This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.mft File: kTYtPAlT6Mkz8AkqWJt1SUkE-WI.mft (raw, json) Hash identifier: L8I8gsqTe8RlZdWuOEzK9bK49R+jj71fV3KOAwL4JlQ= Subject key identifier: C1:33:7A:87:9F:D5:B2:02:3B:01:4D:8C:F9:9A:76:A3:85:CC:7C:5A Authority key identifier: 91:36:2D:3C:09:53:E8:C9:33:F0:09:2A:58:9B:75:49:49:04:F9:62 Certificate issuer: /CN=91362d3c0953e8c933f0092a589b75494904f962 Certificate serial: 019C424682E07ADFC96F1DBAB4DDAA06D668 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.mft Manifest number: 16C1 Signing time: Mon 09 Feb 2026 12:00:43 +0000 Manifest this update: Mon 09 Feb 2026 12:00:43 +0000 Manifest next update: Tue 10 Feb 2026 12:00:43 +0000 Files and hashes: 1: Ego0nl6qnumbw-BU5_acGm_TtM8.roa (hash: 7c/b4633erpOytsAafi0TuyOCeY/FHIybW7GxJJgywE=) 2: kTYtPAlT6Mkz8AkqWJt1SUkE-WI.crl (hash: 1DUhxBKRQPNZRavqdie+Yz9Hg25odCROxCsavb1McJ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.crl rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.mft rsync://rpki.ripe.net/repository/DEFAULT/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:82:e0:7a:df:c9:6f:1d:ba:b4:dd:aa:06:d6:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91362d3c0953e8c933f0092a589b75494904f962 Validity Not Before: Feb 9 12:00:43 2026 GMT Not After : Feb 10 12:00:43 2026 GMT Subject: CN=c1337a879fd5b2023b014d8cf99a76a385cc7c5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b1:1b:29:3d:0d:74:33:97:d7:ac:ca:ed:8e: 0f:0f:59:31:d5:46:5f:d0:bc:3d:84:4a:e1:fa:7e: f0:b4:93:ec:fd:f7:6c:fc:ef:b9:9a:32:a3:66:2a: 9d:97:7c:eb:69:0c:02:84:81:1c:c3:dc:22:69:fc: 7e:3e:b0:18:3c:04:9c:c5:68:74:0e:ba:1f:46:d9: f7:bb:6f:75:f4:ca:eb:d5:95:7e:8c:81:c7:f5:56: b0:e2:f1:41:2d:4d:17:99:99:01:c8:8c:0c:17:6f: d5:d1:7d:73:c4:b1:c4:da:18:27:de:3e:71:86:be: c0:9c:25:c2:ac:9a:d5:18:1f:9b:47:e9:38:4f:fc: 71:76:f3:e3:83:03:b9:bb:a0:4a:6f:20:ad:f2:69: a2:c2:82:eb:4b:c1:ee:50:4e:4f:36:ca:62:d4:bb: 33:17:ae:79:81:0c:8d:75:d6:db:7e:de:7f:85:bb: 95:98:79:09:53:42:b2:2b:84:49:45:ee:60:c0:47: f0:bf:88:02:c8:13:8e:9a:4e:47:e5:8d:3b:59:17: b4:a1:40:b9:b5:98:0c:c8:7d:53:74:e8:1d:b6:b7: 30:af:69:4b:82:a6:f7:f9:47:42:37:ad:14:2e:ca: 73:a9:f0:a6:c9:a3:ab:3c:08:41:ca:96:14:9e:0c: fd:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:33:7A:87:9F:D5:B2:02:3B:01:4D:8C:F9:9A:76:A3:85:CC:7C:5A X509v3 Authority Key Identifier: keyid:91:36:2D:3C:09:53:E8:C9:33:F0:09:2A:58:9B:75:49:49:04:F9:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:d3:07:47:5b:d7:cb:8c:bb:7f:eb:27:df:58:c1:53:e4:a0: 81:cd:b9:be:e3:cf:63:77:17:46:6f:e4:97:d7:22:60:6b:d6: 7f:7c:10:82:de:32:43:ed:9d:b8:26:ae:d5:c4:7f:53:1b:51: 73:c1:f7:f4:67:2e:af:f1:50:01:2b:9c:d6:59:00:ad:8a:eb: e7:01:c5:d2:6d:30:35:24:ce:97:6a:a5:1b:92:c5:fa:e1:be: 34:7d:de:88:34:fe:df:2f:c9:47:08:e6:f0:13:ae:20:34:86: b7:85:ac:f2:2e:06:05:6f:7c:bf:ba:b2:bd:80:a0:23:1a:ab: d3:76:7b:4f:1f:47:ee:95:67:fb:50:9f:f0:66:db:ac:64:2c: be:b6:d7:f5:ca:21:d0:97:7f:60:3a:fc:96:7d:d6:75:01:f7: be:9d:b9:5a:0c:51:ac:ae:70:b3:26:da:98:bc:82:04:b3:c5: 22:20:2b:f3:18:a9:aa:d1:c9:4e:29:89:2f:ab:45:28:ba:90: d9:a7:63:b2:17:0b:2a:79:75:61:aa:cf:e7:83:e8:0a:48:a1: 59:79:38:cd:23:e0:16:97:41:b2:76:e9:6b:f2:b9:ed:11:e3: 01:08:55:f8:17:8d:39:63:4c:b4:36:23:86:f6:b8:bd:61:56: da:a4:06:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRoLget/Jbx26tN2qBtZoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxMzYyZDNjMDk1M2U4YzkzM2YwMDkyYTU4OWI3NTQ5NDkw NGY5NjIwHhcNMjYwMjA5MTIwMDQzWhcNMjYwMjEwMTIwMDQzWjAzMTEwLwYDVQQD EyhjMTMzN2E4NzlmZDViMjAyM2IwMTRkOGNmOTlhNzZhMzg1Y2M3YzVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobEbKT0NdDOX16zK7Y4PD1kx1UZf 0Lw9hErh+n7wtJPs/fds/O+5mjKjZiqdl3zraQwChIEcw9wiafx+PrAYPAScxWh0 DrofRtn3u2919Mrr1ZV+jIHH9Vaw4vFBLU0XmZkByIwMF2/V0X1zxLHE2hgn3j5x hr7AnCXCrJrVGB+bR+k4T/xxdvPjgwO5u6BKbyCt8mmiwoLrS8HuUE5PNspi1Lsz F655gQyNddbbft5/hbuVmHkJU0KyK4RJRe5gwEfwv4gCyBOOmk5H5Y07WRe0oUC5 tZgMyH1TdOgdtrcwr2lLgqb3+UdCN60ULspzqfCmyaOrPAhBypYUngz9GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMEzeoef1bICOwFNjPmadqOFzHxaMB8GA1UdIwQY MBaAFJE2LTwJU+jJM/AJKlibdUlJBPliMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1RZdFBBbFQ2TWt6OEFrcVdKdDFTVWtFLVdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8wMjJlZTQtNDRkZS00MDA0LTk4Mzkt YTQ0OWNlNDZhOWIxLzEva1RZdFBBbFQ2TWt6OEFrcVdKdDFTVWtFLVdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8wMjJlZTQtNDRkZS00MDA0LTk4MzktYTQ0OWNlNDZhOWIx LzEva1RZdFBBbFQ2TWt6OEFrcVdKdDFTVWtFLVdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAONMHR1vX y4y7f+sn31jBU+Sggc25vuPPY3cXRm/kl9ciYGvWf3wQgt4yQ+2duCau1cR/UxtR c8H39Gcur/FQASuc1lkArYrr5wHF0m0wNSTOl2qlG5LF+uG+NH3eiDT+3y/JRwjm 8BOuIDSGt4Ws8i4GBW98v7qyvYCgIxqr03Z7Tx9H7pVn+1Cf8GbbrGQsvrbX9coh 0Jd/YDr8ln3WdQH3vp25WgxRrK5wsybamLyCBLPFIiAr8xipqtHJTimJL6tFKLqQ 2adjshcLKnl1YarP54PoCkihWXk4zSPgFpdBsnbpa/K57RHjAQhV+BeNOWNMtDYj hva4vWFW2qQGkA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:53 2026 by rpki-client