This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft File: KVdFdunOo46j9u6ybIMnUooKG_8.mft (raw, json) Hash identifier: UFttQgtc+AaDCN4hGBMdttglgZXQTJ0OpJq2AUjuNZQ= Subject key identifier: 50:15:E8:82:78:DB:C2:BD:26:86:9E:A7:B7:FB:85:FB:C1:10:05:41 Authority key identifier: 29:57:45:76:E9:CE:A3:8E:A3:F6:EE:B2:6C:83:27:52:8A:0A:1B:FF Certificate issuer: /CN=29574576e9cea38ea3f6eeb26c8327528a0a1bff Certificate serial: 019C41D8E4502ED95FDB75B92EBC096ABA3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft Manifest number: 0860 Signing time: Mon 09 Feb 2026 10:00:59 +0000 Manifest this update: Mon 09 Feb 2026 10:00:59 +0000 Manifest next update: Tue 10 Feb 2026 10:00:59 +0000 Files and hashes: 1: KVdFdunOo46j9u6ybIMnUooKG_8.crl (hash: xlDaILTVhJ7LEawJwBWZoM7N7Q52H4hbaZsQi2UjfeE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:e4:50:2e:d9:5f:db:75:b9:2e:bc:09:6a:ba:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29574576e9cea38ea3f6eeb26c8327528a0a1bff Validity Not Before: Feb 9 10:00:59 2026 GMT Not After : Feb 10 10:00:59 2026 GMT Subject: CN=5015e88278dbc2bd26869ea7b7fb85fbc1100541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:75:61:3e:b9:9e:d6:9b:de:00:c8:d8:db:76: eb:7e:e2:91:df:49:12:0c:99:a2:a6:f8:1a:ba:6d: 30:27:7f:ed:3b:c7:70:b3:65:ca:54:fa:ea:53:4a: 04:7d:f5:73:77:15:8f:ad:f1:be:da:84:0e:27:c2: 7d:16:00:5e:25:9b:94:8d:b0:49:61:f0:f3:44:02: 80:71:f1:40:01:93:07:8a:27:5c:14:2e:15:2e:5d: d7:4c:fe:0a:21:2b:a1:de:49:ae:c5:b4:9e:16:39: 57:3a:bd:74:36:ad:15:40:ba:34:e1:72:73:bf:2b: b7:71:61:3f:37:0b:59:f4:05:13:86:32:1f:81:64: 38:0f:09:22:c0:0e:b9:dd:e4:a8:bf:71:e5:a2:9a: d2:3f:57:9c:16:eb:d3:52:b2:6a:b1:a6:45:76:e6: 9b:5d:28:2e:31:f5:39:de:b0:5c:9b:29:85:97:ed: 61:e7:ca:b9:46:16:91:80:8c:0d:7f:e2:91:43:1c: 67:2e:40:08:f7:03:d1:2a:3a:66:6b:93:e6:7a:e3: c4:37:5b:80:40:ab:b1:fd:4e:8b:f6:3e:eb:79:f5: 95:cf:ee:7e:f1:f2:90:0e:5d:d4:79:74:dc:b9:e0: c8:7c:2e:b0:32:19:12:87:27:74:fe:b8:c7:ca:d8: 0d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:15:E8:82:78:DB:C2:BD:26:86:9E:A7:B7:FB:85:FB:C1:10:05:41 X509v3 Authority Key Identifier: keyid:29:57:45:76:E9:CE:A3:8E:A3:F6:EE:B2:6C:83:27:52:8A:0A:1B:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:bd:85:2a:17:69:46:7c:b3:a2:aa:76:87:91:a6:6b:ee:54: f1:cb:c2:b8:18:92:28:a9:59:bc:58:b0:ad:4d:31:51:5e:14: dc:45:1d:24:64:ca:9b:1a:73:95:09:00:56:fb:db:6e:9d:33: 11:fc:7b:25:6e:f9:7d:39:39:23:de:43:a4:30:7f:c9:45:ba: a7:39:71:f4:0b:d4:87:8e:34:51:a8:f9:f6:1c:82:5a:15:c0: 32:6d:39:87:7f:92:4d:db:fc:b6:a8:ec:8b:f4:dd:3f:a4:a1: 56:66:bf:cc:e0:26:d6:e0:ca:02:46:2b:68:0c:44:28:9e:78: 6d:85:ae:82:ab:b6:36:8f:63:0e:12:92:70:07:d0:b5:1d:0a: 64:92:8a:f2:4a:15:12:4b:5f:85:1d:89:26:85:8f:f8:af:96: 87:37:71:d9:d1:16:a7:74:b1:f5:cd:bb:03:b1:ef:3a:cb:b6: 53:88:84:65:c1:bc:c5:6b:aa:8f:71:95:af:45:be:e6:b3:d6: 58:28:9c:e3:80:4d:1f:0e:c2:06:2d:f6:af:22:cd:81:e0:a2: d1:8e:44:66:6f:f3:be:94:00:a4:61:83:91:f6:41:3b:0b:0b: be:a2:1d:e7:b9:51:bd:c4:18:36:c8:17:6a:50:05:14:9a:66: ed:38:47:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2ORQLtlf23W5LrwJaro+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NTc0NTc2ZTljZWEzOGVhM2Y2ZWViMjZjODMyNzUyOGEw YTFiZmYwHhcNMjYwMjA5MTAwMDU5WhcNMjYwMjEwMTAwMDU5WjAzMTEwLwYDVQQD Eyg1MDE1ZTg4Mjc4ZGJjMmJkMjY4NjllYTdiN2ZiODVmYmMxMTAwNTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnVhPrme1pveAMjY23brfuKR30kS DJmipvgaum0wJ3/tO8dws2XKVPrqU0oEffVzdxWPrfG+2oQOJ8J9FgBeJZuUjbBJ YfDzRAKAcfFAAZMHiidcFC4VLl3XTP4KISuh3kmuxbSeFjlXOr10Nq0VQLo04XJz vyu3cWE/NwtZ9AUThjIfgWQ4DwkiwA653eSov3HloprSP1ecFuvTUrJqsaZFduab XSguMfU53rBcmymFl+1h58q5RhaRgIwNf+KRQxxnLkAI9wPRKjpma5PmeuPEN1uA QKux/U6L9j7refWVz+5+8fKQDl3UeXTcueDIfC6wMhkShyd0/rjHytgNUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFAV6IJ428K9Joaep7f7hfvBEAVBMB8GA1UdIwQY MBaAFClXRXbpzqOOo/busmyDJ1KKChv/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1ZkRmR1bk9vNDZqOXU2eWJJTW5Vb29LR184LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9iZDA1NTYtM2YzMy00NmRlLTkyOTEt M2IzNDQyMGQ5MGQyLzEvS1ZkRmR1bk9vNDZqOXU2eWJJTW5Vb29LR184Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9iZDA1NTYtM2YzMy00NmRlLTkyOTEtM2IzNDQyMGQ5MGQy LzEvS1ZkRmR1bk9vNDZqOXU2eWJJTW5Vb29LR184LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU72FKhdp Rnyzoqp2h5Gma+5U8cvCuBiSKKlZvFiwrU0xUV4U3EUdJGTKmxpzlQkAVvvbbp0z Efx7JW75fTk5I95DpDB/yUW6pzlx9AvUh440Uaj59hyCWhXAMm05h3+STdv8tqjs i/TdP6ShVma/zOAm1uDKAkYraAxEKJ54bYWugqu2No9jDhKScAfQtR0KZJKK8koV EktfhR2JJoWP+K+Whzdx2dEWp3Sx9c27A7HvOsu2U4iEZcG8xWuqj3GVr0W+5rPW WCic44BNHw7CBi32ryLNgeCi0Y5EZm/zvpQApGGDkfZBOwsLvqId57lRvcQYNsgX alAFFJpm7ThHxg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:55:50 2026 by rpki-client