b:16:ab:c7:3a:9b:1d:8a:bb:a2:b5:69: 8d:5a:f5:10:6e:99:89:ea:3a:7d:a4:35:50:43:bd:b4:20:10: 1f:2d:16:93:3d:05:b5:36:bc:1e:17:84:3f:25:18:52:be:bb: d8:41:cb:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkHqBUcrlWSaWWEMgxihoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1N2MxYWFhZGI4MzIwZGQ4NDMyMzU0NThjZjJjNWNiZjQ3 MDRhZDYwHhcNMjYwMjA5MTgwMTA3WhcNMjYwMjEwMTgwMTA3WjAzMTEwLwYDVQQD EyhjZGVjM2JhZDFlZDJhNjBmOGVkMTFhNWY5NzIzYzk0ODM0ZGU4Nzk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnB3jHjypjrAXUZZiwNp6vHDE5dXW XRUREnuLZqH46B7Yo0jAeMgkHeJ1JSlySiE4X2XAGGGPrT7d5tV7BG2cpCZU6H9k j8p+QnJP7CWe7IIKakuel+WKibdAS1qJxxw0CwUaVh0RUtJC/fhnt1vu1xnuHAHI WxKNjwR0JEWhYNHP9yA4uRttfVNzu4rYBLInkGclxavGDKmnJCT2MuYJTaCwxbXB BCEggUBa1HgCqJ+pX00yXp9cBqr0nuKwISEXBEdN7vIEQ6RafMBl0SMdUa8zWiXI 6L7b2QampGFm8zns93uIuIYyD2i20DqAflE/BC1fl57DcNTk1xHm8glSZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM3sO60e0qYPjtEaX5cjyUg03oeYMB8GA1UdIwQY MBaAFPV8GqrbgyDdhDI1RYzyxcv0cErWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVh3YXF0dURJTjJFTWpWRmpQTEZ5X1J3U3RZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9jM2U4NzEtMjBjYy00NGY0LWJmYTAt YTE4NTZkZDdiNWQ4LzEvOVh3YXF0dURJTjJFTWpWRmpQTEZ5X1J3U3RZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9jM2U4NzEtMjBjYy00NGY0LWJmYTAtYTE4NTZkZDdiNWQ4 LzEvOVh3YXF0dURJTjJFTWpWRmpQTEZ5X1J3U3RZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoU/7Vdvc prvf5APtTNUw7qJRMRV0S2ouf+LhxrjD7BtnGAoZHT4Bh4wJHeEbmiC4V3ZLQKtN PB0blMB/d2T8laBphRq/n/6ZTmcJQf5DKymgMETZhM+WImJM8xlJYEzKttAfsTW+ /ANdGXP+YHfR57dQycWNiS/MlvmYQI4WibgLP5AYp9lk9e+wYXeY6EO8F2eLXEsh xFI32pYbpaxs8oIXuxuvyUotQlADrHoI9dCQpoJLx/htiq9s87HWmeJPGMMMAHQM ly8PJENmGxarxzqbHYq7orVpjVr1EG6Zieo6faQ1UEO9tCAQHy0Wkz0FtTa8HheE PyUYUr672EHLAA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:42:26 2026 by rpki-client