This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft File: kkd4YEd6U1S1qGll3TmemJh-WQ4.mft (raw, json) Hash identifier: w/uRIfBRcvAhWoNWlHmCS173E/FwxR8dpvVctwYRdl8= Subject key identifier: 0F:B8:C0:8C:C7:29:B5:98:91:6D:A9:FE:CF:C1:E2:24:53:76:D7:F6 Authority key identifier: 92:47:78:60:47:7A:53:54:B5:A8:69:65:DD:39:9E:98:98:7E:59:0E Certificate issuer: /CN=92477860477a5354b5a86965dd399e98987e590e Certificate serial: 019C4359649A9992B83756CB3447F5EFF274 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft Manifest number: 04DC Signing time: Mon 09 Feb 2026 17:00:57 +0000 Manifest this update: Mon 09 Feb 2026 17:00:57 +0000 Manifest next update: Tue 10 Feb 2026 17:00:57 +0000 Files and hashes: 1: kkd4YEd6U1S1qGll3TmemJh-WQ4.crl (hash: 61RbFuQVA9Jdo1IoGhoTBRLr9xcdOFpcP77px3HytbE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:64:9a:99:92:b8:37:56:cb:34:47:f5:ef:f2:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92477860477a5354b5a86965dd399e98987e590e Validity Not Before: Feb 9 17:00:57 2026 GMT Not After : Feb 10 17:00:57 2026 GMT Subject: CN=0fb8c08cc729b598916da9fecfc1e2245376d7f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c6:da:e7:a9:ca:cb:70:c6:27:e3:d7:1c:3c: b9:4f:a0:16:c9:3d:32:57:d0:b5:61:ee:90:92:dc: 3c:7f:eb:5f:13:7f:de:b3:d2:43:19:7a:68:78:b4: 9e:22:71:f0:5c:54:c9:42:fc:71:70:b2:65:04:ec: ba:8b:e8:ed:79:bf:6f:7b:39:64:b6:b6:1c:50:84: 2e:a8:aa:08:e5:1f:bf:45:15:b6:52:c3:83:62:36: 8d:60:74:aa:62:f2:d1:b5:d9:72:27:55:ff:47:52: 04:de:42:b4:64:fc:d8:78:ec:c8:1f:f1:3d:13:1b: d3:7a:14:c3:82:d0:cb:97:17:3c:45:0e:08:1e:4c: 2d:14:17:71:71:9f:e7:1a:81:65:cd:a8:3e:74:2c: 71:1a:b0:b8:cf:ed:10:f2:f3:2e:ef:85:b1:ca:8c: bf:a3:04:56:84:77:32:a1:28:ef:3c:c6:a0:b5:da: 1b:93:28:fc:25:ce:52:44:2d:de:84:06:4a:6d:3f: 44:6d:3f:d7:00:d1:a6:97:3a:27:71:af:40:63:db: 2e:c3:0a:ce:3c:37:5b:8b:22:bd:3c:43:2b:5d:11: c2:f0:5a:03:48:d3:f6:32:85:4f:00:8b:c3:a9:19: cd:32:3a:1b:18:86:b4:78:5c:e3:7d:58:5d:9a:82: 18:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:B8:C0:8C:C7:29:B5:98:91:6D:A9:FE:CF:C1:E2:24:53:76:D7:F6 X509v3 Authority Key Identifier: keyid:92:47:78:60:47:7A:53:54:B5:A8:69:65:DD:39:9E:98:98:7E:59:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:e9:b6:94:cc:b3:70:9a:ed:18:00:7f:3b:8a:f6:0e:65:9d: 54:56:03:e8:e7:6a:c7:03:fd:de:1b:38:40:ad:79:f7:5f:0a: f4:ae:36:53:b8:f4:c9:f6:a5:03:73:1d:e3:99:f3:83:22:d7: 3e:3c:9c:b3:63:1a:2b:5c:44:4e:8b:07:f1:7f:a7:3c:54:76: fb:62:ea:82:25:ef:47:9b:89:6c:a7:ea:f8:83:4a:0c:e6:6a: 78:a0:8a:54:f5:9f:f2:ee:47:fc:f4:a3:8d:7c:15:c8:b1:a7: b8:e7:33:8e:0e:77:c6:8e:ec:23:92:a7:5f:32:81:fa:6f:af: 49:34:4e:ae:4b:fa:e8:6e:61:8a:38:7c:4f:75:ac:03:20:4e: 1a:4b:31:c3:86:94:67:8f:f7:4e:af:90:cf:d4:d7:39:7f:85: 4f:a6:c5:ad:81:cd:e6:46:7b:3e:aa:e3:01:70:b3:01:80:92: 4e:2c:05:4a:da:63:f0:79:2d:ce:19:08:0d:34:dd:81:12:53: a0:d8:4e:b4:d1:20:ed:2e:6d:5a:b3:65:bf:fd:61:ac:76:92: f9:bb:12:24:fc:60:3b:a7:1e:7c:25:f9:f6:f3:44:fc:32:43: 26:44:cf:ec:c5:7a:33:28:ad:73:49:6b:17:b9:f6:f9:e3:88: bc:12:93:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWWSamZK4N1bLNEf17/J0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNDc3ODYwNDc3YTUzNTRiNWE4Njk2NWRkMzk5ZTk4OTg3 ZTU5MGUwHhcNMjYwMjA5MTcwMDU3WhcNMjYwMjEwMTcwMDU3WjAzMTEwLwYDVQQD EygwZmI4YzA4Y2M3MjliNTk4OTE2ZGE5ZmVjZmMxZTIyNDUzNzZkN2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucba56nKy3DGJ+PXHDy5T6AWyT0y V9C1Ye6Qktw8f+tfE3/es9JDGXpoeLSeInHwXFTJQvxxcLJlBOy6i+jteb9vezlk trYcUIQuqKoI5R+/RRW2UsODYjaNYHSqYvLRtdlyJ1X/R1IE3kK0ZPzYeOzIH/E9 ExvTehTDgtDLlxc8RQ4IHkwtFBdxcZ/nGoFlzag+dCxxGrC4z+0Q8vMu74Wxyoy/ owRWhHcyoSjvPMagtdobkyj8Jc5SRC3ehAZKbT9EbT/XANGmlzonca9AY9suwwrO PDdbiyK9PEMrXRHC8FoDSNP2MoVPAIvDqRnNMjobGIa0eFzjfVhdmoIYowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA+4wIzHKbWYkW2p/s/B4iRTdtf2MB8GA1UdIwQY MBaAFJJHeGBHelNUtahpZd05npiYflkOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2tkNFlFZDZVMVMxcUdsbDNUbWVtSmgtV1E0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9jYjY2NjEtMTcxYy00MDZmLWIzMTMt YTYzN2NkODQ2Y2Y2LzEva2tkNFlFZDZVMVMxcUdsbDNUbWVtSmgtV1E0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9jYjY2NjEtMTcxYy00MDZmLWIzMTMtYTYzN2NkODQ2Y2Y2 LzEva2tkNFlFZDZVMVMxcUdsbDNUbWVtSmgtV1E0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANem2lMyz cJrtGAB/O4r2DmWdVFYD6OdqxwP93hs4QK15918K9K42U7j0yfalA3Md45nzgyLX Pjycs2MaK1xETosH8X+nPFR2+2LqgiXvR5uJbKfq+INKDOZqeKCKVPWf8u5H/PSj jXwVyLGnuOczjg53xo7sI5KnXzKB+m+vSTROrkv66G5hijh8T3WsAyBOGksxw4aU Z4/3Tq+Qz9TXOX+FT6bFrYHN5kZ7PqrjAXCzAYCSTiwFStpj8HktzhkIDTTdgRJT oNhOtNEg7S5tWrNlv/1hrHaS+bsSJPxgO6cefCX59vNE/DJDJkTP7MV6Myitc0lr F7n2+eOIvBKTTA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:03 2026 by rpki-client