This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.mft File: kxqerhFBEi0V8KZO8HjIAp_r_jw.mft (raw, json) Hash identifier: 2rejDupUJwwM1nbEKwQ5oixoukGLtbBhsQcgyTjb9aw= Subject key identifier: EE:82:56:F6:96:E9:61:99:C4:CB:F3:5D:B5:29:3C:0A:68:E7:D9:01 Authority key identifier: 93:1A:9E:AE:11:41:12:2D:15:F0:A6:4E:F0:78:C8:02:9F:EB:FE:3C Certificate issuer: /CN=931a9eae1141122d15f0a64ef078c8029febfe3c Certificate serial: 019C420FE751BF9CC3C042D3389B8BC00B33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kxqerhFBEi0V8KZO8HjIAp_r_jw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.mft Manifest number: 180C Signing time: Mon 09 Feb 2026 11:01:04 +0000 Manifest this update: Mon 09 Feb 2026 11:01:04 +0000 Manifest next update: Tue 10 Feb 2026 11:01:04 +0000 Files and hashes: 1: kxqerhFBEi0V8KZO8HjIAp_r_jw.crl (hash: tQC0caQVDeP2c1rNJ84sryaLfxVN2S3ogEcTD74HxF8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.mft rsync://rpki.ripe.net/repository/DEFAULT/kxqerhFBEi0V8KZO8HjIAp_r_jw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:e7:51:bf:9c:c3:c0:42:d3:38:9b:8b:c0:0b:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=931a9eae1141122d15f0a64ef078c8029febfe3c Validity Not Before: Feb 9 11:01:04 2026 GMT Not After : Feb 10 11:01:04 2026 GMT Subject: CN=ee8256f696e96199c4cbf35db5293c0a68e7d901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:db:93:35:68:31:2b:ec:61:77:ff:a8:4a:98: 5e:d8:83:05:f7:11:ea:52:ff:8c:61:13:6d:fd:8e: d8:e9:12:45:1c:1a:7b:2e:19:2d:49:7e:ca:d9:cf: 68:67:83:5c:9e:83:56:39:e6:5d:5d:07:82:74:41: ed:a5:e3:9c:14:f2:82:1c:35:9f:0d:fa:94:06:8f: 7e:c5:37:b6:0d:0b:2d:2d:d3:94:3a:c7:cb:03:87: 0f:2a:ca:03:de:64:49:69:fd:f1:8c:08:f6:99:a7: 86:e6:08:7e:6d:91:e5:e8:90:ca:ff:62:bf:3c:a6: a3:96:8b:82:07:24:dc:a3:20:e2:62:e9:7c:ae:0f: 63:e0:47:66:03:04:a4:35:62:7b:5d:88:e2:20:ea: b6:0b:50:02:bc:a4:d8:43:4e:b8:ea:5f:60:bd:0f: 66:a3:9a:11:0c:f7:37:70:7b:34:25:d8:5e:6c:d9: a7:3b:ca:af:f1:f9:6d:82:00:85:1c:69:24:f8:0b: 13:ac:73:79:9c:77:e1:e3:6b:ee:67:fd:b9:dc:ee: 16:3d:b4:ce:6e:74:0f:46:74:32:57:ed:82:c5:6a: 49:cb:d4:b7:51:36:ee:a5:d7:27:5e:18:7e:97:bf: 91:3b:16:62:44:2e:59:a9:71:6b:ae:0a:bc:42:f5: 43:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:82:56:F6:96:E9:61:99:C4:CB:F3:5D:B5:29:3C:0A:68:E7:D9:01 X509v3 Authority Key Identifier: keyid:93:1A:9E:AE:11:41:12:2D:15:F0:A6:4E:F0:78:C8:02:9F:EB:FE:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kxqerhFBEi0V8KZO8HjIAp_r_jw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:77:ba:46:e3:d3:e7:be:ef:ad:63:5c:3c:71:47:48:56:3a: e2:ed:48:ef:53:d3:5c:f6:90:8c:52:ea:1a:d4:ad:cf:1a:0d: 7d:69:53:69:12:d4:37:11:cd:b5:b5:0a:81:2a:2a:4e:92:fd: 8c:53:ed:da:50:75:bb:81:c8:b5:88:1b:34:c3:1a:d5:42:0f: ce:c5:0b:5b:55:20:e5:78:aa:15:21:b0:f0:51:14:f1:28:08: 9b:c6:2c:30:76:62:c8:3a:03:7f:a8:99:01:b7:e6:ea:02:ea: e5:a9:21:cc:79:41:08:1d:ef:09:cb:26:34:06:97:69:e5:34: d4:b9:78:cb:43:8e:29:99:c7:5a:5c:18:88:2b:62:c1:a4:37: 58:83:a5:13:a0:30:a0:bf:3c:dc:83:6a:c7:6a:73:bc:e3:37: 42:42:7a:fb:39:75:e3:f2:fb:a1:4a:49:5a:16:d4:a8:4c:3f: 1e:74:8d:f1:33:28:d7:d4:e3:6b:e7:b8:cd:6d:55:06:84:d0: e5:a8:85:45:3b:18:fe:85:09:ca:6e:87:70:25:22:df:e5:3e: 23:f7:fe:a7:79:1f:a2:fe:05:28:66:a7:f2:70:a1:d4:93:de: a7:df:67:e6:4c:81:cd:40:36:b8:44:39:03:c6:69:17:b0:58: a1:75:af:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD+dRv5zDwELTOJuLwAszMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMWE5ZWFlMTE0MTEyMmQxNWYwYTY0ZWYwNzhjODAyOWZl YmZlM2MwHhcNMjYwMjA5MTEwMTA0WhcNMjYwMjEwMTEwMTA0WjAzMTEwLwYDVQQD EyhlZTgyNTZmNjk2ZTk2MTk5YzRjYmYzNWRiNTI5M2MwYTY4ZTdkOTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09uTNWgxK+xhd/+oSphe2IMF9xHq Uv+MYRNt/Y7Y6RJFHBp7LhktSX7K2c9oZ4NcnoNWOeZdXQeCdEHtpeOcFPKCHDWf DfqUBo9+xTe2DQstLdOUOsfLA4cPKsoD3mRJaf3xjAj2maeG5gh+bZHl6JDK/2K/ PKajlouCByTcoyDiYul8rg9j4EdmAwSkNWJ7XYjiIOq2C1ACvKTYQ0646l9gvQ9m o5oRDPc3cHs0JdhebNmnO8qv8fltggCFHGkk+AsTrHN5nHfh42vuZ/253O4WPbTO bnQPRnQyV+2CxWpJy9S3UTbupdcnXhh+l7+ROxZiRC5ZqXFrrgq8QvVDRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO6CVvaW6WGZxMvzXbUpPApo59kBMB8GA1UdIwQY MBaAFJManq4RQRItFfCmTvB4yAKf6/48MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3hxZXJoRkJFaTBWOEtaTzhIaklBcF9yX2p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi80NzM3NjgtM2E1OS00YjBiLWFkMjYt MTkxMzZiN2IwMzk2LzEva3hxZXJoRkJFaTBWOEtaTzhIaklBcF9yX2p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi80NzM3NjgtM2E1OS00YjBiLWFkMjYtMTkxMzZiN2IwMzk2 LzEva3hxZXJoRkJFaTBWOEtaTzhIaklBcF9yX2p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMXe6RuPT 577vrWNcPHFHSFY64u1I71PTXPaQjFLqGtStzxoNfWlTaRLUNxHNtbUKgSoqTpL9 jFPt2lB1u4HItYgbNMMa1UIPzsULW1Ug5XiqFSGw8FEU8SgIm8YsMHZiyDoDf6iZ Abfm6gLq5akhzHlBCB3vCcsmNAaXaeU01Ll4y0OOKZnHWlwYiCtiwaQ3WIOlE6Aw oL883INqx2pzvOM3QkJ6+zl14/L7oUpJWhbUqEw/HnSN8TMo19Tja+e4zW1VBoTQ 5aiFRTsY/oUJym6HcCUi3+U+I/f+p3kfov4FKGan8nCh1JPep99n5kyBzUA2uEQ5 A8ZpF7BYoXWvVQ== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:47 2026 by rpki-client