This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.mft File: kiYrQ-lHhUb8DhN16LHguv1q3lA.mft (raw, json) Hash identifier: C9MdKsmfDDZ1BHFC3KkL2oKD9oVe0rXuVvFchgywSto= Subject key identifier: AA:29:43:A4:C0:E2:78:2A:83:AF:FD:E8:34:D7:AE:B1:E2:12:CF:2D Authority key identifier: 92:26:2B:43:E9:47:85:46:FC:0E:13:75:E8:B1:E0:BA:FD:6A:DE:50 Certificate issuer: /CN=92262b43e9478546fc0e1375e8b1e0bafd6ade50 Certificate serial: 019C42100D79FF21B3052F66CB95CF8A1BDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiYrQ-lHhUb8DhN16LHguv1q3lA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.mft Manifest number: 180C Signing time: Mon 09 Feb 2026 11:01:13 +0000 Manifest this update: Mon 09 Feb 2026 11:01:13 +0000 Manifest next update: Tue 10 Feb 2026 11:01:13 +0000 Files and hashes: 1: kiYrQ-lHhUb8DhN16LHguv1q3lA.crl (hash: KeGyiOXFGzOQERtQTPac5ayF8MBOT3iErPg11BnOGxQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.crl rsync://rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.mft rsync://rpki.ripe.net/repository/DEFAULT/kiYrQ-lHhUb8DhN16LHguv1q3lA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:10:0d:79:ff:21:b3:05:2f:66:cb:95:cf:8a:1b:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92262b43e9478546fc0e1375e8b1e0bafd6ade50 Validity Not Before: Feb 9 11:01:13 2026 GMT Not After : Feb 10 11:01:13 2026 GMT Subject: CN=aa2943a4c0e2782a83affde834d7aeb1e212cf2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e5:d0:a0:d3:99:8c:d1:d8:66:91:cd:49:3e: 00:d6:48:6c:3b:84:12:f5:93:95:08:da:ac:82:8e: 29:8c:80:c9:5f:39:0d:d0:ff:1d:94:e4:8a:a6:27: 47:29:71:08:da:f7:06:2a:e8:8e:ae:1f:d7:e2:6f: 1b:07:91:8a:81:40:a2:9f:99:52:ad:c2:64:f6:52: aa:67:5e:e0:6a:88:fd:b5:a3:b2:12:a5:d2:e1:52: 99:8c:08:60:7f:59:a7:39:36:b6:1b:99:54:cc:e0: de:90:2f:4f:29:7d:20:66:24:38:63:3b:09:b1:47: 90:78:13:9b:a8:2e:88:33:90:f3:e6:3e:51:d5:be: f9:9e:ce:f8:6a:45:45:da:f1:7b:e3:66:3f:a1:fa: f3:40:02:6f:f8:55:5b:4a:58:43:2b:c7:ef:0e:4f: 1f:f4:23:81:ad:87:a3:e1:06:cd:b7:ac:48:1f:d6: f0:a5:63:aa:3c:55:e4:5e:72:59:ca:65:e1:67:3f: ec:a9:f4:76:98:c7:a1:aa:5e:1a:9b:d8:f0:c7:93: bc:7e:01:47:c5:72:4e:ed:54:c9:52:91:79:49:c2: 29:d9:59:5a:fe:5d:ed:64:7d:dc:0e:cb:d1:cb:d7: 72:19:cb:c3:15:54:bc:6f:b1:a4:6e:20:32:3a:dd: fc:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:29:43:A4:C0:E2:78:2A:83:AF:FD:E8:34:D7:AE:B1:E2:12:CF:2D X509v3 Authority Key Identifier: keyid:92:26:2B:43:E9:47:85:46:FC:0E:13:75:E8:B1:E0:BA:FD:6A:DE:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiYrQ-lHhUb8DhN16LHguv1q3lA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:b6:c7:15:ba:54:16:2f:86:50:4f:46:80:5b:eb:3a:4b:3f: f5:11:96:08:e9:fa:26:2e:5b:09:22:2f:b2:2d:8e:ee:a0:a5: 74:26:4c:3e:26:b4:db:1a:e1:cf:8e:df:9e:08:06:17:d5:38: fa:d5:f9:1c:1d:75:c3:33:c9:81:e0:cf:e7:c9:88:a8:6d:8a: 8a:13:bf:5c:fe:b4:e3:2a:04:57:0a:1b:ac:bb:2e:d7:0b:df: 83:4b:67:8e:fe:79:ee:34:9e:a4:d2:f6:7c:60:aa:25:9a:71: 18:b0:0e:4f:17:93:74:c9:31:56:be:78:bb:3b:dd:7f:3c:0b: 4d:23:1d:98:1a:08:8d:82:c8:5c:25:c8:20:c0:a5:2f:e3:2e: 0c:87:be:b9:52:f1:2f:2b:a8:21:7f:9a:38:64:5a:26:92:b6: 7a:d3:b9:04:43:23:56:87:7e:eb:0f:71:4a:04:67:3c:5a:0d: f6:e0:0e:6d:22:0f:21:59:ea:fe:b5:67:08:e5:35:70:e5:43: 60:19:85:6f:e2:0c:52:f2:fc:bd:0f:4b:5d:e0:c9:d0:62:e1: a4:a7:50:23:66:9d:a3:14:36:61:0f:f8:ef:8d:1d:73:02:4c: c6:77:00:82:ce:57:93:9e:88:d5:3f:ae:00:e4:e4:a7:79:4c: a7:10:ff:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCEA15/yGzBS9my5XPihveMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMjYyYjQzZTk0Nzg1NDZmYzBlMTM3NWU4YjFlMGJhZmQ2 YWRlNTAwHhcNMjYwMjA5MTEwMTEzWhcNMjYwMjEwMTEwMTEzWjAzMTEwLwYDVQQD EyhhYTI5NDNhNGMwZTI3ODJhODNhZmZkZTgzNGQ3YWViMWUyMTJjZjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuXQoNOZjNHYZpHNST4A1khsO4QS 9ZOVCNqsgo4pjIDJXzkN0P8dlOSKpidHKXEI2vcGKuiOrh/X4m8bB5GKgUCin5lS rcJk9lKqZ17gaoj9taOyEqXS4VKZjAhgf1mnOTa2G5lUzODekC9PKX0gZiQ4YzsJ sUeQeBObqC6IM5Dz5j5R1b75ns74akVF2vF742Y/ofrzQAJv+FVbSlhDK8fvDk8f 9COBrYej4QbNt6xIH9bwpWOqPFXkXnJZymXhZz/sqfR2mMehql4am9jwx5O8fgFH xXJO7VTJUpF5ScIp2Vla/l3tZH3cDsvRy9dyGcvDFVS8b7GkbiAyOt38uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKopQ6TA4ngqg6/96DTXrrHiEs8tMB8GA1UdIwQY MBaAFJImK0PpR4VG/A4Tdeix4Lr9at5QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2lZclEtbEhoVWI4RGhOMTZMSGd1djFxM2xBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9kNzZjNDMtZGQ2ZC00OTg2LTg5OGYt MTkzODE0ZDg0M2Q0LzEva2lZclEtbEhoVWI4RGhOMTZMSGd1djFxM2xBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9kNzZjNDMtZGQ2ZC00OTg2LTg5OGYtMTkzODE0ZDg0M2Q0 LzEva2lZclEtbEhoVWI4RGhOMTZMSGd1djFxM2xBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVbbHFbpU Fi+GUE9GgFvrOks/9RGWCOn6Ji5bCSIvsi2O7qCldCZMPia02xrhz47fnggGF9U4 +tX5HB11wzPJgeDP58mIqG2KihO/XP604yoEVwobrLsu1wvfg0tnjv557jSepNL2 fGCqJZpxGLAOTxeTdMkxVr54uzvdfzwLTSMdmBoIjYLIXCXIIMClL+MuDIe+uVLx LyuoIX+aOGRaJpK2etO5BEMjVod+6w9xSgRnPFoN9uAObSIPIVnq/rVnCOU1cOVD YBmFb+IMUvL8vQ9LXeDJ0GLhpKdQI2adoxQ2YQ/4740dcwJMxncAgs5Xk56I1T+u AOTkp3lMpxD/fg== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:47 2026 by rpki-client