This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.mft File: KyJEyKPrSjxtd20EbOkqvwHGwi8.mft (raw, json) Hash identifier: Su3XKU4Boa6GwdkSoxi8Ekv2OLAIEZkRi5R4VrC7jHc= Subject key identifier: C1:AF:1A:27:E5:48:D9:45:78:29:16:11:B2:6A:F4:79:A3:55:6C:50 Authority key identifier: 2B:22:44:C8:A3:EB:4A:3C:6D:77:6D:04:6C:E9:2A:BF:01:C6:C2:2F Certificate issuer: /CN=2b2244c8a3eb4a3c6d776d046ce92abf01c6c22f Certificate serial: 019C427D13A6C4D5D8A09B7C5D958CA448A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KyJEyKPrSjxtd20EbOkqvwHGwi8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 13:00:19 +0000 Manifest this update: Mon 09 Feb 2026 13:00:19 +0000 Manifest next update: Tue 10 Feb 2026 13:00:19 +0000 Files and hashes: 1: DWxK7O4df_W8HA4KXmkc0bNeZRc.roa (hash: BoTdjcLNvInLjrHcqKbP+Q4OyLKz1VsHHG2lylnjHaU=) 2: KyJEyKPrSjxtd20EbOkqvwHGwi8.crl (hash: MexjGhLUKKLrwJrfFCcAQGsFq9pzkSovj523RfV0GRY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.crl rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.mft rsync://rpki.ripe.net/repository/DEFAULT/KyJEyKPrSjxtd20EbOkqvwHGwi8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:13:a6:c4:d5:d8:a0:9b:7c:5d:95:8c:a4:48:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b2244c8a3eb4a3c6d776d046ce92abf01c6c22f Validity Not Before: Feb 9 13:00:19 2026 GMT Not After : Feb 10 13:00:19 2026 GMT Subject: CN=c1af1a27e548d94578291611b26af479a3556c50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:95:0e:5a:ef:0b:6d:cd:db:67:f2:bf:2e:4d: 82:e1:98:78:e7:79:ab:32:90:e0:1e:09:00:a1:27: 2e:2e:61:12:77:16:a6:be:34:ae:cb:94:8a:b8:40: d6:05:b4:e5:f3:1d:23:0a:db:28:eb:db:65:7c:b9: 16:36:32:ad:57:0c:ef:48:8b:0e:de:35:f8:3a:4e: 8c:d8:1e:b9:30:9a:d6:7a:2d:1e:50:ca:ae:56:7d: 07:69:a3:c8:05:4a:5d:2d:86:c0:66:fa:06:c7:85: d1:a6:ed:bf:ab:5d:70:8f:3d:b8:26:6f:6a:c1:28: 09:04:82:5b:c2:b3:d3:40:8c:23:a4:64:cd:db:53: d4:f7:f6:77:38:ef:75:ab:e4:97:15:2c:ec:4e:21: b0:92:3d:44:31:00:15:3b:d1:47:7d:db:f8:34:bc: 58:71:22:0f:8c:c0:65:4d:49:9b:59:37:2c:93:4f: e2:27:b0:7c:06:f5:38:00:88:11:2d:83:7b:e4:57: 82:1d:a1:be:3e:22:69:83:5b:4b:9f:f4:da:6a:87: 0c:d3:89:b9:81:47:93:f5:f5:5a:a1:78:a3:af:9b: a1:af:aa:c0:a5:96:09:f2:46:25:af:c5:a6:ff:8d: 69:7c:82:81:f3:96:02:58:ec:ab:6a:25:ad:b2:f6: f9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:AF:1A:27:E5:48:D9:45:78:29:16:11:B2:6A:F4:79:A3:55:6C:50 X509v3 Authority Key Identifier: keyid:2B:22:44:C8:A3:EB:4A:3C:6D:77:6D:04:6C:E9:2A:BF:01:C6:C2:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KyJEyKPrSjxtd20EbOkqvwHGwi8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:ae:7b:8e:42:a7:a6:0b:e6:10:a0:b5:09:3c:b9:28:20:d9: 46:f1:d5:c9:96:c2:5c:48:bb:ae:25:13:20:70:ca:dd:42:ec: 1a:7c:2a:34:a0:31:33:7a:8a:57:04:5b:d3:5d:60:e9:33:f8: c6:28:64:66:83:24:22:7d:93:75:60:0c:20:f9:f7:ca:72:01: d2:63:78:ba:5e:c3:2f:28:e3:3e:23:d8:d9:0b:d0:cf:7e:c0: fd:e3:e8:7e:28:29:a5:94:1a:4c:88:72:72:00:81:85:a7:c7: 24:d0:1e:27:ce:10:30:d4:90:e9:3a:ce:d8:81:10:24:c1:8b: 88:e2:85:06:99:e4:cf:5f:e4:03:5e:bc:16:8c:c6:a1:95:72: 3d:58:2e:57:ea:29:66:7a:af:fa:f1:15:04:9d:c3:4e:e5:56: 24:13:ca:a6:ed:cc:ca:82:50:65:a8:6e:75:32:0b:e1:be:d3: 9b:a7:90:8e:f4:8e:08:b0:8f:75:c5:7c:b9:60:34:81:d0:43: d1:20:ba:55:b5:cf:84:18:58:0c:3c:cd:ba:b5:f5:e7:bc:29: 9a:96:6e:a8:e7:6b:06:37:34:c8:c8:cc:dc:f6:a0:e8:7a:c7: 80:00:d3:f4:63:bb:81:b4:94:81:21:4c:ff:3c:3b:ad:11:fa: b9:a4:7a:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfROmxNXYoJt8XZWMpEijMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiMjI0NGM4YTNlYjRhM2M2ZDc3NmQwNDZjZTkyYWJmMDFj NmMyMmYwHhcNMjYwMjA5MTMwMDE5WhcNMjYwMjEwMTMwMDE5WjAzMTEwLwYDVQQD EyhjMWFmMWEyN2U1NDhkOTQ1NzgyOTE2MTFiMjZhZjQ3OWEzNTU2YzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZUOWu8Lbc3bZ/K/Lk2C4Zh453mr MpDgHgkAoScuLmESdxamvjSuy5SKuEDWBbTl8x0jCtso69tlfLkWNjKtVwzvSIsO 3jX4Ok6M2B65MJrWei0eUMquVn0HaaPIBUpdLYbAZvoGx4XRpu2/q11wjz24Jm9q wSgJBIJbwrPTQIwjpGTN21PU9/Z3OO91q+SXFSzsTiGwkj1EMQAVO9FHfdv4NLxY cSIPjMBlTUmbWTcsk0/iJ7B8BvU4AIgRLYN75FeCHaG+PiJpg1tLn/TaaocM04m5 gUeT9fVaoXijr5uhr6rApZYJ8kYlr8Wm/41pfIKB85YCWOyraiWtsvb5XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMGvGiflSNlFeCkWEbJq9HmjVWxQMB8GA1UdIwQY MBaAFCsiRMij60o8bXdtBGzpKr8BxsIvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3lKRXlLUHJTanh0ZDIwRWJPa3F2d0hHd2k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83Y2M3YTctYWVmMS00MDhhLWExYzYt ZGYxY2NlNGU2OTUwLzEvS3lKRXlLUHJTanh0ZDIwRWJPa3F2d0hHd2k4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC83Y2M3YTctYWVmMS00MDhhLWExYzYtZGYxY2NlNGU2OTUw LzEvS3lKRXlLUHJTanh0ZDIwRWJPa3F2d0hHd2k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH657jkKn pgvmEKC1CTy5KCDZRvHVyZbCXEi7riUTIHDK3ULsGnwqNKAxM3qKVwRb011g6TP4 xihkZoMkIn2TdWAMIPn3ynIB0mN4ul7DLyjjPiPY2QvQz37A/ePofigppZQaTIhy cgCBhafHJNAeJ84QMNSQ6TrO2IEQJMGLiOKFBpnkz1/kA168FozGoZVyPVguV+op Znqv+vEVBJ3DTuVWJBPKpu3MyoJQZahudTIL4b7Tm6eQjvSOCLCPdcV8uWA0gdBD 0SC6VbXPhBhYDDzNurX157wpmpZuqOdrBjc0yMjM3Pag6HrHgADT9GO7gbSUgSFM /zw7rRH6uaR6Tg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:09 2026 by rpki-client