This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/KpTH34VXtlNEfD4G-0s3LVEgoiI.mft File: KpTH34VXtlNEfD4G-0s3LVEgoiI.mft (raw, json) Hash identifier: 0lNP7nZhfX2mY6I8vTfC/kl0bZxWJLM75DhZDZHDEfM= Subject key identifier: EB:4D:AE:E7:EA:CD:D9:E8:30:AC:F8:D2:1E:43:35:F9:55:2A:F6:F7 Authority key identifier: 2A:94:C7:DF:85:57:B6:53:44:7C:3E:06:FB:4B:37:2D:51:20:A2:22 Certificate issuer: /CN=2a94c7df8557b653447c3e06fb4b372d5120a222 Certificate serial: 019C44A2DE0925D1D7D1A37841EF704A5C0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KpTH34VXtlNEfD4G-0s3LVEgoiI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/KpTH34VXtlNEfD4G-0s3LVEgoiI.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 23:00:50 +0000 Manifest this update: Mon 09 Feb 2026 23:00:50 +0000 Manifest next update: Tue 10 Feb 2026 23:00:50 +0000 Files and hashes: 1: KpTH34VXtlNEfD4G-0s3LVEgoiI.crl (hash: Kue4k34CyVQaqV6+qMBD+luTQVG75rJKlMJEljFrNYg=) 2: zZyI4xvkwJixdxg_pCLk7a1BUdw.roa (hash: zpCoEd9p2O+8DPIDxhP2gPNS4VcEBvo6F6BavOxBd5Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/KpTH34VXtlNEfD4G-0s3LVEgoiI.crl rsync://rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/KpTH34VXtlNEfD4G-0s3LVEgoiI.mft rsync://rpki.ripe.net/repository/DEFAULT/KpTH34VXtlNEfD4G-0s3LVEgoiI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:a2:de:09:25:d1:d7:d1:a3:78:41:ef:70:4a:5c:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94c7df8557b653447c3e06fb4b372d5120a222 Validity Not Before: Feb 9 23:00:50 2026 GMT Not After : Feb 10 23:00:50 2026 GMT Subject: CN=eb4daee7eacdd9e830acf8d21e4335f9552af6f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:aa:cf:da:11:3d:44:fe:5c:1d:76:60:98:1d: 9c:0a:7f:34:c5:66:2c:1c:64:1a:33:eb:b8:96:23: f0:ba:68:d2:2a:87:4d:d3:f9:c2:43:d5:0f:3d:fb: c5:05:b1:74:71:a3:ec:2f:92:90:66:bc:79:52:56: 68:fb:bb:a6:6a:01:90:66:bc:7a:d7:a8:65:8f:0e: 27:ff:c0:c5:b0:0d:b6:a9:e7:26:28:eb:4c:3a:2c: a2:59:1f:24:19:f5:1a:a5:fb:40:40:5a:40:94:b8: bc:f0:5e:3f:cc:0d:45:f3:71:2a:6d:76:8d:0d:2b: fb:1f:c9:54:62:f6:54:55:1d:3d:ae:ec:e7:61:6b: 37:bd:15:7a:07:b3:a3:01:8c:67:d6:48:8e:1a:28: 9e:c0:e1:95:da:7d:f7:9e:38:b8:c4:bb:7f:4e:e8: bf:e1:c4:ba:46:61:3d:4c:66:a4:45:41:f0:82:1c: b9:2a:43:b4:f8:0a:8f:9b:71:f0:62:bf:a6:34:19: 44:60:2e:64:78:60:a3:0b:ad:62:95:71:61:7a:f0: 88:ff:d8:2d:01:90:b0:5b:27:41:7d:98:35:e0:05: d2:2a:1b:e3:07:6e:79:88:72:6c:83:65:c7:c7:c1: 6c:52:a6:de:a2:1f:c9:34:eb:bc:6b:6f:bf:37:ba: 0a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:4D:AE:E7:EA:CD:D9:E8:30:AC:F8:D2:1E:43:35:F9:55:2A:F6:F7 X509v3 Authority Key Identifier: keyid:2A:94:C7:DF:85:57:B6:53:44:7C:3E:06:FB:4B:37:2D:51:20:A2:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KpTH34VXtlNEfD4G-0s3LVEgoiI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/KpTH34VXtlNEfD4G-0s3LVEgoiI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/KpTH34VXtlNEfD4G-0s3LVEgoiI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:6f:34:19:e4:79:28:4c:aa:45:78:9f:7a:de:b3:fe:71:91: c0:86:ab:5c:91:45:5d:e3:28:9e:70:b0:30:d9:67:7e:9b:ad: d4:d7:60:a9:e6:0f:c8:d8:58:48:25:dc:96:7c:53:cc:7c:e9: e8:44:27:75:de:a8:e3:11:1a:ec:83:b4:1c:38:e0:b8:ec:c5: 29:26:3d:08:0b:af:ea:0a:11:8f:3d:9d:c1:7e:37:0e:50:72: 18:21:b8:8c:f5:db:83:9d:e0:53:10:36:32:79:85:62:b2:a8: aa:81:8d:cc:df:c0:81:c8:af:4c:e3:19:86:d8:ac:04:a1:d2: 0b:38:d2:cd:f8:f6:ae:c8:e4:40:9e:16:af:df:e1:85:66:33: ac:c7:f9:9f:89:51:56:7c:9b:fc:48:f8:70:b1:05:a4:a5:38: 9d:8f:6b:01:97:22:fe:09:99:e4:85:2d:2b:21:54:11:4c:f8: 28:77:08:ee:aa:8a:6b:6a:97:4b:7b:e3:05:54:77:2e:8c:0f: 37:b5:66:84:6b:b8:09:91:dc:b9:d4:df:aa:10:eb:06:b2:7d: 4d:3d:43:f5:86:c5:7f:9f:e2:e0:ee:13:65:72:2d:97:c9:0a: f1:55:c5:de:7d:d7:9f:f4:45:a8:93:23:31:41:a4:03:64:83: c8:09:c4:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEot4JJdHX0aN4Qe9wSlwLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRjN2RmODU1N2I2NTM0NDdjM2UwNmZiNGIzNzJkNTEy MGEyMjIwHhcNMjYwMjA5MjMwMDUwWhcNMjYwMjEwMjMwMDUwWjAzMTEwLwYDVQQD EyhlYjRkYWVlN2VhY2RkOWU4MzBhY2Y4ZDIxZTQzMzVmOTU1MmFmNmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6rP2hE9RP5cHXZgmB2cCn80xWYs HGQaM+u4liPwumjSKodN0/nCQ9UPPfvFBbF0caPsL5KQZrx5UlZo+7umagGQZrx6 16hljw4n/8DFsA22qecmKOtMOiyiWR8kGfUapftAQFpAlLi88F4/zA1F83EqbXaN DSv7H8lUYvZUVR09ruznYWs3vRV6B7OjAYxn1kiOGiiewOGV2n33nji4xLt/Tui/ 4cS6RmE9TGakRUHwghy5KkO0+AqPm3HwYr+mNBlEYC5keGCjC61ilXFhevCI/9gt AZCwWydBfZg14AXSKhvjB255iHJsg2XHx8FsUqbeoh/JNOu8a2+/N7oKFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOtNrufqzdnoMKz40h5DNflVKvb3MB8GA1UdIwQY MBaAFCqUx9+FV7ZTRHw+BvtLNy1RIKIiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3BUSDM0Vlh0bE5FZkQ0Ry0wczNMVkVnb2lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC82N2NhZWUtNGMxMS00YTZmLWJmNjMt NTUxOGIwZTg2NTY2LzEvS3BUSDM0Vlh0bE5FZkQ0Ry0wczNMVkVnb2lJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC82N2NhZWUtNGMxMS00YTZmLWJmNjMtNTUxOGIwZTg2NTY2 LzEvS3BUSDM0Vlh0bE5FZkQ0Ry0wczNMVkVnb2lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARW80GeR5 KEyqRXifet6z/nGRwIarXJFFXeMonnCwMNlnfput1NdgqeYPyNhYSCXclnxTzHzp 6EQndd6o4xEa7IO0HDjguOzFKSY9CAuv6goRjz2dwX43DlByGCG4jPXbg53gUxA2 MnmFYrKoqoGNzN/AgcivTOMZhtisBKHSCzjSzfj2rsjkQJ4Wr9/hhWYzrMf5n4lR Vnyb/Ej4cLEFpKU4nY9rAZci/gmZ5IUtKyFUEUz4KHcI7qqKa2qXS3vjBVR3LowP N7VmhGu4CZHcudTfqhDrBrJ9TT1D9YbFf5/i4O4TZXItl8kK8VXF3n3Xn/RFqJMj MUGkA2SDyAnERg== -----END CERTIFICATE-----Generated at Tue Feb 10 04:22:21 2026 by rpki-client