This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft File: kjK4h0AR2AOQr4EijrUHsW0CXdI.mft (raw, json) Hash identifier: zTtiyvpIL8+R/N8X9CHBXhXE6bhahYaRDWuTqF/nr18= Subject key identifier: 25:DA:9C:2B:A5:4F:61:23:72:2E:40:F5:CE:97:64:6C:4C:69:7E:45 Authority key identifier: 92:32:B8:87:40:11:D8:03:90:AF:81:22:8E:B5:07:B1:6D:02:5D:D2 Certificate issuer: /CN=9232b8874011d80390af81228eb507b16d025dd2 Certificate serial: 019C41A2014072C74E75629FD60755A69A13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjK4h0AR2AOQr4EijrUHsW0CXdI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 09:01:01 +0000 Manifest this update: Mon 09 Feb 2026 09:01:01 +0000 Manifest next update: Tue 10 Feb 2026 09:01:01 +0000 Files and hashes: 1: kjK4h0AR2AOQr4EijrUHsW0CXdI.crl (hash: 7spfaI4Q9SvpAPwOMlEj6bMzj3UNGW9NVtlIap2TAe8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft rsync://rpki.ripe.net/repository/DEFAULT/kjK4h0AR2AOQr4EijrUHsW0CXdI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:01:40:72:c7:4e:75:62:9f:d6:07:55:a6:9a:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9232b8874011d80390af81228eb507b16d025dd2 Validity Not Before: Feb 9 09:01:01 2026 GMT Not After : Feb 10 09:01:01 2026 GMT Subject: CN=25da9c2ba54f6123722e40f5ce97646c4c697e45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:6a:06:38:d8:ab:01:e1:69:82:5e:51:ef:9c: 1c:d4:23:51:0c:b8:29:75:ac:08:78:84:6a:c6:3f: cd:1c:5e:a7:54:b6:f4:01:19:fd:ad:85:a8:45:b3: 1d:d2:5d:1e:8e:0b:1d:d7:91:39:08:c8:66:ba:02: 4d:f0:58:37:7c:38:c6:3d:ed:82:dd:c6:b6:d8:8e: 08:cd:a2:42:a4:97:de:bc:c5:08:47:31:d6:ac:7c: 89:0c:83:6f:46:2b:8c:46:c9:cd:2c:83:35:bb:5d: 4f:7b:ae:84:11:52:ee:d2:cc:1e:d7:71:1e:06:3c: f1:7c:82:df:40:d0:bc:5a:ca:c7:d9:09:2b:22:12: 10:b3:6b:41:30:0f:48:b8:98:5d:41:40:de:03:3d: 56:30:2a:e3:d8:f6:35:2e:24:3d:ce:64:80:af:e0: 6a:6c:38:d3:a4:6a:3f:09:fd:b7:67:75:f6:39:82: 75:4c:63:35:21:1e:e5:58:b6:01:74:ee:17:15:40: 20:c9:df:87:6e:f9:67:6e:0a:59:86:c5:9d:a1:9b: 1d:18:12:e1:10:a1:74:59:69:a2:88:9b:df:71:e9: 16:41:1e:a2:c3:d6:bb:ab:f5:67:fd:2d:97:68:0b: 93:74:d8:45:a7:73:5d:65:7b:90:36:68:c4:41:bf: 71:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:DA:9C:2B:A5:4F:61:23:72:2E:40:F5:CE:97:64:6C:4C:69:7E:45 X509v3 Authority Key Identifier: keyid:92:32:B8:87:40:11:D8:03:90:AF:81:22:8E:B5:07:B1:6D:02:5D:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjK4h0AR2AOQr4EijrUHsW0CXdI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:c3:d8:b9:75:a0:be:04:4b:f2:1e:80:38:21:92:f3:3a:88: 10:f9:75:1e:a1:29:67:2b:9b:c3:0c:e1:fe:af:41:57:69:be: 67:e6:61:af:5e:30:99:c0:92:86:ed:ac:9d:4c:e6:56:0f:01: 25:c4:c3:e6:9c:d6:cb:e0:74:e4:db:4c:da:88:00:3b:35:eb: 8b:38:88:0f:96:9b:55:b7:bc:8a:e1:a9:e2:4e:4a:52:45:1a: 8e:48:20:2a:88:45:d2:92:79:b8:ee:4f:07:27:91:03:88:b4: 0b:15:2f:7b:04:c3:b6:be:45:07:49:d9:27:48:ce:6a:ea:fe: 90:c1:76:c7:45:dc:2f:31:56:60:52:d0:5a:57:78:88:36:50: 7d:a6:91:fb:12:c1:40:df:37:57:df:17:45:9f:18:d6:19:cb: 1b:89:25:51:26:ae:13:9d:70:6d:2c:f8:05:62:8b:8f:f7:b4: 22:ed:84:1e:2e:1e:1f:0e:55:65:fb:12:19:f3:b7:16:dc:62: 5f:be:4a:61:c5:61:2a:6d:b1:6e:e4:62:d6:43:f5:b9:4c:82: a1:b1:b8:bd:66:48:af:00:16:06:3c:32:74:cd:d2:04:3a:81: fa:45:f5:c2:26:75:ad:fc:50:6f:df:45:a1:af:f4:ed:fa:32: 2b:39:ab:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBogFAcsdOdWKf1gdVppoTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMzJiODg3NDAxMWQ4MDM5MGFmODEyMjhlYjUwN2IxNmQw MjVkZDIwHhcNMjYwMjA5MDkwMTAxWhcNMjYwMjEwMDkwMTAxWjAzMTEwLwYDVQQD EygyNWRhOWMyYmE1NGY2MTIzNzIyZTQwZjVjZTk3NjQ2YzRjNjk3ZTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGoGONirAeFpgl5R75wc1CNRDLgp dawIeIRqxj/NHF6nVLb0ARn9rYWoRbMd0l0ejgsd15E5CMhmugJN8Fg3fDjGPe2C 3ca22I4IzaJCpJfevMUIRzHWrHyJDINvRiuMRsnNLIM1u11Pe66EEVLu0swe13Ee BjzxfILfQNC8WsrH2QkrIhIQs2tBMA9IuJhdQUDeAz1WMCrj2PY1LiQ9zmSAr+Bq bDjTpGo/Cf23Z3X2OYJ1TGM1IR7lWLYBdO4XFUAgyd+HbvlnbgpZhsWdoZsdGBLh EKF0WWmiiJvfcekWQR6iw9a7q/Vn/S2XaAuTdNhFp3NdZXuQNmjEQb9xfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCXanCulT2Ejci5A9c6XZGxMaX5FMB8GA1UdIwQY MBaAFJIyuIdAEdgDkK+BIo61B7FtAl3SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2pLNGgwQVIyQU9RcjRFaWpyVUhzVzBDWGRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9jNDk3ZjItNDA5ZS00NmVjLWEwMzkt ZDA0ODEyNjU1ZDgzLzEva2pLNGgwQVIyQU9RcjRFaWpyVUhzVzBDWGRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9jNDk3ZjItNDA5ZS00NmVjLWEwMzktZDA0ODEyNjU1ZDgz LzEva2pLNGgwQVIyQU9RcjRFaWpyVUhzVzBDWGRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbcPYuXWg vgRL8h6AOCGS8zqIEPl1HqEpZyubwwzh/q9BV2m+Z+Zhr14wmcCShu2snUzmVg8B JcTD5pzWy+B05NtM2ogAOzXriziID5abVbe8iuGp4k5KUkUajkggKohF0pJ5uO5P ByeRA4i0CxUvewTDtr5FB0nZJ0jOaur+kMF2x0XcLzFWYFLQWld4iDZQfaaR+xLB QN83V98XRZ8Y1hnLG4klUSauE51wbSz4BWKLj/e0Iu2EHi4eHw5VZfsSGfO3Ftxi X75KYcVhKm2xbuRi1kP1uUyCobG4vWZIrwAWBjwydM3SBDqB+kX1wiZ1rfxQb99F oa/07foyKzmrIg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:34:02 2026 by rpki-client