This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft File: kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft (raw, json) Hash identifier: wiyYiPO1uqOh9PJgKpRRrSb71FUnpH1yFGrekfJxvIk= Subject key identifier: 93:CA:32:E2:C6:2B:79:AE:10:ED:27:FA:15:51:E1:C6:66:1A:F2:D0 Authority key identifier: 92:DF:8A:90:D4:3B:03:4A:72:A4:78:82:6E:C3:D4:EA:E6:81:DD:2C Certificate issuer: /CN=92df8a90d43b034a72a478826ec3d4eae681dd2c Certificate serial: 019C427D072CBF97D94893B69AF5BC673144 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft Manifest number: 06EA Signing time: Mon 09 Feb 2026 13:00:15 +0000 Manifest this update: Mon 09 Feb 2026 13:00:15 +0000 Manifest next update: Tue 10 Feb 2026 13:00:15 +0000 Files and hashes: 1: kt-KkNQ7A0pypHiCbsPU6uaB3Sw.crl (hash: 38O1ffZDs14pUkxvseCQBAF3lHjZm6dpvZ8pwOJrvS0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft rsync://rpki.ripe.net/repository/DEFAULT/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:07:2c:bf:97:d9:48:93:b6:9a:f5:bc:67:31:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92df8a90d43b034a72a478826ec3d4eae681dd2c Validity Not Before: Feb 9 13:00:15 2026 GMT Not After : Feb 10 13:00:15 2026 GMT Subject: CN=93ca32e2c62b79ae10ed27fa1551e1c6661af2d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:50:37:a7:9b:ac:15:06:20:58:71:4e:54:0b: 85:ad:54:c8:da:98:cc:5a:e2:49:71:c7:38:dd:5e: 8f:45:f3:3e:d6:09:d4:13:21:25:68:64:79:7c:a1: 84:bc:9f:a7:01:42:ba:01:82:f2:f2:29:f6:8f:b1: e4:4e:d6:2d:e3:e4:78:ad:b9:5c:64:c3:ce:0b:15: f4:96:27:c6:5a:74:06:c6:be:43:1f:2a:7c:81:cc: a5:e1:db:9e:e8:2c:aa:7d:71:46:03:7e:b8:d2:4c: 22:78:f6:ab:70:d5:fc:1a:1f:89:ca:84:4a:b6:93: 12:5a:58:39:4d:1d:1a:4c:51:42:62:59:9c:8a:34: b3:fc:a8:80:c9:e3:1b:ea:bd:79:c5:8a:34:cd:9d: d0:4f:7f:67:1a:b9:9c:ce:e0:fe:f8:ae:37:ed:e6: c0:db:f7:fe:e9:f4:04:de:3f:0f:b5:d9:bf:ac:e0: d9:b5:4e:12:7f:62:f1:0e:45:78:75:24:60:b7:1f: 11:97:73:a6:19:c0:49:9e:45:f4:4c:4b:ef:0d:ea: 5b:ff:3e:af:6e:c6:45:52:f4:12:dc:50:16:1f:d5: ee:30:60:40:06:5c:ac:f2:52:09:11:26:08:3e:df: 7b:7a:af:24:80:44:06:15:9a:0f:d6:f2:81:67:7a: e7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:CA:32:E2:C6:2B:79:AE:10:ED:27:FA:15:51:E1:C6:66:1A:F2:D0 X509v3 Authority Key Identifier: keyid:92:DF:8A:90:D4:3B:03:4A:72:A4:78:82:6E:C3:D4:EA:E6:81:DD:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:b8:32:ff:1e:66:11:bf:0b:14:e5:c0:ba:5b:e3:e7:62:53: d1:50:72:5e:d8:0f:0e:87:92:e4:bc:b7:45:6d:33:d0:22:2d: de:fb:44:74:53:19:be:e2:de:56:ea:f9:44:a0:b0:42:72:a7: dc:25:0c:ac:95:ce:96:62:07:b2:09:e3:bd:e2:af:de:9c:c6: 99:50:85:40:f0:e7:d0:5c:c6:c8:44:09:26:eb:cc:e8:d2:f2: 1d:41:07:16:77:d0:9a:e5:34:a9:59:f0:30:c7:a1:61:ea:cd: 65:5c:ea:93:e8:8f:13:66:22:00:39:46:98:f5:ca:de:4f:4f: eb:fa:c7:8f:5a:0b:f3:12:92:a1:da:20:b5:1c:a0:16:83:7a: 13:44:d0:f2:7b:ad:32:93:06:3d:22:6b:33:0c:68:db:f3:ee: c6:68:c3:45:30:79:11:ae:2e:a3:e0:6c:65:bb:fc:86:df:3a: 71:47:7d:6c:f9:f2:fa:d9:a6:57:5c:9f:a5:bf:9a:42:6c:f5: 27:70:35:4c:a8:8e:e0:6b:e6:86:4a:1e:ad:c3:43:e7:2f:05: 19:db:72:3c:02:26:9a:7e:11:90:d5:fb:15:b8:69:59:2b:66: f7:24:db:04:61:b3:84:de:47:ad:d5:76:40:b6:63:c7:55:a5: 0c:7a:73:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfQcsv5fZSJO2mvW8ZzFEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZGY4YTkwZDQzYjAzNGE3MmE0Nzg4MjZlYzNkNGVhZTY4 MWRkMmMwHhcNMjYwMjA5MTMwMDE1WhcNMjYwMjEwMTMwMDE1WjAzMTEwLwYDVQQD Eyg5M2NhMzJlMmM2MmI3OWFlMTBlZDI3ZmExNTUxZTFjNjY2MWFmMmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1A3p5usFQYgWHFOVAuFrVTI2pjM WuJJccc43V6PRfM+1gnUEyElaGR5fKGEvJ+nAUK6AYLy8in2j7HkTtYt4+R4rblc ZMPOCxX0lifGWnQGxr5DHyp8gcyl4due6CyqfXFGA3640kwieParcNX8Gh+JyoRK tpMSWlg5TR0aTFFCYlmcijSz/KiAyeMb6r15xYo0zZ3QT39nGrmczuD++K437ebA 2/f+6fQE3j8Ptdm/rODZtU4Sf2LxDkV4dSRgtx8Rl3OmGcBJnkX0TEvvDepb/z6v bsZFUvQS3FAWH9XuMGBABlys8lIJESYIPt97eq8kgEQGFZoP1vKBZ3rnNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJPKMuLGK3muEO0n+hVR4cZmGvLQMB8GA1UdIwQY MBaAFJLfipDUOwNKcqR4gm7D1Ormgd0sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3QtS2tOUTdBMHB5cEhpQ2JzUFU2dWFCM1N3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy83MTQwZDQtZmU3Ny00OWI0LWE2MmUt NWJkZjA1OTZhYjRiLzEva3QtS2tOUTdBMHB5cEhpQ2JzUFU2dWFCM1N3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy83MTQwZDQtZmU3Ny00OWI0LWE2MmUtNWJkZjA1OTZhYjRi LzEva3QtS2tOUTdBMHB5cEhpQ2JzUFU2dWFCM1N3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWrgy/x5m Eb8LFOXAulvj52JT0VByXtgPDoeS5Ly3RW0z0CIt3vtEdFMZvuLeVur5RKCwQnKn 3CUMrJXOlmIHsgnjveKv3pzGmVCFQPDn0FzGyEQJJuvM6NLyHUEHFnfQmuU0qVnw MMehYerNZVzqk+iPE2YiADlGmPXK3k9P6/rHj1oL8xKSodogtRygFoN6E0TQ8nut MpMGPSJrMwxo2/PuxmjDRTB5Ea4uo+BsZbv8ht86cUd9bPny+tmmV1yfpb+aQmz1 J3A1TKiO4GvmhkoercND5y8FGdtyPAImmn4RkNX7FbhpWStm9yTbBGGzhN5HrdV2 QLZjx1WlDHpzTw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:07 2026 by rpki-client