This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft File: ks_7H6VV_DWhSvymELOBBf1cZFw.mft (raw, json) Hash identifier: 8pmVpFe5zH5gyVKmZHVEdokCkjGu2YHyJyPmZQPQLOY= Subject key identifier: 95:54:2D:7F:69:88:B3:25:C2:B7:31:D6:37:DB:72:E6:D7:08:F1:95 Authority key identifier: 92:CF:FB:1F:A5:55:FC:35:A1:4A:FC:A6:10:B3:81:05:FD:5C:64:5C Certificate issuer: /CN=92cffb1fa555fc35a14afca610b38105fd5c645c Certificate serial: 019C432287B0AE3F1792B987D64486599B9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ks_7H6VV_DWhSvymELOBBf1cZFw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft Manifest number: 100D Signing time: Mon 09 Feb 2026 16:01:02 +0000 Manifest this update: Mon 09 Feb 2026 16:01:02 +0000 Manifest next update: Tue 10 Feb 2026 16:01:02 +0000 Files and hashes: 1: ks_7H6VV_DWhSvymELOBBf1cZFw.crl (hash: avIFEaLD87wn+qD7YvTTzDZ4K5190F5UJyAwIIIAVQM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.crl rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft rsync://rpki.ripe.net/repository/DEFAULT/ks_7H6VV_DWhSvymELOBBf1cZFw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:87:b0:ae:3f:17:92:b9:87:d6:44:86:59:9b:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92cffb1fa555fc35a14afca610b38105fd5c645c Validity Not Before: Feb 9 16:01:02 2026 GMT Not After : Feb 10 16:01:02 2026 GMT Subject: CN=95542d7f6988b325c2b731d637db72e6d708f195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:bf:38:96:24:23:a5:a6:8a:15:b5:24:47:92: fd:b5:46:a0:d5:73:dc:24:40:10:99:d3:ae:0f:c2: 34:89:f0:4f:84:f9:36:0d:84:90:93:06:88:b9:7f: bb:56:67:ef:8f:47:41:65:63:67:4d:a2:82:1c:07: 35:60:87:1d:78:e0:b2:73:54:ef:f5:12:0c:64:7d: ff:6d:37:b7:3f:01:83:c5:1e:27:dc:c7:8c:be:a2: 05:91:4b:62:49:61:bf:4c:b0:c9:6a:f4:0e:cf:99: c9:58:96:fc:11:3f:32:0e:43:bb:3b:28:f4:36:46: 90:f7:24:29:7b:2a:8d:81:a4:86:72:37:b5:a8:23: 35:12:90:f2:6e:ae:a0:7e:3f:58:ae:72:85:e1:82: 61:01:ee:f0:a3:1d:83:56:47:07:fd:7d:32:a1:fe: 8e:5e:fc:72:8b:32:26:1e:c9:5e:f2:22:f2:50:d1: 27:92:df:3a:c6:38:52:01:e7:13:4f:76:13:75:bf: fd:5a:c4:9e:a8:b0:21:a2:a6:4a:a2:c7:56:a5:f3: 85:29:d6:b1:10:e6:b9:f4:ab:9c:1d:69:c6:0e:20: ed:be:01:47:3a:bb:4c:e6:e4:22:e5:e7:ed:ab:04: 6d:87:1f:78:6d:fb:9b:e5:3f:90:20:07:d2:f5:0d: e7:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:54:2D:7F:69:88:B3:25:C2:B7:31:D6:37:DB:72:E6:D7:08:F1:95 X509v3 Authority Key Identifier: keyid:92:CF:FB:1F:A5:55:FC:35:A1:4A:FC:A6:10:B3:81:05:FD:5C:64:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ks_7H6VV_DWhSvymELOBBf1cZFw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:32:d1:cc:4e:b2:4c:8d:75:68:49:d9:9c:14:06:f3:70:7b: 2f:cc:df:e4:66:a6:0c:6b:f3:ab:55:6f:07:3b:05:ca:9a:59: 50:ea:63:c3:14:79:b4:63:73:48:1b:d0:4c:8f:2e:72:10:fd: 20:ec:06:75:02:92:50:48:30:e7:5c:8d:86:fd:a5:c2:3f:99: 04:51:21:fd:44:35:3b:c0:8d:5d:b9:c9:9b:91:b2:4e:f1:a0: da:a6:ab:f0:91:14:b0:f2:67:02:a9:d7:24:6b:43:ea:10:77: cf:8b:63:2a:ce:8a:1a:ac:15:e9:d3:96:30:6e:f9:90:8a:71: 55:27:2e:c2:93:81:37:cc:8b:e9:77:7b:76:18:68:d6:67:c7: ed:6b:77:d1:fb:17:6b:f7:89:62:d1:3a:dc:56:d0:fe:bf:fd: 31:ce:c9:ed:e7:9d:48:38:71:16:f5:47:aa:99:13:27:cd:f0: de:f4:b7:ef:9a:e1:eb:7d:4c:21:17:4d:45:fb:b3:d8:8a:40: 32:e3:b0:04:04:9b:04:4a:59:d5:f7:f8:a2:ec:30:65:83:d2: 8e:43:68:d3:99:f2:68:18:cb:82:6e:cb:10:1a:3b:d4:f1:44: b7:30:16:28:45:2f:3b:3c:30:e6:cc:89:c7:db:19:11:56:0c: c0:d7:ff:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIoewrj8XkrmH1kSGWZueMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyY2ZmYjFmYTU1NWZjMzVhMTRhZmNhNjEwYjM4MTA1ZmQ1 YzY0NWMwHhcNMjYwMjA5MTYwMTAyWhcNMjYwMjEwMTYwMTAyWjAzMTEwLwYDVQQD Eyg5NTU0MmQ3ZjY5ODhiMzI1YzJiNzMxZDYzN2RiNzJlNmQ3MDhmMTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxr84liQjpaaKFbUkR5L9tUag1XPc JEAQmdOuD8I0ifBPhPk2DYSQkwaIuX+7Vmfvj0dBZWNnTaKCHAc1YIcdeOCyc1Tv 9RIMZH3/bTe3PwGDxR4n3MeMvqIFkUtiSWG/TLDJavQOz5nJWJb8ET8yDkO7Oyj0 NkaQ9yQpeyqNgaSGcje1qCM1EpDybq6gfj9YrnKF4YJhAe7wox2DVkcH/X0yof6O XvxyizImHsle8iLyUNEnkt86xjhSAecTT3YTdb/9WsSeqLAhoqZKosdWpfOFKdax EOa59KucHWnGDiDtvgFHOrtM5uQi5eftqwRthx94bfub5T+QIAfS9Q3n6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJVULX9piLMlwrcx1jfbcubXCPGVMB8GA1UdIwQY MBaAFJLP+x+lVfw1oUr8phCzgQX9XGRcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3NfN0g2VlZfRFdoU3Z5bUVMT0JCZjFjWkZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9mZjUxYTAtYTFiMS00MTliLTg1MTgt NmJiNWQ0ZDJlNTM5LzEva3NfN0g2VlZfRFdoU3Z5bUVMT0JCZjFjWkZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9mZjUxYTAtYTFiMS00MTliLTg1MTgtNmJiNWQ0ZDJlNTM5 LzEva3NfN0g2VlZfRFdoU3Z5bUVMT0JCZjFjWkZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGTLRzE6y TI11aEnZnBQG83B7L8zf5GamDGvzq1VvBzsFyppZUOpjwxR5tGNzSBvQTI8uchD9 IOwGdQKSUEgw51yNhv2lwj+ZBFEh/UQ1O8CNXbnJm5GyTvGg2qar8JEUsPJnAqnX JGtD6hB3z4tjKs6KGqwV6dOWMG75kIpxVScuwpOBN8yL6Xd7dhho1mfH7Wt30fsX a/eJYtE63FbQ/r/9Mc7J7eedSDhxFvVHqpkTJ83w3vS375rh631MIRdNRfuz2IpA MuOwBASbBEpZ1ff4ouwwZYPSjkNo05nyaBjLgm7LEBo71PFEtzAWKEUvOzww5syJ x9sZEVYMwNf/sg== -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:51 2026 by rpki-client