This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft File: KqrPxdXjsmjyxrpDNrzJQfXI168.mft (raw, json) Hash identifier: Q1s+XptHyTkGnhz4MtJKm+SaGdbq+j04Lqhsac9ck+A= Subject key identifier: E3:20:C7:CF:88:72:C1:EA:89:93:DD:E1:93:C7:AF:90:DE:63:28:76 Authority key identifier: 2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF Certificate issuer: /CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af Certificate serial: 019C41A1D01F39E22BB37185FA1D9893BFDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft Manifest number: 11F6 Signing time: Mon 09 Feb 2026 09:00:49 +0000 Manifest this update: Mon 09 Feb 2026 09:00:49 +0000 Manifest next update: Tue 10 Feb 2026 09:00:49 +0000 Files and hashes: 1: KqrPxdXjsmjyxrpDNrzJQfXI168.crl (hash: AiBakXC3PqXDLmwMajG7kPGJw+mZ4A9LBuicLkiu0wQ=) 2: fedcGuaQw6GYN-hZL-uzH54Rc1I.roa (hash: zm3vjAA+Iy34Xe3WYJQQlDDN2K6FJmbhe/vPYFhLHAE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.crl rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:d0:1f:39:e2:2b:b3:71:85:fa:1d:98:93:bf:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af Validity Not Before: Feb 9 09:00:49 2026 GMT Not After : Feb 10 09:00:49 2026 GMT Subject: CN=e320c7cf8872c1ea8993dde193c7af90de632876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2b:5a:35:f6:f9:9c:c3:7d:e4:0b:0b:d2:14: 47:d7:56:1b:77:89:17:d6:90:4f:e4:94:bb:1a:a7: 19:97:32:54:92:48:b1:9d:21:b8:b3:94:88:18:a4: db:5e:3d:d5:1a:ba:2e:d1:3f:de:10:83:be:84:69: cf:cf:66:5b:41:53:a6:9c:31:39:c8:a6:50:7d:64: 4c:6d:b6:2e:72:ce:d8:c9:82:1b:9d:f2:bc:d0:c7: 20:9f:6c:a5:45:da:a5:68:62:84:7c:60:43:75:e9: 7e:6b:83:c2:2a:f8:2b:d7:89:e4:2c:97:29:1d:75: 36:18:45:b3:6f:e9:b9:55:32:97:d6:fd:8e:a8:c9: 6a:1b:32:cc:48:c5:8b:e1:12:59:13:f2:74:65:fe: e1:6f:34:45:16:de:40:26:cb:ee:54:0c:c4:b5:1a: 8a:72:cb:66:22:9c:d6:90:fc:eb:02:e8:80:dd:e6: 68:0b:7f:bb:9c:5d:a9:be:6e:66:9c:b7:56:3e:04: ed:a2:06:1e:ab:dc:b4:8a:ab:1d:82:d7:38:f0:4c: 52:93:2a:83:46:76:0e:2b:af:6d:b2:93:10:d7:b0: 8c:29:b0:a5:34:3f:d2:38:d6:7c:44:5b:28:8f:b7: bc:92:a8:fe:e9:ce:3c:b8:c6:ed:cd:1e:f1:d3:4c: 36:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:20:C7:CF:88:72:C1:EA:89:93:DD:E1:93:C7:AF:90:DE:63:28:76 X509v3 Authority Key Identifier: keyid:2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:1e:7e:a2:1b:3a:9d:3e:62:4a:98:a1:21:e3:54:14:81:9b: 0c:fa:ca:2b:fa:05:21:78:1d:f7:d6:98:22:0e:ac:f1:7e:32: 49:90:d3:4e:18:c3:02:7a:15:83:83:81:20:22:aa:73:60:34: d0:27:38:68:26:2a:2d:9f:f2:7a:21:b6:2c:36:55:7c:71:ac: 0f:5d:a4:09:09:5e:f1:6d:0d:7b:f2:44:85:c5:45:a4:5b:b9: 4e:fc:bc:04:49:5e:a8:dc:df:f8:0d:98:a4:9e:84:c1:be:20: 0d:40:f8:02:b3:30:52:b7:0b:27:e0:0d:b8:5a:de:ab:f6:80: 62:36:59:6f:83:62:25:64:3d:54:3c:33:fe:15:53:c2:20:a3: 87:23:11:8b:01:b5:4b:7e:c9:e6:e9:fe:7c:82:8c:87:62:86: 3d:de:20:7c:cc:78:00:f0:de:2c:de:a8:7e:47:99:d0:9d:86: a7:c7:22:ca:ee:e0:29:2e:59:b8:02:7d:9f:6c:46:88:8a:4a: f0:72:75:28:13:33:5d:b1:a4:52:00:0e:28:9f:87:49:a5:1a: 79:79:ce:9c:b0:d3:ae:4d:cd:19:ac:46:70:20:d9:4c:4e:88: f6:36:2f:f3:08:d5:76:c0:99:ec:e5:19:f3:da:15:e2:da:d6: dd:88:24:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBodAfOeIrs3GF+h2Yk7/bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYWFjZmM1ZDVlM2IyNjhmMmM2YmE0MzM2YmNjOTQxZjVj OGQ3YWYwHhcNMjYwMjA5MDkwMDQ5WhcNMjYwMjEwMDkwMDQ5WjAzMTEwLwYDVQQD EyhlMzIwYzdjZjg4NzJjMWVhODk5M2RkZTE5M2M3YWY5MGRlNjMyODc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCtaNfb5nMN95AsL0hRH11Ybd4kX 1pBP5JS7GqcZlzJUkkixnSG4s5SIGKTbXj3VGrou0T/eEIO+hGnPz2ZbQVOmnDE5 yKZQfWRMbbYucs7YyYIbnfK80Mcgn2ylRdqlaGKEfGBDdel+a4PCKvgr14nkLJcp HXU2GEWzb+m5VTKX1v2OqMlqGzLMSMWL4RJZE/J0Zf7hbzRFFt5AJsvuVAzEtRqK cstmIpzWkPzrAuiA3eZoC3+7nF2pvm5mnLdWPgTtogYeq9y0iqsdgtc48ExSkyqD RnYOK69tspMQ17CMKbClND/SONZ8RFsoj7e8kqj+6c48uMbtzR7x00w2XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOMgx8+IcsHqiZPd4ZPHr5DeYyh2MB8GA1UdIwQY MBaAFCqqz8XV47Jo8sa6Qza8yUH1yNevMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3FyUHhkWGpzbWp5eHJwRE5yekpRZlhJMTY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9jNTJkNDQtMWJiNi00ZGMwLTg2YmEt NDRjYjRlOTUzMDI3LzEvS3FyUHhkWGpzbWp5eHJwRE5yekpRZlhJMTY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9jNTJkNDQtMWJiNi00ZGMwLTg2YmEtNDRjYjRlOTUzMDI3 LzEvS3FyUHhkWGpzbWp5eHJwRE5yekpRZlhJMTY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGh5+ohs6 nT5iSpihIeNUFIGbDPrKK/oFIXgd99aYIg6s8X4ySZDTThjDAnoVg4OBICKqc2A0 0Cc4aCYqLZ/yeiG2LDZVfHGsD12kCQle8W0Ne/JEhcVFpFu5Tvy8BEleqNzf+A2Y pJ6Ewb4gDUD4ArMwUrcLJ+ANuFreq/aAYjZZb4NiJWQ9VDwz/hVTwiCjhyMRiwG1 S37J5un+fIKMh2KGPd4gfMx4APDeLN6ofkeZ0J2Gp8ciyu7gKS5ZuAJ9n2xGiIpK 8HJ1KBMzXbGkUgAOKJ+HSaUaeXnOnLDTrk3NGaxGcCDZTE6I9jYv8wjVdsCZ7OUZ 89oV4trW3YgkPA== -----END CERTIFICATE-----Generated at Mon Feb 9 17:01:57 2026 by rpki-client