This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft File: Kw51nA6mfY_3IqrIh8fszs3tPsc.mft (raw, json) Hash identifier: dlyasg4bBd6MIgZOCajVtjXrWeeWJdFuTg7SZv/9t0o= Subject key identifier: D4:36:C6:F9:EB:3A:03:BA:CA:7E:6D:69:00:51:E9:EB:46:31:2E:D9 Authority key identifier: 2B:0E:75:9C:0E:A6:7D:8F:F7:22:AA:C8:87:C7:EC:CE:CD:ED:3E:C7 Certificate issuer: /CN=2b0e759c0ea67d8ff722aac887c7eccecded3ec7 Certificate serial: 019C42B4672905C412A9F212B6E8728037D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kw51nA6mfY_3IqrIh8fszs3tPsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft Manifest number: 13BE Signing time: Mon 09 Feb 2026 14:00:44 +0000 Manifest this update: Mon 09 Feb 2026 14:00:44 +0000 Manifest next update: Tue 10 Feb 2026 14:00:44 +0000 Files and hashes: 1: 0jTzYvTvypbh1yQ9qTkBShn1rSM.roa (hash: QibTqze93VmbmNq8kPjpcqM+im2jq6u0y0JdEMbhwrI=) 2: Kw51nA6mfY_3IqrIh8fszs3tPsc.crl (hash: 7U9yvbEAGx32npyVcpqWcHwOZ668x9L60FX6mxrr51o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.crl rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft rsync://rpki.ripe.net/repository/DEFAULT/Kw51nA6mfY_3IqrIh8fszs3tPsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:67:29:05:c4:12:a9:f2:12:b6:e8:72:80:37:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b0e759c0ea67d8ff722aac887c7eccecded3ec7 Validity Not Before: Feb 9 14:00:44 2026 GMT Not After : Feb 10 14:00:44 2026 GMT Subject: CN=d436c6f9eb3a03baca7e6d690051e9eb46312ed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b6:05:e0:34:c3:7e:75:51:f3:d8:7c:bf:f4: 84:8b:03:85:a5:21:96:6c:cc:6b:4b:69:03:9b:8b: f6:1f:04:db:6d:30:5b:94:5a:fc:f1:13:0a:74:9d: 2c:f3:9e:e2:9d:40:44:fc:72:4f:d6:05:de:ac:95: 11:62:a9:b3:a8:3a:1b:df:ca:ca:42:b4:8b:0f:f1: 6e:ea:83:e9:13:d0:5f:6d:2e:91:fc:d8:8d:67:bd: ca:0b:4f:6c:2d:80:56:87:05:cb:8b:93:d6:46:34: f6:b6:38:4e:30:f1:55:25:d9:b6:b1:af:18:0c:2e: a5:ef:88:ad:6d:ad:cf:1b:a3:f3:9b:f5:0d:6f:8a: a0:83:a1:08:94:fd:e1:f5:b9:6b:c5:11:93:ca:7b: ee:78:c9:63:45:4c:2a:aa:d7:93:bd:f2:2e:cc:94: da:5b:49:db:52:58:c3:6c:21:21:c8:b5:38:ef:47: 21:1d:d3:ef:53:c6:e4:3e:77:5d:e8:1b:0f:63:19: 97:97:0d:b8:02:0b:9c:55:ff:62:f7:3c:6c:93:fe: 75:c2:93:63:99:ba:13:08:6e:bd:12:a0:8d:bf:4e: 5c:e5:fe:ee:30:66:40:3a:f7:39:67:5c:ba:7a:df: fa:c1:82:15:28:a1:53:1c:d6:ce:81:ff:de:88:4f: 21:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:36:C6:F9:EB:3A:03:BA:CA:7E:6D:69:00:51:E9:EB:46:31:2E:D9 X509v3 Authority Key Identifier: keyid:2B:0E:75:9C:0E:A6:7D:8F:F7:22:AA:C8:87:C7:EC:CE:CD:ED:3E:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kw51nA6mfY_3IqrIh8fszs3tPsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:b5:2d:44:1d:3d:c2:06:d7:65:9e:4e:ca:44:71:68:7b:7b: 67:b2:81:76:a4:5f:50:24:d3:af:63:e5:ff:5f:04:df:ad:65: 9d:24:fb:63:02:53:e9:82:47:bd:c6:a8:8c:c9:d4:42:a2:21: a8:b8:cf:64:75:8a:86:2a:b6:84:e9:f2:96:4e:dc:ee:9d:57: 1b:57:07:28:6d:86:af:0e:d8:2a:c1:42:2c:31:28:f6:ec:b3: f0:a9:81:e9:ba:81:9c:06:5a:92:52:82:a9:2b:e6:95:6c:39: 77:78:06:5d:b1:e5:cc:62:6a:33:d5:13:e4:bb:0f:3b:44:bf: 8e:cc:f7:ed:39:5d:ce:fa:44:93:b4:a9:40:dd:30:32:54:77: 52:7b:82:69:e7:df:6b:67:71:d8:1d:f0:32:2b:51:a1:fb:b3: b9:fc:cf:26:eb:1a:d3:2b:03:f3:4a:6d:c8:5b:43:14:1d:6b: e3:ff:a0:1e:eb:8d:75:d6:82:cf:bd:4c:f0:f9:8c:bb:26:57: 16:ff:26:eb:03:d8:0f:f5:81:c5:72:06:ce:8d:5e:a5:19:95: cc:ca:01:82:7e:72:d5:11:06:1a:3c:09:1e:20:f5:51:c7:61: ee:8f:ed:ef:ef:ee:1b:29:07:31:6e:ce:33:6c:ff:4c:36:40: 26:60:4b:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtGcpBcQSqfIStuhygDfUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiMGU3NTljMGVhNjdkOGZmNzIyYWFjODg3YzdlY2NlY2Rl ZDNlYzcwHhcNMjYwMjA5MTQwMDQ0WhcNMjYwMjEwMTQwMDQ0WjAzMTEwLwYDVQQD EyhkNDM2YzZmOWViM2EwM2JhY2E3ZTZkNjkwMDUxZTllYjQ2MzEyZWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLYF4DTDfnVR89h8v/SEiwOFpSGW bMxrS2kDm4v2HwTbbTBblFr88RMKdJ0s857inUBE/HJP1gXerJURYqmzqDob38rK QrSLD/Fu6oPpE9BfbS6R/NiNZ73KC09sLYBWhwXLi5PWRjT2tjhOMPFVJdm2sa8Y DC6l74itba3PG6Pzm/UNb4qgg6EIlP3h9blrxRGTynvueMljRUwqqteTvfIuzJTa W0nbUljDbCEhyLU470chHdPvU8bkPndd6BsPYxmXlw24AgucVf9i9zxsk/51wpNj mboTCG69EqCNv05c5f7uMGZAOvc5Z1y6et/6wYIVKKFTHNbOgf/eiE8h5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNQ2xvnrOgO6yn5taQBR6etGMS7ZMB8GA1UdIwQY MBaAFCsOdZwOpn2P9yKqyIfH7M7N7T7HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3c1MW5BNm1mWV8zSXFySWg4ZnN6czN0UHNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9kNGRiMDMtZThhZC00MDI3LTljZTgt NTVlMWZmN2YzMmY5LzEvS3c1MW5BNm1mWV8zSXFySWg4ZnN6czN0UHNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9kNGRiMDMtZThhZC00MDI3LTljZTgtNTVlMWZmN2YzMmY5 LzEvS3c1MW5BNm1mWV8zSXFySWg4ZnN6czN0UHNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP7UtRB09 wgbXZZ5OykRxaHt7Z7KBdqRfUCTTr2Pl/18E361lnST7YwJT6YJHvcaojMnUQqIh qLjPZHWKhiq2hOnylk7c7p1XG1cHKG2Grw7YKsFCLDEo9uyz8KmB6bqBnAZaklKC qSvmlWw5d3gGXbHlzGJqM9UT5LsPO0S/jsz37TldzvpEk7SpQN0wMlR3UnuCaeff a2dx2B3wMitRofuzufzPJusa0ysD80ptyFtDFB1r4/+gHuuNddaCz71M8PmMuyZX Fv8m6wPYD/WBxXIGzo1epRmVzMoBgn5y1REGGjwJHiD1Ucdh7o/t7+/uGykHMW7O M2z/TDZAJmBLJg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:41:21 2026 by rpki-client