This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft File: KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft (raw, json) Hash identifier: /wmCHA3HBN0SF1ADj/F/e2J8s92rPPAoLddc8LLQrWY= Subject key identifier: 89:3B:AF:A3:92:6D:FB:9A:89:FC:AD:2E:61:71:D4:A8:D0:5F:41:76 Authority key identifier: 28:20:3D:EC:D0:8B:D4:7D:8A:91:62:A6:E1:74:2F:3C:53:EA:3C:74 Certificate issuer: /CN=28203decd08bd47d8a9162a6e1742f3c53ea3c74 Certificate serial: 019C427DB2E5E36FCE671E3F693DF8A7CC45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCA97NCL1H2KkWKm4XQvPFPqPHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft Manifest number: 0A8D Signing time: Mon 09 Feb 2026 13:00:59 +0000 Manifest this update: Mon 09 Feb 2026 13:00:59 +0000 Manifest next update: Tue 10 Feb 2026 13:00:59 +0000 Files and hashes: 1: D6R9OyaZ-Q_-XgNkWK4J1RuvL9c.roa (hash: 5h9cR8G/g4GXej/wn2hqCbkxtizUQsarXxgPXf9/q/I=) 2: KCA97NCL1H2KkWKm4XQvPFPqPHQ.crl (hash: 20ADNi4uQmOcqkoHyfpp4gB9gqm4it03E7fmg5IFSG4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/KCA97NCL1H2KkWKm4XQvPFPqPHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:b2:e5:e3:6f:ce:67:1e:3f:69:3d:f8:a7:cc:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28203decd08bd47d8a9162a6e1742f3c53ea3c74 Validity Not Before: Feb 9 13:00:59 2026 GMT Not After : Feb 10 13:00:59 2026 GMT Subject: CN=893bafa3926dfb9a89fcad2e6171d4a8d05f4176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:0a:dd:67:33:5c:1c:80:db:5a:a1:46:a1:3c: 35:00:3a:94:b6:49:a2:07:e0:6f:cf:75:18:67:53: 94:71:7b:32:d0:71:1b:1a:ff:87:eb:29:75:dd:1c: f1:15:ba:75:19:c5:ad:3e:10:54:1e:1b:9d:e4:6c: 09:4b:61:a7:02:72:e8:81:70:7e:6e:75:f1:7a:f4: 34:4a:e9:0b:54:2f:10:8d:16:a2:0b:f5:0b:14:c3: 91:94:7f:7f:2b:53:03:e0:75:88:12:3a:40:16:b9: d0:17:a1:07:cd:5a:de:e6:93:89:c4:17:42:2a:43: 1d:36:83:8c:60:56:fb:a8:04:fd:f0:63:26:1a:3f: 1c:c2:b3:d2:0e:d1:b6:fa:7b:27:b0:1b:d2:b7:7f: 7a:f3:2c:1f:2d:ec:8c:11:8d:9e:8d:78:88:c1:f5: de:e4:d4:74:18:2d:55:fa:5b:be:ae:b6:46:0e:fd: 43:4d:44:34:1a:9e:d5:d2:1d:39:bc:84:b6:84:3d: e6:0c:f2:25:ee:e0:b0:4c:fe:bd:28:cc:63:05:85: 02:1b:4c:b6:fe:7a:81:61:5a:fd:ce:5b:c1:eb:e3: b7:b7:cd:2a:0f:2c:18:e5:de:dd:d8:17:6c:77:7e: c7:71:6c:71:4d:16:28:82:b1:24:f3:84:84:b8:76: 77:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:3B:AF:A3:92:6D:FB:9A:89:FC:AD:2E:61:71:D4:A8:D0:5F:41:76 X509v3 Authority Key Identifier: keyid:28:20:3D:EC:D0:8B:D4:7D:8A:91:62:A6:E1:74:2F:3C:53:EA:3C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCA97NCL1H2KkWKm4XQvPFPqPHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:f1:5a:b5:bf:53:0c:91:2a:91:24:51:a0:da:79:a0:3d:20: 14:10:8d:af:7a:d1:76:08:06:3a:b6:78:5a:e0:22:db:78:ba: e5:04:5c:94:9d:26:dd:8e:4f:bf:61:3b:88:b1:87:e5:08:82: 2f:b6:a7:c2:60:83:9c:bb:03:09:a7:96:bd:3c:bf:bc:f5:54: 47:0d:72:a9:d1:3f:8e:9f:7d:78:f7:a5:5d:80:9a:05:ba:70: 1b:05:88:64:14:75:02:14:dd:ab:fa:fd:7e:3d:05:60:3f:21: d8:b0:75:af:3b:3b:9e:31:fc:89:84:4a:e6:fa:04:a4:10:d5: 3b:ac:6e:a5:2a:27:61:bf:fc:31:e9:53:14:50:ed:78:e0:06: 1e:15:33:63:9a:ea:a4:0a:23:87:48:42:23:9f:75:f8:2c:2b: 94:ff:ac:36:96:03:c7:18:aa:a5:8e:c3:9a:f0:f1:b5:ab:a4: 59:3b:07:97:4d:7f:7a:e6:99:3c:f6:91:4a:f6:7f:07:7d:10: 91:db:06:8a:84:b6:8d:38:a9:dc:7f:ed:2a:4d:f0:c9:06:a7: 36:9f:6c:15:a2:83:98:7a:3e:d3:20:4a:75:a7:c3:0c:f8:c1: d6:87:26:f8:33:30:b0:cd:2a:23:d7:f2:59:c7:60:91:a2:08: 3d:72:3a:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfbLl42/OZx4/aT34p8xFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4MjAzZGVjZDA4YmQ0N2Q4YTkxNjJhNmUxNzQyZjNjNTNl YTNjNzQwHhcNMjYwMjA5MTMwMDU5WhcNMjYwMjEwMTMwMDU5WjAzMTEwLwYDVQQD Eyg4OTNiYWZhMzkyNmRmYjlhODlmY2FkMmU2MTcxZDRhOGQwNWY0MTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ArdZzNcHIDbWqFGoTw1ADqUtkmi B+Bvz3UYZ1OUcXsy0HEbGv+H6yl13RzxFbp1GcWtPhBUHhud5GwJS2GnAnLogXB+ bnXxevQ0SukLVC8QjRaiC/ULFMORlH9/K1MD4HWIEjpAFrnQF6EHzVre5pOJxBdC KkMdNoOMYFb7qAT98GMmGj8cwrPSDtG2+nsnsBvSt3968ywfLeyMEY2ejXiIwfXe 5NR0GC1V+lu+rrZGDv1DTUQ0Gp7V0h05vIS2hD3mDPIl7uCwTP69KMxjBYUCG0y2 /nqBYVr9zlvB6+O3t80qDywY5d7d2Bdsd37HcWxxTRYogrEk84SEuHZ30wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIk7r6OSbfuaifytLmFx1KjQX0F2MB8GA1UdIwQY MBaAFCggPezQi9R9ipFipuF0LzxT6jx0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0NBOTdOQ0wxSDJLa1dLbTRYUXZQRlBxUEhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jOTBhMzQtMGFmZC00OWI5LWJiZDYt YTI5N2MxNDA4MDg1LzEvS0NBOTdOQ0wxSDJLa1dLbTRYUXZQRlBxUEhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9jOTBhMzQtMGFmZC00OWI5LWJiZDYtYTI5N2MxNDA4MDg1 LzEvS0NBOTdOQ0wxSDJLa1dLbTRYUXZQRlBxUEhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG/Fatb9T DJEqkSRRoNp5oD0gFBCNr3rRdggGOrZ4WuAi23i65QRclJ0m3Y5Pv2E7iLGH5QiC L7anwmCDnLsDCaeWvTy/vPVURw1yqdE/jp99ePelXYCaBbpwGwWIZBR1AhTdq/r9 fj0FYD8h2LB1rzs7njH8iYRK5voEpBDVO6xupSonYb/8MelTFFDteOAGHhUzY5rq pAojh0hCI591+CwrlP+sNpYDxxiqpY7DmvDxtaukWTsHl01/euaZPPaRSvZ/B30Q kdsGioS2jTip3H/tKk3wyQanNp9sFaKDmHo+0yBKdafDDPjB1ocm+DMwsM0qI9fy WcdgkaIIPXI6ag== -----END CERTIFICATE-----Generated at Mon Feb 9 18:31:20 2026 by rpki-client