This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft File: 9l95H50M9str44nJRWjId0BeUUQ.mft (raw, json) Hash identifier: oR7fD10W5W2SZeEVnG+6PuJME2pa/gLiOxnxdPUKqb8= Subject key identifier: 37:FB:7F:BF:1F:AA:C3:20:C2:16:F8:0B:E4:3A:21:E2:A2:A4:E5:F8 Authority key identifier: F6:5F:79:1F:9D:0C:F6:CB:6B:E3:89:C9:45:68:C8:77:40:5E:51:44 Certificate issuer: /CN=f65f791f9d0cf6cb6be389c94568c877405e5144 Certificate serial: 019C43903E0ADF2709194BB8A011AC71FD75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9l95H50M9str44nJRWjId0BeUUQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft Manifest number: 077A Signing time: Mon 09 Feb 2026 18:00:52 +0000 Manifest this update: Mon 09 Feb 2026 18:00:52 +0000 Manifest next update: Tue 10 Feb 2026 18:00:52 +0000 Files and hashes: 1: 9l95H50M9str44nJRWjId0BeUUQ.crl (hash: i37yhHpDYM2yjImxXH3lD65kVfdcTK9MVqTATeqUVMM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft rsync://rpki.ripe.net/repository/DEFAULT/9l95H50M9str44nJRWjId0BeUUQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:3e:0a:df:27:09:19:4b:b8:a0:11:ac:71:fd:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f65f791f9d0cf6cb6be389c94568c877405e5144 Validity Not Before: Feb 9 18:00:52 2026 GMT Not After : Feb 10 18:00:52 2026 GMT Subject: CN=37fb7fbf1faac320c216f80be43a21e2a2a4e5f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:42:34:dc:e0:44:b6:60:4c:63:a9:1c:5f:6e: 34:13:66:29:10:75:2b:0a:cb:ce:72:6b:a5:d0:18: e6:f9:30:72:04:cc:74:08:90:15:be:bb:1b:71:05: 38:75:6d:99:54:38:a8:9f:c1:4e:f5:5b:76:f3:ca: 14:80:97:5e:1b:b3:48:d5:3b:0d:f8:ca:4e:a3:13: a2:6e:12:32:22:f6:ac:d6:87:24:6c:d9:e6:72:93: 74:e1:6b:bb:03:db:a0:2f:1e:cb:bd:9c:2a:4b:58: 23:a9:44:e6:f3:ac:c1:29:87:a9:80:30:38:25:ac: 84:a3:39:d1:e4:5c:78:f9:1d:76:67:2a:65:db:ac: c7:56:e0:17:48:09:ae:4b:47:2c:97:5e:61:5f:a0: fd:1d:21:65:de:a3:d7:6e:c6:65:bd:87:16:68:75: f9:8a:4f:57:3c:ef:a8:4a:27:03:42:86:95:aa:a5: 19:42:d5:f2:2b:65:d9:20:31:88:a1:3d:27:b9:40: c4:f7:bb:1d:09:e8:6f:ea:dd:9d:5f:a1:18:5d:e4: e0:24:bd:54:f4:5b:dc:b4:16:c1:9d:04:c0:b7:d0: 7e:e3:8c:21:76:37:ab:f2:25:09:50:b0:50:43:1a: 57:8a:32:58:55:eb:5a:82:0d:0a:a7:4f:eb:9d:87: 54:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:FB:7F:BF:1F:AA:C3:20:C2:16:F8:0B:E4:3A:21:E2:A2:A4:E5:F8 X509v3 Authority Key Identifier: keyid:F6:5F:79:1F:9D:0C:F6:CB:6B:E3:89:C9:45:68:C8:77:40:5E:51:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9l95H50M9str44nJRWjId0BeUUQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:e5:b0:4b:40:81:e5:cb:0e:1a:cb:74:a0:cd:1e:9f:ff:48: 48:f4:a1:9a:76:ac:a8:c4:fc:b2:89:9c:4f:77:10:44:b4:5a: 7a:e4:f1:6a:dc:da:c5:1c:7c:c6:0b:3d:a4:f4:06:d8:83:98: bf:8e:c5:41:65:e9:14:1a:fb:87:e3:db:37:ea:f2:00:99:e0: 69:8a:00:0f:f4:3d:f9:54:09:ef:62:c2:4e:d0:cf:e7:2e:03: de:b6:e2:e7:68:f6:02:a1:10:d5:c4:50:17:1f:98:0e:f1:98: 99:39:4c:28:ec:f0:5f:3b:5d:62:fa:fc:3e:77:30:03:df:35: d7:3d:7e:23:e6:cf:16:25:16:b9:00:3f:31:c3:da:28:bf:41: 5a:85:ec:66:b6:d5:5c:a5:23:b6:52:6a:a4:2c:a0:79:6f:33: 60:63:57:e3:9c:a5:61:26:b8:aa:72:2e:81:f6:83:39:8c:91: 39:c9:f1:ec:8d:24:81:79:a7:ac:c9:e1:02:53:76:28:a3:c6: 3c:4d:d8:32:cb:e7:a2:ad:fc:e0:e4:63:0a:3c:bf:f2:f1:76: 55:d5:4e:53:bd:09:a0:ba:ec:98:bf:4d:d2:1b:4a:96:84:06: ab:21:3a:89:91:4b:77:15:05:be:63:01:53:16:e8:e7:f9:9d: 8e:64:6f:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkD4K3ycJGUu4oBGscf11MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NWY3OTFmOWQwY2Y2Y2I2YmUzODljOTQ1NjhjODc3NDA1 ZTUxNDQwHhcNMjYwMjA5MTgwMDUyWhcNMjYwMjEwMTgwMDUyWjAzMTEwLwYDVQQD EygzN2ZiN2ZiZjFmYWFjMzIwYzIxNmY4MGJlNDNhMjFlMmEyYTRlNWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokI03OBEtmBMY6kcX240E2YpEHUr CsvOcmul0Bjm+TByBMx0CJAVvrsbcQU4dW2ZVDion8FO9Vt288oUgJdeG7NI1TsN +MpOoxOibhIyIvas1ockbNnmcpN04Wu7A9ugLx7LvZwqS1gjqUTm86zBKYepgDA4 JayEoznR5Fx4+R12Zypl26zHVuAXSAmuS0csl15hX6D9HSFl3qPXbsZlvYcWaHX5 ik9XPO+oSicDQoaVqqUZQtXyK2XZIDGIoT0nuUDE97sdCehv6t2dX6EYXeTgJL1U 9FvctBbBnQTAt9B+44whdjer8iUJULBQQxpXijJYVetagg0Kp0/rnYdUZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDf7f78fqsMgwhb4C+Q6IeKipOX4MB8GA1UdIwQY MBaAFPZfeR+dDPbLa+OJyUVoyHdAXlFEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWw5NUg1ME05c3RyNDRuSlJXaklkMEJlVVVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8xNzM4OTQtMjBkNS00ZDA0LWJlNzAt Y2QwMzc0MWQyNmI1LzEvOWw5NUg1ME05c3RyNDRuSlJXaklkMEJlVVVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8xNzM4OTQtMjBkNS00ZDA0LWJlNzAtY2QwMzc0MWQyNmI1 LzEvOWw5NUg1ME05c3RyNDRuSlJXaklkMEJlVVVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAruWwS0CB 5csOGst0oM0en/9ISPShmnasqMT8somcT3cQRLRaeuTxatzaxRx8xgs9pPQG2IOY v47FQWXpFBr7h+PbN+ryAJngaYoAD/Q9+VQJ72LCTtDP5y4D3rbi52j2AqEQ1cRQ Fx+YDvGYmTlMKOzwXztdYvr8PncwA9811z1+I+bPFiUWuQA/McPaKL9BWoXsZrbV XKUjtlJqpCygeW8zYGNX45ylYSa4qnIugfaDOYyROcnx7I0kgXmnrMnhAlN2KKPG PE3YMsvnoq384ORjCjy/8vF2VdVOU70JoLrsmL9N0htKloQGqyE6iZFLdxUFvmMB Uxbo5/mdjmRvQA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:02 2026 by rpki-client