This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft File: Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft (raw, json) Hash identifier: ITl94tuBVYGa8lfzNiQc2XGmRLHM5oVK04HyyJUTc3M= Subject key identifier: B5:21:76:60:6B:D8:81:1B:7D:F4:89:49:24:DE:7C:33:76:49:E1:54 Authority key identifier: 2A:CD:8D:16:82:E6:62:2C:1C:09:23:7B:C4:1A:A5:16:66:96:72:B7 Certificate issuer: /CN=2acd8d1682e6622c1c09237bc41aa516669672b7 Certificate serial: 019C439073B66538A52969DB29E0F5732D04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft Manifest number: 17C0 Signing time: Mon 09 Feb 2026 18:01:06 +0000 Manifest this update: Mon 09 Feb 2026 18:01:06 +0000 Manifest next update: Tue 10 Feb 2026 18:01:06 +0000 Files and hashes: 1: Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl (hash: eRWyK6wmXG4hrD9ucvwjaKYk29hnOXrZoRN52Nqnjrw=) 2: ezywn8EPx5ODLOytvX7dXsPm7gc.roa (hash: geqaFC8LHCTX2LcxH4kfFFCGPOyVbzF9N0haayABzHg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:73:b6:65:38:a5:29:69:db:29:e0:f5:73:2d:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2acd8d1682e6622c1c09237bc41aa516669672b7 Validity Not Before: Feb 9 18:01:06 2026 GMT Not After : Feb 10 18:01:06 2026 GMT Subject: CN=b52176606bd8811b7df4894924de7c337649e154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:73:b9:54:3b:b6:68:bf:d0:9f:ae:f2:99:3e: e1:af:a4:42:f2:d8:56:21:e1:46:ba:cd:c0:c3:67: 68:4a:39:10:21:e4:37:0a:55:9b:37:71:df:e3:0e: 3c:63:0e:1e:b8:19:cb:b9:24:00:7b:12:11:d1:19: 49:21:ec:2b:d9:f1:1b:39:be:43:c6:e0:b3:a1:e5: d3:a0:5e:6d:38:0b:4c:d0:d0:de:29:82:2c:96:39: 55:b4:b3:00:7b:e0:6a:2a:6d:0a:3c:7b:f0:64:34: 95:af:d7:b1:63:9e:0d:87:f6:b7:38:15:a2:b4:30: 74:d0:b5:2b:6c:e1:49:06:34:fb:6c:20:3f:bd:ae: 39:d7:55:ef:1b:ac:36:9b:fa:ee:7e:0a:bd:65:5a: bb:44:f2:8f:e3:92:ce:78:9c:da:0a:00:da:24:a2: 83:d6:a7:7d:53:88:ac:fb:8b:73:87:e1:c5:08:b6: 45:36:30:35:d1:5c:65:9d:42:ce:40:7c:29:e1:d3: ad:9f:1c:a3:59:f7:47:95:30:a9:8c:d2:59:ec:25: 98:4c:40:b1:67:eb:c3:1c:ee:cd:17:79:5e:7a:6a: d5:28:c0:5e:93:ac:7a:48:47:9d:7b:1d:13:66:62: a3:ff:3b:4a:97:cd:45:e3:94:bf:02:cb:f7:d2:11: 2b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:21:76:60:6B:D8:81:1B:7D:F4:89:49:24:DE:7C:33:76:49:E1:54 X509v3 Authority Key Identifier: keyid:2A:CD:8D:16:82:E6:62:2C:1C:09:23:7B:C4:1A:A5:16:66:96:72:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:b2:9a:95:bc:49:14:16:bc:96:c2:80:6d:5a:02:3d:bb:2d: 46:18:02:55:8a:88:7e:fa:6b:f0:2b:8c:9d:70:59:99:0a:e2: a4:73:89:9d:14:56:6e:7f:23:0e:25:da:12:a5:0d:d3:c0:b3: 1a:07:a8:92:ad:1b:32:3d:6d:56:70:bd:59:d3:a1:ea:31:78: 35:58:28:d6:d9:a2:5b:d5:3f:bd:45:ac:21:e4:12:ed:cd:b7: c7:b3:36:0b:5e:7a:73:ec:7c:52:a4:86:f7:2c:b8:6d:ba:c6: cb:ea:62:53:c2:61:14:da:10:d6:53:52:8e:59:3a:15:00:3b: f7:38:06:5e:60:b7:38:43:aa:11:d1:f9:aa:1e:70:4c:6e:ff: 9a:b4:11:7f:57:e3:55:98:eb:03:9c:fa:81:8c:4f:3b:10:ec: 37:bf:fb:0d:d5:f3:ea:4d:36:28:65:5e:70:4b:bb:69:96:30: 1e:43:1a:9e:33:42:7c:f8:fe:60:b1:09:f3:88:69:05:de:5f: d5:f9:72:1c:0e:20:76:a8:1e:11:7e:ab:17:8d:4a:05:71:c7: 19:67:dc:67:3a:ac:ee:b6:38:c8:24:bc:4e:10:e2:5c:c3:a5: 8d:36:72:7f:4e:28:91:ca:49:96:21:40:69:a2:7a:da:c0:a3: f1:9b:46:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkHO2ZTilKWnbKeD1cy0EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhY2Q4ZDE2ODJlNjYyMmMxYzA5MjM3YmM0MWFhNTE2NjY5 NjcyYjcwHhcNMjYwMjA5MTgwMTA2WhcNMjYwMjEwMTgwMTA2WjAzMTEwLwYDVQQD EyhiNTIxNzY2MDZiZDg4MTFiN2RmNDg5NDkyNGRlN2MzMzc2NDllMTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXO5VDu2aL/Qn67ymT7hr6RC8thW IeFGus3Aw2doSjkQIeQ3ClWbN3Hf4w48Yw4euBnLuSQAexIR0RlJIewr2fEbOb5D xuCzoeXToF5tOAtM0NDeKYIsljlVtLMAe+BqKm0KPHvwZDSVr9exY54Nh/a3OBWi tDB00LUrbOFJBjT7bCA/va4511XvG6w2m/rufgq9ZVq7RPKP45LOeJzaCgDaJKKD 1qd9U4is+4tzh+HFCLZFNjA10VxlnULOQHwp4dOtnxyjWfdHlTCpjNJZ7CWYTECx Z+vDHO7NF3leemrVKMBek6x6SEedex0TZmKj/ztKl81F45S/Asv30hErNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLUhdmBr2IEbffSJSSTefDN2SeFUMB8GA1UdIwQY MBaAFCrNjRaC5mIsHAkje8QapRZmlnK3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3MyTkZvTG1ZaXdjQ1NON3hCcWxGbWFXY3JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85NWRiY2UtZDRlOS00MWYxLTgyZGMt ZTg0Y2IxZGEyMWJkLzEvS3MyTkZvTG1ZaXdjQ1NON3hCcWxGbWFXY3JjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS85NWRiY2UtZDRlOS00MWYxLTgyZGMtZTg0Y2IxZGEyMWJk LzEvS3MyTkZvTG1ZaXdjQ1NON3hCcWxGbWFXY3JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ7KalbxJ FBa8lsKAbVoCPbstRhgCVYqIfvpr8CuMnXBZmQripHOJnRRWbn8jDiXaEqUN08Cz Ggeokq0bMj1tVnC9WdOh6jF4NVgo1tmiW9U/vUWsIeQS7c23x7M2C156c+x8UqSG 9yy4bbrGy+piU8JhFNoQ1lNSjlk6FQA79zgGXmC3OEOqEdH5qh5wTG7/mrQRf1fj VZjrA5z6gYxPOxDsN7/7DdXz6k02KGVecEu7aZYwHkManjNCfPj+YLEJ84hpBd5f 1flyHA4gdqgeEX6rF41KBXHHGWfcZzqs7rY4yCS8ThDiXMOljTZyf04okcpJliFA aaJ62sCj8ZtGoA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:12 2026 by rpki-client