This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft File: KqeI7abIDvkCuV1gOHAKXafW0Mw.mft (raw, json) Hash identifier: +DitpDJ12FYegMi8gcSMT9PlmfVM8GCQ6MUVvi8idTQ= Subject key identifier: 04:E8:A1:FC:AE:1A:45:C1:C1:87:34:36:5A:3B:91:18:72:5F:20:A0 Authority key identifier: 2A:A7:88:ED:A6:C8:0E:F9:02:B9:5D:60:38:70:0A:5D:A7:D6:D0:CC Certificate issuer: /CN=2aa788eda6c80ef902b95d6038700a5da7d6d0cc Certificate serial: 019C4358DFFF488B8347E30B9B7BAC824E5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqeI7abIDvkCuV1gOHAKXafW0Mw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft Manifest number: 0527 Signing time: Mon 09 Feb 2026 17:00:23 +0000 Manifest this update: Mon 09 Feb 2026 17:00:23 +0000 Manifest next update: Tue 10 Feb 2026 17:00:23 +0000 Files and hashes: 1: KqeI7abIDvkCuV1gOHAKXafW0Mw.crl (hash: 0aCRTAbWRvG2PqPYKS1lRpB1BM42HijyMwPMvJnMb5Y=) 2: gn61ce9ALlX0-z3Eczgbb3WMtWI.roa (hash: RHps1AzWEmNAJdqDkFEU6I0uU1ebWVTlEieytsZ34D4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft rsync://rpki.ripe.net/repository/DEFAULT/KqeI7abIDvkCuV1gOHAKXafW0Mw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:df:ff:48:8b:83:47:e3:0b:9b:7b:ac:82:4e:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa788eda6c80ef902b95d6038700a5da7d6d0cc Validity Not Before: Feb 9 17:00:23 2026 GMT Not After : Feb 10 17:00:23 2026 GMT Subject: CN=04e8a1fcae1a45c1c18734365a3b9118725f20a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b5:63:42:c8:2c:51:21:da:21:03:1d:9a:12: a8:94:04:67:35:dd:65:93:2b:36:3e:df:ee:71:4b: 92:9c:02:3a:b4:bb:e5:1a:75:e2:7e:3f:7e:cc:90: 68:f2:86:0c:3a:e2:89:42:3b:ac:22:87:31:53:e9: d2:42:6a:cd:e5:8b:5f:1a:e3:57:99:7a:57:91:77: e7:20:d7:39:45:a8:71:5f:44:c2:9d:52:d0:05:57: 6b:7f:64:b4:85:7a:6b:a1:6d:a4:56:50:af:b0:1a: 00:6f:3b:cc:90:07:28:b9:12:66:db:dc:af:ac:8c: 0d:09:ab:57:b8:b0:61:25:38:0c:98:3b:cf:c5:4b: ae:18:5e:46:88:6d:b0:f1:5c:72:ff:45:04:4c:19: 16:b2:1e:4f:9c:64:50:eb:59:d9:29:cc:1e:7b:3d: 46:c2:de:e2:ba:53:84:8f:65:88:a5:b6:38:e5:08: d4:c0:8d:fd:ab:d5:62:9c:20:2d:06:01:d7:07:ec: 8f:bf:b2:d3:9b:06:8c:11:c3:83:a1:e1:b1:84:c2: 4a:99:40:8a:c7:20:f8:cf:aa:91:70:b7:7f:fe:61: 15:5d:c3:93:e6:b7:04:1d:d7:1a:98:ae:39:88:c0: e0:3d:b7:2c:fa:57:a5:c0:2c:20:15:17:64:8e:36: 79:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:E8:A1:FC:AE:1A:45:C1:C1:87:34:36:5A:3B:91:18:72:5F:20:A0 X509v3 Authority Key Identifier: keyid:2A:A7:88:ED:A6:C8:0E:F9:02:B9:5D:60:38:70:0A:5D:A7:D6:D0:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqeI7abIDvkCuV1gOHAKXafW0Mw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:ca:3f:0e:c0:cc:4d:8f:49:8d:f4:a8:4e:37:32:0d:8d:bb: 7d:fb:18:d7:e5:bc:27:bd:dd:51:0c:33:df:5b:af:f5:40:e1: 0f:38:9b:1e:0d:e9:a0:04:8e:f2:c0:df:9a:0c:45:2e:5c:30: 3e:cd:66:dc:8f:70:99:f3:c1:d9:79:53:bd:63:e4:b6:42:43: e9:4f:3a:88:2e:ec:fa:a3:7b:cc:22:38:74:e8:7e:f7:63:12: 88:c9:bf:82:de:dc:b3:10:26:b5:07:51:3b:08:ff:e7:d2:7f: 33:e3:1b:de:c1:6f:7e:67:9e:5e:37:1d:29:b1:4e:87:40:8e: bf:48:0e:8f:df:d4:09:11:06:7f:ac:56:4a:69:33:a5:fe:40: df:6f:65:d3:fa:51:61:dc:3a:46:dd:ea:b1:24:d0:5a:70:b9: d4:71:fe:6a:2b:4b:24:59:17:cf:ac:d2:d1:e6:27:f1:b8:62: 7d:94:1b:e2:8a:81:05:e5:e3:d2:b4:4a:c4:a0:a7:93:e2:b4: 70:d4:fe:14:25:3e:b2:a7:8d:b3:3e:fb:ce:d2:53:a6:3a:76: e3:29:8e:f7:24:84:80:e7:fd:49:74:c6:8c:f6:66:b9:fd:3d: 71:d5:bb:d6:4a:f8:4d:1e:6d:8f:1e:58:e7:8e:97:89:d4:93: 57:59:f2:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWN//SIuDR+MLm3usgk5eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYTc4OGVkYTZjODBlZjkwMmI5NWQ2MDM4NzAwYTVkYTdk NmQwY2MwHhcNMjYwMjA5MTcwMDIzWhcNMjYwMjEwMTcwMDIzWjAzMTEwLwYDVQQD EygwNGU4YTFmY2FlMWE0NWMxYzE4NzM0MzY1YTNiOTExODcyNWYyMGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LVjQsgsUSHaIQMdmhKolARnNd1l kys2Pt/ucUuSnAI6tLvlGnXifj9+zJBo8oYMOuKJQjusIocxU+nSQmrN5YtfGuNX mXpXkXfnINc5RahxX0TCnVLQBVdrf2S0hXproW2kVlCvsBoAbzvMkAcouRJm29yv rIwNCatXuLBhJTgMmDvPxUuuGF5GiG2w8Vxy/0UETBkWsh5PnGRQ61nZKcweez1G wt7iulOEj2WIpbY45QjUwI39q9VinCAtBgHXB+yPv7LTmwaMEcODoeGxhMJKmUCK xyD4z6qRcLd//mEVXcOT5rcEHdcamK45iMDgPbcs+lelwCwgFRdkjjZ5DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAToofyuGkXBwYc0Nlo7kRhyXyCgMB8GA1UdIwQY MBaAFCqniO2myA75ArldYDhwCl2n1tDMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3FlSTdhYklEdmtDdVYxZ09IQUtYYWZXME13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9hNjU3NGQtZmI2ZC00N2RiLWJhMGMt ZjE2ZjFlZTRmODkxLzEvS3FlSTdhYklEdmtDdVYxZ09IQUtYYWZXME13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9hNjU3NGQtZmI2ZC00N2RiLWJhMGMtZjE2ZjFlZTRmODkx LzEvS3FlSTdhYklEdmtDdVYxZ09IQUtYYWZXME13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf8o/DsDM TY9JjfSoTjcyDY27ffsY1+W8J73dUQwz31uv9UDhDzibHg3poASO8sDfmgxFLlww Ps1m3I9wmfPB2XlTvWPktkJD6U86iC7s+qN7zCI4dOh+92MSiMm/gt7csxAmtQdR Owj/59J/M+Mb3sFvfmeeXjcdKbFOh0COv0gOj9/UCREGf6xWSmkzpf5A329l0/pR Ydw6Rt3qsSTQWnC51HH+aitLJFkXz6zS0eYn8bhifZQb4oqBBeXj0rRKxKCnk+K0 cNT+FCU+sqeNsz77ztJTpjp24ymO9ySEgOf9SXTGjPZmuf09cdW71kr4TR5tjx5Y 546XidSTV1nyXQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:45:51 2026 by rpki-client