This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft File: KAabTsBHxsLYCkmS5CKLMXzIsgw.mft (raw, json) Hash identifier: mdCC4SRsxHeaixzcEII6rueFyHSFMiMdFtsWOIscBCI= Subject key identifier: F8:48:40:4D:3C:3D:24:D2:9F:BB:92:C4:0A:32:4E:10:0C:44:E1:98 Authority key identifier: 28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C Certificate issuer: /CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c Certificate serial: 019C43C6AFFDB4AB3C9C2EF8E863E2EE5551 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft Manifest number: 111F Signing time: Mon 09 Feb 2026 19:00:20 +0000 Manifest this update: Mon 09 Feb 2026 19:00:20 +0000 Manifest next update: Tue 10 Feb 2026 19:00:20 +0000 Files and hashes: 1: KAabTsBHxsLYCkmS5CKLMXzIsgw.crl (hash: WwXOxcbFqKADC/byustl4iqzslbxlDvML2TwliNbdLU=) 2: Rmp_9MM7V4RosyhvB1k5klKEX-U.roa (hash: WJrFVR/skZVXQabPx1ss/hhLdnIXcPvdR9wwm+o94z8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c6:af:fd:b4:ab:3c:9c:2e:f8:e8:63:e2:ee:55:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c Validity Not Before: Feb 9 19:00:20 2026 GMT Not After : Feb 10 19:00:20 2026 GMT Subject: CN=f848404d3c3d24d29fbb92c40a324e100c44e198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:50:c2:f3:e7:48:0e:1e:b4:c9:41:ee:f9:ac: 6d:3a:af:58:59:c0:de:a1:ae:15:e3:33:4b:7f:da: 68:16:34:8f:5a:bd:de:23:fc:e2:c0:e0:9f:2b:10: e5:ff:a7:22:6b:1b:f1:24:57:fd:67:f3:9e:d4:8c: a7:2d:7b:c9:0a:0b:19:b7:f4:93:24:c5:45:8f:90: ec:8e:10:76:f4:79:73:b7:43:cc:f6:b3:87:c2:8e: 31:6d:c8:3d:6a:21:07:d3:de:fc:ea:4c:88:95:44: 74:84:3a:f0:10:8b:81:ca:26:30:17:cd:36:ed:67: d0:82:3f:86:4c:df:b3:63:b7:97:4d:5d:8f:3e:7a: d9:b4:50:27:db:34:41:82:d8:3c:9e:f7:c5:94:79: 4a:c4:a6:5a:2d:9e:e1:0c:1e:96:86:74:e9:f1:9b: 41:4f:7e:e9:d5:b9:73:47:01:65:72:64:22:fc:a8: 5e:ff:52:e3:a7:4d:77:2e:b9:d3:e4:d1:20:e5:53: f7:62:a6:b5:33:fb:cb:eb:0f:80:fe:b9:b5:97:d0: c2:2e:da:da:2c:0a:d0:fe:49:36:1f:6b:cb:a0:53: ea:b2:3e:70:4f:f7:b0:e7:bd:ba:19:0e:48:0e:bb: 15:1f:62:bc:e8:68:6f:f9:a0:e1:82:44:76:b2:f5: 33:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:48:40:4D:3C:3D:24:D2:9F:BB:92:C4:0A:32:4E:10:0C:44:E1:98 X509v3 Authority Key Identifier: keyid:28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:15:e7:ca:97:59:74:d0:5a:64:03:9a:4a:df:a0:29:1b:f6: d2:23:39:ca:d2:bd:1c:ee:36:dd:d5:7c:82:3d:a1:08:dc:87: 8e:b2:70:62:05:cd:f9:f9:ed:eb:a7:0c:f3:dd:85:41:eb:f2: 03:b4:ed:5e:82:65:bd:a4:53:b1:24:54:9c:70:1b:b0:b9:2a: 0f:dc:32:e0:f6:50:3d:b4:bc:d8:ac:06:2f:50:b1:f7:a3:c2: 28:ea:64:fd:00:ee:7a:1f:8b:98:e9:33:7c:f7:77:7f:4b:8c: 6c:52:eb:c8:1d:c8:a4:ae:03:69:00:f9:58:1d:5f:56:7a:fd: 99:56:af:98:1e:61:bf:fb:88:a1:1c:54:84:65:87:9a:61:f6: 1e:03:5b:3f:4d:31:90:d8:84:28:7a:9d:20:82:59:8c:80:c7: fe:bf:3b:73:4f:71:7f:96:a9:96:b1:07:65:77:3f:5e:3e:53: 29:cf:74:09:d8:1e:f8:67:8f:83:89:88:7e:83:11:80:93:17: 6a:40:98:b9:bd:d1:61:ff:b9:8a:34:48:2f:a9:d9:e3:a7:07: ea:46:d0:54:4a:02:71:f0:32:de:34:7e:3c:49:ac:1e:08:aa: 9b:cb:2d:df:05:09:94:e6:ac:9c:bf:cb:de:19:60:9a:e0:7d: f2:8a:9e:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxq/9tKs8nC746GPi7lVRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4MDY5YjRlYzA0N2M2YzJkODBhNDk5MmU0MjI4YjMxN2Nj OGIyMGMwHhcNMjYwMjA5MTkwMDIwWhcNMjYwMjEwMTkwMDIwWjAzMTEwLwYDVQQD EyhmODQ4NDA0ZDNjM2QyNGQyOWZiYjkyYzQwYTMyNGUxMDBjNDRlMTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFDC8+dIDh60yUHu+axtOq9YWcDe oa4V4zNLf9poFjSPWr3eI/ziwOCfKxDl/6ciaxvxJFf9Z/Oe1IynLXvJCgsZt/ST JMVFj5DsjhB29Hlzt0PM9rOHwo4xbcg9aiEH09786kyIlUR0hDrwEIuByiYwF802 7WfQgj+GTN+zY7eXTV2PPnrZtFAn2zRBgtg8nvfFlHlKxKZaLZ7hDB6WhnTp8ZtB T37p1blzRwFlcmQi/Khe/1Ljp013LrnT5NEg5VP3Yqa1M/vL6w+A/rm1l9DCLtra LArQ/kk2H2vLoFPqsj5wT/ew5726GQ5IDrsVH2K86Ghv+aDhgkR2svUzkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPhIQE08PSTSn7uSxAoyThAMROGYMB8GA1UdIwQY MBaAFCgGm07AR8bC2ApJkuQiizF8yLIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0FhYlRzQkh4c0xZQ2ttUzVDS0xNWHpJc2d3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8wMjQ1NTQtN2FhNi00YzlmLWE0ODct ZGY3YjQ1YmU0NmM3LzEvS0FhYlRzQkh4c0xZQ2ttUzVDS0xNWHpJc2d3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8wMjQ1NTQtN2FhNi00YzlmLWE0ODctZGY3YjQ1YmU0NmM3 LzEvS0FhYlRzQkh4c0xZQ2ttUzVDS0xNWHpJc2d3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKhXnypdZ dNBaZAOaSt+gKRv20iM5ytK9HO423dV8gj2hCNyHjrJwYgXN+fnt66cM892FQevy A7TtXoJlvaRTsSRUnHAbsLkqD9wy4PZQPbS82KwGL1Cx96PCKOpk/QDueh+LmOkz fPd3f0uMbFLryB3IpK4DaQD5WB1fVnr9mVavmB5hv/uIoRxUhGWHmmH2HgNbP00x kNiEKHqdIIJZjIDH/r87c09xf5aplrEHZXc/Xj5TKc90Cdge+GePg4mIfoMRgJMX akCYub3RYf+5ijRIL6nZ46cH6kbQVEoCcfAy3jR+PEmsHgiqm8st3wUJlOasnL/L 3hlgmuB98oqeGA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:49 2026 by rpki-client