This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft File: kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft (raw, json) Hash identifier: OjrMOdWn//D4+KGraX50pB9Hq5o30I45m4Z8FysWPWA= Subject key identifier: EE:8E:9E:BD:72:F1:45:D1:B6:13:54:94:F6:01:EA:65:1D:EE:AE:A2 Authority key identifier: 90:AF:DC:FF:7D:E3:A6:59:47:63:1F:92:C6:7E:27:27:67:19:44:78 Certificate issuer: /CN=90afdcff7de3a65947631f92c67e272767194478 Certificate serial: 019C4210094839CE2E21EBE7F8BBBF8FC3C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kK_c_33jpllHYx-Sxn4nJ2cZRHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 11:01:13 +0000 Manifest this update: Mon 09 Feb 2026 11:01:13 +0000 Manifest next update: Tue 10 Feb 2026 11:01:13 +0000 Files and hashes: 1: kK_c_33jpllHYx-Sxn4nJ2cZRHg.crl (hash: c/GddDKk3Xc5mmUK7issszJsaTdEPwyjmTf97gPRgPI=) 2: oeaJctM9Qtah90R6LCT4BqnOU4E.roa (hash: 6Vq0BN7rnnATY8BQSA0XM6bTNiKEPoqXG+oYtacEtmI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.crl rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft rsync://rpki.ripe.net/repository/DEFAULT/kK_c_33jpllHYx-Sxn4nJ2cZRHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:10:09:48:39:ce:2e:21:eb:e7:f8:bb:bf:8f:c3:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90afdcff7de3a65947631f92c67e272767194478 Validity Not Before: Feb 9 11:01:13 2026 GMT Not After : Feb 10 11:01:13 2026 GMT Subject: CN=ee8e9ebd72f145d1b6135494f601ea651deeaea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e8:1c:ae:31:93:da:20:f5:56:e8:ab:b8:ed: da:1d:00:54:af:6f:04:6e:5b:73:67:d3:b7:83:0a: 2c:ac:32:fa:56:d3:a4:b2:ae:4e:d4:03:46:54:48: f8:6b:87:ff:77:1d:07:24:6f:c7:13:72:09:fb:4b: f5:b4:82:8b:1d:76:78:f8:9e:15:47:f3:ff:ae:f4: b8:6e:ea:7e:fe:93:5a:bc:aa:b3:c1:43:82:f5:08: 2a:0a:ca:ba:4d:6e:60:23:8d:ff:3c:72:53:f4:ee: 69:55:39:e6:2e:5a:f1:00:0e:7a:c8:a5:7a:48:5a: 1c:c4:74:56:29:03:eb:9f:ae:1f:dc:56:7c:74:ac: 30:99:1d:7a:b1:eb:de:43:df:fd:13:47:70:57:93: b8:ca:17:60:28:9e:66:25:4b:2e:8d:49:02:23:a5: e1:32:40:ef:c0:d3:80:42:19:75:d5:ee:27:1b:15: 4b:14:53:c1:f8:71:c7:a0:47:9f:24:67:a9:0f:b9: c7:26:8c:90:19:88:d0:47:cb:28:59:e2:e9:40:03: d8:9c:a0:89:d4:81:e6:52:c8:b7:79:b5:53:c1:73: e4:99:10:e0:cb:92:3a:75:de:85:7f:d3:09:df:a3: 1c:86:20:d4:12:6b:56:40:b7:4c:a2:dd:ce:48:f9: af:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:8E:9E:BD:72:F1:45:D1:B6:13:54:94:F6:01:EA:65:1D:EE:AE:A2 X509v3 Authority Key Identifier: keyid:90:AF:DC:FF:7D:E3:A6:59:47:63:1F:92:C6:7E:27:27:67:19:44:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kK_c_33jpllHYx-Sxn4nJ2cZRHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:e0:70:13:9f:4c:88:62:63:f8:ee:52:0b:80:c6:d1:e7:76: 75:76:35:d0:66:8e:73:23:12:8f:2a:cd:49:90:73:b9:cc:b9: 91:50:92:56:b3:3d:7f:aa:c1:be:52:f3:91:3b:66:c8:89:e6: b4:da:3a:1e:d0:3c:b6:18:d2:69:b7:00:e5:bd:74:c1:18:e4: 67:7f:26:c9:36:75:56:cc:0d:c8:29:85:01:5d:f0:92:4d:d9: 49:bf:fe:4b:d7:0e:91:97:a0:94:b9:c4:64:14:a8:e6:d6:c0: ba:f9:cd:5a:3c:06:91:15:f9:99:09:9b:c4:7b:87:5e:35:97: 90:29:68:3f:03:cf:dc:10:30:ed:2f:22:09:57:43:c6:6e:5e: db:e0:08:13:b8:a2:07:9b:6c:18:88:a3:9b:3a:49:33:88:01: 56:d8:cf:a5:3a:8d:36:40:df:fc:6e:7a:0a:21:0c:47:75:96: a1:8a:f1:a8:f4:f5:d8:d5:31:ff:be:62:ae:c6:40:ba:4c:72: 75:41:fd:0f:5f:bd:1d:62:41:f7:22:d8:3b:ad:44:94:b2:b2: fb:37:25:e9:6c:7b:3f:a0:ce:72:42:d1:07:e4:90:3f:e1:b5: ce:6b:13:d1:fd:d5:ae:42:65:ee:56:1a:9f:5c:aa:89:7f:d7: 50:57:45:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCEAlIOc4uIevn+Lu/j8PJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwYWZkY2ZmN2RlM2E2NTk0NzYzMWY5MmM2N2UyNzI3Njcx OTQ0NzgwHhcNMjYwMjA5MTEwMTEzWhcNMjYwMjEwMTEwMTEzWjAzMTEwLwYDVQQD EyhlZThlOWViZDcyZjE0NWQxYjYxMzU0OTRmNjAxZWE2NTFkZWVhZWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlegcrjGT2iD1VuiruO3aHQBUr28E bltzZ9O3gwosrDL6VtOksq5O1ANGVEj4a4f/dx0HJG/HE3IJ+0v1tIKLHXZ4+J4V R/P/rvS4bup+/pNavKqzwUOC9QgqCsq6TW5gI43/PHJT9O5pVTnmLlrxAA56yKV6 SFocxHRWKQPrn64f3FZ8dKwwmR16seveQ9/9E0dwV5O4yhdgKJ5mJUsujUkCI6Xh MkDvwNOAQhl11e4nGxVLFFPB+HHHoEefJGepD7nHJoyQGYjQR8soWeLpQAPYnKCJ 1IHmUsi3ebVTwXPkmRDgy5I6dd6Ff9MJ36MchiDUEmtWQLdMot3OSPmvKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO6Onr1y8UXRthNUlPYB6mUd7q6iMB8GA1UdIwQY MBaAFJCv3P9946ZZR2MfksZ+JydnGUR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0tfY18zM2pwbGxIWXgtU3huNG5KMmNaUkhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9lMDBkMWUtNGExOC00OTU2LTgyYTQt MTkwYTVjOGQ5ZDk1LzEva0tfY18zM2pwbGxIWXgtU3huNG5KMmNaUkhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9lMDBkMWUtNGExOC00OTU2LTgyYTQtMTkwYTVjOGQ5ZDk1 LzEva0tfY18zM2pwbGxIWXgtU3huNG5KMmNaUkhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOuBwE59M iGJj+O5SC4DG0ed2dXY10GaOcyMSjyrNSZBzucy5kVCSVrM9f6rBvlLzkTtmyInm tNo6HtA8thjSabcA5b10wRjkZ38myTZ1VswNyCmFAV3wkk3ZSb/+S9cOkZeglLnE ZBSo5tbAuvnNWjwGkRX5mQmbxHuHXjWXkCloPwPP3BAw7S8iCVdDxm5e2+AIE7ii B5tsGIijmzpJM4gBVtjPpTqNNkDf/G56CiEMR3WWoYrxqPT12NUx/75irsZAukxy dUH9D1+9HWJB9yLYO61ElLKy+zcl6Wx7P6DOckLRB+SQP+G1zmsT0f3VrkJl7lYa n1yqiX/XUFdF0Q== -----END CERTIFICATE-----Generated at Mon Feb 9 18:47:22 2026 by rpki-client