This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft File: KuK_S6R9cV5T4us9AS0_y80bDsA.mft (raw, json) Hash identifier: QHQusYzTN77hyKwRNvuyfqOhAzzf+mkniiIXT2QPyjo= Subject key identifier: 3A:14:06:DA:E5:B8:68:E1:0C:3D:C7:93:12:88:BB:B0:8F:E5:89:7B Authority key identifier: 2A:E2:BF:4B:A4:7D:71:5E:53:E2:EB:3D:01:2D:3F:CB:CD:1B:0E:C0 Certificate issuer: /CN=2ae2bf4ba47d715e53e2eb3d012d3fcbcd1b0ec0 Certificate serial: 019C41D8B34516638F02CB7F43365FDC2167 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft Manifest number: 0252 Signing time: Mon 09 Feb 2026 10:00:46 +0000 Manifest this update: Mon 09 Feb 2026 10:00:46 +0000 Manifest next update: Tue 10 Feb 2026 10:00:46 +0000 Files and hashes: 1: KuK_S6R9cV5T4us9AS0_y80bDsA.crl (hash: 2wqOhEWJ5rUh1iRmUn8cYY1mOgfbgoPW/UmsqvS/3Os=) 2: uPCaDDec9QKPaddyi8Q6i4Q7q7k.roa (hash: n+pffEHjG87ngAjTdw3F82UnpSjTNX/RT+SqH5AesLg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.crl rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:b3:45:16:63:8f:02:cb:7f:43:36:5f:dc:21:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ae2bf4ba47d715e53e2eb3d012d3fcbcd1b0ec0 Validity Not Before: Feb 9 10:00:46 2026 GMT Not After : Feb 10 10:00:46 2026 GMT Subject: CN=3a1406dae5b868e10c3dc7931288bbb08fe5897b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:99:39:3f:da:c3:ba:38:27:14:79:f7:0e:8d: 17:c2:a9:be:1d:6c:db:3f:c5:2d:a3:dd:e1:c9:00: 12:a6:38:7d:e9:0d:6c:b4:a5:66:4f:b7:11:41:5b: 2f:63:5b:a6:0b:b2:c6:c8:4d:e2:27:51:9b:91:ab: 50:f5:51:1f:d3:d3:a6:dd:e0:8d:c8:af:d9:0f:42: 57:d3:8f:12:a4:77:98:d2:6a:f8:39:d4:74:15:65: d7:94:e4:a0:84:13:45:d1:af:9e:b7:35:59:47:c9: 27:3b:05:4a:1b:06:98:e7:99:b2:6c:44:97:5f:52: 3c:92:0f:ad:26:49:a5:81:20:e3:6b:7b:c6:56:db: 0a:c0:6f:85:5f:a3:e2:16:54:eb:28:b3:b7:fb:dc: 2b:89:19:83:d1:0e:a2:9e:c1:2b:c3:cf:dc:fd:9e: e4:60:d3:90:e5:27:e4:7d:d1:9d:2a:68:6c:c7:5e: 81:fd:41:4d:b0:42:28:8b:0f:7c:20:7b:1d:fa:54: 78:38:86:84:57:02:6c:56:10:71:a4:ed:ca:a3:85: d4:51:81:93:0a:9b:89:c9:c3:9b:05:aa:3f:fd:b8: d3:95:71:ec:1b:eb:bf:af:3d:20:be:a9:be:36:1a: 61:31:4e:a2:30:9d:e4:57:72:da:ac:c5:0b:ae:d4: 7d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:14:06:DA:E5:B8:68:E1:0C:3D:C7:93:12:88:BB:B0:8F:E5:89:7B X509v3 Authority Key Identifier: keyid:2A:E2:BF:4B:A4:7D:71:5E:53:E2:EB:3D:01:2D:3F:CB:CD:1B:0E:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:33:0f:b0:2b:80:74:4a:bd:29:70:81:54:3d:3a:31:19:c2: 72:2a:89:94:4d:56:4a:43:c2:08:93:11:1f:e2:65:78:93:0f: 2d:4e:50:67:0b:6b:1e:2b:b3:09:3b:96:8d:7c:12:df:62:f8: c9:ba:d2:84:a3:97:c2:05:a8:c2:75:70:57:50:53:4c:15:f4: a5:46:21:4c:03:59:5e:ac:bc:0d:d0:b5:bd:58:f5:28:b9:6c: c1:a8:fd:e2:fd:d1:68:2f:a0:96:f6:0d:b5:85:23:85:2d:b4: 1e:7f:e2:11:3f:69:ae:d2:d8:cb:69:13:0b:38:d3:ad:43:3f: f1:52:c2:3b:3e:c5:4e:03:25:7a:65:4c:44:99:ff:0f:76:5b: c0:d5:6a:09:c5:f9:28:fa:ee:c5:15:fc:3c:dd:46:e1:fe:07: ab:bf:46:28:e6:3e:b7:bd:6d:6a:93:3e:62:aa:6a:66:4b:35: 24:d7:f0:18:23:f9:52:b8:fc:4d:dd:7d:90:f8:a2:cf:03:77: 15:88:44:a8:42:98:b8:23:cf:da:ae:23:e6:61:ef:3a:f3:a3: ea:cc:36:78:80:04:c6:2e:d0:b6:39:49:90:a0:65:d5:5e:04: 42:ab:fc:e7:be:d4:3b:91:16:f5:4c:85:9f:22:72:63:3d:a8: 70:33:db:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2LNFFmOPAst/QzZf3CFnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhZTJiZjRiYTQ3ZDcxNWU1M2UyZWIzZDAxMmQzZmNiY2Qx YjBlYzAwHhcNMjYwMjA5MTAwMDQ2WhcNMjYwMjEwMTAwMDQ2WjAzMTEwLwYDVQQD EygzYTE0MDZkYWU1Yjg2OGUxMGMzZGM3OTMxMjg4YmJiMDhmZTU4OTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypk5P9rDujgnFHn3Do0Xwqm+HWzb P8Uto93hyQASpjh96Q1stKVmT7cRQVsvY1umC7LGyE3iJ1GbkatQ9VEf09Om3eCN yK/ZD0JX048SpHeY0mr4OdR0FWXXlOSghBNF0a+etzVZR8knOwVKGwaY55mybESX X1I8kg+tJkmlgSDja3vGVtsKwG+FX6PiFlTrKLO3+9wriRmD0Q6insErw8/c/Z7k YNOQ5SfkfdGdKmhsx16B/UFNsEIoiw98IHsd+lR4OIaEVwJsVhBxpO3Ko4XUUYGT CpuJycObBao//bjTlXHsG+u/rz0gvqm+NhphMU6iMJ3kV3LarMULrtR9QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDoUBtrluGjhDD3HkxKIu7CP5Yl7MB8GA1UdIwQY MBaAFCriv0ukfXFeU+LrPQEtP8vNGw7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3VLX1M2UjljVjVUNHVzOUFTMF95ODBiRHNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy80MGEyNzYtODUxNS00NDJjLTgxNmUt MzhlZWQ2ZGYwNTNiLzEvS3VLX1M2UjljVjVUNHVzOUFTMF95ODBiRHNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy80MGEyNzYtODUxNS00NDJjLTgxNmUtMzhlZWQ2ZGYwNTNi LzEvS3VLX1M2UjljVjVUNHVzOUFTMF95ODBiRHNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkDMPsCuA dEq9KXCBVD06MRnCciqJlE1WSkPCCJMRH+JleJMPLU5QZwtrHiuzCTuWjXwS32L4 ybrShKOXwgWownVwV1BTTBX0pUYhTANZXqy8DdC1vVj1KLlswaj94v3RaC+glvYN tYUjhS20Hn/iET9prtLYy2kTCzjTrUM/8VLCOz7FTgMlemVMRJn/D3ZbwNVqCcX5 KPruxRX8PN1G4f4Hq79GKOY+t71tapM+YqpqZks1JNfwGCP5Urj8Td19kPiizwN3 FYhEqEKYuCPP2q4j5mHvOvOj6sw2eIAExi7QtjlJkKBl1V4EQqv8577UO5EW9UyF nyJyYz2ocDPb5w== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:20 2026 by rpki-client