This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/d10d4d-a2c0-4d20-8a21-24d0e62f79c0/1/K328XveedAIoXs2gg3ukvyGHYdw.mft File: K328XveedAIoXs2gg3ukvyGHYdw.mft (raw, json) Hash identifier: YAVGF2USQ7uDPwAadxKsbwkwnUzG9RMhziug7/v8ytc= Subject key identifier: 34:62:46:7E:3A:9A:6F:3C:DC:E6:99:38:CE:99:37:20:61:64:07:FD Authority key identifier: 2B:7D:BC:5E:F7:9E:74:02:28:5E:CD:A0:83:7B:A4:BF:21:87:61:DC Certificate issuer: /CN=2b7dbc5ef79e7402285ecda0837ba4bf218761dc Certificate serial: 019C427D196323FA2559ECEA2DFFB560E4EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K328XveedAIoXs2gg3ukvyGHYdw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/d10d4d-a2c0-4d20-8a21-24d0e62f79c0/1/K328XveedAIoXs2gg3ukvyGHYdw.mft Manifest number: 1025 Signing time: Mon 09 Feb 2026 13:00:20 +0000 Manifest this update: Mon 09 Feb 2026 13:00:20 +0000 Manifest next update: Tue 10 Feb 2026 13:00:20 +0000 Files and hashes: 1: K328XveedAIoXs2gg3ukvyGHYdw.crl (hash: xwIXMukS5XDQMjtvclooUguu4iRQ+e8tT/xK6laoDXw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/d10d4d-a2c0-4d20-8a21-24d0e62f79c0/1/K328XveedAIoXs2gg3ukvyGHYdw.crl rsync://rpki.ripe.net/repository/DEFAULT/17/d10d4d-a2c0-4d20-8a21-24d0e62f79c0/1/K328XveedAIoXs2gg3ukvyGHYdw.mft rsync://rpki.ripe.net/repository/DEFAULT/K328XveedAIoXs2gg3ukvyGHYdw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:19:63:23:fa:25:59:ec:ea:2d:ff:b5:60:e4:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b7dbc5ef79e7402285ecda0837ba4bf218761dc Validity Not Before: Feb 9 13:00:20 2026 GMT Not After : Feb 10 13:00:20 2026 GMT Subject: CN=3462467e3a9a6f3cdce69938ce993720616407fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:33:56:7c:d3:16:58:00:df:52:aa:51:b5:00: fd:2d:72:54:f0:6a:10:23:00:09:ed:9f:a6:88:9c: 4f:8a:9f:c0:68:c3:70:18:55:1c:94:04:bb:9f:e2: 34:b6:12:86:ba:5c:9c:f9:46:9e:6b:d0:12:28:ec: 27:10:5b:60:99:f5:90:d4:28:e1:b6:35:9b:21:10: 30:9e:4c:ef:2e:e5:ed:07:05:80:1d:ce:fa:94:b9: b7:b3:55:85:eb:fb:2a:0e:87:e4:8e:dd:bc:1f:85: 9c:e6:07:a9:6f:53:09:7c:17:fe:51:b2:a6:af:25: f9:33:1b:a0:d8:04:97:1f:73:e2:3c:37:30:9c:4a: f5:ea:8d:53:dc:0c:4f:94:65:c0:8e:3c:02:d2:07: 32:f8:3a:ba:57:b9:06:3d:b3:0f:46:66:3e:36:76: d9:db:76:33:82:1f:50:a4:c5:05:ea:8b:e6:d0:6c: b0:6b:41:3e:aa:d3:1a:9f:4d:f3:09:41:40:8a:08: 7b:56:fd:26:cf:30:be:df:dd:93:08:35:85:3d:ac: c9:72:42:73:ea:0a:b4:b6:05:28:50:bb:04:87:63: 0e:db:d7:dd:50:3a:86:f3:68:af:2a:31:53:ed:3a: 7d:d9:ed:e4:6e:36:42:9a:1a:2b:5d:db:01:c3:3b: 59:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:62:46:7E:3A:9A:6F:3C:DC:E6:99:38:CE:99:37:20:61:64:07:FD X509v3 Authority Key Identifier: keyid:2B:7D:BC:5E:F7:9E:74:02:28:5E:CD:A0:83:7B:A4:BF:21:87:61:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K328XveedAIoXs2gg3ukvyGHYdw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d10d4d-a2c0-4d20-8a21-24d0e62f79c0/1/K328XveedAIoXs2gg3ukvyGHYdw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d10d4d-a2c0-4d20-8a21-24d0e62f79c0/1/K328XveedAIoXs2gg3ukvyGHYdw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:47:87:77:76:74:58:5d:22:68:2e:fb:70:68:1f:a4:9d:35: f3:9d:b4:34:6a:78:6d:82:8f:f6:d3:54:43:8b:5b:16:c6:f7: f1:e1:f8:cf:05:03:88:19:26:36:de:a2:d1:8a:74:4f:32:66: da:3c:8f:78:48:26:dd:aa:ac:d8:21:f2:e6:1f:4b:00:92:95: c2:57:82:42:32:6c:af:99:45:9e:0e:5e:09:8e:19:cf:62:ab: 39:b4:fc:3e:7c:86:57:18:e3:4f:ac:e0:e3:d0:ef:6a:6b:4d: 15:3d:75:23:d6:73:7b:2c:83:36:0d:dd:26:31:b5:30:ea:39: 99:c3:f3:80:2b:1a:b5:24:cb:53:7f:b0:5b:ea:cd:38:26:f4: 37:e1:33:c3:92:58:f6:bf:4d:ec:a2:91:94:1d:a6:61:ba:f4: f3:94:c2:e0:28:50:23:7f:65:ea:fa:74:13:87:1a:62:da:f3: 28:53:78:24:96:8d:89:8a:89:f2:1e:f6:90:5e:8a:7f:d0:6e: fd:11:48:7b:d8:ae:35:f7:4e:2f:b8:8e:01:93:de:b3:54:85: 39:8f:57:9d:58:b7:62:39:0f:31:67:a5:ee:2f:e9:f2:7d:1e: 67:b0:e9:14:33:c3:2f:41:e3:fd:e9:7c:0b:cd:ea:93:72:8f: 3c:1d:21:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfRljI/olWezqLf+1YOTsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiN2RiYzVlZjc5ZTc0MDIyODVlY2RhMDgzN2JhNGJmMjE4 NzYxZGMwHhcNMjYwMjA5MTMwMDIwWhcNMjYwMjEwMTMwMDIwWjAzMTEwLwYDVQQD EygzNDYyNDY3ZTNhOWE2ZjNjZGNlNjk5MzhjZTk5MzcyMDYxNjQwN2ZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTNWfNMWWADfUqpRtQD9LXJU8GoQ IwAJ7Z+miJxPip/AaMNwGFUclAS7n+I0thKGulyc+Uaea9ASKOwnEFtgmfWQ1Cjh tjWbIRAwnkzvLuXtBwWAHc76lLm3s1WF6/sqDofkjt28H4Wc5gepb1MJfBf+UbKm ryX5Mxug2ASXH3PiPDcwnEr16o1T3AxPlGXAjjwC0gcy+Dq6V7kGPbMPRmY+NnbZ 23Yzgh9QpMUF6ovm0Gywa0E+qtMan03zCUFAigh7Vv0mzzC+392TCDWFPazJckJz 6gq0tgUoULsEh2MO29fdUDqG82ivKjFT7Tp92e3kbjZCmhorXdsBwztZsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDRiRn46mm883OaZOM6ZNyBhZAf9MB8GA1UdIwQY MBaAFCt9vF73nnQCKF7NoIN7pL8hh2HcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzMyOFh2ZWVkQUlvWHMyZ2czdWt2eUdIWWR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9kMTBkNGQtYTJjMC00ZDIwLThhMjEt MjRkMGU2MmY3OWMwLzEvSzMyOFh2ZWVkQUlvWHMyZ2czdWt2eUdIWWR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9kMTBkNGQtYTJjMC00ZDIwLThhMjEtMjRkMGU2MmY3OWMw LzEvSzMyOFh2ZWVkQUlvWHMyZ2czdWt2eUdIWWR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVUeHd3Z0 WF0iaC77cGgfpJ018520NGp4bYKP9tNUQ4tbFsb38eH4zwUDiBkmNt6i0Yp0TzJm 2jyPeEgm3aqs2CHy5h9LAJKVwleCQjJsr5lFng5eCY4Zz2KrObT8PnyGVxjjT6zg 49DvamtNFT11I9ZzeyyDNg3dJjG1MOo5mcPzgCsatSTLU3+wW+rNOCb0N+Ezw5JY 9r9N7KKRlB2mYbr085TC4ChQI39l6vp0E4caYtrzKFN4JJaNiYqJ8h72kF6Kf9Bu /RFIe9iuNfdOL7iOAZPes1SFOY9XnVi3YjkPMWel7i/p8n0eZ7DpFDPDL0Hj/el8 C83qk3KPPB0hQA== -----END CERTIFICATE-----Generated at Mon Feb 9 23:52:12 2026 by rpki-client