This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft File: KygwYXxDyMvImvPLKnTqXdAP5uo.mft (raw, json) Hash identifier: q1z/hzJQv5jLu/Ku49LfNBXlV4c0/02k1XYRh18mSOo= Subject key identifier: 45:55:6B:D1:0F:88:D5:A4:48:BF:38:2F:75:ED:57:DE:EC:31:FE:74 Authority key identifier: 2B:28:30:61:7C:43:C8:CB:C8:9A:F3:CB:2A:74:EA:5D:D0:0F:E6:EA Certificate issuer: /CN=2b2830617c43c8cbc89af3cb2a74ea5dd00fe6ea Certificate serial: 019C435931EC7B3BD8B0F63F5C6266D18151 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KygwYXxDyMvImvPLKnTqXdAP5uo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft Manifest number: 1152 Signing time: Mon 09 Feb 2026 17:00:44 +0000 Manifest this update: Mon 09 Feb 2026 17:00:44 +0000 Manifest next update: Tue 10 Feb 2026 17:00:44 +0000 Files and hashes: 1: KygwYXxDyMvImvPLKnTqXdAP5uo.crl (hash: hOgxa/HLlMw5uSiHOdatRGLXUkBhNSu0+WSV9mBpsT8=) 2: WnrfeKHjp01grMlG1UefiIjVQJ0.roa (hash: 7Bp0dsKH9K4YXSeiewZoI6Eeafpuzu2XCcfRYrCLnF8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.crl rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft rsync://rpki.ripe.net/repository/DEFAULT/KygwYXxDyMvImvPLKnTqXdAP5uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:31:ec:7b:3b:d8:b0:f6:3f:5c:62:66:d1:81:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b2830617c43c8cbc89af3cb2a74ea5dd00fe6ea Validity Not Before: Feb 9 17:00:44 2026 GMT Not After : Feb 10 17:00:44 2026 GMT Subject: CN=45556bd10f88d5a448bf382f75ed57deec31fe74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:41:51:16:10:15:35:ae:8c:ce:8b:42:b6:23: 8a:29:4a:bd:74:31:20:de:71:97:d9:76:01:d3:02: 95:c5:e5:11:44:b9:58:71:f8:da:45:fe:0c:80:2e: 0a:12:c5:81:c7:44:88:42:f9:1b:e0:9c:0a:7c:94: f5:5c:c8:d2:f2:0b:98:3a:14:54:25:aa:8b:7b:bf: d3:e6:92:82:f0:e8:e5:80:55:8f:31:73:e3:77:51: ec:54:95:51:6d:c4:95:74:0e:d4:79:2c:20:fe:5a: c7:b9:ab:7a:21:13:23:fe:2c:f6:9d:25:18:42:1f: b6:d5:67:c3:bb:bf:7b:11:c0:2b:ab:59:e0:d1:e2: e5:5a:bc:03:cc:9b:0b:f6:de:a0:83:e2:e5:23:bb: c4:13:c9:6c:4b:6f:98:3d:6c:be:5c:d8:e7:16:5a: 97:87:dd:52:ed:cb:69:6c:d5:04:e4:f0:82:f9:ec: 96:9e:4c:7f:4a:14:ea:bc:44:46:ea:c3:dd:8d:38: e5:66:9f:7a:46:8d:aa:91:b0:4d:79:97:28:ef:33: c2:6b:3b:b4:c2:04:c6:7e:65:b3:08:1c:d4:7f:04: 7b:fe:86:d2:59:a5:f8:e9:da:61:ef:1c:84:ad:08: c8:92:a3:e5:a8:2d:a4:21:66:c8:4f:16:76:f8:94: 5b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:55:6B:D1:0F:88:D5:A4:48:BF:38:2F:75:ED:57:DE:EC:31:FE:74 X509v3 Authority Key Identifier: keyid:2B:28:30:61:7C:43:C8:CB:C8:9A:F3:CB:2A:74:EA:5D:D0:0F:E6:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KygwYXxDyMvImvPLKnTqXdAP5uo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:9b:c8:fc:5e:82:61:be:3d:71:90:5e:70:61:9a:ea:f9:c4: ba:c7:e1:32:01:33:b4:39:d8:97:b8:0a:16:ec:96:80:e7:41: 64:6e:3b:0b:72:38:5c:05:3b:99:07:2a:02:a8:c8:41:d4:5d: 68:51:6e:c9:26:44:83:a1:ca:dc:f4:c7:c5:d7:22:c7:69:c4: 24:0d:38:0d:a5:78:02:68:9b:37:61:48:9a:93:3e:40:e7:ed: e4:e2:d0:5d:41:b8:16:13:5d:04:63:25:26:1b:ac:85:f1:19: 9f:97:11:22:63:3a:fd:3f:c1:99:cb:bf:d0:bf:d9:6b:aa:32: d2:12:bf:e2:fa:50:81:32:33:a6:e9:dd:98:57:99:37:7c:04: 83:b5:d0:80:e8:ad:0b:41:04:f7:c0:bf:26:98:c9:1a:74:80: d2:45:eb:36:21:1d:48:89:95:dd:77:2f:48:4d:cf:1c:8b:d8: ca:68:d7:46:a1:45:d2:0d:51:b5:27:29:78:53:33:d9:2a:fb: 77:ab:73:77:c6:15:c0:9c:84:6a:aa:05:45:20:62:a5:30:93: 94:03:47:1e:35:fc:7b:af:83:14:16:04:e4:c5:78:45:67:a0: f8:c8:01:50:6a:1c:7f:7e:83:b6:c9:91:e2:74:7f:44:bb:8a: 24:72:3e:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWTHsezvYsPY/XGJm0YFRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiMjgzMDYxN2M0M2M4Y2JjODlhZjNjYjJhNzRlYTVkZDAw ZmU2ZWEwHhcNMjYwMjA5MTcwMDQ0WhcNMjYwMjEwMTcwMDQ0WjAzMTEwLwYDVQQD Eyg0NTU1NmJkMTBmODhkNWE0NDhiZjM4MmY3NWVkNTdkZWVjMzFmZTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkFRFhAVNa6MzotCtiOKKUq9dDEg 3nGX2XYB0wKVxeURRLlYcfjaRf4MgC4KEsWBx0SIQvkb4JwKfJT1XMjS8guYOhRU JaqLe7/T5pKC8OjlgFWPMXPjd1HsVJVRbcSVdA7UeSwg/lrHuat6IRMj/iz2nSUY Qh+21WfDu797EcArq1ng0eLlWrwDzJsL9t6gg+LlI7vEE8lsS2+YPWy+XNjnFlqX h91S7ctpbNUE5PCC+eyWnkx/ShTqvERG6sPdjTjlZp96Ro2qkbBNeZco7zPCazu0 wgTGfmWzCBzUfwR7/obSWaX46dph7xyErQjIkqPlqC2kIWbITxZ2+JRbAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEVVa9EPiNWkSL84L3XtV97sMf50MB8GA1UdIwQY MBaAFCsoMGF8Q8jLyJrzyyp06l3QD+bqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3lnd1lYeER5TXZJbXZQTEtuVHFYZEFQNXVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9jOWVlOGMtNTc0ZC00Y2Y2LWEwMDgt MTFiNTJjMjRhMTEyLzEvS3lnd1lYeER5TXZJbXZQTEtuVHFYZEFQNXVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9jOWVlOGMtNTc0ZC00Y2Y2LWEwMDgtMTFiNTJjMjRhMTEy LzEvS3lnd1lYeER5TXZJbXZQTEtuVHFYZEFQNXVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACZvI/F6C Yb49cZBecGGa6vnEusfhMgEztDnYl7gKFuyWgOdBZG47C3I4XAU7mQcqAqjIQdRd aFFuySZEg6HK3PTHxdcix2nEJA04DaV4AmibN2FImpM+QOft5OLQXUG4FhNdBGMl JhushfEZn5cRImM6/T/Bmcu/0L/Za6oy0hK/4vpQgTIzpundmFeZN3wEg7XQgOit C0EE98C/JpjJGnSA0kXrNiEdSImV3XcvSE3PHIvYymjXRqFF0g1RtScpeFMz2Sr7 d6tzd8YVwJyEaqoFRSBipTCTlANHHjX8e6+DFBYE5MV4RWeg+MgBUGocf36DtsmR 4nR/RLuKJHI+5Q== -----END CERTIFICATE-----Generated at Mon Feb 9 19:53:43 2026 by rpki-client