This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft File: kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft (raw, json) Hash identifier: s62TRI18Yfq9U+3GaPwWP99t+d0quJBmXV1hd0geyeI= Subject key identifier: 7A:84:39:B6:8D:80:A6:6C:25:A8:04:03:50:EF:AC:6A:55:09:49:BB Authority key identifier: 90:A0:3B:68:F8:7D:A7:1C:27:1C:9C:F5:C8:2E:95:5D:BC:65:C1:04 Certificate issuer: /CN=90a03b68f87da71c271c9cf5c82e955dbc65c104 Certificate serial: 019C42B4939D4D8CAC0E7BE5FC4C63374DCB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft Manifest number: 1562 Signing time: Mon 09 Feb 2026 14:00:56 +0000 Manifest this update: Mon 09 Feb 2026 14:00:56 +0000 Manifest next update: Tue 10 Feb 2026 14:00:56 +0000 Files and hashes: 1: DJfLC27ZRlLjzQtg9ejcohCVl8k.roa (hash: VymrYhadJDvH9BE1CUEs+UkSRt9NAMcvnOkL0G00Mj8=) 2: kKA7aPh9pxwnHJz1yC6VXbxlwQQ.crl (hash: dh2J5bDtaICbW1e4IFD5nnskW6ZEo0R9uvocczLxlUI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft rsync://rpki.ripe.net/repository/DEFAULT/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:93:9d:4d:8c:ac:0e:7b:e5:fc:4c:63:37:4d:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90a03b68f87da71c271c9cf5c82e955dbc65c104 Validity Not Before: Feb 9 14:00:56 2026 GMT Not After : Feb 10 14:00:56 2026 GMT Subject: CN=7a8439b68d80a66c25a8040350efac6a550949bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:57:28:60:9e:d5:18:c5:a0:ab:f0:40:de:58: b0:0d:23:fd:6f:93:6c:53:5a:27:07:be:06:55:b9: e8:0a:af:36:0e:83:75:89:5e:bc:5d:fb:58:08:fa: ec:b6:f3:c8:4f:fa:44:6e:31:67:76:95:ce:80:db: 84:dc:e8:21:c9:36:f5:01:c1:5e:7d:19:04:e8:55: 6a:6f:5b:b1:d7:90:3a:d0:4c:13:b3:92:19:bf:b6: 18:5f:7d:5e:31:2d:5f:b5:82:b5:e3:a9:34:ad:1d: 28:1d:98:93:99:09:e2:ee:91:25:53:3a:77:cd:51: 58:bd:12:e3:81:14:15:50:b6:be:b6:3c:55:d0:75: 38:0b:f2:d6:76:19:f0:1f:e3:6a:89:63:1f:13:93: 44:4f:92:5a:70:06:ee:07:ad:ee:d4:86:48:41:17: 01:21:22:95:5b:60:e9:1f:46:1b:79:af:fc:81:94: b7:c8:40:c7:2d:b0:8c:ff:a4:7e:c8:0e:71:11:d9: 4e:9e:4c:2b:34:fa:4e:17:71:b7:e3:cf:26:bb:b1: ed:bd:84:92:d4:94:62:4b:f3:cb:54:7b:bf:c6:ca: 31:b8:4c:24:1e:0d:87:7a:ce:23:d3:ae:dc:cf:57: 72:0f:59:36:01:cf:f9:92:b9:d8:0e:be:1a:9e:96: 0f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:84:39:B6:8D:80:A6:6C:25:A8:04:03:50:EF:AC:6A:55:09:49:BB X509v3 Authority Key Identifier: keyid:90:A0:3B:68:F8:7D:A7:1C:27:1C:9C:F5:C8:2E:95:5D:BC:65:C1:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:3c:c4:18:30:2e:8d:01:ce:24:bf:e5:2c:7f:0b:b3:d2:37: 9b:f4:1c:d1:02:ff:ef:07:9c:c4:5b:a3:dc:4d:42:09:37:a0: 46:5a:12:6b:35:68:39:4c:5b:38:36:1d:5c:4e:88:07:e2:26: 92:c5:ea:3b:60:8e:e1:73:11:4e:e7:7a:ff:31:df:e6:36:f4: 28:38:6d:88:42:74:7b:b5:a0:51:9c:a8:fd:cd:f1:0c:f8:2e: 36:2f:73:f1:60:f0:76:05:1c:da:71:79:3b:1d:2b:55:2b:ec: 17:45:c0:3d:27:a8:a7:66:ed:6f:05:96:02:c6:5c:03:e3:63: c9:4e:63:53:1c:46:76:38:2f:9a:db:70:3b:6b:00:a6:fc:0a: f5:fd:01:c8:55:d8:77:2d:18:4a:ed:1c:ee:cc:6c:36:b1:3e: 04:ba:04:88:3e:12:43:ad:d3:e7:ff:fe:63:41:c6:e0:ab:ac: bc:0a:ac:2b:a7:e0:73:bc:10:d3:f3:d7:d4:e1:48:fb:0e:ac: 14:e3:c6:d1:05:93:44:95:8f:26:79:d0:08:bd:19:87:09:ff: 33:ee:7a:c4:78:be:a0:e4:5f:ba:f1:a0:67:21:71:2e:c5:0e: ba:28:04:cd:7e:d8:86:7e:0f:4f:f8:8b:e5:48:6d:47:b0:5c: ef:d2:e2:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtJOdTYysDnvl/ExjN03LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwYTAzYjY4Zjg3ZGE3MWMyNzFjOWNmNWM4MmU5NTVkYmM2 NWMxMDQwHhcNMjYwMjA5MTQwMDU2WhcNMjYwMjEwMTQwMDU2WjAzMTEwLwYDVQQD Eyg3YTg0MzliNjhkODBhNjZjMjVhODA0MDM1MGVmYWM2YTU1MDk0OWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFcoYJ7VGMWgq/BA3liwDSP9b5Ns U1onB74GVbnoCq82DoN1iV68XftYCPrstvPIT/pEbjFndpXOgNuE3OghyTb1AcFe fRkE6FVqb1ux15A60EwTs5IZv7YYX31eMS1ftYK146k0rR0oHZiTmQni7pElUzp3 zVFYvRLjgRQVULa+tjxV0HU4C/LWdhnwH+NqiWMfE5NET5JacAbuB63u1IZIQRcB ISKVW2DpH0Ybea/8gZS3yEDHLbCM/6R+yA5xEdlOnkwrNPpOF3G3488mu7HtvYSS 1JRiS/PLVHu/xsoxuEwkHg2Hes4j067cz1dyD1k2Ac/5krnYDr4anpYPWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHqEObaNgKZsJagEA1DvrGpVCUm7MB8GA1UdIwQY MBaAFJCgO2j4faccJxyc9cgulV28ZcEEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0tBN2FQaDlweHduSEp6MXlDNlZYYnhsd1FRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YWZjMzctMDkwOS00ZDU0LWJjZWYt YmQzNGUwYTk1YTFlLzEva0tBN2FQaDlweHduSEp6MXlDNlZYYnhsd1FRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81YWZjMzctMDkwOS00ZDU0LWJjZWYtYmQzNGUwYTk1YTFl LzEva0tBN2FQaDlweHduSEp6MXlDNlZYYnhsd1FRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJzzEGDAu jQHOJL/lLH8Ls9I3m/Qc0QL/7wecxFuj3E1CCTegRloSazVoOUxbODYdXE6IB+Im ksXqO2CO4XMRTud6/zHf5jb0KDhtiEJ0e7WgUZyo/c3xDPguNi9z8WDwdgUc2nF5 Ox0rVSvsF0XAPSeop2btbwWWAsZcA+NjyU5jUxxGdjgvmttwO2sApvwK9f0ByFXY dy0YSu0c7sxsNrE+BLoEiD4SQ63T5//+Y0HG4KusvAqsK6fgc7wQ0/PX1OFI+w6s FOPG0QWTRJWPJnnQCL0Zhwn/M+56xHi+oORfuvGgZyFxLsUOuigEzX7Yhn4PT/iL 5UhtR7Bc79LigQ== -----END CERTIFICATE-----Generated at Mon Feb 9 20:07:38 2026 by rpki-client