This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8e87fe-c9d6-4424-bd98-7a0619faaf7d/1/KdRXsQJeSmpFxsS0XW4jSqUYyLE.mft File: KdRXsQJeSmpFxsS0XW4jSqUYyLE.mft (raw, json) Hash identifier: 2v4gU2z4BWoTdV/n2W1eK94AnSJbROYLdu9MAsdjTWY= Subject key identifier: 03:68:31:88:9B:8C:17:DD:0A:B8:E7:AC:BC:A9:B5:89:D8:5F:D2:E2 Authority key identifier: 29:D4:57:B1:02:5E:4A:6A:45:C6:C4:B4:5D:6E:23:4A:A5:18:C8:B1 Certificate issuer: /CN=29d457b1025e4a6a45c6c4b45d6e234aa518c8b1 Certificate serial: 019C427DD866116C42E6CE521C556ED4B685 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdRXsQJeSmpFxsS0XW4jSqUYyLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8e87fe-c9d6-4424-bd98-7a0619faaf7d/1/KdRXsQJeSmpFxsS0XW4jSqUYyLE.mft Manifest number: 12E5 Signing time: Mon 09 Feb 2026 13:01:09 +0000 Manifest this update: Mon 09 Feb 2026 13:01:09 +0000 Manifest next update: Tue 10 Feb 2026 13:01:09 +0000 Files and hashes: 1: KdRXsQJeSmpFxsS0XW4jSqUYyLE.crl (hash: NfBbupTbJ97K3Bozl8YQItzFj/28tQnvYcZJXdjcaPI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8e87fe-c9d6-4424-bd98-7a0619faaf7d/1/KdRXsQJeSmpFxsS0XW4jSqUYyLE.crl rsync://rpki.ripe.net/repository/DEFAULT/05/8e87fe-c9d6-4424-bd98-7a0619faaf7d/1/KdRXsQJeSmpFxsS0XW4jSqUYyLE.mft rsync://rpki.ripe.net/repository/DEFAULT/KdRXsQJeSmpFxsS0XW4jSqUYyLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:d8:66:11:6c:42:e6:ce:52:1c:55:6e:d4:b6:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d457b1025e4a6a45c6c4b45d6e234aa518c8b1 Validity Not Before: Feb 9 13:01:09 2026 GMT Not After : Feb 10 13:01:09 2026 GMT Subject: CN=036831889b8c17dd0ab8e7acbca9b589d85fd2e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2c:2b:42:3b:b6:77:e1:16:a5:bd:ba:45:db: bc:cd:26:3e:fd:20:43:c4:a1:7b:b3:66:4d:e2:a7: c9:f9:1b:90:28:9c:97:57:3f:94:aa:4f:77:2b:47: 72:99:d6:4a:f2:7f:be:56:b9:29:7a:35:ef:6e:b4: 80:95:e4:a9:9e:d6:3b:d0:be:f9:00:42:90:3a:c6: 1c:83:78:90:c6:21:37:60:ac:6a:bd:db:e3:e0:41: bb:d2:ef:f9:b2:ec:70:c2:18:59:0f:ad:96:b3:a1: 78:28:03:f1:db:40:3d:93:4e:68:4b:61:3c:28:90: 17:46:4e:29:b0:3e:21:7e:b3:fd:9a:f0:3e:bc:e4: fa:b5:37:dc:a4:eb:68:69:31:f1:af:83:d7:42:90: 20:f7:5c:cc:e6:90:eb:67:7f:03:71:56:6b:7d:d5: b3:fb:9a:0a:a6:a4:cb:bd:49:41:95:13:2c:0b:27: 95:a2:6c:55:35:86:a3:92:50:02:32:2b:f1:8e:e8: 0f:26:5d:63:6e:98:be:61:86:0b:6a:69:7a:90:32: c7:9c:c0:06:13:46:48:8b:39:81:97:63:a2:a3:9f: 39:0b:e7:e7:b0:fd:fb:85:86:dd:b9:3e:05:41:6f: b3:aa:c9:3d:28:3d:34:0d:06:9d:b2:e9:59:bd:ba: 9b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:68:31:88:9B:8C:17:DD:0A:B8:E7:AC:BC:A9:B5:89:D8:5F:D2:E2 X509v3 Authority Key Identifier: keyid:29:D4:57:B1:02:5E:4A:6A:45:C6:C4:B4:5D:6E:23:4A:A5:18:C8:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdRXsQJeSmpFxsS0XW4jSqUYyLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8e87fe-c9d6-4424-bd98-7a0619faaf7d/1/KdRXsQJeSmpFxsS0XW4jSqUYyLE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8e87fe-c9d6-4424-bd98-7a0619faaf7d/1/KdRXsQJeSmpFxsS0XW4jSqUYyLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:98:ee:74:71:e7:5f:da:96:a4:18:53:6d:76:73:28:0e:4a: 7f:7f:3f:f4:7c:2c:49:01:96:48:a1:9d:b4:3f:b2:e2:ab:30: 1c:83:04:47:e2:ff:6d:99:03:0b:41:0c:83:34:bb:33:f4:39: 69:e0:aa:1c:71:b7:34:00:b3:a3:24:e6:3c:07:5f:3c:25:50: 33:1f:6b:b7:4f:02:0f:c0:5a:93:37:35:13:8c:d9:29:6a:93: 32:68:32:7d:0c:0f:eb:59:38:ef:a8:ff:17:69:7a:46:fa:81: fe:c1:44:c1:48:dc:c4:e2:28:8a:c5:b2:3b:07:f6:55:51:e0: 88:7b:14:36:99:ed:1a:b8:d8:58:4f:53:66:81:33:8e:d6:5e: f2:8e:05:5c:ff:94:1b:ca:09:fd:a4:73:82:30:ab:e3:3a:a1: 6d:42:9f:58:54:c0:f9:a7:29:81:b8:68:38:aa:9d:dd:1e:00: 80:bd:2a:8b:25:09:d0:36:ae:c8:28:7c:43:a4:a7:15:ca:5b: 79:bc:50:45:6c:86:45:fa:e6:c5:c1:41:3f:63:a8:88:5e:9c: 87:6a:ca:01:cb:9d:7c:16:b7:93:b0:58:6f:a1:eb:9a:8f:55: 42:81:8c:a8:bb:e3:5d:6a:8c:98:44:95:45:07:5f:a0:ad:1a: 10:f0:53:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfdhmEWxC5s5SHFVu1LaFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZDQ1N2IxMDI1ZTRhNmE0NWM2YzRiNDVkNmUyMzRhYTUx OGM4YjEwHhcNMjYwMjA5MTMwMTA5WhcNMjYwMjEwMTMwMTA5WjAzMTEwLwYDVQQD EygwMzY4MzE4ODliOGMxN2RkMGFiOGU3YWNiY2E5YjU4OWQ4NWZkMmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniwrQju2d+EWpb26Rdu8zSY+/SBD xKF7s2ZN4qfJ+RuQKJyXVz+Uqk93K0dymdZK8n++VrkpejXvbrSAleSpntY70L75 AEKQOsYcg3iQxiE3YKxqvdvj4EG70u/5suxwwhhZD62Ws6F4KAPx20A9k05oS2E8 KJAXRk4psD4hfrP9mvA+vOT6tTfcpOtoaTHxr4PXQpAg91zM5pDrZ38DcVZrfdWz +5oKpqTLvUlBlRMsCyeVomxVNYajklACMivxjugPJl1jbpi+YYYLaml6kDLHnMAG E0ZIizmBl2Oio585C+fnsP37hYbduT4FQW+zqsk9KD00DQadsulZvbqb1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFANoMYibjBfdCrjnrLyptYnYX9LiMB8GA1UdIwQY MBaAFCnUV7ECXkpqRcbEtF1uI0qlGMixMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2RSWHNRSmVTbXBGeHNTMFhXNGpTcVVZeUxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS84ZTg3ZmUtYzlkNi00NDI0LWJkOTgt N2EwNjE5ZmFhZjdkLzEvS2RSWHNRSmVTbXBGeHNTMFhXNGpTcVVZeUxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS84ZTg3ZmUtYzlkNi00NDI0LWJkOTgtN2EwNjE5ZmFhZjdk LzEvS2RSWHNRSmVTbXBGeHNTMFhXNGpTcVVZeUxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj5judHHn X9qWpBhTbXZzKA5Kf38/9HwsSQGWSKGdtD+y4qswHIMER+L/bZkDC0EMgzS7M/Q5 aeCqHHG3NACzoyTmPAdfPCVQMx9rt08CD8Bakzc1E4zZKWqTMmgyfQwP61k476j/ F2l6RvqB/sFEwUjcxOIoisWyOwf2VVHgiHsUNpntGrjYWE9TZoEzjtZe8o4FXP+U G8oJ/aRzgjCr4zqhbUKfWFTA+acpgbhoOKqd3R4AgL0qiyUJ0DauyCh8Q6SnFcpb ebxQRWyGRfrmxcFBP2OoiF6ch2rKAcudfBa3k7BYb6Hrmo9VQoGMqLvjXWqMmESV RQdfoK0aEPBTeg== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:30 2026 by rpki-client