This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft File: krFD19sRWVfF25r4lfTn4Vt7axc.mft (raw, json) Hash identifier: YyLWxtUTMeFDe7GvokyO6SR0mcj/tm0GRwNjzrBYLhg= Subject key identifier: 77:70:98:29:43:AC:32:59:9B:BF:8F:12:75:1A:D6:6E:56:EA:09:0E Authority key identifier: 92:B1:43:D7:DB:11:59:57:C5:DB:9A:F8:95:F4:E7:E1:5B:7B:6B:17 Certificate issuer: /CN=92b143d7db115957c5db9af895f4e7e15b7b6b17 Certificate serial: 019C43FE3D4E62CC8FF4E155807B19A76BF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft Manifest number: 0FD9 Signing time: Mon 09 Feb 2026 20:01:01 +0000 Manifest this update: Mon 09 Feb 2026 20:01:01 +0000 Manifest next update: Tue 10 Feb 2026 20:01:01 +0000 Files and hashes: 1: Tp3MUlnyw8Mvjq4NF_A0s--TO-E.roa (hash: 1pyFxvIW7OcA2xgJemaGK0NKgGExv5PIDeasqhGcwTU=) 2: krFD19sRWVfF25r4lfTn4Vt7axc.crl (hash: zlwdiNPuFuXDrYds67dKtkbmtjWMQS9MKJJXVlnQhAA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:3d:4e:62:cc:8f:f4:e1:55:80:7b:19:a7:6b:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92b143d7db115957c5db9af895f4e7e15b7b6b17 Validity Not Before: Feb 9 20:01:01 2026 GMT Not After : Feb 10 20:01:01 2026 GMT Subject: CN=7770982943ac32599bbf8f12751ad66e56ea090e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7f:8a:de:ae:e7:53:47:70:d5:44:ba:a6:d5: 31:9c:5d:34:b6:49:f7:75:4a:4b:2d:44:54:32:84: ef:29:c4:d3:a5:28:f7:7c:dc:f6:59:6c:00:17:0e: 13:35:49:f6:56:18:a1:b1:97:e2:be:d6:23:75:bc: 8e:0c:9a:35:37:9b:a4:87:6b:83:0d:87:19:8a:91: 6f:f2:5e:dd:36:f1:c0:b7:95:50:a7:c5:80:14:03: 2c:5e:de:ce:1c:15:75:50:57:8a:9a:ed:00:76:09: 41:52:4f:14:5b:26:fe:88:7a:ec:0f:6f:ec:64:da: 4e:29:f1:47:1f:39:29:3d:61:8d:bf:a9:9b:29:b2: b0:64:f3:1b:f1:18:18:55:b2:89:14:7e:2a:f6:24: 5b:3c:79:da:98:13:fc:1f:88:82:da:8a:a7:9b:52: c7:a9:9d:3c:65:d8:e7:4d:08:62:16:cc:40:2d:9c: 06:d1:02:f9:eb:c5:44:fd:88:3c:76:26:fc:0b:2f: 7b:c3:50:b4:4c:2c:ce:26:f7:b4:74:9d:59:c6:2f: ad:be:9f:b8:07:d9:dc:24:94:be:f1:a4:23:dc:e5: 6f:b6:88:da:e4:6a:bb:83:b6:0d:c7:2e:c8:82:55: 29:95:9f:29:d8:01:f5:0d:01:6a:5e:a4:77:61:c7: 34:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:70:98:29:43:AC:32:59:9B:BF:8F:12:75:1A:D6:6E:56:EA:09:0E X509v3 Authority Key Identifier: keyid:92:B1:43:D7:DB:11:59:57:C5:DB:9A:F8:95:F4:E7:E1:5B:7B:6B:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:19:89:53:bc:d9:06:8e:b3:51:52:4f:2c:6d:d6:0b:d0:c4: d7:f4:fe:3e:4f:39:a8:0f:d7:de:17:5e:62:77:e0:a7:76:86: ae:6a:a0:15:e2:93:ab:dd:70:8f:b3:a6:9d:d5:6e:5b:dd:2c: df:c3:52:27:63:8c:c2:f2:66:f1:35:3b:8c:9f:ca:7b:42:7b: b7:e1:ea:92:29:c0:94:f7:3c:c1:62:36:83:d2:64:44:7f:6b: 75:37:7e:12:ac:34:95:1a:34:6d:5d:75:42:76:b8:e3:6e:2a: 24:52:03:8a:5f:10:0c:bc:e2:2b:bf:5a:fd:4c:11:89:30:a0: 5e:26:1f:e2:b6:91:b2:cc:15:fd:d5:af:74:dc:08:b1:21:94: 8b:0f:bc:c8:55:17:05:63:99:a6:9d:c6:96:e9:88:33:3a:60: ed:75:9f:45:ff:f3:40:4c:f9:7d:7d:c0:be:95:13:aa:d4:a6: 32:fd:bc:05:58:48:63:0f:1d:8d:7b:47:81:b5:13:f6:1d:c6: f5:51:28:21:40:e0:d4:7e:e4:46:ea:7b:67:5b:93:27:b6:4a: f0:fa:e3:da:4a:c0:74:52:ed:2f:84:88:54:d1:cf:b4:5f:30: e0:98:1b:a0:45:fc:e7:97:03:05:6b:70:00:fc:87:68:73:9a: d2:b5:48:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/j1OYsyP9OFVgHsZp2v5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyYjE0M2Q3ZGIxMTU5NTdjNWRiOWFmODk1ZjRlN2UxNWI3 YjZiMTcwHhcNMjYwMjA5MjAwMTAxWhcNMjYwMjEwMjAwMTAxWjAzMTEwLwYDVQQD Eyg3NzcwOTgyOTQzYWMzMjU5OWJiZjhmMTI3NTFhZDY2ZTU2ZWEwOTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxX+K3q7nU0dw1US6ptUxnF00tkn3 dUpLLURUMoTvKcTTpSj3fNz2WWwAFw4TNUn2VhihsZfivtYjdbyODJo1N5ukh2uD DYcZipFv8l7dNvHAt5VQp8WAFAMsXt7OHBV1UFeKmu0AdglBUk8UWyb+iHrsD2/s ZNpOKfFHHzkpPWGNv6mbKbKwZPMb8RgYVbKJFH4q9iRbPHnamBP8H4iC2oqnm1LH qZ08ZdjnTQhiFsxALZwG0QL568VE/Yg8dib8Cy97w1C0TCzOJve0dJ1Zxi+tvp+4 B9ncJJS+8aQj3OVvtoja5Gq7g7YNxy7IglUplZ8p2AH1DQFqXqR3Ycc0WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHdwmClDrDJZm7+PEnUa1m5W6gkOMB8GA1UdIwQY MBaAFJKxQ9fbEVlXxdua+JX05+Fbe2sXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3JGRDE5c1JXVmZGMjVyNGxmVG40VnQ3YXhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9kMTE0NDMtMTM3Mi00Y2ZjLThkNTct NmQzYTg4MTUzNzY3LzEva3JGRDE5c1JXVmZGMjVyNGxmVG40VnQ3YXhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9kMTE0NDMtMTM3Mi00Y2ZjLThkNTctNmQzYTg4MTUzNzY3 LzEva3JGRDE5c1JXVmZGMjVyNGxmVG40VnQ3YXhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtRmJU7zZ Bo6zUVJPLG3WC9DE1/T+Pk85qA/X3hdeYnfgp3aGrmqgFeKTq91wj7OmndVuW90s 38NSJ2OMwvJm8TU7jJ/Ke0J7t+HqkinAlPc8wWI2g9JkRH9rdTd+Eqw0lRo0bV11 Qna4424qJFIDil8QDLziK79a/UwRiTCgXiYf4raRsswV/dWvdNwIsSGUiw+8yFUX BWOZpp3GlumIMzpg7XWfRf/zQEz5fX3AvpUTqtSmMv28BVhIYw8djXtHgbUT9h3G 9VEoIUDg1H7kRup7Z1uTJ7ZK8Prj2krAdFLtL4SIVNHPtF8w4JgboEX855cDBWtw APyHaHOa0rVIqw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:41:41 2026 by rpki-client