This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.mft File: k-DpokYd9Py54i53cLJhOgckE4g.mft (raw, json) Hash identifier: 8P5mi9E3mLPaDkk0nyBP29CZ2O0W04SStbFySj/lqLk= Subject key identifier: 09:5C:46:C6:01:44:C3:EC:46:93:78:25:BE:3F:B0:8F:2C:C7:A4:74 Authority key identifier: 93:E0:E9:A2:46:1D:F4:FC:B9:E2:2E:77:70:B2:61:3A:07:24:13:88 Certificate issuer: /CN=93e0e9a2461df4fcb9e22e7770b2613a07241388 Certificate serial: 019C43C75A6842F73C7027B0842A4F9392A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-DpokYd9Py54i53cLJhOgckE4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.mft Manifest number: 179F Signing time: Mon 09 Feb 2026 19:01:04 +0000 Manifest this update: Mon 09 Feb 2026 19:01:04 +0000 Manifest next update: Tue 10 Feb 2026 19:01:04 +0000 Files and hashes: 1: k-DpokYd9Py54i53cLJhOgckE4g.crl (hash: Lu8enzkcZwIfQxwHeuSoRqO+X4+2Hf6b5DPFqSnY1Hc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.crl rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.mft rsync://rpki.ripe.net/repository/DEFAULT/k-DpokYd9Py54i53cLJhOgckE4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c7:5a:68:42:f7:3c:70:27:b0:84:2a:4f:93:92:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93e0e9a2461df4fcb9e22e7770b2613a07241388 Validity Not Before: Feb 9 19:01:04 2026 GMT Not After : Feb 10 19:01:04 2026 GMT Subject: CN=095c46c60144c3ec46937825be3fb08f2cc7a474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fc:2d:c6:62:70:06:ba:10:c4:f0:6c:c6:8f: 39:3c:17:d4:3b:7a:42:56:08:1a:c6:cb:c7:d3:30: 81:43:36:c6:c6:06:39:d1:37:c9:e8:5b:65:6b:a6: 8a:db:07:75:2e:3f:35:b1:cb:32:f9:46:97:78:e1: 68:f3:eb:70:01:0e:94:be:89:43:a6:8b:e0:32:e3: 77:c0:8b:87:09:e4:ac:69:1c:dc:70:24:5a:5c:52: 24:63:e0:00:98:be:ec:1f:6e:ff:b8:29:44:23:c5: 90:fb:af:82:a4:57:51:59:02:27:d6:50:62:0e:ad: 08:c5:00:b7:05:e2:6c:57:63:f7:58:38:57:fb:f1: ee:55:5c:c2:03:8f:22:6b:46:8a:5b:c3:2a:7d:27: 4d:84:29:d8:d6:0d:5e:b8:de:17:8d:55:b5:a3:b4: 8d:a5:7f:5a:28:cf:7b:9a:93:6d:c3:c0:53:41:d4: bb:9e:47:b3:ff:be:a6:59:25:19:39:ff:a6:8d:cc: 7c:6d:e6:88:b4:60:f2:ad:37:ee:0e:41:96:c2:3a: 41:9d:74:1b:c4:49:1f:25:7b:af:fb:25:e5:e3:6e: bc:ee:1c:fb:6c:c1:9f:13:be:6b:3c:c8:c5:ba:81: 80:99:36:dc:cd:c1:8b:d9:9c:21:1d:09:e3:6c:fb: 37:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:5C:46:C6:01:44:C3:EC:46:93:78:25:BE:3F:B0:8F:2C:C7:A4:74 X509v3 Authority Key Identifier: keyid:93:E0:E9:A2:46:1D:F4:FC:B9:E2:2E:77:70:B2:61:3A:07:24:13:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-DpokYd9Py54i53cLJhOgckE4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:85:e5:7a:44:bc:06:7e:af:1a:3c:8b:27:bb:03:43:d7:f2: d3:50:f0:5d:a8:a9:fb:29:ec:fc:df:fd:22:32:4f:42:df:0a: cb:59:6b:ad:03:21:32:1d:30:d4:73:9a:b1:dc:fb:9b:c9:b8: 34:9f:88:a5:30:bf:2e:20:c0:30:c7:8c:5e:61:bf:c1:ec:fa: 01:33:3f:e6:12:2c:f9:ac:73:70:40:99:88:c0:4e:42:13:c6: 1f:a1:11:63:de:84:96:b9:cd:c9:c3:af:d3:52:47:7d:6d:5c: 4e:ab:04:52:53:d6:36:bf:2e:28:82:f7:f8:22:b0:b9:3f:ed: b4:7b:1a:bc:87:90:c6:02:47:59:13:72:29:12:e1:4e:bc:67: ef:29:ad:5b:34:8a:65:90:c5:55:5b:40:07:47:d3:84:46:af: 1a:5d:28:e9:65:b5:1a:e3:b3:c6:3d:83:7a:0d:b7:57:6a:2a: d7:e5:d7:40:ce:1a:0a:4d:ba:14:68:9e:e9:06:09:a1:c3:68: 06:fb:7e:dc:f7:ba:2d:00:a0:94:d2:91:b6:d0:ac:99:cc:da: 82:bf:5e:ca:d8:ab:9c:32:9f:1a:93:59:98:c2:02:7d:3e:34: 3e:10:03:19:6c:d5:15:21:71:99:b6:2a:81:5f:0c:f6:09:55: 30:7e:d7:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDx1poQvc8cCewhCpPk5KnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZTBlOWEyNDYxZGY0ZmNiOWUyMmU3NzcwYjI2MTNhMDcy NDEzODgwHhcNMjYwMjA5MTkwMTA0WhcNMjYwMjEwMTkwMTA0WjAzMTEwLwYDVQQD EygwOTVjNDZjNjAxNDRjM2VjNDY5Mzc4MjViZTNmYjA4ZjJjYzdhNDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPwtxmJwBroQxPBsxo85PBfUO3pC VggaxsvH0zCBQzbGxgY50TfJ6Ftla6aK2wd1Lj81scsy+UaXeOFo8+twAQ6UvolD povgMuN3wIuHCeSsaRzccCRaXFIkY+AAmL7sH27/uClEI8WQ+6+CpFdRWQIn1lBi Dq0IxQC3BeJsV2P3WDhX+/HuVVzCA48ia0aKW8MqfSdNhCnY1g1euN4XjVW1o7SN pX9aKM97mpNtw8BTQdS7nkez/76mWSUZOf+mjcx8beaItGDyrTfuDkGWwjpBnXQb xEkfJXuv+yXl42687hz7bMGfE75rPMjFuoGAmTbczcGL2ZwhHQnjbPs39QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAlcRsYBRMPsRpN4Jb4/sI8sx6R0MB8GA1UdIwQY MBaAFJPg6aJGHfT8ueIud3CyYToHJBOIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvay1EcG9rWWQ5UHk1NGk1M2NMSmhPZ2NrRTRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC80MWU1ODQtOWNmNy00YzYyLTlmNjEt MGUyZTM2MDE5ODQ5LzEvay1EcG9rWWQ5UHk1NGk1M2NMSmhPZ2NrRTRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC80MWU1ODQtOWNmNy00YzYyLTlmNjEtMGUyZTM2MDE5ODQ5 LzEvay1EcG9rWWQ5UHk1NGk1M2NMSmhPZ2NrRTRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkoXlekS8 Bn6vGjyLJ7sDQ9fy01DwXaip+yns/N/9IjJPQt8Ky1lrrQMhMh0w1HOasdz7m8m4 NJ+IpTC/LiDAMMeMXmG/wez6ATM/5hIs+axzcECZiMBOQhPGH6ERY96ElrnNycOv 01JHfW1cTqsEUlPWNr8uKIL3+CKwuT/ttHsavIeQxgJHWRNyKRLhTrxn7ymtWzSK ZZDFVVtAB0fThEavGl0o6WW1GuOzxj2Deg23V2oq1+XXQM4aCk26FGie6QYJocNo Bvt+3Pe6LQCglNKRttCsmczagr9eytirnDKfGpNZmMICfT40PhADGWzVFSFxmbYq gV8M9glVMH7Xrg== -----END CERTIFICATE-----Generated at Mon Feb 9 20:54:22 2026 by rpki-client