This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0bb8a0-3fb3-41ee-9f65-1c8d9e6ed124/1/KgedPD3CTph79wxKn6u6QFsIOkU.mft File: KgedPD3CTph79wxKn6u6QFsIOkU.mft (raw, json) Hash identifier: YSbZI2NA6dKu/iACXRxVHQ0TN4rbqSYb92spyiYWBsE= Subject key identifier: D2:1F:2C:AD:0A:B1:10:85:B5:A9:4F:BB:6F:DA:0C:26:74:09:3E:2C Authority key identifier: 2A:07:9D:3C:3D:C2:4E:98:7B:F7:0C:4A:9F:AB:BA:40:5B:08:3A:45 Certificate issuer: /CN=2a079d3c3dc24e987bf70c4a9fabba405b083a45 Certificate serial: 019C4322B23FF4ED55A76F0C472A61BB807C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgedPD3CTph79wxKn6u6QFsIOkU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0bb8a0-3fb3-41ee-9f65-1c8d9e6ed124/1/KgedPD3CTph79wxKn6u6QFsIOkU.mft Manifest number: 0D85 Signing time: Mon 09 Feb 2026 16:01:13 +0000 Manifest this update: Mon 09 Feb 2026 16:01:13 +0000 Manifest next update: Tue 10 Feb 2026 16:01:13 +0000 Files and hashes: 1: KgedPD3CTph79wxKn6u6QFsIOkU.crl (hash: kzK4oxbh4ITRFJaBp3+/XkNvoDWVvjD+OrQCueZ4YHc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0bb8a0-3fb3-41ee-9f65-1c8d9e6ed124/1/KgedPD3CTph79wxKn6u6QFsIOkU.crl rsync://rpki.ripe.net/repository/DEFAULT/80/0bb8a0-3fb3-41ee-9f65-1c8d9e6ed124/1/KgedPD3CTph79wxKn6u6QFsIOkU.mft rsync://rpki.ripe.net/repository/DEFAULT/KgedPD3CTph79wxKn6u6QFsIOkU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:b2:3f:f4:ed:55:a7:6f:0c:47:2a:61:bb:80:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a079d3c3dc24e987bf70c4a9fabba405b083a45 Validity Not Before: Feb 9 16:01:13 2026 GMT Not After : Feb 10 16:01:13 2026 GMT Subject: CN=d21f2cad0ab11085b5a94fbb6fda0c2674093e2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:23:e5:8b:af:26:31:88:54:1e:40:8f:12:56: 64:f3:ce:1a:e3:77:3d:0f:26:64:29:68:9f:de:0d: 70:ca:2a:28:ae:4d:fe:3d:42:77:03:f2:50:6d:fa: f7:1c:40:ee:83:b0:57:9d:b6:2d:9a:06:c1:ba:6b: 50:f8:0d:3c:95:b1:c7:2a:44:7f:16:f5:99:36:55: 44:f0:3f:d6:02:6b:14:07:4a:d3:19:60:80:1e:65: bf:f6:ce:2f:0f:a4:7c:6a:a5:f1:67:d1:f2:f3:7d: 72:1e:b3:c4:1c:a9:89:ec:d0:f2:bd:79:6e:cf:63: c9:b5:1c:c2:b7:63:a0:01:56:3a:d7:92:1a:ba:7e: 4c:4a:6b:74:55:67:e1:d8:b0:9b:f9:14:2a:46:3a: 15:cf:55:4c:ed:ad:01:c0:a5:3f:6a:18:c3:7d:0c: 7a:5e:77:8c:e9:aa:51:d2:e6:a0:75:ce:76:e9:ae: 8b:74:eb:4f:da:db:c8:a1:b0:78:ea:7a:77:21:9b: 2a:ab:09:81:9b:e9:7c:27:8b:03:1e:45:02:e6:07: 36:e0:f6:2b:ba:53:9f:fd:7c:b8:98:4d:c3:82:59: 7b:d0:6c:b3:7c:3e:86:c4:3a:ef:36:35:ec:d7:23: ef:51:a1:55:c1:b8:e8:cf:84:26:28:c2:22:fd:fd: a7:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:1F:2C:AD:0A:B1:10:85:B5:A9:4F:BB:6F:DA:0C:26:74:09:3E:2C X509v3 Authority Key Identifier: keyid:2A:07:9D:3C:3D:C2:4E:98:7B:F7:0C:4A:9F:AB:BA:40:5B:08:3A:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgedPD3CTph79wxKn6u6QFsIOkU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0bb8a0-3fb3-41ee-9f65-1c8d9e6ed124/1/KgedPD3CTph79wxKn6u6QFsIOkU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0bb8a0-3fb3-41ee-9f65-1c8d9e6ed124/1/KgedPD3CTph79wxKn6u6QFsIOkU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:fd:a1:00:07:ce:3b:14:7a:af:71:4b:57:65:f7:bf:2a:74: f6:42:fc:ef:bf:b0:37:20:28:a0:db:bf:51:e8:6b:16:1f:b6: 44:35:d5:2f:49:59:a6:f7:29:56:bf:88:86:db:ae:55:10:67: 77:e3:20:79:a1:c3:14:50:de:4c:11:73:90:bf:b5:a9:ca:68: a9:41:0c:76:d9:a8:a2:0f:d2:d4:5d:5e:45:5d:f2:61:a2:f4: 5a:d6:2e:d9:61:e0:51:98:35:2d:ad:b3:1a:03:c6:51:1f:53: 0f:63:39:7d:32:09:ee:37:8c:ed:b4:79:bf:a2:59:55:8a:41: 3b:bf:84:52:b8:36:26:5e:f0:35:13:8e:e0:52:ab:5a:04:30: d3:34:2e:fa:3c:02:89:32:0f:94:05:46:e2:9c:88:7a:fd:b8: 34:a6:a0:52:70:f5:51:1d:75:27:e7:0a:c1:74:ed:08:a2:b5: 82:b0:05:4a:3c:e5:5d:e8:68:6b:f5:9c:cc:d8:27:16:0a:54: d4:53:b7:fe:21:8c:de:84:85:58:10:e0:8f:e1:79:15:e6:3a: eb:fe:50:3a:d5:25:c3:b7:d0:66:fe:82:78:4a:64:a1:68:f3: ec:ef:3d:43:95:75:85:94:ef:2f:15:45:fe:d5:8b:b0:ab:36: 51:9d:ea:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIrI/9O1Vp28MRyphu4B8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhMDc5ZDNjM2RjMjRlOTg3YmY3MGM0YTlmYWJiYTQwNWIw ODNhNDUwHhcNMjYwMjA5MTYwMTEzWhcNMjYwMjEwMTYwMTEzWjAzMTEwLwYDVQQD EyhkMjFmMmNhZDBhYjExMDg1YjVhOTRmYmI2ZmRhMGMyNjc0MDkzZTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyPli68mMYhUHkCPElZk884a43c9 DyZkKWif3g1wyioork3+PUJ3A/JQbfr3HEDug7BXnbYtmgbBumtQ+A08lbHHKkR/ FvWZNlVE8D/WAmsUB0rTGWCAHmW/9s4vD6R8aqXxZ9Hy831yHrPEHKmJ7NDyvXlu z2PJtRzCt2OgAVY615Iaun5MSmt0VWfh2LCb+RQqRjoVz1VM7a0BwKU/ahjDfQx6 XneM6apR0uagdc526a6LdOtP2tvIobB46np3IZsqqwmBm+l8J4sDHkUC5gc24PYr ulOf/Xy4mE3Dgll70GyzfD6GxDrvNjXs1yPvUaFVwbjoz4QmKMIi/f2nzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNIfLK0KsRCFtalPu2/aDCZ0CT4sMB8GA1UdIwQY MBaAFCoHnTw9wk6Ye/cMSp+rukBbCDpFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2dlZFBEM0NUcGg3OXd4S242dTZRRnNJT2tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8wYmI4YTAtM2ZiMy00MWVlLTlmNjUt MWM4ZDllNmVkMTI0LzEvS2dlZFBEM0NUcGg3OXd4S242dTZRRnNJT2tVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC8wYmI4YTAtM2ZiMy00MWVlLTlmNjUtMWM4ZDllNmVkMTI0 LzEvS2dlZFBEM0NUcGg3OXd4S242dTZRRnNJT2tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlP2hAAfO OxR6r3FLV2X3vyp09kL877+wNyAooNu/UehrFh+2RDXVL0lZpvcpVr+IhtuuVRBn d+MgeaHDFFDeTBFzkL+1qcpoqUEMdtmoog/S1F1eRV3yYaL0WtYu2WHgUZg1La2z GgPGUR9TD2M5fTIJ7jeM7bR5v6JZVYpBO7+EUrg2Jl7wNROO4FKrWgQw0zQu+jwC iTIPlAVG4pyIev24NKagUnD1UR11J+cKwXTtCKK1grAFSjzlXehoa/WczNgnFgpU 1FO3/iGM3oSFWBDgj+F5FeY66/5QOtUlw7fQZv6CeEpkoWjz7O89Q5V1hZTvLxVF /tWLsKs2UZ3qTQ== -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:08 2026 by rpki-client