This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft File: KNyB6jid1qrE77w01S13jrp6f8Q.mft (raw, json) Hash identifier: JsXKVNFE+epfm6QoICQIeXw6QhJ0fqedxRCqdR0n2cQ= Subject key identifier: 21:2A:5A:2B:77:34:58:34:03:17:40:3C:B1:50:93:BB:8E:E3:7B:BC Authority key identifier: 28:DC:81:EA:38:9D:D6:AA:C4:EF:BC:34:D5:2D:77:8E:BA:7A:7F:C4 Certificate issuer: /CN=28dc81ea389dd6aac4efbc34d52d778eba7a7fc4 Certificate serial: 019C42B478D18F97D6E16F291021A9007527 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft Manifest number: 1793 Signing time: Mon 09 Feb 2026 14:00:49 +0000 Manifest this update: Mon 09 Feb 2026 14:00:49 +0000 Manifest next update: Tue 10 Feb 2026 14:00:49 +0000 Files and hashes: 1: KNyB6jid1qrE77w01S13jrp6f8Q.crl (hash: EUqpGw0BmMo0hznzojftAhubfzZv2JVAnkN3GX8onZI=) 2: v-wCFquCVU3REEeKuxPMifGq75E.roa (hash: VExpozMOuBZjJ6RPCyBqYq82PjuTIznByXSgv//ywPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:78:d1:8f:97:d6:e1:6f:29:10:21:a9:00:75:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28dc81ea389dd6aac4efbc34d52d778eba7a7fc4 Validity Not Before: Feb 9 14:00:49 2026 GMT Not After : Feb 10 14:00:49 2026 GMT Subject: CN=212a5a2b773458340317403cb15093bb8ee37bbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:73:bc:6c:71:11:f5:59:e3:3e:e4:31:a4:a4: 66:bf:04:b7:51:14:eb:c5:a6:17:fe:a7:a2:26:e4: ee:93:b2:d2:88:ac:0c:67:29:29:1d:6b:01:60:ee: 80:c3:b8:63:db:a2:c0:00:c0:31:38:89:56:da:03: b7:f7:22:e9:94:35:6b:2e:c1:b2:95:de:f6:e6:ca: ea:b3:0c:1a:1c:34:ed:ad:6a:68:8b:77:16:12:1a: db:11:47:4e:2c:a8:e1:43:db:1e:c0:d4:57:26:cc: f6:53:ce:07:35:52:ac:8b:4f:c5:82:1b:d6:c1:1a: 24:22:e2:36:4d:74:fa:bb:24:21:35:38:08:32:aa: 12:37:97:bc:08:b0:9d:cc:66:87:84:b6:30:20:9e: 32:1a:15:f7:e1:ae:d5:0c:8b:72:3c:7c:0d:37:4c: 01:7b:72:5b:31:23:af:25:1f:67:b6:e8:89:aa:4a: 1b:cb:c2:a8:f0:eb:46:22:cc:ad:2a:2c:01:f8:38: 3d:da:5f:e1:6d:c8:02:92:7a:06:a6:9d:5b:5f:14: 89:0a:d6:a4:bc:cc:27:4a:e0:b4:e8:80:9b:cc:e2: 8e:3c:28:02:62:e5:34:14:cd:44:41:0b:60:5f:d4: c7:5a:ae:60:fa:87:64:32:6a:9d:f6:db:89:29:5a: 8c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:2A:5A:2B:77:34:58:34:03:17:40:3C:B1:50:93:BB:8E:E3:7B:BC X509v3 Authority Key Identifier: keyid:28:DC:81:EA:38:9D:D6:AA:C4:EF:BC:34:D5:2D:77:8E:BA:7A:7F:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:b1:b7:ed:bd:af:74:63:29:bb:ae:cd:c1:3c:08:ce:51:f6: 0f:95:78:3c:e9:c6:fd:09:f8:6e:e6:d9:6d:80:85:14:07:23: 76:40:e8:12:c9:7b:ac:44:59:0c:48:0c:da:37:d2:35:9d:3b: e1:33:99:58:38:6a:b6:d2:f0:65:5f:4c:ad:e4:31:90:cc:0c: 6c:4f:6e:5b:64:35:2e:e7:1e:ef:c9:d4:82:88:1c:e8:be:81: 85:b1:68:99:ba:80:e9:d6:b6:e8:93:95:86:69:f4:cd:55:ad: ab:87:a9:82:8a:db:8c:0a:cb:bf:90:e8:09:69:02:b8:3c:d7: 5d:22:ea:24:6e:48:df:5b:82:ed:7d:15:e9:10:1a:65:58:3b: 9e:f2:f6:f7:3f:60:db:ef:93:00:d6:51:52:0c:c0:c8:af:30: b5:c4:01:eb:fe:ee:0c:a9:ff:2d:35:62:d4:bf:48:f2:da:5e: 0a:12:b3:65:9c:94:e8:4c:b1:3d:53:22:3a:48:76:45:b9:3c: bc:a8:f2:f7:c8:68:a6:a2:bf:df:36:a7:d8:12:2c:3d:5a:63: 63:9c:41:79:64:44:ee:e5:57:aa:0e:ab:98:84:f3:af:8a:e4: ca:50:8e:e0:2c:68:31:78:c4:aa:b5:92:0f:69:b3:bc:2e:3c: 4e:8b:3a:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtHjRj5fW4W8pECGpAHUnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4ZGM4MWVhMzg5ZGQ2YWFjNGVmYmMzNGQ1MmQ3NzhlYmE3 YTdmYzQwHhcNMjYwMjA5MTQwMDQ5WhcNMjYwMjEwMTQwMDQ5WjAzMTEwLwYDVQQD EygyMTJhNWEyYjc3MzQ1ODM0MDMxNzQwM2NiMTUwOTNiYjhlZTM3YmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3O8bHER9VnjPuQxpKRmvwS3URTr xaYX/qeiJuTuk7LSiKwMZykpHWsBYO6Aw7hj26LAAMAxOIlW2gO39yLplDVrLsGy ld725srqswwaHDTtrWpoi3cWEhrbEUdOLKjhQ9sewNRXJsz2U84HNVKsi0/FghvW wRokIuI2TXT6uyQhNTgIMqoSN5e8CLCdzGaHhLYwIJ4yGhX34a7VDItyPHwNN0wB e3JbMSOvJR9ntuiJqkoby8Ko8OtGIsytKiwB+Dg92l/hbcgCknoGpp1bXxSJCtak vMwnSuC06ICbzOKOPCgCYuU0FM1EQQtgX9THWq5g+odkMmqd9tuJKVqMbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCEqWit3NFg0AxdAPLFQk7uO43u8MB8GA1UdIwQY MBaAFCjcgeo4ndaqxO+8NNUtd466en/EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS055QjZqaWQxcXJFNzd3MDFTMTNqcnA2ZjhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9iNjljNmEtYjc4OC00YTFmLTljNWQt YzA3ZmZmNzQ2OTM4LzEvS055QjZqaWQxcXJFNzd3MDFTMTNqcnA2ZjhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9iNjljNmEtYjc4OC00YTFmLTljNWQtYzA3ZmZmNzQ2OTM4 LzEvS055QjZqaWQxcXJFNzd3MDFTMTNqcnA2ZjhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdLG37b2v dGMpu67NwTwIzlH2D5V4POnG/Qn4bubZbYCFFAcjdkDoEsl7rERZDEgM2jfSNZ07 4TOZWDhqttLwZV9MreQxkMwMbE9uW2Q1Luce78nUgogc6L6BhbFombqA6da26JOV hmn0zVWtq4epgorbjArLv5DoCWkCuDzXXSLqJG5I31uC7X0V6RAaZVg7nvL29z9g 2++TANZRUgzAyK8wtcQB6/7uDKn/LTVi1L9I8tpeChKzZZyU6EyxPVMiOkh2Rbk8 vKjy98hopqK/3zan2BIsPVpjY5xBeWRE7uVXqg6rmITzr4rkylCO4CxoMXjEqrWS D2mzvC48Tos6Og== -----END CERTIFICATE-----Generated at Mon Feb 9 17:01:58 2026 by rpki-client