This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft File: KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft (raw, json) Hash identifier: JqbNXYRi+6iFiGAgUyXkfAtPWbRWEF+M7E9jOm3qNsk= Subject key identifier: E7:13:46:F6:CB:78:10:F8:7A:69:35:15:68:F2:69:02:B3:FF:27:0D Authority key identifier: 29:3F:2E:C7:4B:40:66:AC:67:A8:76:8D:8E:38:60:6E:FC:D6:40:13 Certificate issuer: /CN=293f2ec74b4066ac67a8768d8e38606efcd64013 Certificate serial: 019C41D8E83FA548127E6033B8A8C9C41F9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KT8ux0tAZqxnqHaNjjhgbvzWQBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft Manifest number: 1545 Signing time: Mon 09 Feb 2026 10:01:00 +0000 Manifest this update: Mon 09 Feb 2026 10:01:00 +0000 Manifest next update: Tue 10 Feb 2026 10:01:00 +0000 Files and hashes: 1: DFbSCIkBvN-gbf9eBnp3DQUtSjM.roa (hash: 4ANNNaYCmM44cEh0PesD5gfAd5fKPbOrFIOFq/4zEpE=) 2: KT8ux0tAZqxnqHaNjjhgbvzWQBM.crl (hash: nwk5IB2LqMWSeHH2ZVPZnVrEbk4+Wiv6uTaaR5uE54o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.crl rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft rsync://rpki.ripe.net/repository/DEFAULT/KT8ux0tAZqxnqHaNjjhgbvzWQBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:e8:3f:a5:48:12:7e:60:33:b8:a8:c9:c4:1f:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=293f2ec74b4066ac67a8768d8e38606efcd64013 Validity Not Before: Feb 9 10:01:00 2026 GMT Not After : Feb 10 10:01:00 2026 GMT Subject: CN=e71346f6cb7810f87a69351568f26902b3ff270d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b3:0c:0d:2e:94:4b:76:91:d9:27:d7:b0:46: a4:fb:3c:2a:84:43:ac:17:d7:28:5f:ef:a9:2a:58: b6:18:0a:03:24:16:55:48:b7:4d:e8:05:84:33:c4: 1f:98:62:ac:5b:8c:0a:73:9c:56:15:bc:20:c9:46: 6a:d3:6d:4e:c4:fa:e9:11:1d:70:36:04:94:c3:7f: b1:9b:08:1e:ca:24:e4:3d:e6:90:f2:25:46:7e:91: 0a:4d:04:aa:ac:e2:40:1e:80:a9:43:db:52:f4:a3: 7d:09:40:a2:6d:e0:17:49:2d:c0:6f:d9:f4:cc:5f: 1b:7e:14:6e:7e:16:2d:d8:d9:a8:5c:55:c5:c7:c1: d6:88:c9:69:88:83:85:7a:32:c1:83:ab:de:67:a0: f5:63:e3:bf:50:42:46:4e:7c:1f:57:91:bb:f7:16: d8:1a:23:80:0d:18:1b:b9:32:f1:6e:52:ae:93:a7: 3d:e1:e8:4a:16:a1:58:28:b9:52:df:5b:99:5b:af: 78:b6:ee:fc:c6:bb:ea:3c:a7:02:0f:83:57:f7:c9: e6:16:18:c7:43:51:24:a0:50:d8:09:5e:93:93:dc: 89:02:a9:9e:ef:69:0b:fa:46:9c:ed:9e:92:29:0f: 36:d3:79:f9:1a:8a:1c:39:f2:57:0d:60:c7:a7:3d: e9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:13:46:F6:CB:78:10:F8:7A:69:35:15:68:F2:69:02:B3:FF:27:0D X509v3 Authority Key Identifier: keyid:29:3F:2E:C7:4B:40:66:AC:67:A8:76:8D:8E:38:60:6E:FC:D6:40:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT8ux0tAZqxnqHaNjjhgbvzWQBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:c0:57:54:8a:6d:5f:55:3d:0d:74:90:a8:cb:f0:f4:47:9a: 2e:59:aa:2f:4c:d6:d8:c6:5b:65:9d:9f:ec:8f:b0:c6:08:ab: 2d:7c:ba:10:b2:7d:2f:87:ca:58:e8:a3:81:cf:52:fe:ec:7e: 4b:53:3e:ae:e4:b9:9b:32:31:7a:bf:5a:fd:cf:b0:6a:43:b7: 0b:d3:2e:48:70:19:f4:a6:ea:79:f7:f2:82:c3:10:ec:ca:e7: 6a:19:ea:85:f2:ab:30:59:47:2b:a7:51:a2:7a:2f:eb:88:cb: b5:32:40:ef:db:0b:23:b0:c2:20:ce:35:17:44:ce:47:20:e0: 4e:23:7f:5b:be:91:94:8e:57:80:a0:65:df:c8:87:a4:43:0c: d4:04:ba:c9:79:09:33:78:a1:0f:8d:cb:6c:83:b8:e2:e9:79: 06:e4:b2:f7:15:3b:61:97:49:c1:b5:24:b5:73:33:39:b2:2a: fe:d9:2e:97:a0:a6:43:39:1c:bb:95:c9:13:55:d2:a7:66:37: 8a:87:9f:f0:22:7b:34:0b:76:e9:b0:af:9e:9e:74:9f:08:34: 2a:06:2c:5e:23:a5:6f:ed:7e:73:c1:57:52:ca:bf:fd:27:e0: d4:ed:38:e3:75:0f:5f:99:f1:8b:59:2e:56:74:72:e2:9f:52: af:8e:c7:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2Og/pUgSfmAzuKjJxB+aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5M2YyZWM3NGI0MDY2YWM2N2E4NzY4ZDhlMzg2MDZlZmNk NjQwMTMwHhcNMjYwMjA5MTAwMTAwWhcNMjYwMjEwMTAwMTAwWjAzMTEwLwYDVQQD EyhlNzEzNDZmNmNiNzgxMGY4N2E2OTM1MTU2OGYyNjkwMmIzZmYyNzBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubMMDS6US3aR2SfXsEak+zwqhEOs F9coX++pKli2GAoDJBZVSLdN6AWEM8QfmGKsW4wKc5xWFbwgyUZq021OxPrpER1w NgSUw3+xmwgeyiTkPeaQ8iVGfpEKTQSqrOJAHoCpQ9tS9KN9CUCibeAXSS3Ab9n0 zF8bfhRufhYt2NmoXFXFx8HWiMlpiIOFejLBg6veZ6D1Y+O/UEJGTnwfV5G79xbY GiOADRgbuTLxblKuk6c94ehKFqFYKLlS31uZW694tu78xrvqPKcCD4NX98nmFhjH Q1EkoFDYCV6Tk9yJAqme72kL+kac7Z6SKQ8203n5GoocOfJXDWDHpz3pfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOcTRvbLeBD4emk1FWjyaQKz/ycNMB8GA1UdIwQY MBaAFCk/LsdLQGasZ6h2jY44YG781kATMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1Q4dXgwdEFacXhucUhhTmpqaGdidnpXUUJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC82OTA0NWEtYTViMS00ZTU5LTk3MTct MjNmMjI2M2I5YmQyLzEvS1Q4dXgwdEFacXhucUhhTmpqaGdidnpXUUJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC82OTA0NWEtYTViMS00ZTU5LTk3MTctMjNmMjI2M2I5YmQy LzEvS1Q4dXgwdEFacXhucUhhTmpqaGdidnpXUUJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG8BXVIpt X1U9DXSQqMvw9EeaLlmqL0zW2MZbZZ2f7I+wxgirLXy6ELJ9L4fKWOijgc9S/ux+ S1M+ruS5mzIxer9a/c+wakO3C9MuSHAZ9KbqeffygsMQ7MrnahnqhfKrMFlHK6dR onov64jLtTJA79sLI7DCIM41F0TORyDgTiN/W76RlI5XgKBl38iHpEMM1AS6yXkJ M3ihD43LbIO44ul5BuSy9xU7YZdJwbUktXMzObIq/tkul6CmQzkcu5XJE1XSp2Y3 ioef8CJ7NAt26bCvnp50nwg0KgYsXiOlb+1+c8FXUsq//Sfg1O0443UPX5nxi1ku VnRy4p9Sr47HPw== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:30 2026 by rpki-client