This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.mft File: klA6rxJq980DHKw84eOYwXS4LgI.mft (raw, json) Hash identifier: vks1OXh3gRF5LOv6wrAs9fwazZH59bYBd6mw15uEJOU= Subject key identifier: 5F:B1:95:92:2C:7F:C2:46:76:3B:C4:D8:EC:AD:66:18:7F:5B:42:50 Authority key identifier: 92:50:3A:AF:12:6A:F7:CD:03:1C:AC:3C:E1:E3:98:C1:74:B8:2E:02 Certificate issuer: /CN=92503aaf126af7cd031cac3ce1e398c174b82e02 Certificate serial: 019C44A2526FFF399B0E3D9ABDA3FBE53DBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klA6rxJq980DHKw84eOYwXS4LgI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.mft Manifest number: 0F75 Signing time: Mon 09 Feb 2026 23:00:14 +0000 Manifest this update: Mon 09 Feb 2026 23:00:14 +0000 Manifest next update: Tue 10 Feb 2026 23:00:14 +0000 Files and hashes: 1: ZEMqj3tb1ybXDKr5XlxXEL_WdLM.roa (hash: rTSw7EgVmlH/cwLSzDAynJz/mTmMnyEjwe5X2k2ZIyU=) 2: klA6rxJq980DHKw84eOYwXS4LgI.crl (hash: +10RqrqVUmPUFQF0KMAO+iKcDRxx2qeXMrUtioYHNTI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.mft rsync://rpki.ripe.net/repository/DEFAULT/klA6rxJq980DHKw84eOYwXS4LgI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:a2:52:6f:ff:39:9b:0e:3d:9a:bd:a3:fb:e5:3d:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92503aaf126af7cd031cac3ce1e398c174b82e02 Validity Not Before: Feb 9 23:00:14 2026 GMT Not After : Feb 10 23:00:14 2026 GMT Subject: CN=5fb195922c7fc246763bc4d8ecad66187f5b4250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e1:2a:89:b0:5b:fc:32:06:c2:32:c4:43:8f: a2:30:a5:ee:17:2c:37:bf:0d:32:3e:00:f2:05:57: 30:e0:b2:ac:da:a3:ca:94:69:6a:38:17:1e:62:9d: 5f:6e:e3:71:7f:e6:b3:6b:9a:5b:35:b6:06:38:9f: 2c:92:ca:b3:04:70:c4:24:f0:84:94:6f:78:69:da: b8:40:ef:30:f8:c5:ea:7c:bc:0e:92:e0:10:6d:9b: 2f:9d:b3:b3:5c:93:e4:03:b5:75:f5:43:a4:a4:74: cd:ca:44:8f:01:37:a2:f5:99:d5:ee:fe:13:33:54: 0d:6c:4c:ac:da:62:5f:6a:c8:85:97:21:e9:90:e8: 3d:c6:b4:c0:14:27:91:14:c0:1f:ef:9c:41:29:c3: e4:8f:86:a3:e9:4c:17:fb:d2:09:cb:64:78:b2:b5: ca:32:3a:09:c4:5e:ab:5c:1a:31:61:8e:d2:60:ec: 6a:46:a2:7f:99:07:13:bb:14:07:16:ee:72:a0:f4: b8:27:d9:39:ea:44:1c:9d:6a:10:fe:1d:da:4d:65: 83:2d:30:f7:f4:60:0e:9a:08:f8:02:82:af:4e:48: 02:2c:44:a2:86:5b:f2:25:3a:b2:fe:78:ee:bd:a7: 86:df:4e:dc:62:9a:89:db:80:8e:9a:5c:1c:39:40: 38:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:B1:95:92:2C:7F:C2:46:76:3B:C4:D8:EC:AD:66:18:7F:5B:42:50 X509v3 Authority Key Identifier: keyid:92:50:3A:AF:12:6A:F7:CD:03:1C:AC:3C:E1:E3:98:C1:74:B8:2E:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klA6rxJq980DHKw84eOYwXS4LgI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:77:93:23:e1:8a:17:c6:2d:67:87:42:36:6c:74:92:25:50: 42:51:5b:52:49:61:7c:aa:5c:4e:43:5e:a1:11:8f:a5:9f:19: 3f:5f:db:d6:c0:21:59:65:f7:85:81:b4:c9:ee:2c:b9:5c:f6: 65:d3:b9:c6:9a:af:12:ca:b8:c5:b2:af:78:b8:cf:6d:fd:27: 11:d8:eb:9d:4d:97:d4:41:bd:1d:bc:1f:b9:15:c9:53:75:1f: a2:3b:48:52:89:a2:85:04:14:ae:a2:1f:f2:c2:6d:42:81:fe: 99:03:f4:69:91:af:7d:e5:e2:93:b1:2a:d2:4a:86:1c:0b:15: ab:aa:e4:17:7c:bf:4f:35:e1:fc:46:d3:d1:44:a8:1b:f2:99: cc:1a:a4:3f:a2:b5:c8:bf:64:a5:65:33:7a:7a:69:52:12:09: 49:e9:c4:a3:37:b3:18:87:50:d3:23:8f:50:ff:b8:6c:65:72: cf:da:29:b0:b9:be:aa:85:9e:ff:e3:12:d5:81:48:cd:f8:e3: 0c:0b:99:ec:7d:bc:d5:0d:ef:e3:4e:76:7b:8a:d0:ab:09:2a: da:c6:c9:9f:c1:67:d1:2b:33:0b:85:47:49:97:3b:17:52:f8: 68:01:db:84:ff:e5:89:91:b8:c4:6e:79:72:05:ee:62:be:3e: b0:14:c1:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEolJv/zmbDj2avaP75T2+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNTAzYWFmMTI2YWY3Y2QwMzFjYWMzY2UxZTM5OGMxNzRi ODJlMDIwHhcNMjYwMjA5MjMwMDE0WhcNMjYwMjEwMjMwMDE0WjAzMTEwLwYDVQQD Eyg1ZmIxOTU5MjJjN2ZjMjQ2NzYzYmM0ZDhlY2FkNjYxODdmNWI0MjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uEqibBb/DIGwjLEQ4+iMKXuFyw3 vw0yPgDyBVcw4LKs2qPKlGlqOBceYp1fbuNxf+aza5pbNbYGOJ8sksqzBHDEJPCE lG94adq4QO8w+MXqfLwOkuAQbZsvnbOzXJPkA7V19UOkpHTNykSPATei9ZnV7v4T M1QNbEys2mJfasiFlyHpkOg9xrTAFCeRFMAf75xBKcPkj4aj6UwX+9IJy2R4srXK MjoJxF6rXBoxYY7SYOxqRqJ/mQcTuxQHFu5yoPS4J9k56kQcnWoQ/h3aTWWDLTD3 9GAOmgj4AoKvTkgCLESihlvyJTqy/njuvaeG307cYpqJ24COmlwcOUA4AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF+xlZIsf8JGdjvE2OytZhh/W0JQMB8GA1UdIwQY MBaAFJJQOq8SavfNAxysPOHjmMF0uC4CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2xBNnJ4SnE5ODBESEt3ODRlT1l3WFM0TGdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83OWJkYjAtYmQ1Yy00ODAwLTk3Njgt YWZkMTI2OGZkYmZkLzEva2xBNnJ4SnE5ODBESEt3ODRlT1l3WFM0TGdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83OWJkYjAtYmQ1Yy00ODAwLTk3NjgtYWZkMTI2OGZkYmZk LzEva2xBNnJ4SnE5ODBESEt3ODRlT1l3WFM0TGdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhXeTI+GK F8YtZ4dCNmx0kiVQQlFbUklhfKpcTkNeoRGPpZ8ZP1/b1sAhWWX3hYG0ye4suVz2 ZdO5xpqvEsq4xbKveLjPbf0nEdjrnU2X1EG9HbwfuRXJU3UfojtIUomihQQUrqIf 8sJtQoH+mQP0aZGvfeXik7Eq0kqGHAsVq6rkF3y/TzXh/EbT0USoG/KZzBqkP6K1 yL9kpWUzenppUhIJSenEozezGIdQ0yOPUP+4bGVyz9opsLm+qoWe/+MS1YFIzfjj DAuZ7H281Q3v4052e4rQqwkq2sbJn8Fn0SszC4VHSZc7F1L4aAHbhP/liZG4xG55 cgXuYr4+sBTBaA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:31:11 2026 by rpki-client