This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.mft File: ky6JreaI2S6euPGuyJs10jA9Rrg.mft (raw, json) Hash identifier: kaGm+gXb09y5ra+8kXam23BQQk36xhpnHbDAn+L1Re0= Subject key identifier: 3D:6F:47:68:BF:EE:5F:DB:22:F6:D7:17:76:25:0D:88:27:D0:B1:39 Authority key identifier: 93:2E:89:AD:E6:88:D9:2E:9E:B8:F1:AE:C8:9B:35:D2:30:3D:46:B8 Certificate issuer: /CN=932e89ade688d92e9eb8f1aec89b35d2303d46b8 Certificate serial: 019C420FB453A2F703C97E48C16AD56890C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ky6JreaI2S6euPGuyJs10jA9Rrg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.mft Manifest number: 1313 Signing time: Mon 09 Feb 2026 11:00:51 +0000 Manifest this update: Mon 09 Feb 2026 11:00:51 +0000 Manifest next update: Tue 10 Feb 2026 11:00:51 +0000 Files and hashes: 1: ky6JreaI2S6euPGuyJs10jA9Rrg.crl (hash: MITsimHQacx7Oja4DuyJcAQmd+9DHZ+uvYf3w+MgevI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.mft rsync://rpki.ripe.net/repository/DEFAULT/ky6JreaI2S6euPGuyJs10jA9Rrg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:b4:53:a2:f7:03:c9:7e:48:c1:6a:d5:68:90:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=932e89ade688d92e9eb8f1aec89b35d2303d46b8 Validity Not Before: Feb 9 11:00:51 2026 GMT Not After : Feb 10 11:00:51 2026 GMT Subject: CN=3d6f4768bfee5fdb22f6d71776250d8827d0b139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:14:63:e7:7d:9d:15:35:38:a1:64:27:e7:52: 54:2f:2c:ef:3c:0e:eb:b3:4f:b9:ce:d5:2f:66:91: 19:98:3f:19:05:6c:f4:f6:1c:c1:bc:d5:25:50:80: d3:fb:dd:b3:b1:66:b1:ab:fa:1d:fb:13:af:cf:97: 1d:9e:ce:85:73:e3:3b:de:70:19:65:98:1b:6e:33: 60:a3:61:ca:92:9b:bf:6c:68:8f:8c:4a:5a:50:66: 2f:7e:f4:9e:a7:0b:76:32:b8:35:1c:77:d9:63:6b: d8:b7:d2:7a:3a:38:2a:90:47:d5:87:f0:24:e9:fd: d1:40:31:74:fc:2f:a6:d2:61:c9:3e:c5:47:df:84: 6a:3a:49:8d:bf:0f:4d:cd:6f:be:d0:92:4c:28:53: c2:66:48:d5:01:a2:3c:8e:86:5a:2f:f4:57:67:c5: b3:c7:cb:4d:60:16:15:5f:33:93:6c:ea:8a:3b:c3: 4c:55:d5:39:6f:fc:12:fe:6f:19:47:b5:70:84:ea: 39:df:61:75:de:3c:ef:33:c8:53:11:7e:97:f0:4b: 95:31:0a:4f:24:1d:82:b4:5f:e2:25:8c:5b:4f:33: 42:24:0d:cd:b8:9e:10:e1:8c:60:6b:c8:bc:5c:44: 99:63:81:9f:6a:15:b9:a7:ab:a3:85:b2:fe:52:73: 02:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:6F:47:68:BF:EE:5F:DB:22:F6:D7:17:76:25:0D:88:27:D0:B1:39 X509v3 Authority Key Identifier: keyid:93:2E:89:AD:E6:88:D9:2E:9E:B8:F1:AE:C8:9B:35:D2:30:3D:46:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ky6JreaI2S6euPGuyJs10jA9Rrg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:f1:ca:03:2f:ce:48:5c:57:ff:f1:35:11:08:1c:84:00:e5: d5:2b:96:91:be:d5:68:a6:c3:d7:9b:10:61:1f:b0:62:e9:93: 6f:83:33:a2:e9:fe:eb:5b:8f:20:19:8e:9e:f2:98:1b:8e:36: ec:76:18:c2:a8:c9:5d:99:11:4d:76:9e:8d:61:62:2a:0a:0c: f0:88:3a:60:3f:16:29:ac:cf:f8:5e:b8:2e:e8:20:a9:80:32: df:62:6a:0d:08:b6:a9:9b:ba:19:0b:58:b1:3f:18:22:15:3e: 10:36:a6:82:4a:85:63:66:4f:85:17:f2:14:be:84:ef:fc:9c: 95:59:04:74:8b:77:02:da:41:70:80:06:71:55:b8:d0:98:1d: c2:2e:ba:42:1a:ef:16:e3:0b:31:e7:fb:82:8e:69:57:f5:8b: 40:d6:2e:7f:6f:3f:97:7d:07:66:a1:7f:d6:2f:61:c7:c2:5c: 0a:22:d9:81:49:b2:ab:f8:51:6c:c4:29:3f:6a:dd:c1:a3:ba: d7:af:77:da:12:37:17:f5:df:f0:0a:54:b8:b9:9f:39:f6:83: 76:8f:ed:d2:fa:08:b8:ad:bd:d6:22:fd:f6:ef:bb:cb:e4:35: a4:13:3e:bf:aa:bf:28:cd:37:02:6b:3c:fe:25:fe:e2:19:85: 40:74:fc:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD7RTovcDyX5IwWrVaJDAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMmU4OWFkZTY4OGQ5MmU5ZWI4ZjFhZWM4OWIzNWQyMzAz ZDQ2YjgwHhcNMjYwMjA5MTEwMDUxWhcNMjYwMjEwMTEwMDUxWjAzMTEwLwYDVQQD EygzZDZmNDc2OGJmZWU1ZmRiMjJmNmQ3MTc3NjI1MGQ4ODI3ZDBiMTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhRj532dFTU4oWQn51JULyzvPA7r s0+5ztUvZpEZmD8ZBWz09hzBvNUlUIDT+92zsWaxq/od+xOvz5cdns6Fc+M73nAZ ZZgbbjNgo2HKkpu/bGiPjEpaUGYvfvSepwt2Mrg1HHfZY2vYt9J6OjgqkEfVh/Ak 6f3RQDF0/C+m0mHJPsVH34RqOkmNvw9NzW++0JJMKFPCZkjVAaI8joZaL/RXZ8Wz x8tNYBYVXzOTbOqKO8NMVdU5b/wS/m8ZR7VwhOo532F13jzvM8hTEX6X8EuVMQpP JB2CtF/iJYxbTzNCJA3NuJ4Q4Yxga8i8XESZY4GfahW5p6ujhbL+UnMCXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD1vR2i/7l/bIvbXF3YlDYgn0LE5MB8GA1UdIwQY MBaAFJMuia3miNkunrjxrsibNdIwPUa4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3k2SnJlYUkyUzZldVBHdXlKczEwakE5UnJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9hMTgyYjctMTU2NS00YzE2LTg2Yjgt Yjg1ZjQwMzliOWNmLzEva3k2SnJlYUkyUzZldVBHdXlKczEwakE5UnJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9hMTgyYjctMTU2NS00YzE2LTg2YjgtYjg1ZjQwMzliOWNm LzEva3k2SnJlYUkyUzZldVBHdXlKczEwakE5UnJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEvHKAy/O SFxX//E1EQgchADl1SuWkb7VaKbD15sQYR+wYumTb4Mzoun+61uPIBmOnvKYG442 7HYYwqjJXZkRTXaejWFiKgoM8Ig6YD8WKazP+F64LuggqYAy32JqDQi2qZu6GQtY sT8YIhU+EDamgkqFY2ZPhRfyFL6E7/yclVkEdIt3AtpBcIAGcVW40Jgdwi66Qhrv FuMLMef7go5pV/WLQNYuf28/l30HZqF/1i9hx8JcCiLZgUmyq/hRbMQpP2rdwaO6 16932hI3F/Xf8ApUuLmfOfaDdo/t0voIuK291iL99u+7y+Q1pBM+v6q/KM03Ams8 /iX+4hmFQHT8HQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:42 2026 by rpki-client