This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft File: KVkHdOd6iZSkKDEow1kh0DewbyE.mft (raw, json) Hash identifier: q/Sdd/vrkhJQsEJHw7Ta0FrCDll9R5IRFp5S5PyccG4= Subject key identifier: 7D:0D:B0:5A:EC:B0:1C:AF:32:73:E5:BB:CE:2E:D7:BE:81:C7:D8:3A Authority key identifier: 29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21 Certificate issuer: /CN=29590774e77a8994a4283128c35921d037b06f21 Certificate serial: 019C4390CA4524B5C4CDF8DC7171EEDE250B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft Manifest number: 180E Signing time: Mon 09 Feb 2026 18:01:28 +0000 Manifest this update: Mon 09 Feb 2026 18:01:28 +0000 Manifest next update: Tue 10 Feb 2026 18:01:28 +0000 Files and hashes: 1: H1aTR_3-hcIaSL6m2Xtkw0pDsL0.roa (hash: qNxstYo00+D1moz7OPyfI/Jls2a6koAXTIX0TooiMUg=) 2: KVkHdOd6iZSkKDEow1kh0DewbyE.crl (hash: w5pKwiYfbR3N6Evhn8II+HM1gjOSE3l6EL41sQv0zpY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.crl rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:ca:45:24:b5:c4:cd:f8:dc:71:71:ee:de:25:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29590774e77a8994a4283128c35921d037b06f21 Validity Not Before: Feb 9 18:01:28 2026 GMT Not After : Feb 10 18:01:28 2026 GMT Subject: CN=7d0db05aecb01caf3273e5bbce2ed7be81c7d83a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6d:3d:36:91:9d:cc:1e:b1:bf:02:4a:b2:19: 42:6f:38:f7:7b:39:90:25:9c:a9:ec:6c:e7:b3:bf: 88:76:d3:5f:8e:2f:24:05:81:6b:82:ca:ab:09:50: ba:e6:7a:1f:95:71:5c:4e:10:32:c5:a4:7c:44:89: 27:ab:ea:22:9c:ec:be:c6:b8:ba:85:9e:6d:ba:e7: ee:c9:12:b5:cf:18:0d:79:57:bb:c8:a1:c1:47:e9: 03:82:b2:c4:fe:6a:30:c2:e5:46:12:0d:db:29:eb: e6:5f:de:5c:4d:be:22:13:b9:fe:f8:19:66:43:0f: fa:93:ba:83:49:5f:5f:d0:04:b5:78:b3:fe:75:87: c9:b3:92:af:69:60:77:af:9e:18:7d:ea:89:be:11: 7e:1c:73:11:5a:a2:a4:c5:d2:bc:be:59:df:16:aa: 49:a6:1e:25:a3:c2:68:ff:95:85:86:9f:45:b8:9c: 3c:66:0d:ec:a7:3f:a2:59:28:00:3a:37:cb:e2:09: 48:eb:75:ef:5b:26:cf:c8:5b:e3:e7:87:d6:69:cf: d3:25:12:db:5d:57:87:2c:45:07:3e:ff:a0:ae:28: 72:0f:36:a6:1c:3a:12:82:16:94:d6:98:76:5c:14: 8d:39:01:88:c7:c2:59:7f:f4:02:32:0c:70:1b:45: 59:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:0D:B0:5A:EC:B0:1C:AF:32:73:E5:BB:CE:2E:D7:BE:81:C7:D8:3A X509v3 Authority Key Identifier: keyid:29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:43:02:0a:a7:bf:42:e7:12:39:fd:69:90:e1:f3:8b:bb:e4: c6:e2:ad:44:f8:3f:20:92:78:36:67:d2:3e:2d:30:02:34:9f: bf:a2:cc:5f:45:cb:38:fe:4c:d4:a9:a2:a5:f2:08:40:1c:16: e3:b6:5f:d1:b1:0f:9b:bf:ed:01:a9:92:a1:25:98:b0:fc:12: 69:fc:69:b0:05:95:05:d2:42:4b:0d:7f:a0:0f:ad:26:9d:d3: 75:17:66:76:fe:16:c0:04:63:5c:f3:50:56:01:8c:b7:3d:c0: 64:32:99:4d:67:19:04:65:d4:13:5c:b8:79:97:31:3b:46:aa: 05:50:ab:17:06:10:8e:19:54:7d:59:27:7c:e4:02:bd:bf:95: 6a:d7:77:c8:61:bb:f8:90:05:83:97:9a:71:96:a8:05:1f:75: 2f:4c:57:0f:2f:7d:06:41:93:e7:18:59:cb:c8:7d:46:6a:fc: b0:70:bb:53:bc:f6:bb:c9:2b:52:6e:03:ad:d2:19:19:ea:84: 01:af:db:43:c0:34:8b:f7:9c:d1:f0:c7:48:e0:d8:f1:61:60: b7:60:fe:d3:d6:e9:dd:a0:4e:84:64:fd:62:fc:5d:b6:26:41: 19:5c:36:7f:a8:ff:b7:b8:23:9e:e8:c7:7b:29:b9:34:18:52: 0f:eb:9f:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkMpFJLXEzfjccXHu3iULMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NTkwNzc0ZTc3YTg5OTRhNDI4MzEyOGMzNTkyMWQwMzdi MDZmMjEwHhcNMjYwMjA5MTgwMTI4WhcNMjYwMjEwMTgwMTI4WjAzMTEwLwYDVQQD Eyg3ZDBkYjA1YWVjYjAxY2FmMzI3M2U1YmJjZTJlZDdiZTgxYzdkODNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt209NpGdzB6xvwJKshlCbzj3ezmQ JZyp7Gzns7+IdtNfji8kBYFrgsqrCVC65noflXFcThAyxaR8RIknq+oinOy+xri6 hZ5tuufuyRK1zxgNeVe7yKHBR+kDgrLE/mowwuVGEg3bKevmX95cTb4iE7n++Blm Qw/6k7qDSV9f0AS1eLP+dYfJs5KvaWB3r54YfeqJvhF+HHMRWqKkxdK8vlnfFqpJ ph4lo8Jo/5WFhp9FuJw8Zg3spz+iWSgAOjfL4glI63XvWybPyFvj54fWac/TJRLb XVeHLEUHPv+grihyDzamHDoSghaU1ph2XBSNOQGIx8JZf/QCMgxwG0VZOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH0NsFrssByvMnPlu84u176Bx9g6MB8GA1UdIwQY MBaAFClZB3TneomUpCgxKMNZIdA3sG8hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1ZrSGRPZDZpWlNrS0RFb3cxa2gwRGV3YnlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni82NzQ1ZmUtZTQ3NS00YzU4LWEzMWUt ZjJjMGRhNjFhYzEzLzEvS1ZrSGRPZDZpWlNrS0RFb3cxa2gwRGV3YnlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni82NzQ1ZmUtZTQ3NS00YzU4LWEzMWUtZjJjMGRhNjFhYzEz LzEvS1ZrSGRPZDZpWlNrS0RFb3cxa2gwRGV3YnlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASUMCCqe/ QucSOf1pkOHzi7vkxuKtRPg/IJJ4NmfSPi0wAjSfv6LMX0XLOP5M1KmipfIIQBwW 47Zf0bEPm7/tAamSoSWYsPwSafxpsAWVBdJCSw1/oA+tJp3TdRdmdv4WwARjXPNQ VgGMtz3AZDKZTWcZBGXUE1y4eZcxO0aqBVCrFwYQjhlUfVknfOQCvb+Vatd3yGG7 +JAFg5eacZaoBR91L0xXDy99BkGT5xhZy8h9Rmr8sHC7U7z2u8krUm4DrdIZGeqE Aa/bQ8A0i/ec0fDHSODY8WFgt2D+09bp3aBOhGT9YvxdtiZBGVw2f6j/t7gjnujH eym5NBhSD+ufog== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:51 2026 by rpki-client