This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft File: kFHan04DQdDI3l6sVMY6EenvW18.mft (raw, json) Hash identifier: x95xAGYVoJzy6XbZV0Sxl1+41urZIWycfF3zdQEdVHo= Subject key identifier: 50:4A:A8:8E:06:DF:E6:87:98:2F:08:2E:98:A0:D1:73:DF:69:3E:F0 Authority key identifier: 90:51:DA:9F:4E:03:41:D0:C8:DE:5E:AC:54:C6:3A:11:E9:EF:5B:5F Certificate issuer: /CN=9051da9f4e0341d0c8de5eac54c63a11e9ef5b5f Certificate serial: 019C41A1FC7ACF949D10A32E90124118D4A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFHan04DQdDI3l6sVMY6EenvW18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft Manifest number: 0ECC Signing time: Mon 09 Feb 2026 09:01:00 +0000 Manifest this update: Mon 09 Feb 2026 09:01:00 +0000 Manifest next update: Tue 10 Feb 2026 09:01:00 +0000 Files and hashes: 1: kFHan04DQdDI3l6sVMY6EenvW18.crl (hash: LQgN6ho7RaMZA/z2NJnoiauOEyfUuAqVacnOor0A/i0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.crl rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft rsync://rpki.ripe.net/repository/DEFAULT/kFHan04DQdDI3l6sVMY6EenvW18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:fc:7a:cf:94:9d:10:a3:2e:90:12:41:18:d4:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9051da9f4e0341d0c8de5eac54c63a11e9ef5b5f Validity Not Before: Feb 9 09:01:00 2026 GMT Not After : Feb 10 09:01:00 2026 GMT Subject: CN=504aa88e06dfe687982f082e98a0d173df693ef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:66:5b:ef:6f:76:c1:66:7d:a0:95:79:38:e5: b3:d3:af:0f:09:50:60:3e:93:fb:cf:b3:dd:b4:4c: 4a:ad:e2:ff:85:7c:39:40:be:c8:f6:9f:d1:5b:e9: 01:8a:b5:4c:2c:c0:e8:d5:77:87:d0:6e:ad:5a:b0: 19:9e:25:35:9c:bd:0b:88:fe:7e:f2:35:ee:7b:4b: f0:75:57:6f:7b:1c:2b:23:ea:da:0b:82:f2:a9:f4: c5:e2:a9:d3:b6:b9:df:f8:82:d5:10:0a:08:4f:2b: 38:e0:4d:d2:fb:f9:74:0c:59:71:ed:05:8a:0e:69: b2:cb:43:a8:6e:ac:f7:4e:c8:b5:14:46:ad:7a:7a: 60:bb:ce:17:58:37:d2:22:ad:a6:4e:96:01:43:1f: 93:76:8d:55:89:9e:d0:e5:bd:38:3d:45:e0:24:9b: 85:d2:40:69:59:bf:43:d5:20:c0:39:fd:65:8e:c7: 38:c1:24:32:03:87:c9:73:fd:79:a9:8c:d5:8c:55: 97:18:bc:a0:f7:64:af:76:d6:28:5f:ed:28:10:97: 36:ea:d0:50:da:e7:a9:9a:16:b1:3f:c7:f9:1f:68: 57:10:eb:96:bf:4d:3f:15:c4:87:1c:85:c2:3b:5f: 0c:0c:f0:9a:47:67:ff:26:b4:c5:3b:69:a3:89:e2: 75:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:4A:A8:8E:06:DF:E6:87:98:2F:08:2E:98:A0:D1:73:DF:69:3E:F0 X509v3 Authority Key Identifier: keyid:90:51:DA:9F:4E:03:41:D0:C8:DE:5E:AC:54:C6:3A:11:E9:EF:5B:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFHan04DQdDI3l6sVMY6EenvW18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:5a:83:7a:6a:72:b1:d6:e0:18:dc:65:6f:cd:5d:02:ae:34: a0:d1:a1:f1:91:66:ac:72:09:c5:48:52:13:39:03:32:81:f2: df:64:2e:a7:f8:9b:c0:7e:d3:61:53:67:98:99:87:c9:77:32: 29:b9:ad:80:eb:e5:7f:da:d9:85:3e:26:d2:7e:3e:70:e2:a2: 99:ef:d1:36:f5:6f:c4:db:b8:5c:09:99:a4:07:42:52:6b:b0: 61:38:6d:a9:f5:d2:e8:21:e5:ca:1d:80:ae:1d:ee:d3:f7:13: 7b:38:14:5d:e8:23:73:0c:bc:a3:90:ef:66:7f:40:ff:86:55: ce:07:d0:07:2c:70:9b:f5:5f:8c:eb:ac:af:a0:d8:e3:39:51: d5:43:b1:99:89:13:49:70:b5:4c:a8:33:04:2b:70:69:01:b3: 49:8f:77:bf:8e:8d:b2:94:15:a6:94:98:c8:6d:37:69:38:83: 9c:bd:6c:f6:42:ab:f8:83:03:93:95:fa:9d:c6:ea:14:26:06: 4b:ea:4b:2b:a4:fc:09:75:03:d4:0d:20:b5:7c:16:b3:08:68: 50:34:47:9d:23:0a:e0:9b:95:b8:59:93:e5:f7:66:70:91:84: ec:9b:03:70:a6:8b:94:46:f0:ae:0a:9a:19:f2:98:a4:57:d2: c1:3d:fc:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBofx6z5SdEKMukBJBGNSiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwNTFkYTlmNGUwMzQxZDBjOGRlNWVhYzU0YzYzYTExZTll ZjViNWYwHhcNMjYwMjA5MDkwMTAwWhcNMjYwMjEwMDkwMTAwWjAzMTEwLwYDVQQD Eyg1MDRhYTg4ZTA2ZGZlNjg3OTgyZjA4MmU5OGEwZDE3M2RmNjkzZWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWZb7292wWZ9oJV5OOWz068PCVBg PpP7z7PdtExKreL/hXw5QL7I9p/RW+kBirVMLMDo1XeH0G6tWrAZniU1nL0LiP5+ 8jXue0vwdVdvexwrI+raC4LyqfTF4qnTtrnf+ILVEAoITys44E3S+/l0DFlx7QWK Dmmyy0Oobqz3Tsi1FEatenpgu84XWDfSIq2mTpYBQx+Tdo1ViZ7Q5b04PUXgJJuF 0kBpWb9D1SDAOf1ljsc4wSQyA4fJc/15qYzVjFWXGLyg92SvdtYoX+0oEJc26tBQ 2uepmhaxP8f5H2hXEOuWv00/FcSHHIXCO18MDPCaR2f/JrTFO2mjieJ1twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFBKqI4G3+aHmC8ILpig0XPfaT7wMB8GA1UdIwQY MBaAFJBR2p9OA0HQyN5erFTGOhHp71tfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0ZIYW4wNERRZERJM2w2c1ZNWTZFZW52VzE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8zYmMxYzQtMmI3Yi00MGVlLTkxODEt OWIzNDQyOGVkNDI0LzEva0ZIYW4wNERRZERJM2w2c1ZNWTZFZW52VzE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi8zYmMxYzQtMmI3Yi00MGVlLTkxODEtOWIzNDQyOGVkNDI0 LzEva0ZIYW4wNERRZERJM2w2c1ZNWTZFZW52VzE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF1qDempy sdbgGNxlb81dAq40oNGh8ZFmrHIJxUhSEzkDMoHy32Qup/ibwH7TYVNnmJmHyXcy KbmtgOvlf9rZhT4m0n4+cOKime/RNvVvxNu4XAmZpAdCUmuwYThtqfXS6CHlyh2A rh3u0/cTezgUXegjcwy8o5DvZn9A/4ZVzgfQByxwm/VfjOusr6DY4zlR1UOxmYkT SXC1TKgzBCtwaQGzSY93v46NspQVppSYyG03aTiDnL1s9kKr+IMDk5X6ncbqFCYG S+pLK6T8CXUD1A0gtXwWswhoUDRHnSMK4JuVuFmT5fdmcJGE7JsDcKaLlEbwrgqa GfKYpFfSwT38MA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:38 2026 by rpki-client