This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.mft File: KuLRf9W7nXYRETxYakEIAseF7fI.mft (raw, json) Hash identifier: E/t5s/VEXVb+qtra94gtsfbjL397PWVPbhbR2Ayowfw= Subject key identifier: B5:0C:33:07:13:D3:62:94:7D:A3:4C:B8:AE:B0:8D:FE:18:B5:14:84 Authority key identifier: 2A:E2:D1:7F:D5:BB:9D:76:11:11:3C:58:6A:41:08:02:C7:85:ED:F2 Certificate issuer: /CN=2ae2d17fd5bb9d7611113c586a410802c785edf2 Certificate serial: 019C43FE3C7E65EDC1A4F82CE22BB8636C02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KuLRf9W7nXYRETxYakEIAseF7fI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.mft Manifest number: 0DAD Signing time: Mon 09 Feb 2026 20:01:00 +0000 Manifest this update: Mon 09 Feb 2026 20:01:00 +0000 Manifest next update: Tue 10 Feb 2026 20:01:00 +0000 Files and hashes: 1: KuLRf9W7nXYRETxYakEIAseF7fI.crl (hash: vNYI8TibzDu8X+hSGACloZsh5Yav5cq7xxeJjdSYAa4=) 2: oFrdrnyW8tV0-krY3waUROhvwWw.roa (hash: QeN2HanlQ0AK3izov4uywvu+l/5m1PgafcG6RGWrge0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.crl rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.mft rsync://rpki.ripe.net/repository/DEFAULT/KuLRf9W7nXYRETxYakEIAseF7fI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:3c:7e:65:ed:c1:a4:f8:2c:e2:2b:b8:63:6c:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ae2d17fd5bb9d7611113c586a410802c785edf2 Validity Not Before: Feb 9 20:01:00 2026 GMT Not After : Feb 10 20:01:00 2026 GMT Subject: CN=b50c330713d362947da34cb8aeb08dfe18b51484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:78:3d:5e:56:ba:f0:07:25:2e:67:93:81:54: 5a:51:f6:d8:cb:d2:d2:04:26:e0:05:49:16:f6:7b: f6:83:28:0a:3a:4b:dd:40:67:02:df:22:17:4d:f1: 29:68:11:99:6a:24:48:d7:d2:e3:40:cf:eb:fb:b3: f6:0b:fa:83:3d:d8:aa:6d:1c:8f:d7:a6:af:d5:48: dc:d4:24:b9:0e:da:50:a5:d9:fe:e3:b6:ec:99:fa: 26:58:0c:0b:9d:90:c0:18:c3:78:a6:43:1e:39:b3: 12:0d:ed:e2:ec:e3:4c:41:36:bd:b0:6f:ec:45:4e: 98:2f:fc:2a:e9:cb:0b:51:c9:e8:bf:7e:f9:43:55: 9f:4b:1b:d1:4a:f6:95:f8:7f:b9:d1:03:60:59:ae: c3:6d:d0:cd:4b:6a:f5:11:76:be:46:56:d4:d4:f7: 80:ea:5a:62:29:c7:1b:b8:f7:e6:e0:37:1a:0a:8b: 87:b8:d2:55:81:50:04:68:8d:45:fa:b9:03:c3:1b: a6:8b:b4:d0:58:93:2a:b7:4c:2c:a7:3a:0c:b3:80: 34:51:16:99:f8:9d:ad:21:64:76:ea:9e:73:ae:9a: a7:d9:65:cc:3e:61:ac:05:ec:b2:2d:9c:dc:44:c6: c7:8a:37:7c:4e:ae:7f:81:45:30:bf:cf:21:94:20: d3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:0C:33:07:13:D3:62:94:7D:A3:4C:B8:AE:B0:8D:FE:18:B5:14:84 X509v3 Authority Key Identifier: keyid:2A:E2:D1:7F:D5:BB:9D:76:11:11:3C:58:6A:41:08:02:C7:85:ED:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KuLRf9W7nXYRETxYakEIAseF7fI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:54:e9:cb:ed:62:0d:5d:22:2b:b5:a2:3f:29:7f:07:9a:2f: ef:73:0e:75:7c:71:70:bb:bb:d8:77:78:14:48:fb:bc:61:64: ac:e5:3a:7a:b5:32:fd:a1:e6:b8:6e:a1:c7:33:36:b5:27:d6: ab:a2:56:07:68:be:6a:d1:7e:56:70:00:1e:6a:02:cc:8c:7d: 9d:22:a1:07:f7:e3:7c:66:c1:c6:4d:b1:fd:0a:8a:f0:f7:c2: 8a:7b:56:ef:3b:c2:dd:2b:d8:1f:46:9e:56:b3:b7:44:20:37: fd:0d:c6:78:f1:89:b7:40:e2:ba:e5:3d:cf:2c:3a:11:c8:da: ec:c4:17:03:0a:11:b9:46:29:1c:2d:81:8b:41:42:a3:92:ea: 39:e5:fe:5a:b5:fa:7e:c6:ed:19:24:71:26:db:da:6b:40:18: bb:58:90:62:b9:0e:13:fa:f7:f5:4c:69:a4:25:e7:07:6d:46: 36:c5:61:14:a8:b0:e9:2f:20:7a:d3:ca:31:52:c8:61:b8:72: 12:07:26:4e:8a:09:69:9d:bb:08:19:65:31:d2:54:58:06:a3: 60:bd:4c:fc:4c:7f:13:c4:ba:8f:5b:36:f1:43:29:8c:4b:7b: 5b:23:cc:c6:d8:b6:3f:e7:1a:7b:1f:3c:47:16:23:f4:00:0a: 0f:97:c2:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/jx+Ze3BpPgs4iu4Y2wCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhZTJkMTdmZDViYjlkNzYxMTExM2M1ODZhNDEwODAyYzc4 NWVkZjIwHhcNMjYwMjA5MjAwMTAwWhcNMjYwMjEwMjAwMTAwWjAzMTEwLwYDVQQD EyhiNTBjMzMwNzEzZDM2Mjk0N2RhMzRjYjhhZWIwOGRmZTE4YjUxNDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlng9Xla68AclLmeTgVRaUfbYy9LS BCbgBUkW9nv2gygKOkvdQGcC3yIXTfEpaBGZaiRI19LjQM/r+7P2C/qDPdiqbRyP 16av1Ujc1CS5DtpQpdn+47bsmfomWAwLnZDAGMN4pkMeObMSDe3i7ONMQTa9sG/s RU6YL/wq6csLUcnov375Q1WfSxvRSvaV+H+50QNgWa7DbdDNS2r1EXa+RlbU1PeA 6lpiKccbuPfm4DcaCouHuNJVgVAEaI1F+rkDwxumi7TQWJMqt0wspzoMs4A0URaZ +J2tIWR26p5zrpqn2WXMPmGsBeyyLZzcRMbHijd8Tq5/gUUwv88hlCDT1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLUMMwcT02KUfaNMuK6wjf4YtRSEMB8GA1UdIwQY MBaAFCri0X/Vu512ERE8WGpBCALHhe3yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3VMUmY5VzduWFlSRVR4WWFrRUlBc2VGN2ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9iYTdmZDYtYjNhOC00OTMxLWFjMDUt YWI0ODg3YzYzZWE1LzEvS3VMUmY5VzduWFlSRVR4WWFrRUlBc2VGN2ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9iYTdmZDYtYjNhOC00OTMxLWFjMDUtYWI0ODg3YzYzZWE1 LzEvS3VMUmY5VzduWFlSRVR4WWFrRUlBc2VGN2ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADVTpy+1i DV0iK7WiPyl/B5ov73MOdXxxcLu72Hd4FEj7vGFkrOU6erUy/aHmuG6hxzM2tSfW q6JWB2i+atF+VnAAHmoCzIx9nSKhB/fjfGbBxk2x/QqK8PfCintW7zvC3SvYH0ae VrO3RCA3/Q3GePGJt0DiuuU9zyw6Ecja7MQXAwoRuUYpHC2Bi0FCo5LqOeX+WrX6 fsbtGSRxJtvaa0AYu1iQYrkOE/r39UxppCXnB21GNsVhFKiw6S8getPKMVLIYbhy EgcmTooJaZ27CBllMdJUWAajYL1M/Ex/E8S6j1s28UMpjEt7WyPMxti2P+caex88 RxYj9AAKD5fChA== -----END CERTIFICATE-----Generated at Tue Feb 10 00:16:08 2026 by rpki-client