This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft File: ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft (raw, json) Hash identifier: lKujxlJmNE8HVYYi5jUt292Ll9DohGxzzXQ5W1w4auA= Subject key identifier: 95:56:2B:29:F5:36:04:9A:06:70:E2:65:CD:F9:F2:3F:B9:CE:C9:C0 Authority key identifier: 92:EF:F6:16:25:02:EA:3B:52:FD:8C:A3:AE:10:8D:13:D6:BF:F6:52 Certificate issuer: /CN=92eff6162502ea3b52fd8ca3ae108d13d6bff652 Certificate serial: 019C42EB002BF4BA20DFC0B1AF786FF2FC89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ku_2FiUC6jtS_YyjrhCNE9a_9lI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 15:00:23 +0000 Manifest this update: Mon 09 Feb 2026 15:00:23 +0000 Manifest next update: Tue 10 Feb 2026 15:00:23 +0000 Files and hashes: 1: BK2ktyU34ofrpamQZgAZgS1SDAw.roa (hash: UFCcNLAPVlBtUduNktGFZUuUL/6s5iN6F5JFOmjmPCk=) 2: ku_2FiUC6jtS_YyjrhCNE9a_9lI.crl (hash: ZKWzkzmI/4bugrXYbK9axCkPbSiwPkhqIyeGd8VqROo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft rsync://rpki.ripe.net/repository/DEFAULT/ku_2FiUC6jtS_YyjrhCNE9a_9lI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:00:2b:f4:ba:20:df:c0:b1:af:78:6f:f2:fc:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92eff6162502ea3b52fd8ca3ae108d13d6bff652 Validity Not Before: Feb 9 15:00:23 2026 GMT Not After : Feb 10 15:00:23 2026 GMT Subject: CN=95562b29f536049a0670e265cdf9f23fb9cec9c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:20:12:43:13:0b:6f:45:d6:f8:78:b8:2e:12: f8:0a:cc:c3:a4:74:a1:2e:7c:61:16:ac:9b:83:df: 0c:bb:5e:a1:ed:f2:7d:5c:b8:69:75:af:9f:e7:b4: 86:4f:d4:1b:61:c2:ce:97:b2:3b:fe:14:ed:1d:e1: 94:1a:8d:c7:38:01:2b:6d:cc:70:b5:34:b4:9f:6b: df:c8:fd:0e:62:05:ad:63:77:9c:e8:b4:8d:b5:e7: 90:fe:3e:3d:c4:e1:69:30:d2:86:82:09:ac:35:68: 20:fc:0e:64:9f:68:54:24:db:3b:1c:fe:1c:92:0e: 8c:dc:80:3c:1f:1e:08:6f:3c:07:03:1e:14:71:11: fc:d5:d3:b6:0c:40:d9:21:98:17:c4:bb:b1:23:b0: c1:bb:75:82:60:97:14:42:d3:47:ab:13:86:05:cb: d3:87:ef:37:a5:56:a1:55:df:97:1c:3a:7f:6c:ca: ee:f8:b8:c0:e0:b2:ea:08:b2:27:03:f6:b4:35:a0: 4e:98:39:d4:36:65:30:58:12:a6:52:1a:6f:65:aa: 4d:f9:87:f3:d6:54:aa:8f:65:08:fb:b1:43:d1:88: a2:a0:2e:ac:5a:8f:2a:70:15:bb:ac:c8:86:61:5c: e1:db:85:1a:ef:ad:10:c6:61:bd:37:4b:70:3d:4f: 7c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:56:2B:29:F5:36:04:9A:06:70:E2:65:CD:F9:F2:3F:B9:CE:C9:C0 X509v3 Authority Key Identifier: keyid:92:EF:F6:16:25:02:EA:3B:52:FD:8C:A3:AE:10:8D:13:D6:BF:F6:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ku_2FiUC6jtS_YyjrhCNE9a_9lI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:d9:d6:31:d8:0d:fe:70:6b:a6:66:50:00:bf:23:cb:72:5a: e0:c8:df:35:c7:dd:59:1c:cb:b5:f1:0a:af:a0:b0:95:77:34: 98:ef:88:06:ed:fa:45:18:5b:00:eb:d7:d6:1b:fe:d9:15:a7: 06:5f:0c:d7:06:b4:11:f1:06:de:c7:b6:c1:a2:db:6f:71:da: 05:c4:8b:ac:9c:49:88:39:07:c7:81:40:60:79:6c:b2:81:1e: 88:95:15:9f:03:7a:c0:99:0b:e8:0a:5e:1d:6f:e7:1a:08:6c: 4a:65:88:cb:71:67:43:13:a6:97:bc:f0:d6:67:0b:49:95:ba: 12:06:d9:a1:c9:b5:7a:38:e4:43:e0:52:9a:3a:0b:3c:dc:40: fc:d1:af:ba:62:d1:8b:f2:1c:9d:0a:61:c9:2f:27:7a:54:93: c4:95:33:09:d6:63:56:11:f7:b7:3c:46:27:30:d9:fb:01:2b: fc:3d:ff:4a:eb:46:2e:ac:8b:bb:57:90:24:10:dd:72:d1:c0: c5:4a:52:13:50:7a:04:a7:39:b0:72:35:24:be:2d:3c:e1:0a: 07:60:2b:51:fa:c3:e9:05:b5:d7:db:b2:9d:f9:86:b9:76:30: 09:4e:1d:91:22:7a:a0:cc:dc:86:bd:3c:e3:9d:e6:4e:6a:f4: 8d:f7:2b:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6wAr9Log38Cxr3hv8vyJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZWZmNjE2MjUwMmVhM2I1MmZkOGNhM2FlMTA4ZDEzZDZi ZmY2NTIwHhcNMjYwMjA5MTUwMDIzWhcNMjYwMjEwMTUwMDIzWjAzMTEwLwYDVQQD Eyg5NTU2MmIyOWY1MzYwNDlhMDY3MGUyNjVjZGY5ZjIzZmI5Y2VjOWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyASQxMLb0XW+Hi4LhL4CszDpHSh LnxhFqybg98Mu16h7fJ9XLhpda+f57SGT9QbYcLOl7I7/hTtHeGUGo3HOAErbcxw tTS0n2vfyP0OYgWtY3ec6LSNteeQ/j49xOFpMNKGggmsNWgg/A5kn2hUJNs7HP4c kg6M3IA8Hx4IbzwHAx4UcRH81dO2DEDZIZgXxLuxI7DBu3WCYJcUQtNHqxOGBcvT h+83pVahVd+XHDp/bMru+LjA4LLqCLInA/a0NaBOmDnUNmUwWBKmUhpvZapN+Yfz 1lSqj2UI+7FD0YiioC6sWo8qcBW7rMiGYVzh24Ua760QxmG9N0twPU98kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJVWKyn1NgSaBnDiZc358j+5zsnAMB8GA1UdIwQY MBaAFJLv9hYlAuo7Uv2Mo64QjRPWv/ZSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3VfMkZpVUM2anRTX1l5anJoQ05FOWFfOWxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS83OTQzYTAtY2NhYi00MjYwLWJkNTEt YWZlODlhYWNjNDkyLzEva3VfMkZpVUM2anRTX1l5anJoQ05FOWFfOWxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS83OTQzYTAtY2NhYi00MjYwLWJkNTEtYWZlODlhYWNjNDky LzEva3VfMkZpVUM2anRTX1l5anJoQ05FOWFfOWxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAndnWMdgN /nBrpmZQAL8jy3Ja4MjfNcfdWRzLtfEKr6CwlXc0mO+IBu36RRhbAOvX1hv+2RWn Bl8M1wa0EfEG3se2waLbb3HaBcSLrJxJiDkHx4FAYHlssoEeiJUVnwN6wJkL6Ape HW/nGghsSmWIy3FnQxOml7zw1mcLSZW6EgbZocm1ejjkQ+BSmjoLPNxA/NGvumLR i/IcnQphyS8nelSTxJUzCdZjVhH3tzxGJzDZ+wEr/D3/SutGLqyLu1eQJBDdctHA xUpSE1B6BKc5sHI1JL4tPOEKB2ArUfrD6QW119uynfmGuXYwCU4dkSJ6oMzchr08 453mTmr0jfcrwg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:44:31 2026 by rpki-client