This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft File: 9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft (raw, json) Hash identifier: ISVK3HAwJDypzc4iwPhUGbrN2E9LxkJMm0ZYDjlVQTU= Subject key identifier: 1F:B4:47:B4:38:2F:81:48:CC:01:39:88:49:68:8B:0A:A4:0D:BA:ED Authority key identifier: F4:57:C0:20:CD:C2:2B:68:DA:26:A4:69:F6:FF:A6:B4:48:37:0D:1D Certificate issuer: /CN=f457c020cdc22b68da26a469f6ffa6b448370d1d Certificate serial: 019C427DE05DD5E34353066C5F72035BCB35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft Manifest number: 0BF1 Signing time: Mon 09 Feb 2026 13:01:11 +0000 Manifest this update: Mon 09 Feb 2026 13:01:11 +0000 Manifest next update: Tue 10 Feb 2026 13:01:11 +0000 Files and hashes: 1: 9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl (hash: XjWLsz1P7319LB5675o8anqQJgVqmYRUmB90nIy0WNM=) 2: sIunFd-UhDIY2he6578HnH9KYM4.roa (hash: cM+uL/KniFpxQyhA1SMW/C3f3nO1DxP+MeewVaQ/1Ok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:e0:5d:d5:e3:43:53:06:6c:5f:72:03:5b:cb:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f457c020cdc22b68da26a469f6ffa6b448370d1d Validity Not Before: Feb 9 13:01:11 2026 GMT Not After : Feb 10 13:01:11 2026 GMT Subject: CN=1fb447b4382f8148cc01398849688b0aa40dbaed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:50:f8:cf:37:5c:f0:6f:e7:1e:46:30:fc:48: 1e:64:74:5d:54:c8:19:ed:8a:e3:46:96:30:da:6b: 75:8b:8f:f3:4c:50:77:16:c2:15:a9:f1:e0:05:1e: b9:12:c0:fa:db:6f:4b:08:8c:18:94:66:d9:a1:0d: 2f:1c:a8:89:27:ed:a2:2a:e6:25:60:2c:44:a6:8d: 70:67:d7:bb:44:b8:e7:a8:8a:37:d4:82:bc:9a:e8: 96:70:c0:b7:fa:d0:dd:4f:9f:ef:bb:9d:6e:fa:8c: a4:8d:d0:84:2c:53:52:94:89:eb:a3:8b:8b:0e:ef: e2:24:54:cb:97:b6:48:29:71:8e:dc:f5:41:20:92: 0f:22:5e:7c:b2:fe:f9:bd:93:7d:3f:b2:8f:07:82: 7d:2e:f3:a2:49:44:7a:c4:56:8b:ee:37:1a:b7:c3: 74:5c:dd:93:a0:06:ea:ae:e0:71:90:52:9a:10:35: 11:f7:6d:dc:cc:b3:8e:df:b9:75:c5:47:b6:3d:a8: c3:e8:27:02:c5:b4:45:c2:3c:1e:8f:b6:45:1e:ad: 13:24:87:45:9c:c5:8d:f7:1b:3a:e7:9a:de:ea:f6: a7:ab:be:03:6c:26:56:2e:57:fb:19:26:7d:ec:d3: 61:81:53:aa:9f:09:7f:92:25:6a:e7:cd:16:d9:2d: 42:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B4:47:B4:38:2F:81:48:CC:01:39:88:49:68:8B:0A:A4:0D:BA:ED X509v3 Authority Key Identifier: keyid:F4:57:C0:20:CD:C2:2B:68:DA:26:A4:69:F6:FF:A6:B4:48:37:0D:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:83:58:fb:51:55:09:fb:e2:87:1d:a2:82:8e:22:72:e8:44: b0:55:31:2a:e7:6e:3b:6c:f5:42:85:b2:15:77:1f:38:af:cd: ef:61:84:c1:11:a2:08:3b:e1:62:f5:e2:8b:71:f2:0d:04:f9: 83:77:6a:03:c0:66:a3:95:fd:aa:61:b9:9d:e4:bc:04:e3:e3: eb:13:4f:c5:0d:11:4a:08:ee:37:e5:e3:a5:56:57:27:f5:53: c1:4a:e5:75:51:ef:aa:14:f4:e0:63:2d:97:7b:28:d3:a5:93: 85:84:7b:ba:31:bb:e3:f2:26:01:9e:e7:7f:59:99:fd:0c:de: a6:89:19:36:d8:6d:8e:61:ac:a5:12:3c:a3:26:e8:6a:ba:c7: 3b:27:70:2b:3b:22:36:96:77:fd:fa:f6:32:c6:f0:d2:55:2e: 3d:0f:86:0d:27:6d:ca:69:d6:ef:c2:c3:22:0e:56:de:5a:57: 56:52:e4:a0:c9:60:d8:83:6d:2a:d9:d3:dd:cd:25:1b:82:2a: dc:6c:f5:49:be:57:a4:a4:7b:74:b0:f4:4b:b1:28:43:2b:53: 97:c3:c9:5e:48:e3:a5:7d:fc:45:7b:8a:f6:f9:9e:19:3f:00: c8:65:10:60:a5:18:2d:71:81:e3:b9:08:ae:26:a4:03:7f:09: c1:0f:94:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfeBd1eNDUwZsX3IDW8s1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0NTdjMDIwY2RjMjJiNjhkYTI2YTQ2OWY2ZmZhNmI0NDgz NzBkMWQwHhcNMjYwMjA5MTMwMTExWhcNMjYwMjEwMTMwMTExWjAzMTEwLwYDVQQD EygxZmI0NDdiNDM4MmY4MTQ4Y2MwMTM5ODg0OTY4OGIwYWE0MGRiYWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVD4zzdc8G/nHkYw/EgeZHRdVMgZ 7YrjRpYw2mt1i4/zTFB3FsIVqfHgBR65EsD6229LCIwYlGbZoQ0vHKiJJ+2iKuYl YCxEpo1wZ9e7RLjnqIo31IK8muiWcMC3+tDdT5/vu51u+oykjdCELFNSlInro4uL Du/iJFTLl7ZIKXGO3PVBIJIPIl58sv75vZN9P7KPB4J9LvOiSUR6xFaL7jcat8N0 XN2ToAbqruBxkFKaEDUR923czLOO37l1xUe2PajD6CcCxbRFwjwej7ZFHq0TJIdF nMWN9xs655re6vanq74DbCZWLlf7GSZ97NNhgVOqnwl/kiVq580W2S1CrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB+0R7Q4L4FIzAE5iEloiwqkDbrtMB8GA1UdIwQY MBaAFPRXwCDNwito2iakafb/prRINw0dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUZmQUlNM0NLMmphSnFScDl2LW10RWczRFIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lMGNiMDYtZGVjYS00OTVkLWFjYzAt N2JhZmQ0M2U3ODYyLzEvOUZmQUlNM0NLMmphSnFScDl2LW10RWczRFIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9lMGNiMDYtZGVjYS00OTVkLWFjYzAtN2JhZmQ0M2U3ODYy LzEvOUZmQUlNM0NLMmphSnFScDl2LW10RWczRFIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK4NY+1FV Cfvihx2igo4icuhEsFUxKuduO2z1QoWyFXcfOK/N72GEwRGiCDvhYvXii3HyDQT5 g3dqA8Bmo5X9qmG5neS8BOPj6xNPxQ0RSgjuN+XjpVZXJ/VTwUrldVHvqhT04GMt l3so06WThYR7ujG74/ImAZ7nf1mZ/QzepokZNthtjmGspRI8oyboarrHOydwKzsi NpZ3/fr2Msbw0lUuPQ+GDSdtymnW78LDIg5W3lpXVlLkoMlg2INtKtnT3c0lG4Iq 3Gz1Sb5XpKR7dLD0S7EoQytTl8PJXkjjpX38RXuK9vmeGT8AyGUQYKUYLXGB47kI riakA38JwQ+UrQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:55 2026 by rpki-client