This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft File: KYijxojo6x_vBsN0p6pc-P13jg8.mft (raw, json) Hash identifier: rb89xXfgi4fPc/a4rAIdRCSIc1JCR6nCXrMhnS0nViE= Subject key identifier: D6:42:77:B8:4D:CF:C1:7B:B0:5E:E8:5B:32:70:BA:DA:E2:D1:33:DB Authority key identifier: 29:88:A3:C6:88:E8:EB:1F:EF:06:C3:74:A7:AA:5C:F8:FD:77:8E:0F Certificate issuer: /CN=2988a3c688e8eb1fef06c374a7aa5cf8fd778e0f Certificate serial: 019C416A65A991F1667AD123B02ADBB6665D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft Manifest number: 175D Signing time: Mon 09 Feb 2026 08:00:17 +0000 Manifest this update: Mon 09 Feb 2026 08:00:17 +0000 Manifest next update: Tue 10 Feb 2026 08:00:17 +0000 Files and hashes: 1: KYijxojo6x_vBsN0p6pc-P13jg8.crl (hash: JjrZx5CPuxY6PvTxeWebq1R8Mjm66ucfMK7qXM0Cr7k=) 2: gQlCpCSnLDmN9RPpvzCQtlrd9TA.roa (hash: ZKoC7F9vGHQ7V9bs0WMl6IQhGf05jkOf05frZxYmNPQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 08:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:6a:65:a9:91:f1:66:7a:d1:23:b0:2a:db:b6:66:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2988a3c688e8eb1fef06c374a7aa5cf8fd778e0f Validity Not Before: Feb 9 08:00:17 2026 GMT Not After : Feb 10 08:00:17 2026 GMT Subject: CN=d64277b84dcfc17bb05ee85b3270badae2d133db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:93:b3:99:4a:4c:d4:48:59:e6:dd:34:ab:7e: 2b:f3:bc:fc:64:27:e7:b2:73:12:65:c7:f1:c0:0e: 42:ff:eb:a9:da:66:d8:e0:b2:93:1e:da:69:7f:8c: 53:41:f2:12:e0:66:e3:e1:17:c5:69:6f:70:10:d9: fc:7e:a4:ef:ad:20:56:c0:05:cc:86:dd:1d:35:28: 67:39:94:01:ea:19:07:c9:83:80:bd:0c:70:13:08: 33:aa:a3:4f:9d:e9:ac:97:7d:56:e0:cc:87:24:04: d9:61:02:de:1b:aa:97:15:28:25:92:2d:22:7c:fa: 64:07:f9:95:b8:59:13:b9:13:29:01:18:be:84:33: 06:ce:72:aa:ea:a3:45:31:07:3c:e7:d5:8e:99:96: 53:46:4b:0f:0b:c2:10:91:68:e4:32:d1:d8:2d:f8: 91:af:49:18:fd:4e:c9:c0:03:13:c8:46:cb:3a:37: 67:40:7b:73:f1:29:8e:8f:32:83:b1:d0:ac:eb:f4: 8e:47:a9:54:54:66:8e:67:d2:a6:83:19:c2:77:2a: ba:9a:61:59:fb:e2:e9:c2:10:03:ef:1e:de:d5:1b: 68:ef:93:d9:99:8e:e6:3e:df:5c:a2:ca:77:65:2b: ef:55:e3:94:a4:a9:8d:0e:f4:a1:26:c0:1a:d9:ce: 9a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:42:77:B8:4D:CF:C1:7B:B0:5E:E8:5B:32:70:BA:DA:E2:D1:33:DB X509v3 Authority Key Identifier: keyid:29:88:A3:C6:88:E8:EB:1F:EF:06:C3:74:A7:AA:5C:F8:FD:77:8E:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:05:d6:bc:fc:fe:a6:98:22:63:85:fb:fc:b0:3b:44:03:f3: a8:c6:e5:f3:be:4b:57:63:8f:2d:a9:e3:8a:aa:d7:bb:4a:b2: 99:c9:06:5c:14:9b:61:aa:b3:3e:43:61:03:ca:10:05:07:7f: aa:70:ef:75:ce:cf:1a:2e:46:84:f1:c9:af:ac:9c:80:58:df: e3:14:82:1c:b0:fc:72:5f:c1:e2:f0:f6:4f:fb:81:ca:9d:9b: c1:6d:40:29:f9:45:b2:95:c5:c7:d7:e8:5a:4a:65:a6:40:90: ee:e4:4c:d2:99:b6:94:b9:81:d1:9c:d1:fc:b5:fe:ee:a7:ca: a9:3a:b9:98:27:f3:cd:78:3d:0b:09:75:e7:21:21:d5:80:19: 6d:f9:d1:08:aa:17:df:ae:f2:51:4b:fe:ac:58:d7:08:16:59: 48:61:9c:09:15:5a:40:aa:32:b1:bc:c2:68:be:e4:21:7d:13: 76:3b:c0:c3:c8:34:b8:b6:cb:26:58:e6:7b:5e:09:9f:60:dd: 7f:23:b1:ce:c8:ac:cf:c3:53:b5:24:6c:8a:19:9a:03:44:08: e2:e5:e2:4d:4c:87:5f:ee:17:45:91:8d:67:ae:4e:a3:25:94: 23:dc:d4:8b:e6:5e:43:d9:79:4a:51:0b:e0:3c:8e:d1:19:7e: 9f:0f:c2:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBamWpkfFmetEjsCrbtmZdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ODhhM2M2ODhlOGViMWZlZjA2YzM3NGE3YWE1Y2Y4ZmQ3 NzhlMGYwHhcNMjYwMjA5MDgwMDE3WhcNMjYwMjEwMDgwMDE3WjAzMTEwLwYDVQQD EyhkNjQyNzdiODRkY2ZjMTdiYjA1ZWU4NWIzMjcwYmFkYWUyZDEzM2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5OzmUpM1EhZ5t00q34r87z8ZCfn snMSZcfxwA5C/+up2mbY4LKTHtppf4xTQfIS4Gbj4RfFaW9wENn8fqTvrSBWwAXM ht0dNShnOZQB6hkHyYOAvQxwEwgzqqNPnemsl31W4MyHJATZYQLeG6qXFSglki0i fPpkB/mVuFkTuRMpARi+hDMGznKq6qNFMQc859WOmZZTRksPC8IQkWjkMtHYLfiR r0kY/U7JwAMTyEbLOjdnQHtz8SmOjzKDsdCs6/SOR6lUVGaOZ9KmgxnCdyq6mmFZ ++LpwhAD7x7e1Rto75PZmY7mPt9cosp3ZSvvVeOUpKmNDvShJsAa2c6a7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNZCd7hNz8F7sF7oWzJwutri0TPbMB8GA1UdIwQY MBaAFCmIo8aI6Osf7wbDdKeqXPj9d44PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1lpanhvam82eF92QnNOMHA2cGMtUDEzamc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85ZjUyZDEtYzk1ZC00NTViLWFmMDgt Y2VjMGRiYzhkMjQ2LzEvS1lpanhvam82eF92QnNOMHA2cGMtUDEzamc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS85ZjUyZDEtYzk1ZC00NTViLWFmMDgtY2VjMGRiYzhkMjQ2 LzEvS1lpanhvam82eF92QnNOMHA2cGMtUDEzamc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADwXWvPz+ ppgiY4X7/LA7RAPzqMbl875LV2OPLanjiqrXu0qymckGXBSbYaqzPkNhA8oQBQd/ qnDvdc7PGi5GhPHJr6ycgFjf4xSCHLD8cl/B4vD2T/uByp2bwW1AKflFspXFx9fo WkplpkCQ7uRM0pm2lLmB0ZzR/LX+7qfKqTq5mCfzzXg9Cwl15yEh1YAZbfnRCKoX 367yUUv+rFjXCBZZSGGcCRVaQKoysbzCaL7kIX0TdjvAw8g0uLbLJljme14Jn2Dd fyOxzsisz8NTtSRsihmaA0QI4uXiTUyHX+4XRZGNZ65OoyWUI9zUi+ZeQ9l5SlEL 4DyO0Rl+nw/CmA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:55:22 2026 by rpki-client