This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/KhQFaUht0XjbWDoKHklt8iMYXTU.mft File: KhQFaUht0XjbWDoKHklt8iMYXTU.mft (raw, json) Hash identifier: W69MTO/7Uv375afGD71Ckqn1tC+oP3uzG3Juq23dHgs= Subject key identifier: AE:1C:F0:47:0B:09:1B:AD:FE:91:E8:C8:C1:1A:65:ED:30:FC:BF:1F Authority key identifier: 2A:14:05:69:48:6D:D1:78:DB:58:3A:0A:1E:49:6D:F2:23:18:5D:35 Certificate issuer: /CN=2a140569486dd178db583a0a1e496df223185d35 Certificate serial: 019C438FF20462975FBF5E55DCB1662F1622 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhQFaUht0XjbWDoKHklt8iMYXTU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/KhQFaUht0XjbWDoKHklt8iMYXTU.mft Manifest number: 0A56 Signing time: Mon 09 Feb 2026 18:00:32 +0000 Manifest this update: Mon 09 Feb 2026 18:00:32 +0000 Manifest next update: Tue 10 Feb 2026 18:00:32 +0000 Files and hashes: 1: KhQFaUht0XjbWDoKHklt8iMYXTU.crl (hash: kA36sQ44sIt3VNqFcxncf2wv0Qn4v3/zYMhVD+ZMRlU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/KhQFaUht0XjbWDoKHklt8iMYXTU.crl rsync://rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/KhQFaUht0XjbWDoKHklt8iMYXTU.mft rsync://rpki.ripe.net/repository/DEFAULT/KhQFaUht0XjbWDoKHklt8iMYXTU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:f2:04:62:97:5f:bf:5e:55:dc:b1:66:2f:16:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a140569486dd178db583a0a1e496df223185d35 Validity Not Before: Feb 9 18:00:32 2026 GMT Not After : Feb 10 18:00:32 2026 GMT Subject: CN=ae1cf0470b091badfe91e8c8c11a65ed30fcbf1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0f:01:05:e7:b4:1b:c9:0c:fe:d3:15:a5:ae: 00:e7:52:48:10:66:16:5c:3d:40:3a:f4:12:21:ab: ff:0d:6e:1f:1f:85:40:a5:73:6a:9e:4e:50:55:b9: a5:32:61:50:6a:3f:01:81:93:ec:d3:1b:ac:43:f7: 93:8e:12:a0:e1:ff:cb:f8:33:ca:ab:65:d0:93:3e: c3:14:fe:d0:96:e0:ed:92:51:2b:11:fe:24:29:16: 6f:54:35:c8:a9:0f:d7:aa:f3:5f:d3:ec:3a:98:5c: a0:35:63:3c:8e:1a:67:27:ef:27:fe:09:2d:19:c7: 54:94:80:6b:0b:f0:32:1d:58:dd:99:b4:14:1c:eb: 28:36:f2:ac:ea:7c:81:2d:08:a3:d9:d0:f2:b2:90: b0:ca:20:60:7f:2c:f9:92:b5:6c:90:c3:2c:9a:da: 74:72:bf:60:4a:3c:69:69:7c:3e:f9:74:2d:97:15: 2f:51:ac:87:98:66:ea:13:3f:d8:e8:ab:94:8e:e2: 87:5a:cb:2c:07:a8:57:03:ac:9e:17:2d:99:b0:6c: 9c:70:28:0d:bb:5f:f3:7d:6f:2f:39:76:31:99:12: 07:d8:f8:cc:c3:1f:3c:21:1b:ae:20:5c:c7:0f:b4: ad:52:87:10:0a:70:88:e0:3b:1b:27:ce:6b:cc:56: 89:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:1C:F0:47:0B:09:1B:AD:FE:91:E8:C8:C1:1A:65:ED:30:FC:BF:1F X509v3 Authority Key Identifier: keyid:2A:14:05:69:48:6D:D1:78:DB:58:3A:0A:1E:49:6D:F2:23:18:5D:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhQFaUht0XjbWDoKHklt8iMYXTU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/KhQFaUht0XjbWDoKHklt8iMYXTU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/KhQFaUht0XjbWDoKHklt8iMYXTU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:89:ee:95:0d:8c:d4:68:8f:89:f6:91:ba:3a:a8:56:49:94: 48:4b:e9:95:64:e2:2e:a0:46:48:36:b6:9e:1b:08:c9:19:6f: ad:97:4b:90:96:57:8a:45:43:bc:f4:a8:c7:02:0c:44:77:69: 56:d0:28:84:be:29:ba:80:68:2c:4f:27:4c:15:f2:40:1e:42: ac:c8:a8:26:9b:91:fe:33:e4:d3:95:97:98:48:2e:d6:fe:0c: 2f:88:39:3c:19:71:b0:32:a3:3a:f4:10:69:6b:5f:7c:9b:d9: ad:72:c7:f4:36:5e:ac:b9:db:2a:fa:1d:72:6f:60:43:89:4b: 34:f3:a5:3b:6f:54:f8:23:3e:ce:88:a4:c3:cd:d8:3b:b0:e2: 9a:e2:f4:17:56:8d:e2:9a:94:69:ef:29:3b:70:eb:ea:2b:d0: bc:29:e2:72:cc:0e:86:cf:74:b0:29:25:df:cd:1b:82:50:69: cf:be:a1:4b:68:e6:5e:82:eb:3c:81:da:9d:76:cf:43:c6:b9: 18:b7:43:06:5d:6d:d0:e4:89:a9:37:65:5c:46:ff:c7:c4:6e: db:a1:10:09:d0:c7:99:23:65:10:f2:1b:da:1c:9e:ad:48:b4: ad:41:11:49:31:0a:23:db:67:83:35:56:33:21:db:66:a4:68: 3a:c2:b5:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj/IEYpdfv15V3LFmLxYiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhMTQwNTY5NDg2ZGQxNzhkYjU4M2EwYTFlNDk2ZGYyMjMx ODVkMzUwHhcNMjYwMjA5MTgwMDMyWhcNMjYwMjEwMTgwMDMyWjAzMTEwLwYDVQQD EyhhZTFjZjA0NzBiMDkxYmFkZmU5MWU4YzhjMTFhNjVlZDMwZmNiZjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxA8BBee0G8kM/tMVpa4A51JIEGYW XD1AOvQSIav/DW4fH4VApXNqnk5QVbmlMmFQaj8BgZPs0xusQ/eTjhKg4f/L+DPK q2XQkz7DFP7QluDtklErEf4kKRZvVDXIqQ/XqvNf0+w6mFygNWM8jhpnJ+8n/gkt GcdUlIBrC/AyHVjdmbQUHOsoNvKs6nyBLQij2dDyspCwyiBgfyz5krVskMMsmtp0 cr9gSjxpaXw++XQtlxUvUayHmGbqEz/Y6KuUjuKHWsssB6hXA6yeFy2ZsGyccCgN u1/zfW8vOXYxmRIH2PjMwx88IRuuIFzHD7StUocQCnCI4DsbJ85rzFaJFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK4c8EcLCRut/pHoyMEaZe0w/L8fMB8GA1UdIwQY MBaAFCoUBWlIbdF421g6Ch5JbfIjGF01MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2hRRmFVaHQwWGpiV0RvS0hrbHQ4aU1ZWFRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81Njk1NzQtNDQxZS00MTViLTgwM2Yt NTRiZDY0OWI0ODUyLzEvS2hRRmFVaHQwWGpiV0RvS0hrbHQ4aU1ZWFRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC81Njk1NzQtNDQxZS00MTViLTgwM2YtNTRiZDY0OWI0ODUy LzEvS2hRRmFVaHQwWGpiV0RvS0hrbHQ4aU1ZWFRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcInulQ2M 1GiPifaRujqoVkmUSEvplWTiLqBGSDa2nhsIyRlvrZdLkJZXikVDvPSoxwIMRHdp VtAohL4puoBoLE8nTBXyQB5CrMioJpuR/jPk05WXmEgu1v4ML4g5PBlxsDKjOvQQ aWtffJvZrXLH9DZerLnbKvodcm9gQ4lLNPOlO29U+CM+zoikw83YO7DimuL0F1aN 4pqUae8pO3Dr6ivQvCnicswOhs90sCkl380bglBpz76hS2jmXoLrPIHanXbPQ8a5 GLdDBl1t0OSJqTdlXEb/x8Ru26EQCdDHmSNlEPIb2hyerUi0rUERSTEKI9tngzVW MyHbZqRoOsK1zA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:49:17 2026 by rpki-client