This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft File: K8wc-LjiEGa27GR2l9SUXY-bsFs.mft (raw, json) Hash identifier: 9ad0fBbbT7qscqnhrr4/34dHv9LwAwXmMPPFXRrndBM= Subject key identifier: 76:B8:26:76:83:EE:BE:E5:0A:5D:87:4D:49:52:73:50:FA:04:F8:C2 Authority key identifier: 2B:CC:1C:F8:B8:E2:10:66:B6:EC:64:76:97:D4:94:5D:8F:9B:B0:5B Certificate issuer: /CN=2bcc1cf8b8e21066b6ec647697d4945d8f9bb05b Certificate serial: 019C42B490705947B9F380CB42DE0397FBF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K8wc-LjiEGa27GR2l9SUXY-bsFs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft Manifest number: 13B7 Signing time: Mon 09 Feb 2026 14:00:55 +0000 Manifest this update: Mon 09 Feb 2026 14:00:55 +0000 Manifest next update: Tue 10 Feb 2026 14:00:55 +0000 Files and hashes: 1: K8wc-LjiEGa27GR2l9SUXY-bsFs.crl (hash: i+Kd/gpbd5VQoZTnc+SsO0VAtKsMsM2A/4T61xRsgIE=) 2: ZM57jrln1EaVHEwU5MBtcduC4e4.roa (hash: +8l3wG8lWR8TlssuoyNr7f8nQtvEX05fyS/cABW+fVI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.crl rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft rsync://rpki.ripe.net/repository/DEFAULT/K8wc-LjiEGa27GR2l9SUXY-bsFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:90:70:59:47:b9:f3:80:cb:42:de:03:97:fb:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bcc1cf8b8e21066b6ec647697d4945d8f9bb05b Validity Not Before: Feb 9 14:00:55 2026 GMT Not After : Feb 10 14:00:55 2026 GMT Subject: CN=76b8267683eebee50a5d874d49527350fa04f8c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d0:44:4a:aa:4f:17:5d:6c:c5:e6:b7:a0:d9: 39:71:c3:d7:69:4b:34:1f:f0:31:f9:7f:fb:e1:dc: 9e:28:aa:79:46:f2:9e:f6:32:0b:88:73:35:1c:d1: 5c:05:19:f4:52:10:5d:c2:84:07:17:5c:c0:48:09: ff:21:91:e3:85:bb:08:fd:b0:37:71:cb:49:dd:a9: 83:93:e0:3b:9f:74:5d:c1:2b:7b:55:0b:53:eb:73: bc:ca:15:0a:73:70:c2:c7:c0:0a:71:7a:53:5f:10: cc:c8:d1:8e:91:5a:a4:81:1e:60:54:f7:60:e7:1d: 67:f6:3f:6b:d6:be:30:d3:f4:23:6a:68:bb:10:0c: 0f:50:61:a8:94:1a:76:71:3b:94:57:7d:8e:70:b1: 39:2a:d1:e2:74:90:ef:e4:9f:3f:7a:63:f9:a9:65: 38:54:44:ff:ab:f7:69:a2:af:5e:74:12:b0:58:6a: 6b:63:ea:65:c0:1a:3e:b5:2b:fe:fd:e2:14:11:cb: 9e:4a:01:d7:27:fe:59:88:9b:4e:a0:49:b9:86:28: e9:56:3a:11:3c:26:f8:36:a0:87:aa:1e:bc:25:ea: ec:20:d9:f8:bb:bd:5a:43:e8:b0:b2:d6:49:ee:62: 3f:89:e6:a8:d1:7a:21:4b:d2:25:e2:e8:d2:52:af: e6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:B8:26:76:83:EE:BE:E5:0A:5D:87:4D:49:52:73:50:FA:04:F8:C2 X509v3 Authority Key Identifier: keyid:2B:CC:1C:F8:B8:E2:10:66:B6:EC:64:76:97:D4:94:5D:8F:9B:B0:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8wc-LjiEGa27GR2l9SUXY-bsFs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:d5:7a:7b:83:22:e7:73:55:75:31:4a:07:e8:fd:c4:d8:c9: 10:2e:be:89:bb:f0:d0:9c:66:45:4f:b0:a3:5d:88:8e:84:f6: 2c:8a:55:fe:3b:67:13:b4:49:c2:87:a8:58:4b:0f:41:e0:f3: 52:0a:1e:60:b7:94:9b:9a:f5:3e:3e:eb:f9:65:d1:a3:23:18: 42:0e:a5:69:e0:47:22:2c:5d:23:37:ae:51:bc:d0:7f:9c:ad: 76:d7:1a:a7:29:dd:74:e7:b5:31:7a:dc:42:46:83:4c:be:5b: 77:2d:99:85:f4:c0:1d:4b:fb:a8:2b:c3:8a:87:2e:a5:32:9c: 5e:9e:6d:e8:40:45:13:2b:3d:1d:f6:e1:9d:64:da:81:a3:59: 27:f7:6e:9c:5e:15:02:a0:f4:3b:77:e3:c6:ae:b9:78:35:33: 00:29:97:cf:c5:4a:25:83:0f:35:b4:22:57:d7:f5:e8:47:17: 21:92:58:04:69:4a:56:f0:48:f1:a7:14:46:0c:c6:26:9c:c1: 8b:14:18:0c:c7:22:42:d4:14:3a:b8:54:13:99:33:34:7a:49: 0d:b1:d1:18:3b:6e:e8:89:1c:0d:77:18:70:c1:f4:02:e6:d1: e7:6d:0e:9a:9f:9a:d2:7d:f4:c9:6a:a1:ba:c2:dd:fc:5d:cf: 61:af:48:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtJBwWUe584DLQt4Dl/vyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiY2MxY2Y4YjhlMjEwNjZiNmVjNjQ3Njk3ZDQ5NDVkOGY5 YmIwNWIwHhcNMjYwMjA5MTQwMDU1WhcNMjYwMjEwMTQwMDU1WjAzMTEwLwYDVQQD Eyg3NmI4MjY3NjgzZWViZWU1MGE1ZDg3NGQ0OTUyNzM1MGZhMDRmOGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdBESqpPF11sxea3oNk5ccPXaUs0 H/Ax+X/74dyeKKp5RvKe9jILiHM1HNFcBRn0UhBdwoQHF1zASAn/IZHjhbsI/bA3 cctJ3amDk+A7n3RdwSt7VQtT63O8yhUKc3DCx8AKcXpTXxDMyNGOkVqkgR5gVPdg 5x1n9j9r1r4w0/Qjami7EAwPUGGolBp2cTuUV32OcLE5KtHidJDv5J8/emP5qWU4 VET/q/dpoq9edBKwWGprY+plwBo+tSv+/eIUEcueSgHXJ/5ZiJtOoEm5hijpVjoR PCb4NqCHqh68JersINn4u71aQ+iwstZJ7mI/ieao0XohS9Il4ujSUq/msQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHa4JnaD7r7lCl2HTUlSc1D6BPjCMB8GA1UdIwQY MBaAFCvMHPi44hBmtuxkdpfUlF2Pm7BbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzh3Yy1MamlFR2EyN0dSMmw5U1VYWS1ic0ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8xOWFjNTgtYzdhZi00MGZkLWIyZjct MGE3ZTAxOTg5OWNmLzEvSzh3Yy1MamlFR2EyN0dSMmw5U1VYWS1ic0ZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8xOWFjNTgtYzdhZi00MGZkLWIyZjctMGE3ZTAxOTg5OWNm LzEvSzh3Yy1MamlFR2EyN0dSMmw5U1VYWS1ic0ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmNV6e4Mi 53NVdTFKB+j9xNjJEC6+ibvw0JxmRU+wo12IjoT2LIpV/jtnE7RJwoeoWEsPQeDz UgoeYLeUm5r1Pj7r+WXRoyMYQg6laeBHIixdIzeuUbzQf5ytdtcapynddOe1MXrc QkaDTL5bdy2ZhfTAHUv7qCvDiocupTKcXp5t6EBFEys9HfbhnWTagaNZJ/dunF4V AqD0O3fjxq65eDUzACmXz8VKJYMPNbQiV9f16EcXIZJYBGlKVvBI8acURgzGJpzB ixQYDMciQtQUOrhUE5kzNHpJDbHRGDtu6IkcDXcYcMH0AubR520Omp+a0n30yWqh usLd/F3PYa9ImQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:53 2026 by rpki-client