This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.mft File: Km9uXKXbQ3eec6znzhbs4O55R5k.mft (raw, json) Hash identifier: M6QuD8DptmGMhPjXfVPJUJdGsUdKMawiYahoV+H5BOY= Subject key identifier: 2B:42:49:94:1E:72:A8:5C:3E:83:EA:A2:D0:28:CD:CE:26:7D:D5:8A Authority key identifier: 2A:6F:6E:5C:A5:DB:43:77:9E:73:AC:E7:CE:16:EC:E0:EE:79:47:99 Certificate issuer: /CN=2a6f6e5ca5db43779e73ace7ce16ece0ee794799 Certificate serial: 019C4358BFFB95EA3A32D80707408E5083FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Km9uXKXbQ3eec6znzhbs4O55R5k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.mft Manifest number: 0692 Signing time: Mon 09 Feb 2026 17:00:15 +0000 Manifest this update: Mon 09 Feb 2026 17:00:15 +0000 Manifest next update: Tue 10 Feb 2026 17:00:15 +0000 Files and hashes: 1: Km9uXKXbQ3eec6znzhbs4O55R5k.crl (hash: n/wJk68c0qhQ3rAzigzvWa58vEceobbqNsm9k+7asPo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.crl rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.mft rsync://rpki.ripe.net/repository/DEFAULT/Km9uXKXbQ3eec6znzhbs4O55R5k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:bf:fb:95:ea:3a:32:d8:07:07:40:8e:50:83:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a6f6e5ca5db43779e73ace7ce16ece0ee794799 Validity Not Before: Feb 9 17:00:15 2026 GMT Not After : Feb 10 17:00:15 2026 GMT Subject: CN=2b4249941e72a85c3e83eaa2d028cdce267dd58a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d9:69:9a:f4:df:58:0d:32:d6:2c:66:2a:47: f1:1e:80:17:59:95:90:64:4d:d5:f6:c3:e6:91:24: d5:d1:6d:44:f3:0d:41:f4:b9:ac:ee:13:24:b5:a5: 0f:02:c5:8f:72:04:92:82:1a:37:f2:48:b2:05:95: 90:99:9b:d2:73:5b:1d:78:ef:45:0a:3b:04:f0:17: 81:17:60:68:86:aa:fa:e5:34:3e:ed:ec:5c:a7:de: f3:6b:54:35:a2:9a:bd:fd:20:da:08:35:44:f6:2a: 49:95:a7:bd:67:a3:c1:b1:50:8d:43:b2:99:6b:d7: fd:8d:9c:76:c5:94:81:24:c3:4d:70:73:e6:7f:ce: a1:aa:ab:4a:da:ce:82:26:7b:47:bd:ff:68:d5:43: 5a:4e:08:8e:6e:c9:2b:7c:b5:55:7f:8c:31:f3:fa: ef:a2:f9:7a:3c:ca:c1:7d:e5:ee:43:d4:2b:3c:80: 33:d2:88:ff:84:ab:c0:9a:e9:0d:59:ad:02:41:65: a4:b5:c8:8f:6d:f3:a3:92:fd:74:9f:8d:ea:f2:34: 7a:e0:ad:cf:61:d4:9b:6f:64:b2:1e:96:0d:9f:d8: ab:6d:a1:c7:69:a1:ae:f7:89:96:d6:99:4f:22:3b: 24:b4:8d:25:a0:3a:69:b6:4b:55:b2:ba:22:0e:ff: e1:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:42:49:94:1E:72:A8:5C:3E:83:EA:A2:D0:28:CD:CE:26:7D:D5:8A X509v3 Authority Key Identifier: keyid:2A:6F:6E:5C:A5:DB:43:77:9E:73:AC:E7:CE:16:EC:E0:EE:79:47:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km9uXKXbQ3eec6znzhbs4O55R5k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:b4:47:58:15:15:1e:06:02:92:2d:59:83:de:d6:ca:c4:5f: 82:fc:e0:46:4d:d3:68:37:ee:5a:e1:0e:0e:ea:26:ee:6e:ea: 52:f2:bf:07:db:97:fd:c1:b5:83:cd:53:93:8f:b4:73:21:00: fe:52:25:76:45:2a:d2:8f:cc:e1:90:2a:cc:3f:b4:69:29:ba: 4c:73:48:03:3d:20:a0:6a:4d:fe:12:c9:3f:95:51:ea:9c:27: 21:1e:6b:31:42:f9:9b:d9:ab:9f:c8:5e:93:e4:32:ad:14:de: 50:fb:c8:d9:2b:ab:3f:0b:02:dc:45:88:3b:6d:f6:d9:92:1b: 62:37:35:fb:6b:9d:81:22:ec:b3:97:60:cd:3b:f8:4d:d6:0e: 44:8d:2a:9d:c3:47:34:50:5d:31:02:f0:d6:10:72:1b:e3:fe: 45:46:5d:15:06:36:6c:2d:37:9c:1c:3e:d6:bf:33:d7:b2:f8: 85:75:a7:0a:8b:03:b2:45:ec:ff:72:d2:1e:70:bb:11:e4:a3: 7d:8e:67:44:80:19:65:0b:f6:fb:dc:2b:55:6a:fc:98:1d:00: 94:d4:77:7d:b7:ba:fa:d7:72:cb:56:cf:c9:e4:0a:83:e9:58: 0a:bf:09:64:30:27:39:f8:67:82:ec:3c:ca:5f:6e:c4:5c:5d: b4:04:d9:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWL/7leo6MtgHB0COUIP/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhNmY2ZTVjYTVkYjQzNzc5ZTczYWNlN2NlMTZlY2UwZWU3 OTQ3OTkwHhcNMjYwMjA5MTcwMDE1WhcNMjYwMjEwMTcwMDE1WjAzMTEwLwYDVQQD EygyYjQyNDk5NDFlNzJhODVjM2U4M2VhYTJkMDI4Y2RjZTI2N2RkNThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9lpmvTfWA0y1ixmKkfxHoAXWZWQ ZE3V9sPmkSTV0W1E8w1B9Lms7hMktaUPAsWPcgSSgho38kiyBZWQmZvSc1sdeO9F CjsE8BeBF2Bohqr65TQ+7excp97za1Q1opq9/SDaCDVE9ipJlae9Z6PBsVCNQ7KZ a9f9jZx2xZSBJMNNcHPmf86hqqtK2s6CJntHvf9o1UNaTgiObskrfLVVf4wx8/rv ovl6PMrBfeXuQ9QrPIAz0oj/hKvAmukNWa0CQWWktciPbfOjkv10n43q8jR64K3P YdSbb2SyHpYNn9irbaHHaaGu94mW1plPIjsktI0loDpptktVsroiDv/hkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCtCSZQecqhcPoPqotAozc4mfdWKMB8GA1UdIwQY MBaAFCpvblyl20N3nnOs584W7ODueUeZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS205dVhLWGJRM2VlYzZ6bnpoYnM0TzU1UjVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9mMGE2MTEtZjZmNC00MGY3LTg2Mjgt NzJlOTllZTQ3NjZkLzEvS205dVhLWGJRM2VlYzZ6bnpoYnM0TzU1UjVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9mMGE2MTEtZjZmNC00MGY3LTg2MjgtNzJlOTllZTQ3NjZk LzEvS205dVhLWGJRM2VlYzZ6bnpoYnM0TzU1UjVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApbRHWBUV HgYCki1Zg97WysRfgvzgRk3TaDfuWuEODuom7m7qUvK/B9uX/cG1g81Tk4+0cyEA /lIldkUq0o/M4ZAqzD+0aSm6THNIAz0goGpN/hLJP5VR6pwnIR5rMUL5m9mrn8he k+QyrRTeUPvI2SurPwsC3EWIO2322ZIbYjc1+2udgSLss5dgzTv4TdYORI0qncNH NFBdMQLw1hByG+P+RUZdFQY2bC03nBw+1r8z17L4hXWnCosDskXs/3LSHnC7EeSj fY5nRIAZZQv2+9wrVWr8mB0AlNR3fbe6+tdyy1bPyeQKg+lYCr8JZDAnOfhnguw8 yl9uxFxdtATZRw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:53:28 2026 by rpki-client