This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft File: khkujXhVgfcrGGRCJL2MP6ii0Rs.mft (raw, json) Hash identifier: uY3OjhYIhtGjo443ffeL1YbSly+HtIL+9hq/f1zOlV8= Subject key identifier: EC:90:9A:A1:7E:0F:59:E6:B2:4A:99:38:63:B0:9D:C7:4C:F9:C9:49 Authority key identifier: 92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B Certificate issuer: /CN=92192e8d785581f72b18644224bd8c3fa8a2d11b Certificate serial: 019C420F9D11451BBD38C0F2953A7C42FE33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft Manifest number: 125B Signing time: Mon 09 Feb 2026 11:00:45 +0000 Manifest this update: Mon 09 Feb 2026 11:00:45 +0000 Manifest next update: Tue 10 Feb 2026 11:00:45 +0000 Files and hashes: 1: 6XTvKYOWArxSLCYpZyFtRKy1BwY.roa (hash: q+OFHDRHt78V30ra3TlTCxASRgABfMuSa8g4ROPV36E=) 2: TsyHYJznOMFi1E9jD0gztHEExcE.roa (hash: e/QoaG3BRXETSSHR/WO7wjf64PB2DD1L8zEt4AtY7G8=) 3: khkujXhVgfcrGGRCJL2MP6ii0Rs.crl (hash: MLJ2MUJlZLGv89XQr836eLtsh7tVqK48wpGWY5NzR88=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:9d:11:45:1b:bd:38:c0:f2:95:3a:7c:42:fe:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92192e8d785581f72b18644224bd8c3fa8a2d11b Validity Not Before: Feb 9 11:00:45 2026 GMT Not After : Feb 10 11:00:45 2026 GMT Subject: CN=ec909aa17e0f59e6b24a993863b09dc74cf9c949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b3:04:77:80:a9:1b:0e:75:1d:65:ab:8b:f8: af:61:27:1d:57:4b:05:65:1c:fd:eb:7d:97:fa:b5: cb:d2:a0:d1:5e:ad:0e:40:95:16:3c:a1:a1:03:86: 52:f8:4b:c3:21:c6:74:8a:72:c6:df:02:75:21:b3: 0e:59:25:ad:6a:bc:8d:d4:30:f6:93:3e:bc:de:98: 4b:6f:8e:5d:7f:85:1a:b7:64:79:ad:cb:8f:6b:26: 20:6a:60:33:10:7a:e4:4e:06:e2:29:25:3e:df:dd: 29:2b:52:cf:bf:d5:7f:1a:3a:ee:b8:9c:d3:03:15: c0:64:b5:f9:37:2c:c1:74:e5:91:37:fa:60:8b:44: 49:04:63:47:ce:b8:35:a9:10:1c:73:5c:da:39:62: c1:53:ba:18:2c:07:1b:ac:05:ad:63:f1:dd:52:bf: 0b:01:da:68:3f:a0:4f:39:d9:7b:3e:0b:7c:09:28: ef:a7:6c:2a:17:10:34:82:7f:86:23:8a:bb:67:41: 59:90:d1:87:cd:90:c6:dc:8b:c9:a5:0d:a7:0c:21: 12:1f:39:53:17:59:9b:a8:fe:bb:95:a6:f5:0c:41: f2:bf:c0:0e:5b:66:39:12:36:c9:59:e9:6d:e1:08: 6e:12:5a:5b:05:78:75:87:d3:2e:5e:9d:04:0a:1a: 70:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:90:9A:A1:7E:0F:59:E6:B2:4A:99:38:63:B0:9D:C7:4C:F9:C9:49 X509v3 Authority Key Identifier: keyid:92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:37:7a:1c:92:a4:43:e4:e8:e1:4b:2c:a7:49:7e:ba:8e:fd: ed:b2:30:d6:36:a9:a2:70:95:9e:82:b9:49:83:ad:25:f8:2d: 49:cc:6e:f1:2d:b7:b7:c9:3d:4d:88:7b:f8:d1:cb:5f:28:ec: 08:19:e1:b4:f7:c2:60:61:b1:39:dc:84:42:e9:e2:0e:32:d8: d7:9a:7f:06:f9:04:db:b5:3b:31:a6:e8:bc:cb:59:12:55:f7: cb:53:9d:d6:26:2d:1b:31:b8:9c:6d:30:5d:23:9a:91:48:60: 53:e5:dc:af:95:db:a0:ee:c3:f2:35:da:17:f4:73:97:83:89: 6f:29:cb:50:cd:94:ba:95:5c:24:ab:f2:3a:b7:8a:1a:b1:18: 8d:8a:88:74:dd:45:49:10:8c:22:2e:52:7f:81:01:eb:08:7b: 2e:4c:a5:57:e7:a6:65:5a:c6:8a:8a:6c:e7:27:ee:47:84:43: 43:48:7c:9e:bc:0c:91:65:62:5a:c5:27:4c:e4:be:6a:db:e1: 05:c4:df:42:6f:27:b0:29:fd:03:9a:b8:af:2f:7f:0c:28:4f: b4:35:5a:a7:41:10:52:50:b8:17:b9:11:99:83:0f:d6:34:f0: 1d:98:2a:6d:0b:cd:f2:09:84:8f:22:95:c2:9e:6a:28:e0:77: 6d:18:68:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD50RRRu9OMDylTp8Qv4zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMTkyZThkNzg1NTgxZjcyYjE4NjQ0MjI0YmQ4YzNmYThh MmQxMWIwHhcNMjYwMjA5MTEwMDQ1WhcNMjYwMjEwMTEwMDQ1WjAzMTEwLwYDVQQD EyhlYzkwOWFhMTdlMGY1OWU2YjI0YTk5Mzg2M2IwOWRjNzRjZjljOTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrMEd4CpGw51HWWri/ivYScdV0sF ZRz9632X+rXL0qDRXq0OQJUWPKGhA4ZS+EvDIcZ0inLG3wJ1IbMOWSWtaryN1DD2 kz683phLb45df4Uat2R5rcuPayYgamAzEHrkTgbiKSU+390pK1LPv9V/GjruuJzT AxXAZLX5NyzBdOWRN/pgi0RJBGNHzrg1qRAcc1zaOWLBU7oYLAcbrAWtY/HdUr8L AdpoP6BPOdl7Pgt8CSjvp2wqFxA0gn+GI4q7Z0FZkNGHzZDG3IvJpQ2nDCESHzlT F1mbqP67lab1DEHyv8AOW2Y5EjbJWelt4QhuElpbBXh1h9MuXp0EChpw0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOyQmqF+D1nmskqZOGOwncdM+clJMB8GA1UdIwQY MBaAFJIZLo14VYH3KxhkQiS9jD+ootEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2hrdWpYaFZnZmNyR0dSQ0pMMk1QNmlpMFJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9kOWIzOTctZTEwNS00YWM5LTg1Mzct MDA4NWEzNjVhMjVmLzEva2hrdWpYaFZnZmNyR0dSQ0pMMk1QNmlpMFJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9kOWIzOTctZTEwNS00YWM5LTg1MzctMDA4NWEzNjVhMjVm LzEva2hrdWpYaFZnZmNyR0dSQ0pMMk1QNmlpMFJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABTd6HJKk Q+To4Ussp0l+uo797bIw1japonCVnoK5SYOtJfgtScxu8S23t8k9TYh7+NHLXyjs CBnhtPfCYGGxOdyEQuniDjLY15p/BvkE27U7MabovMtZElX3y1Od1iYtGzG4nG0w XSOakUhgU+Xcr5XboO7D8jXaF/Rzl4OJbynLUM2UupVcJKvyOreKGrEYjYqIdN1F SRCMIi5Sf4EB6wh7LkylV+emZVrGiops5yfuR4RDQ0h8nrwMkWViWsUnTOS+atvh BcTfQm8nsCn9A5q4ry9/DChPtDVap0EQUlC4F7kRmYMP1jTwHZgqbQvN8gmEjyKV wp5qKOB3bRhoTA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:37 2026 by rpki-client