This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/845dbc-c764-49fa-b9aa-5961d346a172/1/kMDxVcgmfsgeEIO337k_NOm5Aa4.mft File: kMDxVcgmfsgeEIO337k_NOm5Aa4.mft (raw, json) Hash identifier: QWPGXJqT1nlKya8iGSH+v8SRSsM9spwybjeAfepi7t8= Subject key identifier: 27:63:24:C1:63:18:EA:6D:5F:F6:87:7A:9E:A7:51:3C:2C:81:E6:66 Authority key identifier: 90:C0:F1:55:C8:26:7E:C8:1E:10:83:B7:DF:B9:3F:34:E9:B9:01:AE Certificate issuer: /CN=90c0f155c8267ec81e1083b7dfb93f34e9b901ae Certificate serial: 019C42464EC5CA74832C156DE75D7647911E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kMDxVcgmfsgeEIO337k_NOm5Aa4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/845dbc-c764-49fa-b9aa-5961d346a172/1/kMDxVcgmfsgeEIO337k_NOm5Aa4.mft Manifest number: 0115 Signing time: Mon 09 Feb 2026 12:00:29 +0000 Manifest this update: Mon 09 Feb 2026 12:00:29 +0000 Manifest next update: Tue 10 Feb 2026 12:00:29 +0000 Files and hashes: 1: 7LWHjRPRc5Mqc6PjEVvxHU9li60.roa (hash: rkyd9gjKfsmzi2GqgoHu5uafY8E9ecEWsP84KwNsmfU=) 2: kMDxVcgmfsgeEIO337k_NOm5Aa4.crl (hash: 5RTGUOFgzoCPFbd0rDeEG+upyMLIrB3JWS9R4/q0NLo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/845dbc-c764-49fa-b9aa-5961d346a172/1/kMDxVcgmfsgeEIO337k_NOm5Aa4.crl rsync://rpki.ripe.net/repository/DEFAULT/29/845dbc-c764-49fa-b9aa-5961d346a172/1/kMDxVcgmfsgeEIO337k_NOm5Aa4.mft rsync://rpki.ripe.net/repository/DEFAULT/kMDxVcgmfsgeEIO337k_NOm5Aa4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:4e:c5:ca:74:83:2c:15:6d:e7:5d:76:47:91:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90c0f155c8267ec81e1083b7dfb93f34e9b901ae Validity Not Before: Feb 9 12:00:29 2026 GMT Not After : Feb 10 12:00:29 2026 GMT Subject: CN=276324c16318ea6d5ff6877a9ea7513c2c81e666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6f:94:15:d0:b0:8b:d6:e3:33:bd:5c:da:56: f4:f0:0b:6c:4f:e4:58:b0:9a:56:8f:32:b3:61:40: 81:75:4d:7a:2b:f5:77:c9:53:8a:85:7c:83:bc:fc: 3c:e7:65:02:7b:c3:f1:89:58:bd:31:30:73:69:5d: 51:2c:c9:3c:15:ca:f8:d3:56:da:6f:2b:6c:83:57: 0d:b5:ea:63:b0:2a:9e:9e:16:d2:20:8a:86:4c:c7: 72:08:df:fc:6f:e1:26:2c:f5:e1:93:d4:62:44:9e: e9:2d:ec:d6:a3:15:41:1c:e8:f9:68:ba:d2:b5:b3: aa:6f:85:e0:3e:6a:e8:12:29:f1:aa:46:5f:a2:c9: 8c:dc:71:8f:90:a1:01:92:76:c6:62:0f:6f:00:9d: 93:0e:c0:ed:c5:80:27:94:94:63:eb:fc:e6:ee:35: c0:6d:b8:45:1b:18:ed:00:00:f8:88:ad:1b:e0:eb: eb:c9:fe:ff:05:7d:86:dc:b4:73:90:d2:84:ce:7e: af:16:90:56:9b:e1:ed:69:76:0a:c6:58:d1:7a:8e: 3f:b0:92:eb:f4:88:a6:7f:00:87:3c:4c:36:5d:4a: 6b:fd:e3:44:e2:83:6a:81:e6:b4:c1:3d:e0:2c:12: 0c:ea:17:4a:73:08:19:92:8f:55:dd:6b:ae:39:8b: fc:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:63:24:C1:63:18:EA:6D:5F:F6:87:7A:9E:A7:51:3C:2C:81:E6:66 X509v3 Authority Key Identifier: keyid:90:C0:F1:55:C8:26:7E:C8:1E:10:83:B7:DF:B9:3F:34:E9:B9:01:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMDxVcgmfsgeEIO337k_NOm5Aa4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/845dbc-c764-49fa-b9aa-5961d346a172/1/kMDxVcgmfsgeEIO337k_NOm5Aa4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/845dbc-c764-49fa-b9aa-5961d346a172/1/kMDxVcgmfsgeEIO337k_NOm5Aa4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:a7:d5:b3:ba:21:f0:8e:5f:b5:79:fa:65:c6:7b:f9:e5:72: 9f:76:ec:68:11:d0:d0:96:57:0f:36:8b:fe:02:71:9b:eb:53: a5:15:84:26:5e:f1:63:97:ce:ef:90:7d:53:90:6e:8d:d9:f4: 39:d5:58:d9:95:1b:af:b8:0b:99:e7:cb:dd:31:b2:52:e8:81: d1:41:78:52:f3:ac:a7:f8:43:dd:8b:51:86:c9:d8:ef:e7:ce: 0e:aa:87:c3:6e:4e:23:ef:7f:9a:88:2f:f6:d3:ba:34:33:a6: eb:40:43:41:b9:61:5a:4a:a7:74:ee:f0:0c:08:0d:db:1c:8f: b5:ae:64:f3:75:18:af:60:8c:a4:ba:32:b9:00:64:7c:46:bb: 4c:e4:25:bd:00:da:5e:65:b4:1f:91:12:7f:50:45:2a:a4:44: ad:3d:f9:8e:17:bf:16:e1:cf:42:5d:69:7f:b5:5c:42:f0:24: 55:9f:06:3a:4e:6c:9e:4b:dc:cc:70:2e:50:03:b2:41:92:15: bf:38:27:76:92:99:3e:3c:4f:8e:19:2f:71:7d:66:d6:0e:d8: 82:ce:4e:ae:28:af:f5:71:8e:a8:b2:48:bb:be:41:d1:3d:b6: c6:22:7d:ce:1a:10:33:7c:84:f0:79:0c:ee:2f:ba:22:4a:1e: 31:97:10:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRk7FynSDLBVt5112R5EeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwYzBmMTU1YzgyNjdlYzgxZTEwODNiN2RmYjkzZjM0ZTli OTAxYWUwHhcNMjYwMjA5MTIwMDI5WhcNMjYwMjEwMTIwMDI5WjAzMTEwLwYDVQQD EygyNzYzMjRjMTYzMThlYTZkNWZmNjg3N2E5ZWE3NTEzYzJjODFlNjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyW+UFdCwi9bjM71c2lb08AtsT+RY sJpWjzKzYUCBdU16K/V3yVOKhXyDvPw852UCe8PxiVi9MTBzaV1RLMk8Fcr401ba bytsg1cNtepjsCqenhbSIIqGTMdyCN/8b+EmLPXhk9RiRJ7pLezWoxVBHOj5aLrS tbOqb4XgPmroEinxqkZfosmM3HGPkKEBknbGYg9vAJ2TDsDtxYAnlJRj6/zm7jXA bbhFGxjtAAD4iK0b4Ovryf7/BX2G3LRzkNKEzn6vFpBWm+HtaXYKxljReo4/sJLr 9IimfwCHPEw2XUpr/eNE4oNqgea0wT3gLBIM6hdKcwgZko9V3WuuOYv8KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCdjJMFjGOptX/aHep6nUTwsgeZmMB8GA1UdIwQY MBaAFJDA8VXIJn7IHhCDt9+5PzTpuQGuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva01EeFZjZ21mc2dlRUlPMzM3a19OT201QWE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS84NDVkYmMtYzc2NC00OWZhLWI5YWEt NTk2MWQzNDZhMTcyLzEva01EeFZjZ21mc2dlRUlPMzM3a19OT201QWE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS84NDVkYmMtYzc2NC00OWZhLWI5YWEtNTk2MWQzNDZhMTcy LzEva01EeFZjZ21mc2dlRUlPMzM3a19OT201QWE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgKfVs7oh 8I5ftXn6ZcZ7+eVyn3bsaBHQ0JZXDzaL/gJxm+tTpRWEJl7xY5fO75B9U5Bujdn0 OdVY2ZUbr7gLmefL3TGyUuiB0UF4UvOsp/hD3YtRhsnY7+fODqqHw25OI+9/mogv 9tO6NDOm60BDQblhWkqndO7wDAgN2xyPta5k83UYr2CMpLoyuQBkfEa7TOQlvQDa XmW0H5ESf1BFKqRErT35jhe/FuHPQl1pf7VcQvAkVZ8GOk5snkvczHAuUAOyQZIV vzgndpKZPjxPjhkvcX1m1g7Ygs5Oriiv9XGOqLJIu75B0T22xiJ9zhoQM3yE8HkM 7i+6IkoeMZcQeA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:41:51 2026 by rpki-client