This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ebb979-bef0-420c-95e0-bceb376c2573/1/KtclXVpq-4XjdugbuaCew93dvNw.mft File: KtclXVpq-4XjdugbuaCew93dvNw.mft (raw, json) Hash identifier: 4UYhK80+KKm6dUYYY1pUIsPQ/A1Zwu5BgKIAkDxcdlc= Subject key identifier: F1:73:89:0C:0F:3F:3B:1A:81:E7:05:E9:64:CE:75:7E:F3:63:13:D9 Authority key identifier: 2A:D7:25:5D:5A:6A:FB:85:E3:76:E8:1B:B9:A0:9E:C3:DD:DD:BC:DC Certificate issuer: /CN=2ad7255d5a6afb85e376e81bb9a09ec3ddddbcdc Certificate serial: 019C41D8D7C0DBAFCAFF06AFEAE4FB25B32B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtclXVpq-4XjdugbuaCew93dvNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/ebb979-bef0-420c-95e0-bceb376c2573/1/KtclXVpq-4XjdugbuaCew93dvNw.mft Manifest number: 1726 Signing time: Mon 09 Feb 2026 10:00:55 +0000 Manifest this update: Mon 09 Feb 2026 10:00:55 +0000 Manifest next update: Tue 10 Feb 2026 10:00:55 +0000 Files and hashes: 1: KtclXVpq-4XjdugbuaCew93dvNw.crl (hash: mIaNoLCAKFlgmBEDoiWGnpfEl+i/ZXjkMo3reywZUm8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/ebb979-bef0-420c-95e0-bceb376c2573/1/KtclXVpq-4XjdugbuaCew93dvNw.crl rsync://rpki.ripe.net/repository/DEFAULT/11/ebb979-bef0-420c-95e0-bceb376c2573/1/KtclXVpq-4XjdugbuaCew93dvNw.mft rsync://rpki.ripe.net/repository/DEFAULT/KtclXVpq-4XjdugbuaCew93dvNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:d7:c0:db:af:ca:ff:06:af:ea:e4:fb:25:b3:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ad7255d5a6afb85e376e81bb9a09ec3ddddbcdc Validity Not Before: Feb 9 10:00:55 2026 GMT Not After : Feb 10 10:00:55 2026 GMT Subject: CN=f173890c0f3f3b1a81e705e964ce757ef36313d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:35:a9:68:3d:92:21:47:ec:a5:a6:fa:b5:c8: 7e:68:87:03:6b:c0:30:a4:58:a7:fc:0b:d2:4b:0a: 65:e7:bd:f5:cf:7a:f0:ac:dd:76:9f:d9:a4:d3:eb: 08:86:43:e4:4c:8a:49:30:29:89:6b:80:23:b7:5e: c2:f5:1f:44:d3:7d:8a:a1:ac:2e:4c:01:b9:da:1a: d0:09:b4:d3:a1:ec:33:03:ec:95:a9:d1:c8:fe:1e: f5:45:49:9c:b5:f5:9f:54:a5:11:cd:4a:c1:2b:cd: 8d:3e:8d:55:8b:90:5b:0d:36:11:ee:de:2e:47:f9: 26:01:bb:ac:ca:e8:20:4f:93:7d:f7:1c:fa:b5:4d: f4:8b:75:60:88:10:e1:da:47:eb:7a:bc:f6:ae:89: 4a:7d:ad:6d:57:67:91:bf:11:95:19:c2:71:50:0c: e8:fb:7f:6f:df:05:12:ea:84:e6:fc:fa:d3:30:45: c6:e6:cb:b6:52:5d:e4:0b:b6:02:1d:36:cb:99:f8: b0:40:27:40:1d:a0:8b:54:00:47:4f:1b:02:ee:e8: 74:8f:1e:12:fa:a4:fd:28:ec:fa:61:2f:9a:d0:79: df:ea:3f:ff:95:4a:07:6c:df:74:bd:71:52:03:64: d4:fd:78:eb:24:aa:5b:1b:f1:3e:04:a6:13:e4:c2: 86:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:73:89:0C:0F:3F:3B:1A:81:E7:05:E9:64:CE:75:7E:F3:63:13:D9 X509v3 Authority Key Identifier: keyid:2A:D7:25:5D:5A:6A:FB:85:E3:76:E8:1B:B9:A0:9E:C3:DD:DD:BC:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtclXVpq-4XjdugbuaCew93dvNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ebb979-bef0-420c-95e0-bceb376c2573/1/KtclXVpq-4XjdugbuaCew93dvNw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ebb979-bef0-420c-95e0-bceb376c2573/1/KtclXVpq-4XjdugbuaCew93dvNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:1b:98:c9:b3:83:f6:48:ec:25:9b:88:70:a1:e6:00:e8:42: 68:b1:87:55:15:0b:ba:bb:3b:86:e0:39:9a:29:00:a2:40:8a: 3a:5a:57:a7:40:d9:b9:70:1d:05:72:d7:85:39:b5:76:65:e5: fb:e2:93:e6:da:8b:c5:e5:60:cd:cb:6d:9f:84:e1:c3:95:31: e8:f4:2b:d8:9a:ac:45:d4:aa:d1:fb:65:a2:41:63:4a:63:11: cb:54:9e:91:51:96:64:e2:19:a5:25:e8:bc:91:df:c4:16:5c: 69:73:6b:db:35:ba:41:2e:a8:5c:f3:58:21:ee:9c:17:d7:dc: 9a:f0:3a:47:cf:df:59:15:24:8d:52:33:20:03:88:a5:7d:60: 38:9c:9d:a9:91:6b:59:60:d6:ad:83:2d:f6:1a:6d:5a:6f:18: 81:00:d0:a2:e4:98:e7:30:19:be:fa:df:59:da:cf:37:42:d3: b3:09:23:54:5e:d0:3d:62:32:60:41:ec:9b:e2:42:74:b6:d6: a0:ae:cd:b0:00:b5:c7:23:ab:47:d2:48:fd:02:ef:e9:bb:38: 5f:14:94:c2:29:7b:3b:eb:84:0c:ba:fe:b2:ab:2c:51:c4:bc: 84:d0:fd:2d:d3:31:ec:7e:84:d0:66:68:2b:2d:db:db:b9:06: ab:f8:28:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2NfA26/K/wav6uT7JbMrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhZDcyNTVkNWE2YWZiODVlMzc2ZTgxYmI5YTA5ZWMzZGRk ZGJjZGMwHhcNMjYwMjA5MTAwMDU1WhcNMjYwMjEwMTAwMDU1WjAzMTEwLwYDVQQD EyhmMTczODkwYzBmM2YzYjFhODFlNzA1ZTk2NGNlNzU3ZWYzNjMxM2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDWpaD2SIUfspab6tch+aIcDa8Aw pFin/AvSSwpl5731z3rwrN12n9mk0+sIhkPkTIpJMCmJa4Ajt17C9R9E032Koawu TAG52hrQCbTToewzA+yVqdHI/h71RUmctfWfVKURzUrBK82NPo1Vi5BbDTYR7t4u R/kmAbusyuggT5N99xz6tU30i3VgiBDh2kfrerz2rolKfa1tV2eRvxGVGcJxUAzo +39v3wUS6oTm/PrTMEXG5su2Ul3kC7YCHTbLmfiwQCdAHaCLVABHTxsC7uh0jx4S +qT9KOz6YS+a0Hnf6j//lUoHbN90vXFSA2TU/XjrJKpbG/E+BKYT5MKG9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPFziQwPPzsagecF6WTOdX7zYxPZMB8GA1UdIwQY MBaAFCrXJV1aavuF43boG7mgnsPd3bzcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3RjbFhWcHEtNFhqZHVnYnVhQ2V3OTNkdk53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9lYmI5NzktYmVmMC00MjBjLTk1ZTAt YmNlYjM3NmMyNTczLzEvS3RjbFhWcHEtNFhqZHVnYnVhQ2V3OTNkdk53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9lYmI5NzktYmVmMC00MjBjLTk1ZTAtYmNlYjM3NmMyNTcz LzEvS3RjbFhWcHEtNFhqZHVnYnVhQ2V3OTNkdk53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPxuYybOD 9kjsJZuIcKHmAOhCaLGHVRULurs7huA5mikAokCKOlpXp0DZuXAdBXLXhTm1dmXl ++KT5tqLxeVgzcttn4Thw5Ux6PQr2JqsRdSq0ftlokFjSmMRy1SekVGWZOIZpSXo vJHfxBZcaXNr2zW6QS6oXPNYIe6cF9fcmvA6R8/fWRUkjVIzIAOIpX1gOJydqZFr WWDWrYMt9hptWm8YgQDQouSY5zAZvvrfWdrPN0LTswkjVF7QPWIyYEHsm+JCdLbW oK7NsAC1xyOrR9JI/QLv6bs4XxSUwil7O+uEDLr+sqssUcS8hND9LdMx7H6E0GZo Ky3b27kGq/gouw== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:53 2026 by rpki-client