This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft File: kNzOkQAEUUlMQ8FdFy2i651beVY.mft (raw, json) Hash identifier: +0GgO+zcV84p1ITWfnvmrNgXH3Fuyf584xNsCjj0K7Q= Subject key identifier: 97:40:07:D3:76:72:73:18:13:8C:2B:15:78:0E:A4:26:5E:CA:D4:11 Authority key identifier: 90:DC:CE:91:00:04:51:49:4C:43:C1:5D:17:2D:A2:EB:9D:5B:79:56 Certificate issuer: /CN=90dcce91000451494c43c15d172da2eb9d5b7956 Certificate serial: 019C446BEA8199A34BBF4436AFEA7B2A339D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNzOkQAEUUlMQ8FdFy2i651beVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft Manifest number: 1813 Signing time: Mon 09 Feb 2026 22:00:48 +0000 Manifest this update: Mon 09 Feb 2026 22:00:48 +0000 Manifest next update: Tue 10 Feb 2026 22:00:48 +0000 Files and hashes: 1: kNzOkQAEUUlMQ8FdFy2i651beVY.crl (hash: xhmQ4Sqv6hY7T/AjNYE+QI/V9af04dT6/4Wb45GYUqA=) 2: v6hZlCLBBmxSHliCj0VjnvLOn9M.roa (hash: fL2kZZLRxFW7FCE2FWvmH/Er7BzpFmXug5hP8LnWm4M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft rsync://rpki.ripe.net/repository/DEFAULT/kNzOkQAEUUlMQ8FdFy2i651beVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6b:ea:81:99:a3:4b:bf:44:36:af:ea:7b:2a:33:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcce91000451494c43c15d172da2eb9d5b7956 Validity Not Before: Feb 9 22:00:48 2026 GMT Not After : Feb 10 22:00:48 2026 GMT Subject: CN=974007d376727318138c2b15780ea4265ecad411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7d:62:10:b0:d0:a5:0b:00:7e:9c:aa:8f:fa: d0:65:9f:14:7a:2d:7e:da:39:91:f9:97:0a:7d:65: de:e0:be:8f:62:f1:4c:3c:30:61:9b:d4:96:cf:f2: 6a:81:82:e5:a4:66:17:55:ed:74:55:23:d6:b6:28: bd:0e:47:1f:8a:1b:65:af:5e:3b:a6:0c:ec:a6:d1: 53:9e:dc:1c:96:b0:82:fd:cd:9f:37:bb:8e:ab:5f: 7f:cc:27:73:fc:3c:80:d6:ce:4d:ea:01:8d:64:a4: 7f:16:d4:c7:f5:2e:91:93:65:67:10:d3:fd:e6:31: e3:f0:cc:74:2c:1f:07:19:2e:42:32:36:3e:6a:cb: f5:56:ea:d0:db:f0:bf:45:bb:99:90:b0:2d:ae:3b: 97:98:05:af:6f:d7:4d:11:9b:a0:37:13:15:34:f0: 78:94:17:32:fa:c3:93:f7:07:89:1b:7a:25:c8:70: 39:53:11:29:c9:d0:c4:42:25:64:78:a5:a6:06:d6: a3:e0:74:ac:e9:1b:a2:0f:b9:ff:aa:03:a2:97:81: 5f:a0:f4:75:4e:cc:dd:f6:fc:a1:1d:d2:d4:8e:be: e6:df:8e:f5:ba:2b:95:58:c7:48:91:88:03:af:c8: 48:5a:69:b2:38:56:e8:ad:3f:6f:a8:65:7e:24:f4: 63:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:40:07:D3:76:72:73:18:13:8C:2B:15:78:0E:A4:26:5E:CA:D4:11 X509v3 Authority Key Identifier: keyid:90:DC:CE:91:00:04:51:49:4C:43:C1:5D:17:2D:A2:EB:9D:5B:79:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNzOkQAEUUlMQ8FdFy2i651beVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:b5:9e:a1:78:b1:67:4e:47:c6:fb:59:30:f1:48:f3:a8:26: 85:91:1d:0f:47:ca:8e:fc:20:eb:a1:5e:e5:63:97:cf:e9:d2: 1c:d8:4e:58:8f:26:cc:13:50:b9:52:e8:33:48:bf:1d:e4:2b: e4:56:8a:a6:ba:e6:4e:f3:2f:c7:cf:3b:33:50:6e:cb:b0:39: 3b:10:12:35:84:28:fb:a5:6a:6b:89:3b:e9:c4:19:05:91:19: 6c:fd:56:96:17:9c:36:c3:76:16:ca:59:bd:d1:40:37:5c:47: c9:60:fb:99:b6:31:5c:1c:61:90:9b:22:74:7b:2e:3f:b5:76: 3e:ff:ac:ef:69:2d:91:05:4c:5f:1f:b7:d2:66:3b:18:3e:42: fb:f3:35:57:a0:1f:bd:3c:33:0c:27:bc:38:08:f0:21:a0:04: 3c:19:46:44:b8:3a:d3:a1:30:9e:08:ab:af:90:a5:a3:0f:2c: dc:c5:62:8a:a0:dd:fe:74:96:76:8e:fd:84:5d:eb:0c:59:80: 48:e2:4e:77:74:48:20:4f:30:78:fb:b1:8b:6e:c5:3b:15:0f: f5:5a:43:ad:b9:60:43:be:20:65:95:ff:a0:79:00:a5:d6:48: 30:73:1d:6e:51:ea:8e:cf:83:3c:94:91:79:cd:69:4b:78:4a: 6a:72:da:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEa+qBmaNLv0Q2r+p7KjOdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwZGNjZTkxMDAwNDUxNDk0YzQzYzE1ZDE3MmRhMmViOWQ1 Yjc5NTYwHhcNMjYwMjA5MjIwMDQ4WhcNMjYwMjEwMjIwMDQ4WjAzMTEwLwYDVQQD Eyg5NzQwMDdkMzc2NzI3MzE4MTM4YzJiMTU3ODBlYTQyNjVlY2FkNDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsH1iELDQpQsAfpyqj/rQZZ8Uei1+ 2jmR+ZcKfWXe4L6PYvFMPDBhm9SWz/JqgYLlpGYXVe10VSPWtii9Dkcfihtlr147 pgzsptFTntwclrCC/c2fN7uOq19/zCdz/DyA1s5N6gGNZKR/FtTH9S6Rk2VnENP9 5jHj8Mx0LB8HGS5CMjY+asv1VurQ2/C/RbuZkLAtrjuXmAWvb9dNEZugNxMVNPB4 lBcy+sOT9weJG3olyHA5UxEpydDEQiVkeKWmBtaj4HSs6RuiD7n/qgOil4FfoPR1 Tszd9vyhHdLUjr7m3471uiuVWMdIkYgDr8hIWmmyOFborT9vqGV+JPRjPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJdAB9N2cnMYE4wrFXgOpCZeytQRMB8GA1UdIwQY MBaAFJDczpEABFFJTEPBXRctouudW3lWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva056T2tRQUVVVWxNUThGZEZ5Mmk2NTFiZVZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi81MWZkYmItOGJhMi00YjdlLTk4MGYt ZWU2MGIwZGRiZGFhLzEva056T2tRQUVVVWxNUThGZEZ5Mmk2NTFiZVZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi81MWZkYmItOGJhMi00YjdlLTk4MGYtZWU2MGIwZGRiZGFh LzEva056T2tRQUVVVWxNUThGZEZ5Mmk2NTFiZVZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAALWeoXix Z05HxvtZMPFI86gmhZEdD0fKjvwg66Fe5WOXz+nSHNhOWI8mzBNQuVLoM0i/HeQr 5FaKprrmTvMvx887M1Buy7A5OxASNYQo+6Vqa4k76cQZBZEZbP1WlhecNsN2FspZ vdFAN1xHyWD7mbYxXBxhkJsidHsuP7V2Pv+s72ktkQVMXx+30mY7GD5C+/M1V6Af vTwzDCe8OAjwIaAEPBlGRLg606Ewngirr5Clow8s3MViiqDd/nSWdo79hF3rDFmA SOJOd3RIIE8wePuxi27FOxUP9VpDrblgQ74gZZX/oHkApdZIMHMdblHqjs+DPJSR ec1pS3hKanLaKA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:21:27 2026 by rpki-client