This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.mft File: K4V9n2ATsKvwt13vPuHIGbbCWEs.mft (raw, json) Hash identifier: dOnX8+x6oDxYCKPSMhLATr4xqQFZm94QYprcBHrS4GM= Subject key identifier: 7D:F1:3E:4F:6E:33:8F:F0:3D:DD:D1:68:ED:97:A1:64:30:E3:EC:9B Authority key identifier: 2B:85:7D:9F:60:13:B0:AB:F0:B7:5D:EF:3E:E1:C8:19:B6:C2:58:4B Certificate issuer: /CN=2b857d9f6013b0abf0b75def3ee1c819b6c2584b Certificate serial: 019C43C70BFE613E580709EACE71A18B08E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K4V9n2ATsKvwt13vPuHIGbbCWEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.mft Manifest number: 14C1 Signing time: Mon 09 Feb 2026 19:00:43 +0000 Manifest this update: Mon 09 Feb 2026 19:00:43 +0000 Manifest next update: Tue 10 Feb 2026 19:00:43 +0000 Files and hashes: 1: K4V9n2ATsKvwt13vPuHIGbbCWEs.crl (hash: d2bwDJjC3/YunClMCEBpiOLPaN342IJRpzY+0Q7s10U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.mft rsync://rpki.ripe.net/repository/DEFAULT/K4V9n2ATsKvwt13vPuHIGbbCWEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c7:0b:fe:61:3e:58:07:09:ea:ce:71:a1:8b:08:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b857d9f6013b0abf0b75def3ee1c819b6c2584b Validity Not Before: Feb 9 19:00:43 2026 GMT Not After : Feb 10 19:00:43 2026 GMT Subject: CN=7df13e4f6e338ff03dddd168ed97a16430e3ec9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9e:15:81:21:ae:84:54:f4:29:de:c3:40:51: ed:3a:ea:a4:e9:8e:3a:a5:71:c8:79:90:2f:26:13: e8:1a:76:00:67:c6:45:3b:a9:79:b1:b4:f4:dc:c9: 94:de:6d:f5:42:c9:aa:92:ba:b2:87:05:ae:8e:28: 7c:cf:53:c4:aa:44:d4:72:b1:0a:24:88:73:c6:a3: 53:40:4d:b2:15:e7:ad:72:64:3d:a9:fb:f0:15:28: 57:c2:58:50:e3:2b:1f:b9:45:ba:c5:bb:d0:d9:2f: b3:20:00:5a:8e:fa:c0:9e:85:c3:1c:23:7d:59:64: db:f5:a4:61:d7:ba:18:db:61:15:4a:81:ec:81:75: 99:b5:b5:13:73:af:1b:7a:2e:32:04:b4:d3:4e:69: 62:cb:b1:9f:70:eb:2a:b8:47:5e:a2:f3:f1:7b:b4: 51:71:f9:3b:0f:b5:c2:3d:8e:d0:ab:2c:d5:fd:1e: b4:30:7e:2b:cf:88:b1:86:9c:30:87:35:4d:d8:78: 6e:5b:af:dd:41:33:f2:84:48:93:3c:a0:83:c6:bf: 67:0d:01:83:30:45:35:82:e5:dd:1a:a5:6d:11:ba: 59:92:90:74:84:7d:c9:6d:a7:62:38:9e:e3:f1:f2: 6e:69:bb:2f:1c:b3:33:e7:83:58:3b:17:8a:fc:eb: 51:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:F1:3E:4F:6E:33:8F:F0:3D:DD:D1:68:ED:97:A1:64:30:E3:EC:9B X509v3 Authority Key Identifier: keyid:2B:85:7D:9F:60:13:B0:AB:F0:B7:5D:EF:3E:E1:C8:19:B6:C2:58:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K4V9n2ATsKvwt13vPuHIGbbCWEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:59:93:85:30:bb:6f:78:81:22:ee:93:4b:a0:98:96:93:b4: 99:dd:fa:8b:5d:0f:34:de:41:5f:25:d2:c8:87:8e:bf:c7:5f: 3f:99:a6:a4:fe:3b:16:1d:c5:dd:8d:cb:e0:d5:41:d0:b4:82: fa:a9:c3:f2:a2:6c:52:0c:9f:8e:97:63:e1:2e:e7:f2:f3:0b: 15:d7:d7:27:73:d2:be:eb:a5:b0:cd:cd:ce:bd:ab:2e:01:55: 14:18:42:3e:88:87:74:01:c2:7e:0a:70:08:df:4c:95:13:5b: 38:3a:d1:6d:4a:97:25:d6:33:84:05:00:6e:58:5f:09:37:1d: 00:9d:05:d3:f2:c1:af:a5:c3:88:cb:13:07:48:06:83:5e:c5: ca:08:16:7b:78:fa:75:64:1d:ec:f5:4a:f8:e6:d0:42:6a:db: 94:67:08:95:2f:45:cd:ba:99:c2:20:8c:16:a1:5d:9b:fc:c5: a1:6c:92:93:c2:ab:fc:6a:9c:14:87:cd:17:b9:b8:d2:07:90: cc:d5:c8:d7:35:17:a6:c1:b4:e8:d0:09:4b:24:01:a6:c6:73: b8:59:45:c1:03:7f:36:d6:80:87:8f:40:aa:67:2e:13:97:1e: 45:02:ea:b1:a9:42:c8:52:6f:72:fa:f2:df:fb:78:70:13:af: bf:12:55:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxwv+YT5YBwnqznGhiwjlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiODU3ZDlmNjAxM2IwYWJmMGI3NWRlZjNlZTFjODE5YjZj MjU4NGIwHhcNMjYwMjA5MTkwMDQzWhcNMjYwMjEwMTkwMDQzWjAzMTEwLwYDVQQD Eyg3ZGYxM2U0ZjZlMzM4ZmYwM2RkZGQxNjhlZDk3YTE2NDMwZTNlYzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxp4VgSGuhFT0Kd7DQFHtOuqk6Y46 pXHIeZAvJhPoGnYAZ8ZFO6l5sbT03MmU3m31QsmqkrqyhwWujih8z1PEqkTUcrEK JIhzxqNTQE2yFeetcmQ9qfvwFShXwlhQ4ysfuUW6xbvQ2S+zIABajvrAnoXDHCN9 WWTb9aRh17oY22EVSoHsgXWZtbUTc68bei4yBLTTTmliy7GfcOsquEdeovPxe7RR cfk7D7XCPY7QqyzV/R60MH4rz4ixhpwwhzVN2HhuW6/dQTPyhEiTPKCDxr9nDQGD MEU1guXdGqVtEbpZkpB0hH3JbadiOJ7j8fJuabsvHLMz54NYOxeK/OtR+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH3xPk9uM4/wPd3RaO2XoWQw4+ybMB8GA1UdIwQY MBaAFCuFfZ9gE7Cr8Ldd7z7hyBm2wlhLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzRWOW4yQVRzS3Z3dDEzdlB1SElHYmJDV0VzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8zNzhhMGQtMjcwZS00ZjViLTkxZTgt ZWFhOWQ2MTIzZjU3LzEvSzRWOW4yQVRzS3Z3dDEzdlB1SElHYmJDV0VzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC8zNzhhMGQtMjcwZS00ZjViLTkxZTgtZWFhOWQ2MTIzZjU3 LzEvSzRWOW4yQVRzS3Z3dDEzdlB1SElHYmJDV0VzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARFmThTC7 b3iBIu6TS6CYlpO0md36i10PNN5BXyXSyIeOv8dfP5mmpP47Fh3F3Y3L4NVB0LSC +qnD8qJsUgyfjpdj4S7n8vMLFdfXJ3PSvuulsM3Nzr2rLgFVFBhCPoiHdAHCfgpw CN9MlRNbODrRbUqXJdYzhAUAblhfCTcdAJ0F0/LBr6XDiMsTB0gGg17FyggWe3j6 dWQd7PVK+ObQQmrblGcIlS9FzbqZwiCMFqFdm/zFoWySk8Kr/GqcFIfNF7m40geQ zNXI1zUXpsG06NAJSyQBpsZzuFlFwQN/NtaAh49AqmcuE5ceRQLqsalCyFJvcvry 3/t4cBOvvxJV/Q== -----END CERTIFICATE-----Generated at Mon Feb 9 22:39:17 2026 by rpki-client