This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft File: kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft (raw, json) Hash identifier: +adSU4old7d7rZRofAhHQWWQ1ixFs+O696DEPbopAlk= Subject key identifier: 59:1A:80:67:54:8C:A2:C6:89:6E:BF:8A:B0:FE:4E:8A:DF:88:D2:3C Authority key identifier: 92:F8:56:22:E2:2F:C9:6C:EA:CF:73:11:4D:89:0F:4F:3A:A7:D4:95 Certificate issuer: /CN=92f85622e22fc96ceacf73114d890f4f3aa7d495 Certificate serial: 019C43FDB06B3A741DE58DDD429846227AF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft Manifest number: 0F2C Signing time: Mon 09 Feb 2026 20:00:25 +0000 Manifest this update: Mon 09 Feb 2026 20:00:25 +0000 Manifest next update: Tue 10 Feb 2026 20:00:25 +0000 Files and hashes: 1: kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl (hash: ebUP7awG2d1LV7XVIm/uwGNlvhV21IUVfSXNBdqDHeM=) 2: qr3Na9k4dEq-BltyNe_Y-J5z6Xg.roa (hash: WKJf5bBFt3vRZjUBsw0y9RXB09W0E9StehXTEF8mDn0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:b0:6b:3a:74:1d:e5:8d:dd:42:98:46:22:7a:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92f85622e22fc96ceacf73114d890f4f3aa7d495 Validity Not Before: Feb 9 20:00:25 2026 GMT Not After : Feb 10 20:00:25 2026 GMT Subject: CN=591a8067548ca2c6896ebf8ab0fe4e8adf88d23c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:98:56:ab:f2:5d:29:6f:f7:f5:54:df:ea:7f: dc:a8:70:ec:37:80:16:d0:32:33:0c:43:a3:5a:b9: 60:9c:02:59:8d:34:26:56:d9:eb:9d:5b:7b:31:f9: 5b:2d:4d:ff:07:2e:c4:26:62:e5:f8:e8:e9:16:2a: 83:2b:f0:0a:d6:c0:69:56:d4:f8:e3:c7:2c:b3:b6: 68:fa:77:e7:60:22:54:06:b9:9d:c7:d8:05:40:37: 71:6b:6a:aa:86:8c:b9:f9:57:3b:e5:19:9d:d8:fc: c5:d1:85:7f:3d:50:fa:64:68:db:f9:50:cb:0c:0b: c2:9d:d1:d5:24:53:86:cb:d4:e6:13:a8:4a:9e:58: 86:f8:93:0e:cb:1c:d5:1a:94:c1:a9:17:cf:3f:5d: 07:01:07:1c:e9:84:94:89:1f:b5:02:a6:8c:41:92: a7:49:8c:27:14:16:3e:5c:d3:30:a4:26:2b:89:d2: cf:41:cd:15:e9:ee:8e:3c:2d:58:6e:3d:e5:89:5b: 9c:b1:b9:eb:8c:a4:5c:b7:e2:00:2c:7a:ad:da:7e: db:15:8c:b9:9a:59:ca:fd:26:39:ad:fc:3c:f0:dc: df:2c:96:80:31:2b:06:ae:ce:40:c9:78:37:d0:a0: 9c:66:3c:47:44:23:7d:95:e4:ec:7b:79:49:d3:9f: 4e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:1A:80:67:54:8C:A2:C6:89:6E:BF:8A:B0:FE:4E:8A:DF:88:D2:3C X509v3 Authority Key Identifier: keyid:92:F8:56:22:E2:2F:C9:6C:EA:CF:73:11:4D:89:0F:4F:3A:A7:D4:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:93:ff:03:d0:0e:a0:97:b4:4f:f3:9d:15:62:da:e5:f9:38: 12:cc:b6:ac:50:04:ec:8f:8d:5a:22:66:12:0f:40:2d:13:b2: fb:18:1b:5c:32:d3:e0:0a:89:23:30:7e:93:44:92:32:40:46: f2:b6:55:c1:fe:79:f5:6f:98:b9:ea:3c:10:7b:85:14:54:39: 7b:82:41:34:de:68:63:93:65:42:9e:98:2e:60:7c:9a:92:91: 1d:39:ec:95:3f:38:b1:7e:ee:76:d9:59:b2:27:eb:7c:e2:b3: 1c:41:7a:ee:8e:a9:40:74:b9:ce:87:0d:d0:0e:c6:b9:ee:93: 48:2b:3c:d5:fb:17:f3:b0:50:b3:29:1f:f1:5a:7b:a7:7f:03: c1:b8:d9:9d:10:c7:c7:b4:4c:1a:7a:c6:5f:c2:dd:bf:07:76: 88:8d:41:f0:20:e7:f8:c4:c6:8f:f6:44:0f:ed:d6:ed:d7:a0: 44:f3:56:d9:e8:03:aa:be:82:33:34:e0:e4:10:59:9b:12:3e: a7:bc:ba:63:ab:2c:3c:1c:93:79:87:b0:3b:ce:6a:eb:cb:41: b2:04:5f:09:68:f1:e1:d6:f5:9a:cd:99:e8:b7:65:f3:e7:0b: 70:66:67:d4:fd:ab:da:2c:15:d2:3e:fe:f3:37:35:1d:6b:93: 59:ad:c9:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/bBrOnQd5Y3dQphGInrzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZjg1NjIyZTIyZmM5NmNlYWNmNzMxMTRkODkwZjRmM2Fh N2Q0OTUwHhcNMjYwMjA5MjAwMDI1WhcNMjYwMjEwMjAwMDI1WjAzMTEwLwYDVQQD Eyg1OTFhODA2NzU0OGNhMmM2ODk2ZWJmOGFiMGZlNGU4YWRmODhkMjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJhWq/JdKW/39VTf6n/cqHDsN4AW 0DIzDEOjWrlgnAJZjTQmVtnrnVt7MflbLU3/By7EJmLl+OjpFiqDK/AK1sBpVtT4 48css7Zo+nfnYCJUBrmdx9gFQDdxa2qqhoy5+Vc75Rmd2PzF0YV/PVD6ZGjb+VDL DAvCndHVJFOGy9TmE6hKnliG+JMOyxzVGpTBqRfPP10HAQcc6YSUiR+1AqaMQZKn SYwnFBY+XNMwpCYridLPQc0V6e6OPC1Ybj3liVucsbnrjKRct+IALHqt2n7bFYy5 mlnK/SY5rfw88NzfLJaAMSsGrs5AyXg30KCcZjxHRCN9leTse3lJ059OPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFkagGdUjKLGiW6/irD+TorfiNI8MB8GA1UdIwQY MBaAFJL4ViLiL8ls6s9zEU2JD086p9SVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3ZoV0l1SXZ5V3pxejNNUlRZa1BUenFuMUpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8xMDAwZWItZmZkMC00ZmUzLWI3YWYt MDczOGMyMzM0ZTdmLzEva3ZoV0l1SXZ5V3pxejNNUlRZa1BUenFuMUpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy8xMDAwZWItZmZkMC00ZmUzLWI3YWYtMDczOGMyMzM0ZTdm LzEva3ZoV0l1SXZ5V3pxejNNUlRZa1BUenFuMUpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf5P/A9AO oJe0T/OdFWLa5fk4Esy2rFAE7I+NWiJmEg9ALROy+xgbXDLT4AqJIzB+k0SSMkBG 8rZVwf559W+Yueo8EHuFFFQ5e4JBNN5oY5NlQp6YLmB8mpKRHTnslT84sX7udtlZ sifrfOKzHEF67o6pQHS5zocN0A7Gue6TSCs81fsX87BQsykf8Vp7p38DwbjZnRDH x7RMGnrGX8Ldvwd2iI1B8CDn+MTGj/ZED+3W7degRPNW2egDqr6CMzTg5BBZmxI+ p7y6Y6ssPByTeYewO85q68tBsgRfCWjx4db1ms2Z6Ldl8+cLcGZn1P2r2iwV0j7+ 8zc1HWuTWa3JSg== -----END CERTIFICATE-----Generated at Tue Feb 10 00:17:19 2026 by rpki-client