This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft File: k4yI3syI92r_E7wIWNs4eDS-FxE.mft (raw, json) Hash identifier: NZ2Fzax5Wz7E6cfMVVZ0/oQ+3zqgtvopEyfdnxGCh4E= Subject key identifier: BC:43:FC:3C:76:0C:90:20:44:33:EF:E2:75:1B:94:97:53:1A:4C:AB Authority key identifier: 93:8C:88:DE:CC:88:F7:6A:FF:13:BC:08:58:DB:38:78:34:BE:17:11 Certificate issuer: /CN=938c88decc88f76aff13bc0858db387834be1711 Certificate serial: 019C446C5F8CA64C5DDD9C7289F9240EFF8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft Manifest number: 12B2 Signing time: Mon 09 Feb 2026 22:01:18 +0000 Manifest this update: Mon 09 Feb 2026 22:01:18 +0000 Manifest next update: Tue 10 Feb 2026 22:01:18 +0000 Files and hashes: 1: fKvVor01qPV-ORu7n9y9qnaHTq4.roa (hash: 6ofwzO42r/7tumxMn3VHGwc5argotSWNwp1rVW1buqA=) 2: k4yI3syI92r_E7wIWNs4eDS-FxE.crl (hash: y6cExVGDnzhH1hvxLKxdv6HvBnP61xO5vfLXkoiJiZw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.crl rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6c:5f:8c:a6:4c:5d:dd:9c:72:89:f9:24:0e:ff:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=938c88decc88f76aff13bc0858db387834be1711 Validity Not Before: Feb 9 22:01:18 2026 GMT Not After : Feb 10 22:01:18 2026 GMT Subject: CN=bc43fc3c760c90204433efe2751b9497531a4cab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:80:97:eb:b9:fe:c3:b9:f3:e9:58:16:08:0a: 62:a6:c3:9f:70:d4:45:c0:b2:f9:84:c8:60:46:3a: b5:f0:cb:40:4b:d7:a3:4e:5b:b4:fc:58:9c:c0:29: b0:b0:15:b9:a8:de:ba:69:f4:9b:5f:4e:5d:d6:28: 9c:b1:13:ca:bd:39:bc:57:47:3e:3e:51:b6:70:4e: cc:e4:55:94:5f:32:d9:d1:12:ee:12:bb:da:63:8d: fc:65:1a:9e:01:c8:1d:bc:1b:94:70:49:75:e3:e7: d1:dd:0d:38:71:6c:a5:ce:28:05:69:65:74:26:7f: 52:d2:18:82:cb:a2:a5:46:25:8a:5d:d5:28:ea:5d: e3:7f:e7:e8:8b:73:6d:a3:20:33:f2:10:8b:4b:99: c2:f9:6f:1d:69:a3:54:63:99:75:2d:9c:b1:2d:80: 73:4d:7c:5b:fd:53:97:60:99:8a:0f:27:37:fb:f8: ca:64:f5:e3:ff:40:0d:c4:77:4b:1a:f0:c1:32:d1: bf:52:2d:40:f1:d7:0a:ec:c2:ed:e9:df:7e:64:56: a4:8a:4f:0e:59:4f:cf:f7:b0:0e:e9:7f:be:0e:59: 1f:e8:d5:e3:aa:9f:42:4f:2f:fd:5a:ac:2b:56:7d: 86:b7:eb:fa:e7:6e:8d:df:ec:d9:e3:78:3d:2a:7d: e0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:43:FC:3C:76:0C:90:20:44:33:EF:E2:75:1B:94:97:53:1A:4C:AB X509v3 Authority Key Identifier: keyid:93:8C:88:DE:CC:88:F7:6A:FF:13:BC:08:58:DB:38:78:34:BE:17:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:10:e4:33:c8:a9:b8:43:31:4f:a3:a6:02:4b:a9:37:e4:0d: bc:cb:15:2d:07:d4:73:60:be:fc:1f:c9:94:16:ed:b6:d0:98: 19:f7:be:1d:58:73:4f:81:bb:33:5c:6d:3e:73:70:a7:0d:7d: 8f:a9:db:08:13:60:78:b0:97:14:2f:36:3d:19:42:6b:15:de: 27:41:08:f1:d2:56:16:6b:28:89:33:be:af:41:7f:ee:e1:d7: 8b:ad:1c:42:fa:81:ff:a1:83:14:33:5e:a5:38:4d:af:a1:73: a1:88:0a:3b:8d:19:d6:e1:37:d1:82:cd:12:62:a8:c1:6e:85: 1d:64:b5:91:aa:97:d5:da:d3:30:c0:d5:b4:b9:65:43:a4:99: f0:8a:a5:f5:2e:ef:ad:a8:1f:3d:41:81:a4:58:13:ba:81:53: 41:18:e2:fb:76:f7:c3:a7:b2:e3:d0:05:b4:c9:a1:27:36:20: d0:d8:50:f0:0d:71:2c:e9:d8:6e:64:f0:9a:e7:2e:a4:e4:b3: 97:fe:3f:6e:d7:56:42:51:e3:2b:ed:3b:73:90:09:33:3c:f2: 0d:4b:f1:ed:45:d6:d2:c7:9f:9f:7f:04:08:96:ff:04:ad:e2: 8b:07:54:5a:a7:51:7b:69:04:7d:50:9b:24:b4:8e:d7:52:de: d6:2b:a7:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEbF+Mpkxd3ZxyifkkDv+MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzOGM4OGRlY2M4OGY3NmFmZjEzYmMwODU4ZGIzODc4MzRi ZTE3MTEwHhcNMjYwMjA5MjIwMTE4WhcNMjYwMjEwMjIwMTE4WjAzMTEwLwYDVQQD EyhiYzQzZmMzYzc2MGM5MDIwNDQzM2VmZTI3NTFiOTQ5NzUzMWE0Y2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtICX67n+w7nz6VgWCApipsOfcNRF wLL5hMhgRjq18MtAS9ejTlu0/FicwCmwsBW5qN66afSbX05d1iicsRPKvTm8V0c+ PlG2cE7M5FWUXzLZ0RLuErvaY438ZRqeAcgdvBuUcEl14+fR3Q04cWylzigFaWV0 Jn9S0hiCy6KlRiWKXdUo6l3jf+foi3NtoyAz8hCLS5nC+W8daaNUY5l1LZyxLYBz TXxb/VOXYJmKDyc3+/jKZPXj/0ANxHdLGvDBMtG/Ui1A8dcK7MLt6d9+ZFakik8O WU/P97AO6X++Dlkf6NXjqp9CTy/9WqwrVn2Gt+v6526N3+zZ43g9Kn3grQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLxD/Dx2DJAgRDPv4nUblJdTGkyrMB8GA1UdIwQY MBaAFJOMiN7MiPdq/xO8CFjbOHg0vhcRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazR5STNzeUk5MnJfRTd3SVdOczRlRFMtRnhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8yMzIyNmYtN2MyMS00MzM4LTlkY2Et ZmY5ZjUwM2UyZGQzLzEvazR5STNzeUk5MnJfRTd3SVdOczRlRFMtRnhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8yMzIyNmYtN2MyMS00MzM4LTlkY2EtZmY5ZjUwM2UyZGQz LzEvazR5STNzeUk5MnJfRTd3SVdOczRlRFMtRnhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUhDkM8ip uEMxT6OmAkupN+QNvMsVLQfUc2C+/B/JlBbtttCYGfe+HVhzT4G7M1xtPnNwpw19 j6nbCBNgeLCXFC82PRlCaxXeJ0EI8dJWFmsoiTO+r0F/7uHXi60cQvqB/6GDFDNe pThNr6FzoYgKO40Z1uE30YLNEmKowW6FHWS1kaqX1drTMMDVtLllQ6SZ8Iql9S7v ragfPUGBpFgTuoFTQRji+3b3w6ey49AFtMmhJzYg0NhQ8A1xLOnYbmTwmucupOSz l/4/btdWQlHjK+07c5AJMzzyDUvx7UXW0sefn38ECJb/BK3iiwdUWqdRe2kEfVCb JLSO11Le1iunEA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:45:49 2026 by rpki-client