This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft File: KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft (raw, json) Hash identifier: zEzg7zHDbqExCTErLhmNxoRgYugUYT7MPW7L8b/Gb7M= Subject key identifier: 0F:93:04:17:8D:8F:71:17:01:7B:6A:63:A5:CA:08:5A:57:1E:96:9E Authority key identifier: 29:08:1D:68:BD:DE:A8:BE:BF:26:E6:18:21:97:85:94:F2:23:BC:BE Certificate issuer: /CN=29081d68bddea8bebf26e61821978594f223bcbe Certificate serial: 019C43904B0256CB91408736E498ADB433EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQgdaL3eqL6_JuYYIZeFlPIjvL4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft Manifest number: 0A10 Signing time: Mon 09 Feb 2026 18:00:55 +0000 Manifest this update: Mon 09 Feb 2026 18:00:55 +0000 Manifest next update: Tue 10 Feb 2026 18:00:55 +0000 Files and hashes: 1: KQgdaL3eqL6_JuYYIZeFlPIjvL4.crl (hash: Z/ITw52Ly+r1ESNdapEWKiQQbyR+px5i/cKn8YEjEyM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.crl rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft rsync://rpki.ripe.net/repository/DEFAULT/KQgdaL3eqL6_JuYYIZeFlPIjvL4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:4b:02:56:cb:91:40:87:36:e4:98:ad:b4:33:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29081d68bddea8bebf26e61821978594f223bcbe Validity Not Before: Feb 9 18:00:55 2026 GMT Not After : Feb 10 18:00:55 2026 GMT Subject: CN=0f9304178d8f7117017b6a63a5ca085a571e969e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e2:b6:b2:4f:0c:9d:18:49:b8:94:16:c3:70: 06:a9:75:a7:28:b0:11:0b:15:5f:c3:41:c6:7e:61: 20:6c:7f:96:f1:87:2d:ec:7f:20:36:29:69:69:be: 7b:41:dc:f7:4b:e6:d9:45:7a:f4:44:84:d7:1c:5e: a9:ba:08:52:b0:02:59:a1:7f:0c:15:7c:07:d2:bc: b4:9a:ed:3a:cc:07:ed:8d:13:bd:27:6e:77:03:a8: 72:2f:aa:0e:23:9d:91:b9:95:e4:61:d3:5b:58:4b: 2a:50:f9:4d:85:9d:d8:e7:6f:e8:fe:4a:2d:53:42: 60:54:6c:d0:c2:61:09:6a:1e:78:24:27:c5:41:28: ad:64:ce:2d:2c:d8:ff:60:8e:13:71:c0:f0:12:0d: ce:81:0a:2a:ee:c8:62:11:38:58:0b:44:71:33:ad: 31:ba:28:04:3a:8b:bf:90:ad:cd:80:20:0c:3a:79: b8:49:85:db:00:50:e3:19:a5:95:98:4b:47:51:58: 2c:78:f6:9b:de:76:32:a9:0b:34:15:7e:ce:1e:35: 7f:34:41:91:fd:80:47:25:6a:da:be:c8:e0:fc:7b: 37:75:b7:e2:4e:3d:d6:80:a1:94:c8:07:d4:ea:d9: f0:60:6e:99:38:56:e9:77:89:5f:07:77:94:2f:27: 62:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:93:04:17:8D:8F:71:17:01:7B:6A:63:A5:CA:08:5A:57:1E:96:9E X509v3 Authority Key Identifier: keyid:29:08:1D:68:BD:DE:A8:BE:BF:26:E6:18:21:97:85:94:F2:23:BC:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQgdaL3eqL6_JuYYIZeFlPIjvL4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:69:a6:05:3d:ce:5c:23:36:36:71:10:aa:4c:77:0d:73:4c: c0:b3:86:65:6e:80:da:75:e9:5c:40:3b:5d:24:39:bb:76:f5: db:62:c6:1c:20:62:fe:c4:bd:ab:c3:f8:ad:47:e0:6b:68:08: 01:e3:e1:09:c7:1f:26:ca:4d:5f:53:ce:6c:11:20:84:35:2c: 2a:a6:3d:ac:43:61:5f:ef:02:5c:3e:3a:1c:de:6b:15:61:d7: 5a:f5:9d:ef:61:02:9d:f5:22:40:b6:00:81:99:d1:43:d2:5a: 1e:bb:3e:cb:b5:40:a0:3b:33:0c:d5:db:e7:be:a8:66:51:a0: e2:26:1e:a7:30:63:fa:e6:13:91:bb:f6:bd:a8:e8:6d:62:9a: 0c:1e:2f:1b:f2:4c:91:48:55:05:7f:a1:22:14:8e:dc:78:1a: b1:1a:5e:4b:bb:72:68:5d:80:51:ab:1f:2c:5b:97:9b:44:2d: 14:39:7e:90:09:e9:64:b8:3a:d3:68:72:72:ea:cc:68:67:f6: 78:68:7c:54:44:40:7a:72:72:70:70:2d:fe:39:c4:3b:bf:ea: 48:a3:a7:7d:f8:c3:5c:2b:62:f9:f0:c1:7e:dc:90:77:a9:bc: 2d:22:e4:f1:6f:9c:f6:c2:3c:17:d2:2a:b3:eb:31:ad:83:aa: fc:4f:13:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkEsCVsuRQIc25JittDPuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MDgxZDY4YmRkZWE4YmViZjI2ZTYxODIxOTc4NTk0ZjIy M2JjYmUwHhcNMjYwMjA5MTgwMDU1WhcNMjYwMjEwMTgwMDU1WjAzMTEwLwYDVQQD EygwZjkzMDQxNzhkOGY3MTE3MDE3YjZhNjNhNWNhMDg1YTU3MWU5NjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOK2sk8MnRhJuJQWw3AGqXWnKLAR CxVfw0HGfmEgbH+W8Yct7H8gNilpab57Qdz3S+bZRXr0RITXHF6pughSsAJZoX8M FXwH0ry0mu06zAftjRO9J253A6hyL6oOI52RuZXkYdNbWEsqUPlNhZ3Y52/o/kot U0JgVGzQwmEJah54JCfFQSitZM4tLNj/YI4TccDwEg3OgQoq7shiEThYC0RxM60x uigEOou/kK3NgCAMOnm4SYXbAFDjGaWVmEtHUVgsePab3nYyqQs0FX7OHjV/NEGR /YBHJWravsjg/Hs3dbfiTj3WgKGUyAfU6tnwYG6ZOFbpd4lfB3eULydiBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA+TBBeNj3EXAXtqY6XKCFpXHpaeMB8GA1UdIwQY MBaAFCkIHWi93qi+vybmGCGXhZTyI7y+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1FnZGFMM2VxTDZfSnVZWUlaZUZsUElqdkw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9iNjhmNmYtOTYwZC00ZTMzLTg3M2Yt NzM2N2MwZjIwYmM5LzEvS1FnZGFMM2VxTDZfSnVZWUlaZUZsUElqdkw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9iNjhmNmYtOTYwZC00ZTMzLTg3M2YtNzM2N2MwZjIwYmM5 LzEvS1FnZGFMM2VxTDZfSnVZWUlaZUZsUElqdkw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATGmmBT3O XCM2NnEQqkx3DXNMwLOGZW6A2nXpXEA7XSQ5u3b122LGHCBi/sS9q8P4rUfga2gI AePhCccfJspNX1PObBEghDUsKqY9rENhX+8CXD46HN5rFWHXWvWd72ECnfUiQLYA gZnRQ9JaHrs+y7VAoDszDNXb576oZlGg4iYepzBj+uYTkbv2vajobWKaDB4vG/JM kUhVBX+hIhSO3HgasRpeS7tyaF2AUasfLFuXm0QtFDl+kAnpZLg602hycurMaGf2 eGh8VERAenJycHAt/jnEO7/qSKOnffjDXCti+fDBftyQd6m8LSLk8W+c9sI8F9Iq s+sxrYOq/E8TFw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:41:01 2026 by rpki-client