This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.mft File: _KHkSHz41KLZYd1iLz51Ab3CSCk.mft (raw, json) Hash identifier: bBvijnAxbP4wC2pukds74CnNoMPFZ9iy2nbQL8FyWrU= Subject key identifier: 25:34:63:30:79:4C:FC:C1:1A:69:0A:88:49:A5:39:64:99:72:CA:68 Authority key identifier: FC:A1:E4:48:7C:F8:D4:A2:D9:61:DD:62:2F:3E:75:01:BD:C2:48:29 Certificate issuer: /CN=fca1e4487cf8d4a2d961dd622f3e7501bdc24829 Certificate serial: 019C43FE511047F0FD4EAA4308B80A04E2CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KHkSHz41KLZYd1iLz51Ab3CSCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.mft Manifest number: 0154 Signing time: Mon 09 Feb 2026 20:01:05 +0000 Manifest this update: Mon 09 Feb 2026 20:01:05 +0000 Manifest next update: Tue 10 Feb 2026 20:01:05 +0000 Files and hashes: 1: CDvOXRqmZ03Osdas03zg-OKS-84.roa (hash: ArwNBlF/B50l4IK1YdSnW2SS2EMQ9GG3g4GljFQ0M5w=) 2: _KHkSHz41KLZYd1iLz51Ab3CSCk.crl (hash: A1Hpj6Q+BSJfdgZZWh3SIbKuRfBb54f88ltsqJTcQdQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.crl rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.mft rsync://rpki.ripe.net/repository/DEFAULT/_KHkSHz41KLZYd1iLz51Ab3CSCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:51:10:47:f0:fd:4e:aa:43:08:b8:0a:04:e2:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fca1e4487cf8d4a2d961dd622f3e7501bdc24829 Validity Not Before: Feb 9 20:01:05 2026 GMT Not After : Feb 10 20:01:05 2026 GMT Subject: CN=25346330794cfcc11a690a8849a539649972ca68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7b:2b:43:57:2e:43:c5:bd:12:be:83:84:db: 50:3a:80:5f:25:00:13:01:02:da:c1:ee:40:24:c5: 88:76:5c:56:54:3a:79:03:32:17:b0:b3:89:71:54: 0f:07:36:8d:89:0b:d7:53:e0:a7:6a:4a:d6:a0:54: cf:05:b2:fd:c1:49:a3:67:5f:31:0d:fe:f9:8f:5d: de:72:75:da:21:d9:68:bb:f6:26:d8:63:92:5a:4d: 09:c7:04:bf:84:2c:d3:09:1d:36:2a:b6:c5:4d:83: 2e:05:14:74:87:21:02:21:66:ac:55:cb:c3:71:44: d3:9f:7d:da:54:4a:cd:b9:53:4a:50:23:a0:0e:97: eb:39:81:31:c9:b2:55:a2:76:c9:9e:ff:68:27:20: ab:f1:7c:1d:3f:af:32:3d:fc:47:8f:8a:a0:9a:6c: ae:e7:24:85:83:53:8a:08:68:f2:2e:07:20:91:5c: 44:34:75:3c:c6:f8:58:68:76:22:c3:62:ed:1e:61: 43:8d:87:f0:c8:2d:16:87:77:10:62:9e:0b:5f:88: 10:eb:34:f1:12:89:f6:86:1b:d5:8e:ff:0e:50:d5: 08:1a:5e:6c:db:f1:e7:7a:1e:f2:f4:01:03:24:35: 34:56:97:f2:c0:85:17:2c:36:a9:a3:d8:40:9a:7b: dd:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:34:63:30:79:4C:FC:C1:1A:69:0A:88:49:A5:39:64:99:72:CA:68 X509v3 Authority Key Identifier: keyid:FC:A1:E4:48:7C:F8:D4:A2:D9:61:DD:62:2F:3E:75:01:BD:C2:48:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KHkSHz41KLZYd1iLz51Ab3CSCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:81:06:d2:92:5c:e5:a9:59:b6:d9:04:43:03:8f:cb:bf:19: 61:b9:97:f0:a6:a3:cb:f6:e6:7a:17:9e:14:6c:82:f9:82:f8: 5e:3a:a2:71:f0:d9:cb:33:90:6e:36:b8:2d:9e:8f:c4:25:24: ee:30:5a:17:a0:ec:13:f6:a3:c5:92:08:a4:9e:bb:ab:ae:d2: 25:53:9b:4f:02:6d:e6:37:99:aa:30:44:79:8d:ba:26:f8:22: 7d:39:37:39:88:09:8b:f5:59:f9:5a:d6:ec:82:97:71:5b:75: cd:d9:b7:66:e7:b0:5d:bc:8d:93:1b:a2:fb:bb:1b:93:01:24: 0e:80:47:c7:de:ce:05:ec:18:7c:62:00:79:1e:38:3c:22:60: 8c:71:01:ab:13:42:fb:46:8b:fc:fa:0b:06:50:a4:ca:ca:56: 40:b1:13:31:4c:59:37:8c:b1:31:dc:2b:3d:09:3a:c3:7a:7f: cb:1a:b2:e7:81:1d:41:30:56:6f:46:d4:78:08:81:01:8f:55: 67:11:b3:97:1f:15:9a:15:f4:68:cf:3c:56:fe:db:8f:8f:b0: e2:fc:41:64:86:19:3e:11:62:8c:4f:db:a7:bc:70:2b:c4:1e: 48:94:f6:cb:7d:de:1e:3c:6e:34:2d:19:6b:d3:a0:a7:3e:d4: b4:5e:5e:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/lEQR/D9TqpDCLgKBOLNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjYTFlNDQ4N2NmOGQ0YTJkOTYxZGQ2MjJmM2U3NTAxYmRj MjQ4MjkwHhcNMjYwMjA5MjAwMTA1WhcNMjYwMjEwMjAwMTA1WjAzMTEwLwYDVQQD EygyNTM0NjMzMDc5NGNmY2MxMWE2OTBhODg0OWE1Mzk2NDk5NzJjYTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXsrQ1cuQ8W9Er6DhNtQOoBfJQAT AQLawe5AJMWIdlxWVDp5AzIXsLOJcVQPBzaNiQvXU+CnakrWoFTPBbL9wUmjZ18x Df75j13ecnXaIdlou/Ym2GOSWk0JxwS/hCzTCR02KrbFTYMuBRR0hyECIWasVcvD cUTTn33aVErNuVNKUCOgDpfrOYExybJVonbJnv9oJyCr8XwdP68yPfxHj4qgmmyu 5ySFg1OKCGjyLgcgkVxENHU8xvhYaHYiw2LtHmFDjYfwyC0Wh3cQYp4LX4gQ6zTx Eon2hhvVjv8OUNUIGl5s2/Hneh7y9AEDJDU0VpfywIUXLDapo9hAmnvd0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCU0YzB5TPzBGmkKiEmlOWSZcspoMB8GA1UdIwQY MBaAFPyh5Eh8+NSi2WHdYi8+dQG9wkgpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0tIa1NIejQxS0xaWWQxaUx6NTFBYjNDU0NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS82NzI5NzQtNzJiMS00NGZkLTgyNmEt MWUyOTJjMGU5NWYxLzEvX0tIa1NIejQxS0xaWWQxaUx6NTFBYjNDU0NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS82NzI5NzQtNzJiMS00NGZkLTgyNmEtMWUyOTJjMGU5NWYx LzEvX0tIa1NIejQxS0xaWWQxaUx6NTFBYjNDU0NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfoEG0pJc 5alZttkEQwOPy78ZYbmX8Kajy/bmeheeFGyC+YL4XjqicfDZyzOQbja4LZ6PxCUk 7jBaF6DsE/ajxZIIpJ67q67SJVObTwJt5jeZqjBEeY26JvgifTk3OYgJi/VZ+VrW 7IKXcVt1zdm3ZuewXbyNkxui+7sbkwEkDoBHx97OBewYfGIAeR44PCJgjHEBqxNC +0aL/PoLBlCkyspWQLETMUxZN4yxMdwrPQk6w3p/yxqy54EdQTBWb0bUeAiBAY9V ZxGzlx8VmhX0aM88Vv7bj4+w4vxBZIYZPhFijE/bp7xwK8QeSJT2y33eHjxuNC0Z a9Ogpz7UtF5egQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:45:51 2026 by rpki-client