This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft File: KL8ecjI3QqxNgTarbI6F33ujfus.mft (raw, json) Hash identifier: TAChbvE+2rfWl3wLQx3OmdDSIPDnWawOkC9FvPmWtfc= Subject key identifier: 0A:D8:68:3C:EC:86:B1:C0:68:E1:CB:88:7C:C5:19:4B:90:A5:6A:28 Authority key identifier: 28:BF:1E:72:32:37:42:AC:4D:81:36:AB:6C:8E:85:DF:7B:A3:7E:EB Certificate issuer: /CN=28bf1e72323742ac4d8136ab6c8e85df7ba37eeb Certificate serial: 019C420F858DAA85FC792310AA03426CB7BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KL8ecjI3QqxNgTarbI6F33ujfus.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 11:00:39 +0000 Manifest this update: Mon 09 Feb 2026 11:00:39 +0000 Manifest next update: Tue 10 Feb 2026 11:00:39 +0000 Files and hashes: 1: KL8ecjI3QqxNgTarbI6F33ujfus.crl (hash: m5xl/b8Lsk2F5S2f8Q1eHqETZz2WWhQ1DFdQ5C5iCi4=) 2: ecRzktYrFjLVxOC-GlugSTEtWK0.roa (hash: rKqBSvS82bzwCh2lS4Ae0RGYw1nfUEHFPUJO90hBbGI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.crl rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft rsync://rpki.ripe.net/repository/DEFAULT/KL8ecjI3QqxNgTarbI6F33ujfus.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:85:8d:aa:85:fc:79:23:10:aa:03:42:6c:b7:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28bf1e72323742ac4d8136ab6c8e85df7ba37eeb Validity Not Before: Feb 9 11:00:39 2026 GMT Not After : Feb 10 11:00:39 2026 GMT Subject: CN=0ad8683cec86b1c068e1cb887cc5194b90a56a28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ba:5f:28:40:1d:67:5b:b9:6d:0e:94:a3:2f: d0:f8:a5:40:64:81:d1:6d:d9:e9:69:c7:f9:7a:34: 11:3b:17:64:19:20:c3:9f:f9:71:c5:81:0f:72:53: 1d:02:16:ba:a7:e8:fb:c2:db:69:53:a1:93:00:df: 86:f2:40:de:e2:51:60:85:77:a6:23:70:91:15:7f: 12:b3:c6:d9:d5:e9:2a:d8:f5:e4:a6:6c:b3:98:ea: 54:7c:a6:ba:43:55:55:30:74:1b:7d:93:84:86:ec: 4e:a9:4b:8a:81:e5:dc:b1:9e:2b:eb:9b:11:4f:27: a5:0c:3a:18:48:f3:de:16:a6:cc:cd:d7:94:21:de: 9f:a0:62:f6:97:45:d2:7d:e6:5b:b5:95:ab:38:4b: e0:f5:f6:86:e6:95:f7:ec:f0:e7:b8:50:ae:81:76: 10:be:c6:65:8b:f9:49:49:dd:8a:3b:05:42:5d:d3: 14:bd:76:4a:74:c8:ac:0e:a4:21:4e:8f:ea:96:16: dd:39:6f:64:8f:a3:ec:e8:ba:2f:97:c1:84:94:88: 62:40:95:80:9e:93:ce:32:ef:9b:dc:80:36:7c:f3: 14:85:e9:3b:c3:73:fc:5f:43:e5:46:64:ba:5b:d5: 64:81:74:f2:bf:9c:ab:05:97:0b:1e:02:eb:19:1b: 4c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:D8:68:3C:EC:86:B1:C0:68:E1:CB:88:7C:C5:19:4B:90:A5:6A:28 X509v3 Authority Key Identifier: keyid:28:BF:1E:72:32:37:42:AC:4D:81:36:AB:6C:8E:85:DF:7B:A3:7E:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KL8ecjI3QqxNgTarbI6F33ujfus.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:f9:de:1b:5c:ed:2b:8f:07:b2:b6:43:08:f3:60:74:9c:a4: f9:1c:0f:1c:9c:47:a2:ce:1c:aa:3a:23:25:96:fb:4d:89:f2: 51:4a:cc:aa:ef:ca:8c:d9:f3:23:aa:0b:c1:e2:ab:8d:64:9e: 78:e0:0c:bc:1a:e7:73:cf:7e:68:59:42:bd:07:b8:65:7b:e5: 60:f9:04:a5:fe:3e:8d:d7:0d:17:ae:be:d8:ce:c8:56:97:c6: 69:93:c0:cd:6e:a2:d9:54:f3:27:a6:ad:0d:45:bb:85:df:93: c7:f3:5c:3a:d1:29:72:7a:6f:b8:99:10:c3:e3:78:eb:45:a1: 5b:53:77:54:58:b6:2e:6b:ec:d6:f1:07:60:fa:b8:68:a7:51: f8:ad:d6:24:11:d0:c1:3c:82:f8:27:be:9c:5d:ff:d1:51:0c: 56:d8:ef:3e:d3:78:09:6a:f4:86:82:db:02:b0:00:23:0c:88: 7b:bc:98:09:42:97:34:29:d6:d1:63:6d:18:d1:68:86:e0:33: f0:b7:dc:5b:92:02:6e:cc:a9:5f:32:1e:4d:ae:65:fb:25:1d: 3e:ba:dd:53:05:f7:9c:66:db:a5:a4:e9:cd:d2:c9:fa:d1:e6: 58:7e:b4:48:1e:3e:66:91:ae:96:cd:e0:66:c6:2a:e6:4b:cf: 94:24:21:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD4WNqoX8eSMQqgNCbLe6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4YmYxZTcyMzIzNzQyYWM0ZDgxMzZhYjZjOGU4NWRmN2Jh MzdlZWIwHhcNMjYwMjA5MTEwMDM5WhcNMjYwMjEwMTEwMDM5WjAzMTEwLwYDVQQD EygwYWQ4NjgzY2VjODZiMWMwNjhlMWNiODg3Y2M1MTk0YjkwYTU2YTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27pfKEAdZ1u5bQ6Uoy/Q+KVAZIHR bdnpacf5ejQROxdkGSDDn/lxxYEPclMdAha6p+j7wttpU6GTAN+G8kDe4lFghXem I3CRFX8Ss8bZ1ekq2PXkpmyzmOpUfKa6Q1VVMHQbfZOEhuxOqUuKgeXcsZ4r65sR TyelDDoYSPPeFqbMzdeUId6foGL2l0XSfeZbtZWrOEvg9faG5pX37PDnuFCugXYQ vsZli/lJSd2KOwVCXdMUvXZKdMisDqQhTo/qlhbdOW9kj6Ps6Lovl8GElIhiQJWA npPOMu+b3IA2fPMUhek7w3P8X0PlRmS6W9VkgXTyv5yrBZcLHgLrGRtMNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFArYaDzshrHAaOHLiHzFGUuQpWooMB8GA1UdIwQY MBaAFCi/HnIyN0KsTYE2q2yOhd97o37rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0w4ZWNqSTNRcXhOZ1RhcmJJNkYzM3VqZnVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9iYTZkZjctZjMyNS00MTg0LWE1NGEt MGM0ODFmMGFkMjBlLzEvS0w4ZWNqSTNRcXhOZ1RhcmJJNkYzM3VqZnVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9iYTZkZjctZjMyNS00MTg0LWE1NGEtMGM0ODFmMGFkMjBl LzEvS0w4ZWNqSTNRcXhOZ1RhcmJJNkYzM3VqZnVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm/neG1zt K48HsrZDCPNgdJyk+RwPHJxHos4cqjojJZb7TYnyUUrMqu/KjNnzI6oLweKrjWSe eOAMvBrnc89+aFlCvQe4ZXvlYPkEpf4+jdcNF66+2M7IVpfGaZPAzW6i2VTzJ6at DUW7hd+Tx/NcOtEpcnpvuJkQw+N460WhW1N3VFi2Lmvs1vEHYPq4aKdR+K3WJBHQ wTyC+Ce+nF3/0VEMVtjvPtN4CWr0hoLbArAAIwyIe7yYCUKXNCnW0WNtGNFohuAz 8LfcW5ICbsypXzIeTa5l+yUdPrrdUwX3nGbbpaTpzdLJ+tHmWH60SB4+ZpGuls3g ZsYq5kvPlCQhXg== -----END CERTIFICATE-----Generated at Mon Feb 9 20:00:23 2026 by rpki-client