This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft File: KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft (raw, json) Hash identifier: m4pgF+9sNOB0hZgKL04y8EP8m54l/EcU8jsnxHcxoKU= Subject key identifier: D1:36:4D:42:09:52:CD:D6:E2:69:25:07:B1:AE:FD:6D:BA:43:37:CD Authority key identifier: 28:95:4E:28:F6:E0:1C:A5:C7:35:3B:C3:72:F3:69:A5:F5:1D:9B:B4 Certificate issuer: /CN=28954e28f6e01ca5c7353bc372f369a5f51d9bb4 Certificate serial: 019C42EB2C0AB4E8AD73825474CC75C006F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft Manifest number: 05EC Signing time: Mon 09 Feb 2026 15:00:34 +0000 Manifest this update: Mon 09 Feb 2026 15:00:34 +0000 Manifest next update: Tue 10 Feb 2026 15:00:34 +0000 Files and hashes: 1: AXdXSPys8K4gKCZL761_CRlXkQg.roa (hash: Eq65FPzgWfwxVUVR4WpFvfNbVj2sB466X23GUTRrgvw=) 2: KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl (hash: 4PH3b8nqBUNQD5bCkegCuxA3Lsg/3GrHTDlLfxYJ1ug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:2c:0a:b4:e8:ad:73:82:54:74:cc:75:c0:06:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28954e28f6e01ca5c7353bc372f369a5f51d9bb4 Validity Not Before: Feb 9 15:00:34 2026 GMT Not After : Feb 10 15:00:34 2026 GMT Subject: CN=d1364d420952cdd6e2692507b1aefd6dba4337cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8e:8b:54:c6:ee:e0:7a:93:85:74:8a:00:7c: 0e:2b:b6:3c:f3:e9:6c:ac:7f:40:e0:f1:93:06:92: b3:52:69:93:ca:33:c7:b9:d9:33:af:45:ed:6e:68: 59:2f:13:ac:bf:cc:d2:28:81:59:45:ea:c5:6b:49: 51:19:9e:74:ff:c7:f8:d1:ee:5c:ce:46:a3:fd:89: f4:a0:08:f3:89:36:7d:53:1a:17:3b:68:5f:22:0e: a6:5f:f8:98:78:a2:e9:15:8b:10:63:e1:3f:87:b5: 88:0b:43:b5:3d:61:8f:1d:7b:62:4f:0a:03:e9:91: 4d:50:83:0e:b5:60:4c:0b:bd:d2:0f:7b:ec:1e:6b: fe:5b:22:e3:b1:e1:63:99:7f:55:ad:10:92:2d:f4: 9e:d2:de:d4:59:a1:49:3a:b5:7f:b2:51:5b:4f:a2: 87:8a:61:8f:ee:aa:04:bb:06:1f:a4:24:b7:ac:4c: 08:4e:62:91:aa:81:09:28:11:d8:5e:ea:67:c9:cb: 37:71:47:ac:a8:71:32:e4:89:90:ab:9b:f8:0c:02: b3:55:58:f9:43:85:5e:c1:7f:20:bd:dc:1d:69:5e: 63:e8:ab:0b:76:c3:37:6c:62:d6:93:81:db:45:e2: f7:00:09:3e:84:38:e7:43:ed:3f:57:89:1d:cb:06: 2c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:36:4D:42:09:52:CD:D6:E2:69:25:07:B1:AE:FD:6D:BA:43:37:CD X509v3 Authority Key Identifier: keyid:28:95:4E:28:F6:E0:1C:A5:C7:35:3B:C3:72:F3:69:A5:F5:1D:9B:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:65:2f:d9:11:35:12:7c:1e:11:32:71:d5:59:25:d5:2c:12: 0b:0b:6f:dd:62:6e:55:07:9a:b2:71:84:3e:a9:83:f0:20:ae: 9f:b8:a3:fa:7d:7a:3f:59:71:23:76:51:d6:66:71:af:da:e7: 47:17:cb:d8:01:97:ed:b3:9e:ff:c8:41:75:65:13:41:7c:b0: 0c:1f:bb:cf:0f:b7:db:f9:c4:12:d0:a8:ac:3c:aa:e8:f4:cc: 1d:d5:5e:34:4c:d4:f6:b6:73:05:03:4f:3f:7b:60:ca:95:db: 2e:6c:3e:91:09:5b:db:c1:08:36:ea:91:92:bf:02:df:26:e3: f8:8d:12:91:1b:57:c9:75:9f:5c:9f:79:5e:e7:a2:67:73:a4: 8b:c5:b4:c4:40:4c:94:87:14:eb:0b:1f:3c:bf:0b:29:6d:a1: 10:12:a9:c2:b3:88:6c:ad:31:0f:5a:9e:00:e1:ff:30:96:ad: 20:11:b3:7c:84:3a:ff:44:e0:e7:93:80:77:6b:11:0b:44:f8: ee:75:65:a7:a6:45:3d:7b:4f:37:8c:bb:74:6f:39:8f:36:b7: 56:f9:2e:98:17:f7:01:ae:63:27:02:a3:54:da:09:14:fe:7a: e9:02:51:f6:72:d8:80:0f:c1:6c:74:7f:95:e0:ce:0f:18:06: b9:ad:fb:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6ywKtOitc4JUdMx1wAb3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4OTU0ZTI4ZjZlMDFjYTVjNzM1M2JjMzcyZjM2OWE1ZjUx ZDliYjQwHhcNMjYwMjA5MTUwMDM0WhcNMjYwMjEwMTUwMDM0WjAzMTEwLwYDVQQD EyhkMTM2NGQ0MjA5NTJjZGQ2ZTI2OTI1MDdiMWFlZmQ2ZGJhNDMzN2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1I6LVMbu4HqThXSKAHwOK7Y88+ls rH9A4PGTBpKzUmmTyjPHudkzr0XtbmhZLxOsv8zSKIFZRerFa0lRGZ50/8f40e5c zkaj/Yn0oAjziTZ9UxoXO2hfIg6mX/iYeKLpFYsQY+E/h7WIC0O1PWGPHXtiTwoD 6ZFNUIMOtWBMC73SD3vsHmv+WyLjseFjmX9VrRCSLfSe0t7UWaFJOrV/slFbT6KH imGP7qoEuwYfpCS3rEwITmKRqoEJKBHYXupnycs3cUesqHEy5ImQq5v4DAKzVVj5 Q4VewX8gvdwdaV5j6KsLdsM3bGLWk4HbReL3AAk+hDjnQ+0/V4kdywYsvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNE2TUIJUs3W4mklB7Gu/W26QzfNMB8GA1UdIwQY MBaAFCiVTij24BylxzU7w3LzaaX1HZu0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0pWT0tQYmdIS1hITlR2RGN2TnBwZlVkbTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mMzcwMjctYWZjNC00NDRmLTgwMDgt OTVjZTJjNzU1ZDQ3LzEvS0pWT0tQYmdIS1hITlR2RGN2TnBwZlVkbTdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9mMzcwMjctYWZjNC00NDRmLTgwMDgtOTVjZTJjNzU1ZDQ3 LzEvS0pWT0tQYmdIS1hITlR2RGN2TnBwZlVkbTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARmUv2RE1 EnweETJx1Vkl1SwSCwtv3WJuVQeasnGEPqmD8CCun7ij+n16P1lxI3ZR1mZxr9rn RxfL2AGX7bOe/8hBdWUTQXywDB+7zw+32/nEEtCorDyq6PTMHdVeNEzU9rZzBQNP P3tgypXbLmw+kQlb28EINuqRkr8C3ybj+I0SkRtXyXWfXJ95XueiZ3Oki8W0xEBM lIcU6wsfPL8LKW2hEBKpwrOIbK0xD1qeAOH/MJatIBGzfIQ6/0Tg55OAd2sRC0T4 7nVlp6ZFPXtPN4y7dG85jza3VvkumBf3Aa5jJwKjVNoJFP566QJR9nLYgA/BbHR/ leDODxgGua37Jg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:34:02 2026 by rpki-client