This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.mft File: RKqBMTnAax3PG_6DMrm4Aas-swI.mft (raw, json) Hash identifier: YcidWAo41agGmdSB4UT8Td2hwZaNetT9aF4sibvM140= Subject key identifier: 44:DC:ED:EA:5E:7B:4E:08:FA:7E:5B:DC:8D:3C:EC:26:91:C4:31:30 Authority key identifier: 44:AA:81:31:39:C0:6B:1D:CF:1B:FE:83:32:B9:B8:01:AB:3E:B3:02 Certificate issuer: /CN=44aa813139c06b1dcf1bfe8332b9b801ab3eb302 Certificate serial: 019C427DF9BAD059DD588FD74E6068784F04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKqBMTnAax3PG_6DMrm4Aas-swI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.mft Manifest number: 0828 Signing time: Mon 09 Feb 2026 13:01:17 +0000 Manifest this update: Mon 09 Feb 2026 13:01:17 +0000 Manifest next update: Tue 10 Feb 2026 13:01:17 +0000 Files and hashes: 1: RKqBMTnAax3PG_6DMrm4Aas-swI.crl (hash: VKjqcauX1q5fdCl7WsjRDedf5NfzZ7uGDtyGV/1rbHc=) 2: ynuNLafz9LbBB3yzoCWMv9fdVAw.roa (hash: ggLRVHISQxu3PXeYplz4bZPnG+60dpFC8ZQ4LkB5T9g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.crl rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.mft rsync://rpki.ripe.net/repository/DEFAULT/RKqBMTnAax3PG_6DMrm4Aas-swI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:f9:ba:d0:59:dd:58:8f:d7:4e:60:68:78:4f:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44aa813139c06b1dcf1bfe8332b9b801ab3eb302 Validity Not Before: Feb 9 13:01:17 2026 GMT Not After : Feb 10 13:01:17 2026 GMT Subject: CN=44dcedea5e7b4e08fa7e5bdc8d3cec2691c43130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:2d:68:bc:32:4b:f6:ba:6c:26:ec:e0:a6:b4: ab:bb:d4:21:6a:5e:81:51:b6:5c:aa:9e:bc:9d:5d: b7:ba:72:22:f8:14:71:1d:00:71:56:bc:a4:de:ee: 15:6d:55:3a:05:70:e0:f5:f3:4f:8a:35:7a:8c:24: 03:75:d0:e1:ee:40:d5:33:b1:7e:c5:c9:fe:7d:85: 07:38:01:5b:61:22:b3:cd:fb:79:9d:d1:c9:ca:f4: 5d:5e:5c:55:bd:43:b7:38:1f:e3:7b:44:07:45:8d: b4:1d:15:1f:03:5c:24:e1:bd:8a:a6:0b:c3:c7:fe: 41:39:c6:da:71:03:28:b0:9e:94:66:b8:1f:8b:53: 95:94:a4:55:7f:20:80:d1:7c:db:a4:55:64:49:e2: ec:93:3f:13:a1:c3:5a:8d:77:35:8d:df:c2:6d:5d: 50:67:46:51:a8:71:b4:04:3e:9b:37:49:1f:b5:81: 84:b8:03:2b:bb:ad:91:1a:3f:90:70:c2:54:63:c3: 39:ad:e7:02:1c:bb:26:8a:7a:2f:62:8f:2c:97:63: 4e:ae:8f:6e:7a:51:f8:2c:6f:de:ab:11:9f:90:2f: 95:ca:a2:0c:23:61:7b:04:e1:37:4b:93:e7:5b:45: 27:58:cb:5e:5a:ea:61:94:4b:fd:aa:86:7a:c9:60: c8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:DC:ED:EA:5E:7B:4E:08:FA:7E:5B:DC:8D:3C:EC:26:91:C4:31:30 X509v3 Authority Key Identifier: keyid:44:AA:81:31:39:C0:6B:1D:CF:1B:FE:83:32:B9:B8:01:AB:3E:B3:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKqBMTnAax3PG_6DMrm4Aas-swI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:21:02:23:da:6b:a4:0b:e5:ec:20:77:c9:a6:a9:8b:64:97: f1:ee:5a:00:4a:cd:9f:b4:a1:26:d5:d3:6e:78:d9:f9:a6:32: f7:73:72:d1:76:6e:07:3f:04:5c:c0:f9:cc:0b:0e:ce:66:a0: 96:d9:ef:4a:74:2b:1e:dd:42:7c:85:44:77:42:46:9a:77:49: 21:87:e8:69:bc:56:70:4e:2b:32:62:f6:c4:8d:30:70:93:09: 9d:e8:e2:41:5e:eb:59:c1:49:75:85:36:e2:98:c0:62:b9:c2: 33:7f:70:06:f4:82:fb:e9:50:9d:d1:27:f8:ec:36:f6:9f:6c: 97:5b:ea:3f:63:06:df:47:70:ab:da:50:ed:a0:a6:af:70:87: 59:b3:37:29:1b:7e:48:35:92:9b:e6:c8:2d:ba:50:2d:47:a6: 18:ae:ed:44:8e:a1:8e:c2:69:08:75:0d:7e:a1:83:79:da:16: f8:c1:10:6a:47:29:1e:d9:83:72:2f:87:d3:d4:23:5a:21:56: ee:33:76:09:eb:9a:1c:d6:c6:1c:24:54:cf:4e:43:87:b9:b6: a3:d4:75:55:03:ae:44:44:a4:4d:74:23:41:2d:a1:63:3a:98: fc:2b:a6:2a:9e:d1:d2:e7:32:96:12:e0:49:ff:2b:0a:ee:65: 5e:21:ec:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCffm60FndWI/XTmBoeE8EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0YWE4MTMxMzljMDZiMWRjZjFiZmU4MzMyYjliODAxYWIz ZWIzMDIwHhcNMjYwMjA5MTMwMTE3WhcNMjYwMjEwMTMwMTE3WjAzMTEwLwYDVQQD Eyg0NGRjZWRlYTVlN2I0ZTA4ZmE3ZTViZGM4ZDNjZWMyNjkxYzQzMTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8C1ovDJL9rpsJuzgprSru9Qhal6B UbZcqp68nV23unIi+BRxHQBxVryk3u4VbVU6BXDg9fNPijV6jCQDddDh7kDVM7F+ xcn+fYUHOAFbYSKzzft5ndHJyvRdXlxVvUO3OB/je0QHRY20HRUfA1wk4b2KpgvD x/5BOcbacQMosJ6UZrgfi1OVlKRVfyCA0XzbpFVkSeLskz8TocNajXc1jd/CbV1Q Z0ZRqHG0BD6bN0kftYGEuAMru62RGj+QcMJUY8M5recCHLsminovYo8sl2NOro9u elH4LG/eqxGfkC+VyqIMI2F7BOE3S5PnW0UnWMteWuphlEv9qoZ6yWDIdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFETc7epee04I+n5b3I087CaRxDEwMB8GA1UdIwQY MBaAFESqgTE5wGsdzxv+gzK5uAGrPrMCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUktxQk1UbkFheDNQR182RE1ybTRBYXMtc3dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy81MzViZjctNTlhYy00NWYxLWJlYzUt NDFkZDdmM2VhN2E0LzEvUktxQk1UbkFheDNQR182RE1ybTRBYXMtc3dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy81MzViZjctNTlhYy00NWYxLWJlYzUtNDFkZDdmM2VhN2E0 LzEvUktxQk1UbkFheDNQR182RE1ybTRBYXMtc3dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADSECI9pr pAvl7CB3yaapi2SX8e5aAErNn7ShJtXTbnjZ+aYy93Ny0XZuBz8EXMD5zAsOzmag ltnvSnQrHt1CfIVEd0JGmndJIYfoabxWcE4rMmL2xI0wcJMJnejiQV7rWcFJdYU2 4pjAYrnCM39wBvSC++lQndEn+Ow29p9sl1vqP2MG30dwq9pQ7aCmr3CHWbM3KRt+ SDWSm+bILbpQLUemGK7tRI6hjsJpCHUNfqGDedoW+MEQakcpHtmDci+H09QjWiFW 7jN2CeuaHNbGHCRUz05Dh7m2o9R1VQOuRESkTXQjQS2hYzqY/CumKp7R0ucylhLg Sf8rCu5lXiHsTA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:34:01 2026 by rpki-client