This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft File: KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft (raw, json) Hash identifier: mCP1uh52l6BLCGEuInr+5MRg4dNrewtcK+pfenR9m8U= Subject key identifier: 32:95:DC:C9:E0:9F:AB:AD:BF:FE:94:3E:C1:6A:A6:8C:00:65:C5:02 Authority key identifier: 28:0C:38:60:FB:96:A8:23:97:1E:2E:E6:2F:8A:BF:F0:93:86:16:04 Certificate issuer: /CN=280c3860fb96a823971e2ee62f8abff093861604 Certificate serial: 019C424683DF54D46B50044C480339368EF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft Manifest number: 047D Signing time: Mon 09 Feb 2026 12:00:43 +0000 Manifest this update: Mon 09 Feb 2026 12:00:43 +0000 Manifest next update: Tue 10 Feb 2026 12:00:43 +0000 Files and hashes: 1: KAw4YPuWqCOXHi7mL4q_8JOGFgQ.crl (hash: QwQ7EjfHDHgCUZBzuFOfeSyojwXqDa+qV4MbvWYhnMQ=) 2: h61hfdjD2qOmBnWHJGxzIB8c3I4.roa (hash: eeYDdA0+UQRYGPWmQqmukWqDEBNnCI6wRQqNfeNfgqY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.crl rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft rsync://rpki.ripe.net/repository/DEFAULT/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:83:df:54:d4:6b:50:04:4c:48:03:39:36:8e:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=280c3860fb96a823971e2ee62f8abff093861604 Validity Not Before: Feb 9 12:00:43 2026 GMT Not After : Feb 10 12:00:43 2026 GMT Subject: CN=3295dcc9e09fabadbffe943ec16aa68c0065c502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:21:9a:24:63:2d:b3:24:b2:b7:a6:53:38:b8: c3:db:f8:18:40:d3:89:39:a1:1e:16:3c:3c:62:fe: c4:c8:40:34:eb:44:34:35:b0:b6:86:c7:9f:8d:d8: f5:73:11:df:88:f0:4c:16:85:bd:5c:7d:cb:b6:b7: 79:28:bc:9e:44:62:e8:b3:90:39:3d:00:a4:01:7e: 00:2c:58:25:95:21:dd:47:d7:67:50:9c:50:43:fe: 96:3c:7e:ba:cd:a2:ea:9f:43:a0:83:41:be:03:d5: 93:ee:55:6e:6f:9d:25:b1:19:15:2d:1e:39:63:3b: b5:6c:79:37:fc:76:a1:41:33:db:16:06:8b:80:18: d6:9e:75:37:da:c2:f9:68:99:42:1d:14:33:b6:d9: d9:15:de:b9:ce:ee:c4:9c:3c:80:7d:31:2f:0d:0b: d8:9b:bb:3a:4c:42:27:8e:30:ad:64:47:50:1f:a2: e1:60:29:12:b9:01:b6:de:49:84:a1:49:27:9d:b0: 44:e4:72:be:81:18:a3:80:d6:8a:e4:f3:5d:01:49: f2:27:d7:b7:cd:b9:f6:19:62:8f:38:d0:d6:63:e6: 09:73:a4:9a:28:12:9c:a5:b3:99:fb:9f:f0:16:34: 59:1a:72:d5:e2:64:93:fe:ac:f4:48:37:f1:c4:a9: 32:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:95:DC:C9:E0:9F:AB:AD:BF:FE:94:3E:C1:6A:A6:8C:00:65:C5:02 X509v3 Authority Key Identifier: keyid:28:0C:38:60:FB:96:A8:23:97:1E:2E:E6:2F:8A:BF:F0:93:86:16:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:8d:12:7e:01:a9:5c:86:a2:b3:ab:a1:38:ee:f0:74:dc:bb: 47:69:d0:85:dc:30:56:15:c2:26:dd:d3:9f:e5:bc:73:26:de: 5e:d9:c0:b4:d8:4f:9a:14:46:7d:81:48:dc:93:29:31:82:1a: 15:a7:89:45:1f:b1:29:26:e1:a3:2a:4e:47:87:00:5d:c2:da: ef:53:29:f2:e2:cc:0c:ad:ad:4f:be:0a:ab:0a:60:96:ca:60: 70:5d:0d:14:2c:08:bd:94:a0:37:f8:40:c0:0a:79:c7:92:d5: c7:19:5c:bf:f3:49:a9:fc:55:98:36:a0:9f:ad:61:07:99:0c: ce:c6:e4:ee:fe:5c:ef:f6:ad:20:44:b0:8c:c5:a1:f4:f0:84: fc:46:99:fa:99:1b:1c:6e:1a:e8:d8:6d:e7:7f:c9:d6:de:a2: 26:9a:35:c2:d2:bf:7f:a7:d3:3d:e2:8e:da:91:ab:a3:71:35: 7b:28:a8:2c:3e:fa:62:00:de:e5:b8:d7:b1:f4:cb:67:f4:af: 10:2d:7d:2e:4e:82:90:31:1b:c4:70:ea:c7:a2:bf:42:81:46: 15:9c:82:8a:96:fa:69:22:28:fa:9a:58:88:ce:59:78:52:f9: d3:12:01:31:bc:32:d3:3c:d5:b1:fb:ec:54:05:2f:ba:99:43: 85:d1:d7:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRoPfVNRrUARMSAM5No72MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4MGMzODYwZmI5NmE4MjM5NzFlMmVlNjJmOGFiZmYwOTM4 NjE2MDQwHhcNMjYwMjA5MTIwMDQzWhcNMjYwMjEwMTIwMDQzWjAzMTEwLwYDVQQD EygzMjk1ZGNjOWUwOWZhYmFkYmZmZTk0M2VjMTZhYTY4YzAwNjVjNTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiGaJGMtsySyt6ZTOLjD2/gYQNOJ OaEeFjw8Yv7EyEA060Q0NbC2hsefjdj1cxHfiPBMFoW9XH3Ltrd5KLyeRGLos5A5 PQCkAX4ALFgllSHdR9dnUJxQQ/6WPH66zaLqn0Ogg0G+A9WT7lVub50lsRkVLR45 Yzu1bHk3/HahQTPbFgaLgBjWnnU32sL5aJlCHRQzttnZFd65zu7EnDyAfTEvDQvY m7s6TEInjjCtZEdQH6LhYCkSuQG23kmEoUknnbBE5HK+gRijgNaK5PNdAUnyJ9e3 zbn2GWKPONDWY+YJc6SaKBKcpbOZ+5/wFjRZGnLV4mST/qz0SDfxxKkyAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDKV3Mngn6utv/6UPsFqpowAZcUCMB8GA1UdIwQY MBaAFCgMOGD7lqgjlx4u5i+Kv/CThhYEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0F3NFlQdVdxQ09YSGk3bUw0cV84Sk9HRmdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9iMTM0YjctNzg0My00ZTBiLWFjMWQt MDYzYWVhOTNhZDdkLzEvS0F3NFlQdVdxQ09YSGk3bUw0cV84Sk9HRmdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny9iMTM0YjctNzg0My00ZTBiLWFjMWQtMDYzYWVhOTNhZDdk LzEvS0F3NFlQdVdxQ09YSGk3bUw0cV84Sk9HRmdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH40SfgGp XIais6uhOO7wdNy7R2nQhdwwVhXCJt3Tn+W8cybeXtnAtNhPmhRGfYFI3JMpMYIa FaeJRR+xKSbhoypOR4cAXcLa71Mp8uLMDK2tT74KqwpglspgcF0NFCwIvZSgN/hA wAp5x5LVxxlcv/NJqfxVmDagn61hB5kMzsbk7v5c7/atIESwjMWh9PCE/EaZ+pkb HG4a6Nht53/J1t6iJpo1wtK/f6fTPeKO2pGro3E1eyioLD76YgDe5bjXsfTLZ/Sv EC19Lk6CkDEbxHDqx6K/QoFGFZyCipb6aSIo+ppYiM5ZeFL50xIBMbwy0zzVsfvs VAUvuplDhdHXgA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:50 2026 by rpki-client