This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/d3cb14-30ad-4213-815b-f6a513de2fea/1/kMzZE6mbr9iT4HupaKZ0NOPfVCA.mft File: kMzZE6mbr9iT4HupaKZ0NOPfVCA.mft (raw, json) Hash identifier: 8Rie6Q8cDu5NXK5a1TVlnGdsoyXHI+nyxNvJTYOaTsc= Subject key identifier: 26:D9:39:72:CE:DC:A9:C2:4C:0C:16:84:A5:8D:08:48:6D:90:75:B2 Authority key identifier: 90:CC:D9:13:A9:9B:AF:D8:93:E0:7B:A9:68:A6:74:34:E3:DF:54:20 Certificate issuer: /CN=90ccd913a99bafd893e07ba968a67434e3df5420 Certificate serial: 019C4359112C7038AD78FDD02242C8885C42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kMzZE6mbr9iT4HupaKZ0NOPfVCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/d3cb14-30ad-4213-815b-f6a513de2fea/1/kMzZE6mbr9iT4HupaKZ0NOPfVCA.mft Manifest number: 1769 Signing time: Mon 09 Feb 2026 17:00:36 +0000 Manifest this update: Mon 09 Feb 2026 17:00:36 +0000 Manifest next update: Tue 10 Feb 2026 17:00:36 +0000 Files and hashes: 1: BnpXeG4g8YEnA7qMNOyzrkmbxe4.roa (hash: XfIOGzU1Xr7xtlffkFSqkAOYlDdi/uy4BUfSJ4jYq/U=) 2: kMzZE6mbr9iT4HupaKZ0NOPfVCA.crl (hash: imYrSWkIq85DPSZxgVCmT0F+1nAZZVcSwP9cP/TtUHo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/d3cb14-30ad-4213-815b-f6a513de2fea/1/kMzZE6mbr9iT4HupaKZ0NOPfVCA.crl rsync://rpki.ripe.net/repository/DEFAULT/35/d3cb14-30ad-4213-815b-f6a513de2fea/1/kMzZE6mbr9iT4HupaKZ0NOPfVCA.mft rsync://rpki.ripe.net/repository/DEFAULT/kMzZE6mbr9iT4HupaKZ0NOPfVCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:11:2c:70:38:ad:78:fd:d0:22:42:c8:88:5c:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90ccd913a99bafd893e07ba968a67434e3df5420 Validity Not Before: Feb 9 17:00:36 2026 GMT Not After : Feb 10 17:00:36 2026 GMT Subject: CN=26d93972cedca9c24c0c1684a58d08486d9075b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:32:27:88:92:11:6c:30:ed:36:69:dc:f1:28: 63:be:b3:8c:3d:ca:f0:b9:f3:47:1a:42:ee:73:14: 9a:cf:8d:ee:76:32:39:e4:75:d3:f7:3a:5a:d8:66: c1:17:d1:ed:6d:d7:86:40:57:eb:5b:c2:19:15:9b: a3:9b:80:c4:d0:0a:6e:47:d5:15:a7:56:71:b2:bc: 1e:3d:a3:5a:44:71:55:6b:d3:de:fb:55:f2:90:1c: bd:ed:1c:35:63:8e:60:6c:82:d7:67:62:10:4e:4b: 9b:a3:5b:da:92:8d:bb:50:ce:44:42:34:bf:cf:65: 4b:c5:b6:23:99:9a:77:aa:ec:7d:8a:9a:5e:23:ba: ec:e0:5e:b1:ce:34:82:76:c7:ef:47:ce:46:be:19: 4a:d6:c7:0b:6b:4b:c3:fd:12:20:c8:02:08:82:60: f6:59:af:b0:1f:63:d9:ad:b6:d4:e6:1b:4a:21:c7: 71:40:29:13:bd:5e:b4:20:62:3b:44:10:f4:94:27: b6:e1:fe:dc:ca:f0:db:e2:59:40:f1:11:b2:76:70: 55:cf:da:1c:65:37:46:95:76:8d:01:ed:ed:2f:53: af:b4:1e:29:53:38:be:27:e4:79:60:85:51:08:ed: 0e:dd:79:3a:77:6e:76:33:b6:4a:65:d4:31:de:6f: 11:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:D9:39:72:CE:DC:A9:C2:4C:0C:16:84:A5:8D:08:48:6D:90:75:B2 X509v3 Authority Key Identifier: keyid:90:CC:D9:13:A9:9B:AF:D8:93:E0:7B:A9:68:A6:74:34:E3:DF:54:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMzZE6mbr9iT4HupaKZ0NOPfVCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/d3cb14-30ad-4213-815b-f6a513de2fea/1/kMzZE6mbr9iT4HupaKZ0NOPfVCA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/d3cb14-30ad-4213-815b-f6a513de2fea/1/kMzZE6mbr9iT4HupaKZ0NOPfVCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:38:4a:0e:13:6b:f7:f0:1d:80:62:3f:4a:02:77:04:fe:4f: 21:20:e2:39:ca:b7:ef:c4:aa:af:20:40:d1:0c:75:56:4e:41: ff:ab:d7:36:a7:72:aa:e5:ff:52:57:62:47:9b:9f:d4:64:eb: 85:51:f0:3a:b4:ea:77:16:82:9e:80:29:a3:24:1d:6b:22:50: 27:d2:aa:6e:82:6a:c1:19:a9:5a:96:92:d5:66:ec:5d:1b:ec: f7:f4:06:0f:2e:55:a1:80:1c:8d:25:eb:be:d2:9b:f4:83:77: 86:1e:1c:8e:63:6b:c9:dc:0d:6a:3a:f1:c2:a7:0b:2c:cb:68: 68:b8:f3:e1:9a:2e:20:65:0c:e1:a7:db:6c:72:fc:7b:27:f5: 02:60:3c:57:43:49:2e:99:b7:a3:04:14:b3:15:fe:a1:48:c0: a9:5c:35:cc:c3:7d:ce:1c:9e:be:34:8a:8e:23:c1:4b:21:40: 1e:05:ee:90:b9:56:f9:84:88:71:d7:86:26:61:0c:69:32:ee: 23:73:eb:53:15:cd:1e:1b:0e:b6:3e:b5:e5:68:1f:34:0f:b7: e5:3e:a9:e5:07:98:bf:ef:23:63:49:6a:b5:56:92:e2:5c:84: 0d:97:5a:c1:68:86:b6:06:fd:9a:4b:d7:22:20:e4:7a:2d:d9: 2d:07:86:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWREscDiteP3QIkLIiFxCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwY2NkOTEzYTk5YmFmZDg5M2UwN2JhOTY4YTY3NDM0ZTNk ZjU0MjAwHhcNMjYwMjA5MTcwMDM2WhcNMjYwMjEwMTcwMDM2WjAzMTEwLwYDVQQD EygyNmQ5Mzk3MmNlZGNhOWMyNGMwYzE2ODRhNThkMDg0ODZkOTA3NWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDIniJIRbDDtNmnc8ShjvrOMPcrw ufNHGkLucxSaz43udjI55HXT9zpa2GbBF9HtbdeGQFfrW8IZFZujm4DE0ApuR9UV p1ZxsrwePaNaRHFVa9Pe+1XykBy97Rw1Y45gbILXZ2IQTkubo1vako27UM5EQjS/ z2VLxbYjmZp3qux9ippeI7rs4F6xzjSCdsfvR85GvhlK1scLa0vD/RIgyAIIgmD2 Wa+wH2PZrbbU5htKIcdxQCkTvV60IGI7RBD0lCe24f7cyvDb4llA8RGydnBVz9oc ZTdGlXaNAe3tL1OvtB4pUzi+J+R5YIVRCO0O3Xk6d252M7ZKZdQx3m8RoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCbZOXLO3KnCTAwWhKWNCEhtkHWyMB8GA1UdIwQY MBaAFJDM2ROpm6/Yk+B7qWimdDTj31QgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva016WkU2bWJyOWlUNEh1cGFLWjBOT1BmVkNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9kM2NiMTQtMzBhZC00MjEzLTgxNWIt ZjZhNTEzZGUyZmVhLzEva016WkU2bWJyOWlUNEh1cGFLWjBOT1BmVkNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9kM2NiMTQtMzBhZC00MjEzLTgxNWItZjZhNTEzZGUyZmVh LzEva016WkU2bWJyOWlUNEh1cGFLWjBOT1BmVkNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZjhKDhNr 9/AdgGI/SgJ3BP5PISDiOcq378SqryBA0Qx1Vk5B/6vXNqdyquX/UldiR5uf1GTr hVHwOrTqdxaCnoApoyQdayJQJ9KqboJqwRmpWpaS1WbsXRvs9/QGDy5VoYAcjSXr vtKb9IN3hh4cjmNrydwNajrxwqcLLMtoaLjz4ZouIGUM4afbbHL8eyf1AmA8V0NJ Lpm3owQUsxX+oUjAqVw1zMN9zhyevjSKjiPBSyFAHgXukLlW+YSIcdeGJmEMaTLu I3PrUxXNHhsOtj615WgfNA+35T6p5QeYv+8jY0lqtVaS4lyEDZdawWiGtgb9mkvX IiDkei3ZLQeGTw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:44 2026 by rpki-client