This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft File: Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft (raw, json) Hash identifier: aLJaJHtA43UARaWR9u92mhgHYhzspaO0DSKGs/No8MU= Subject key identifier: 64:8E:13:46:AF:95:CE:EF:C0:D3:DE:B6:5D:56:52:8E:A0:55:B0:35 Authority key identifier: 2A:5F:ED:CE:6C:B6:6C:B1:16:D8:8B:B1:8C:E6:99:54:81:6B:2A:96 Certificate issuer: /CN=2a5fedce6cb66cb116d88bb18ce69954816b2a96 Certificate serial: 019C2E5256B53D0AF8C78CA40549C78A6D47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft Manifest number: 1D Signing time: Thu 05 Feb 2026 15:01:13 +0000 Manifest this update: Thu 05 Feb 2026 15:01:13 +0000 Manifest next update: Fri 06 Feb 2026 15:01:13 +0000 Files and hashes: 1: Gt8AttkMqKTiLVHyeqFNO8DAGP0.roa (hash: s86szL8265q8OwDOqZVUDoT3m+wxdZsCCBfzFGbpdiI=) 2: Kl_tzmy2bLEW2IuxjOaZVIFrKpY.crl (hash: p7zOul4rKPGUp4xPOkmIJESZ+xtkt4+Fig5eTz6wMwg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft rsync://rpki.ripe.net/repository/DEFAULT/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 12:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:2e:52:56:b5:3d:0a:f8:c7:8c:a4:05:49:c7:8a:6d:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a5fedce6cb66cb116d88bb18ce69954816b2a96 Validity Not Before: Feb 5 15:01:13 2026 GMT Not After : Feb 6 15:01:13 2026 GMT Subject: CN=648e1346af95ceefc0d3deb65d56528ea055b035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:02:67:22:4a:36:51:44:d1:f1:1e:25:1e:a5: 1f:0a:98:dd:0f:ae:39:87:81:d9:07:70:4c:5b:06: c5:c6:88:8d:c0:c0:56:15:79:eb:e6:73:6d:f3:ed: 31:2e:b6:4a:ed:9d:47:15:21:87:f1:96:02:ca:09: e3:0f:df:f0:58:1b:0c:5b:2e:76:d9:5c:c5:4d:79: 16:7b:ea:f5:b5:4c:a1:3f:9e:dd:c9:98:c7:64:e3: f4:fd:2e:9d:e3:e6:ff:7e:67:4e:63:82:d9:3b:f3: 55:a0:43:b0:27:44:3f:14:9c:f9:d9:4e:d1:8f:db: cf:9a:59:44:60:86:7f:d8:df:82:ed:64:46:20:3b: 06:dd:d8:59:27:2f:60:87:a0:49:28:93:46:90:1e: 52:30:ca:9b:34:78:75:2a:35:43:4a:d9:36:42:d3: 03:49:33:8c:a2:cd:47:5b:ed:e0:6b:bf:3b:6d:b2: 54:81:b9:8f:e2:71:ad:ce:42:0b:d4:a9:56:4f:7a: a9:8d:34:6e:d1:02:70:65:40:81:d4:9c:86:b9:24: 36:61:e5:27:c3:77:d7:20:05:b0:a1:06:b0:f0:a4: 17:64:dc:ca:a6:65:8b:40:8a:0b:29:a7:90:a0:1d: 2a:08:74:c6:22:dd:29:32:73:69:61:14:b2:51:3d: 03:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:8E:13:46:AF:95:CE:EF:C0:D3:DE:B6:5D:56:52:8E:A0:55:B0:35 X509v3 Authority Key Identifier: keyid:2A:5F:ED:CE:6C:B6:6C:B1:16:D8:8B:B1:8C:E6:99:54:81:6B:2A:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b11871-0e4e-4746-a2bf-c2f8bb1a874b/1/Kl_tzmy2bLEW2IuxjOaZVIFrKpY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:01:d8:8f:46:e0:21:0c:22:62:31:d2:05:26:51:21:47:12: 96:71:4d:93:8f:b4:29:68:39:c2:d3:1e:37:a3:98:f9:25:e4: a1:db:82:45:64:ae:ae:51:17:c2:6a:f0:86:69:35:cc:a2:4e: fe:01:03:f7:f5:fb:b1:b1:f1:81:b4:50:bd:68:4c:6e:06:f3: 45:42:a4:4c:f3:5b:69:2a:88:da:fb:d8:1d:97:76:65:28:4b: 6a:b3:59:d2:fe:70:f8:e8:e5:76:1e:da:e6:73:2b:8b:23:5e: bc:f1:65:c4:58:35:ba:a8:00:fb:45:87:2d:06:1d:22:06:41: f6:60:e6:3c:3d:ce:a2:51:38:76:c5:87:85:34:00:46:bb:07: 1f:85:c1:4d:ab:a7:b8:d4:ec:12:32:de:ec:8b:f2:79:aa:8a: 92:97:12:d6:6d:aa:68:1c:70:b8:a4:01:ff:58:17:78:ba:ae: 2f:7c:a4:53:ea:34:d2:04:f4:db:e7:d8:7d:69:8b:e6:8f:aa: 61:26:ca:91:86:5d:00:d6:9e:6b:3d:f3:ff:d7:63:1b:1f:db: 51:86:00:c7:b1:24:1c:74:cf:19:2f:da:a2:59:76:68:ac:f0: 1f:2d:01:be:3c:ee:75:f0:14:57:b1:0b:c5:0c:bf:a7:d8:f7: 76:28:19:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwuUla1PQr4x4ykBUnHim1HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhNWZlZGNlNmNiNjZjYjExNmQ4OGJiMThjZTY5OTU0ODE2 YjJhOTYwHhcNMjYwMjA1MTUwMTEzWhcNMjYwMjA2MTUwMTEzWjAzMTEwLwYDVQQD Eyg2NDhlMTM0NmFmOTVjZWVmYzBkM2RlYjY1ZDU2NTI4ZWEwNTViMDM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwJnIko2UUTR8R4lHqUfCpjdD645 h4HZB3BMWwbFxoiNwMBWFXnr5nNt8+0xLrZK7Z1HFSGH8ZYCygnjD9/wWBsMWy52 2VzFTXkWe+r1tUyhP57dyZjHZOP0/S6d4+b/fmdOY4LZO/NVoEOwJ0Q/FJz52U7R j9vPmllEYIZ/2N+C7WRGIDsG3dhZJy9gh6BJKJNGkB5SMMqbNHh1KjVDStk2QtMD STOMos1HW+3ga787bbJUgbmP4nGtzkIL1KlWT3qpjTRu0QJwZUCB1JyGuSQ2YeUn w3fXIAWwoQaw8KQXZNzKpmWLQIoLKaeQoB0qCHTGIt0pMnNpYRSyUT0DjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGSOE0avlc7vwNPetl1WUo6gVbA1MB8GA1UdIwQY MBaAFCpf7c5stmyxFtiLsYzmmVSBayqWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2xfdHpteTJiTEVXMkl1eGpPYVpWSUZyS3BZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9iMTE4NzEtMGU0ZS00NzQ2LWEyYmYt YzJmOGJiMWE4NzRiLzEvS2xfdHpteTJiTEVXMkl1eGpPYVpWSUZyS3BZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9iMTE4NzEtMGU0ZS00NzQ2LWEyYmYtYzJmOGJiMWE4NzRi LzEvS2xfdHpteTJiTEVXMkl1eGpPYVpWSUZyS3BZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATQHYj0bg IQwiYjHSBSZRIUcSlnFNk4+0KWg5wtMeN6OY+SXkoduCRWSurlEXwmrwhmk1zKJO /gED9/X7sbHxgbRQvWhMbgbzRUKkTPNbaSqI2vvYHZd2ZShLarNZ0v5w+Ojldh7a 5nMriyNevPFlxFg1uqgA+0WHLQYdIgZB9mDmPD3OolE4dsWHhTQARrsHH4XBTaun uNTsEjLe7IvyeaqKkpcS1m2qaBxwuKQB/1gXeLquL3ykU+o00gT02+fYfWmL5o+q YSbKkYZdANaeaz3z/9djGx/bUYYAx7EkHHTPGS/aoll2aKzwHy0BvjzudfAUV7EL xQy/p9j3digZHg== -----END CERTIFICATE-----Generated at Thu Feb 5 19:30:03 2026 by rpki-client