This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft File: KtWZlPKveVmc-z_y4-mOUY-RT7o.mft (raw, json) Hash identifier: rRvLPsbn2CDUG0VvEaGHpaS8PA/Mi7qsqpaUSrpiDFc= Subject key identifier: 48:35:4E:0C:E6:8C:75:B0:A4:04:E4:EC:3A:84:DD:27:77:4B:D2:89 Authority key identifier: 2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA Certificate issuer: /CN=2ad59994f2af79599cfb3ff2e3e98e518f914fba Certificate serial: 019C42B4058A741B7F0EBA64276CC7D2CA59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft Manifest number: 090E Signing time: Mon 09 Feb 2026 14:00:20 +0000 Manifest this update: Mon 09 Feb 2026 14:00:20 +0000 Manifest next update: Tue 10 Feb 2026 14:00:20 +0000 Files and hashes: 1: 9bNCpS-BnNsc0OV_kVUAGpMesVQ.roa (hash: SEbw3h7uQbDEC24FBGDOhfqkNO2N0ao6d2+D5+Fazds=) 2: KtWZlPKveVmc-z_y4-mOUY-RT7o.crl (hash: TOvD0sREOO8PSSYGSqrSQQ9Gnkuv3fNn4BsjNCiKKx4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.crl rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:05:8a:74:1b:7f:0e:ba:64:27:6c:c7:d2:ca:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ad59994f2af79599cfb3ff2e3e98e518f914fba Validity Not Before: Feb 9 14:00:20 2026 GMT Not After : Feb 10 14:00:20 2026 GMT Subject: CN=48354e0ce68c75b0a404e4ec3a84dd27774bd289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ab:b9:0d:80:16:d7:14:2d:d1:26:e0:e0:0c: 76:31:d7:ef:b3:5d:f8:a2:d7:0c:49:22:8b:8e:12: f9:ae:c7:90:d5:c0:5b:ee:2e:42:6d:fb:63:f0:83: 52:f4:41:92:0e:1f:37:e1:cf:87:d9:37:5d:84:34: 2d:f7:98:5c:15:33:e1:9a:7a:c6:25:e6:6c:73:39: 5f:99:c1:d1:31:bb:76:a7:0c:b4:73:d3:79:6d:ee: 51:76:7b:50:53:73:59:75:c2:65:99:cc:27:b1:d4: 0d:86:6f:54:f1:26:af:34:cd:53:6d:ff:b5:05:be: 76:1d:a5:32:cb:20:8d:c7:3e:41:1f:23:ae:81:24: b5:1c:8f:17:bb:ec:06:57:8c:32:23:f7:d9:df:80: bc:79:7d:43:b9:2d:b6:f9:2f:78:2c:2d:db:ef:94: 05:c7:07:98:f1:cb:de:d1:07:a3:42:60:eb:14:3f: ea:fd:c3:df:c9:6c:4b:24:2a:e1:e6:08:26:aa:62: 81:e8:3c:56:ab:26:08:c7:42:3e:25:84:47:e2:5c: 0a:a6:dc:d2:40:ea:3c:4c:15:ba:82:be:9e:54:45: af:64:be:9c:65:6f:e5:c3:36:4e:79:cb:73:57:57: 62:f6:7a:26:23:f3:73:85:c4:1e:5c:4f:c8:a4:97: aa:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:35:4E:0C:E6:8C:75:B0:A4:04:E4:EC:3A:84:DD:27:77:4B:D2:89 X509v3 Authority Key Identifier: keyid:2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:98:69:5c:14:64:bd:b1:da:dd:08:fd:9e:70:95:b8:cd:19: 07:64:49:94:d5:3f:38:60:fb:96:89:9d:89:55:fb:42:44:cb: e8:2b:06:87:00:11:2c:71:e9:31:65:c0:6d:17:ef:b0:ca:a4: 9b:c4:80:56:00:6e:45:44:72:cf:9b:bf:1a:0f:b2:87:45:dd: 96:fc:af:87:50:2b:02:d3:2b:8b:cd:83:c6:8b:2b:3a:0d:45: 96:1a:2d:0b:58:3a:96:c9:66:32:6e:04:d8:f9:77:fa:42:67: ee:62:7f:d1:65:4b:90:27:58:ae:18:58:ee:64:e1:16:37:7a: 52:77:5f:fc:e1:4f:45:b6:c4:0f:24:2d:6d:51:3f:30:5d:7b: 97:c2:21:33:38:87:3b:d1:3e:1c:8e:b3:da:bd:b7:b9:5c:70: 72:35:f4:c7:40:98:db:f9:59:b9:ed:3e:33:ba:c0:87:fc:62: 1f:e2:d1:4f:d1:06:bc:86:13:4c:20:15:a7:d5:44:bc:34:19: 8a:11:2e:44:00:47:4d:d5:c6:5a:9f:d5:b3:47:4f:de:bb:77: a0:10:31:47:32:4a:85:7e:58:b7:a6:36:da:1b:99:7f:48:ca: 59:19:a1:2c:40:b4:3b:28:fe:2a:ca:44:32:a9:69:37:64:21: d5:d0:28:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtAWKdBt/DrpkJ2zH0spZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhZDU5OTk0ZjJhZjc5NTk5Y2ZiM2ZmMmUzZTk4ZTUxOGY5 MTRmYmEwHhcNMjYwMjA5MTQwMDIwWhcNMjYwMjEwMTQwMDIwWjAzMTEwLwYDVQQD Eyg0ODM1NGUwY2U2OGM3NWIwYTQwNGU0ZWMzYTg0ZGQyNzc3NGJkMjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyau5DYAW1xQt0Sbg4Ax2Mdfvs134 otcMSSKLjhL5rseQ1cBb7i5Cbftj8INS9EGSDh834c+H2TddhDQt95hcFTPhmnrG JeZsczlfmcHRMbt2pwy0c9N5be5RdntQU3NZdcJlmcwnsdQNhm9U8SavNM1Tbf+1 Bb52HaUyyyCNxz5BHyOugSS1HI8Xu+wGV4wyI/fZ34C8eX1DuS22+S94LC3b75QF xweY8cve0QejQmDrFD/q/cPfyWxLJCrh5ggmqmKB6DxWqyYIx0I+JYRH4lwKptzS QOo8TBW6gr6eVEWvZL6cZW/lwzZOectzV1di9nomI/NzhcQeXE/IpJeqlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEg1TgzmjHWwpATk7DqE3Sd3S9KJMB8GA1UdIwQY MBaAFCrVmZTyr3lZnPs/8uPpjlGPkU+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3RXWmxQS3ZlVm1jLXpfeTQtbU9VWS1SVDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yYmNmMzEtNjI3Ny00ZTg3LWEwMDct YmJlMmM0ZDg4YzJmLzEvS3RXWmxQS3ZlVm1jLXpfeTQtbU9VWS1SVDdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8yYmNmMzEtNjI3Ny00ZTg3LWEwMDctYmJlMmM0ZDg4YzJm LzEvS3RXWmxQS3ZlVm1jLXpfeTQtbU9VWS1SVDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXphpXBRk vbHa3Qj9nnCVuM0ZB2RJlNU/OGD7lomdiVX7QkTL6CsGhwARLHHpMWXAbRfvsMqk m8SAVgBuRURyz5u/Gg+yh0Xdlvyvh1ArAtMri82DxosrOg1FlhotC1g6lslmMm4E 2Pl3+kJn7mJ/0WVLkCdYrhhY7mThFjd6Undf/OFPRbbEDyQtbVE/MF17l8IhMziH O9E+HI6z2r23uVxwcjX0x0CY2/lZue0+M7rAh/xiH+LRT9EGvIYTTCAVp9VEvDQZ ihEuRABHTdXGWp/Vs0dP3rt3oBAxRzJKhX5Yt6Y22huZf0jKWRmhLEC0Oyj+KspE MqlpN2Qh1dAoUw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:57 2026 by rpki-client