This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft File: ktf2mgS9nK1SOzn3ei3atEwpEZI.mft (raw, json) Hash identifier: g5QlnbVNLYtetOxQcOYGIZTq0KIqBtUc/Sc8k+yMxBk= Subject key identifier: 90:99:0B:09:89:7A:6E:EF:77:E2:56:A3:15:FD:2B:9C:90:8A:C6:36 Authority key identifier: 92:D7:F6:9A:04:BD:9C:AD:52:3B:39:F7:7A:2D:DA:B4:4C:29:11:92 Certificate issuer: /CN=92d7f69a04bd9cad523b39f77a2ddab44c291192 Certificate serial: 019C41D8BDB3B24428B712984EA35360277B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft Manifest number: 17A1 Signing time: Mon 09 Feb 2026 10:00:49 +0000 Manifest this update: Mon 09 Feb 2026 10:00:49 +0000 Manifest next update: Tue 10 Feb 2026 10:00:49 +0000 Files and hashes: 1: fmRq58mpG0rKIM2ubHEkVCGj3lg.roa (hash: gms/i5htVsFqQUspRwp2t/v4bZzOX6eOsTh27/wJ/To=) 2: ktf2mgS9nK1SOzn3ei3atEwpEZI.crl (hash: pq9UABtMn7tNxOlaICY0L0fUSOFLzxP3iJ9uGwjOTi0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.crl rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:bd:b3:b2:44:28:b7:12:98:4e:a3:53:60:27:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d7f69a04bd9cad523b39f77a2ddab44c291192 Validity Not Before: Feb 9 10:00:49 2026 GMT Not After : Feb 10 10:00:49 2026 GMT Subject: CN=90990b09897a6eef77e256a315fd2b9c908ac636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:77:ac:c9:a9:75:52:9d:e1:91:b1:b1:e8:67: f4:38:07:88:24:93:b0:d6:a1:11:2b:84:ee:20:66: 36:51:de:bd:61:75:6c:0d:7f:0b:b0:f9:e7:d3:7e: 95:97:de:9c:c3:e4:e7:51:90:68:6b:e1:b3:cc:9c: c5:74:2a:9e:6b:dc:63:87:8e:81:92:1c:86:80:3d: 02:29:3d:c6:7d:f8:8c:bf:1b:04:25:0f:1e:eb:bd: 5a:08:98:78:6e:fe:29:78:10:69:19:5b:70:84:25: f9:44:86:f0:e8:27:3a:46:14:d6:a3:32:2b:87:6b: 40:08:39:10:ce:92:3a:64:8c:96:e4:71:b6:34:20: 3d:99:13:3a:66:f5:3a:6c:fe:80:2f:3d:94:d7:5a: bb:15:6f:39:08:88:d5:69:51:5a:c5:a3:41:d2:0f: b0:63:cd:dd:75:fd:40:09:f6:08:0b:e8:0c:53:97: 3f:dd:51:85:2a:ac:d8:5e:c4:86:67:dd:68:9d:90: e3:2b:c9:70:6d:76:92:17:ac:8d:3a:89:c1:48:c7: fb:bf:84:76:fd:17:bb:b9:ed:6d:8b:26:83:85:10: 0d:d4:84:46:64:ed:bf:2e:1b:cf:87:f9:53:97:e6: 15:fd:26:aa:9c:a3:52:bc:d5:56:15:43:80:54:69: c2:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:99:0B:09:89:7A:6E:EF:77:E2:56:A3:15:FD:2B:9C:90:8A:C6:36 X509v3 Authority Key Identifier: keyid:92:D7:F6:9A:04:BD:9C:AD:52:3B:39:F7:7A:2D:DA:B4:4C:29:11:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:8c:9e:50:a1:97:0e:7f:47:f3:9c:35:c6:90:67:06:e4:3a: f5:3f:de:2d:1e:2b:f2:02:ff:f6:af:cf:28:5d:1c:ff:c0:17: 88:e1:26:57:04:6a:0a:17:14:69:6a:ac:17:8c:f0:04:87:1c: d2:2f:39:83:30:e7:45:a7:c7:d6:75:5a:8f:ec:af:53:dc:38: 3c:00:0f:78:b6:e5:4e:5d:6e:2c:8a:46:1c:7e:e4:7f:64:79: a5:5b:5d:58:9b:64:c3:5e:9b:c0:11:d3:26:e3:47:15:7e:4e: e1:d7:87:90:f2:03:2c:b7:90:3b:91:42:78:1e:4e:76:84:55: 53:e3:7c:7e:5c:92:12:98:d3:f5:aa:79:ae:5b:cf:61:6f:30: 88:81:d1:f5:23:f6:82:1f:17:42:3b:d4:f9:b9:1d:a0:fe:4f: c7:de:eb:8d:c4:a1:6a:e1:30:04:f5:5a:81:e7:ac:a9:c6:12: 44:5e:74:7e:fc:54:d7:b6:7f:bc:5c:b2:be:3a:71:4d:8c:63: 1a:d8:21:d6:17:63:6b:e1:ed:66:0e:71:99:5e:f9:d8:8a:64: 66:e6:9f:8f:03:68:79:58:46:1d:76:13:0c:19:c1:36:d4:9e: 6a:2e:38:55:f0:9c:db:d7:41:f4:2a:a9:9c:30:00:c9:98:ef: 72:d4:8b:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2L2zskQotxKYTqNTYCd7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDdmNjlhMDRiZDljYWQ1MjNiMzlmNzdhMmRkYWI0NGMy OTExOTIwHhcNMjYwMjA5MTAwMDQ5WhcNMjYwMjEwMTAwMDQ5WjAzMTEwLwYDVQQD Eyg5MDk5MGIwOTg5N2E2ZWVmNzdlMjU2YTMxNWZkMmI5YzkwOGFjNjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnesyal1Up3hkbGx6Gf0OAeIJJOw 1qERK4TuIGY2Ud69YXVsDX8LsPnn036Vl96cw+TnUZBoa+GzzJzFdCqea9xjh46B khyGgD0CKT3GffiMvxsEJQ8e671aCJh4bv4peBBpGVtwhCX5RIbw6Cc6RhTWozIr h2tACDkQzpI6ZIyW5HG2NCA9mRM6ZvU6bP6ALz2U11q7FW85CIjVaVFaxaNB0g+w Y83ddf1ACfYIC+gMU5c/3VGFKqzYXsSGZ91onZDjK8lwbXaSF6yNOonBSMf7v4R2 /Re7ue1tiyaDhRAN1IRGZO2/LhvPh/lTl+YV/SaqnKNSvNVWFUOAVGnCrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJCZCwmJem7vd+JWoxX9K5yQisY2MB8GA1UdIwQY MBaAFJLX9poEvZytUjs593ot2rRMKRGSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RmMm1nUzluSzFTT3puM2VpM2F0RXdwRVpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy81MGQ4NTUtY2Q4MS00ODFhLTk1ZWYt Yjg0NDg3ZjkyMGU0LzEva3RmMm1nUzluSzFTT3puM2VpM2F0RXdwRVpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy81MGQ4NTUtY2Q4MS00ODFhLTk1ZWYtYjg0NDg3ZjkyMGU0 LzEva3RmMm1nUzluSzFTT3puM2VpM2F0RXdwRVpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoYyeUKGX Dn9H85w1xpBnBuQ69T/eLR4r8gL/9q/PKF0c/8AXiOEmVwRqChcUaWqsF4zwBIcc 0i85gzDnRafH1nVaj+yvU9w4PAAPeLblTl1uLIpGHH7kf2R5pVtdWJtkw16bwBHT JuNHFX5O4deHkPIDLLeQO5FCeB5OdoRVU+N8flySEpjT9ap5rlvPYW8wiIHR9SP2 gh8XQjvU+bkdoP5Px97rjcShauEwBPVageesqcYSRF50fvxU17Z/vFyyvjpxTYxj Gtgh1hdja+HtZg5xmV752IpkZuafjwNoeVhGHXYTDBnBNtSeai44VfCc29dB9Cqp nDAAyZjvctSLyQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:31:22 2026 by rpki-client