This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/1571dd-2e9e-4a50-b812-961a06d2acf4/1/kH0CMEqKBjCv5qmF5NwJAHhR-Dk.mft File: kH0CMEqKBjCv5qmF5NwJAHhR-Dk.mft (raw, json) Hash identifier: taro2FQhwnnUAhKZZwyLwp5+gaHcmGoE3IGew/I8dK0= Subject key identifier: 39:E1:48:4C:A7:4F:00:38:81:EF:70:73:CC:C9:ED:25:81:CA:EE:B2 Authority key identifier: 90:7D:02:30:4A:8A:06:30:AF:E6:A9:85:E4:DC:09:00:78:51:F8:39 Certificate issuer: /CN=907d02304a8a0630afe6a985e4dc09007851f839 Certificate serial: 019C42B410B50ED4E726E6029C99D13D90A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kH0CMEqKBjCv5qmF5NwJAHhR-Dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/1571dd-2e9e-4a50-b812-961a06d2acf4/1/kH0CMEqKBjCv5qmF5NwJAHhR-Dk.mft Manifest number: 0189 Signing time: Mon 09 Feb 2026 14:00:22 +0000 Manifest this update: Mon 09 Feb 2026 14:00:22 +0000 Manifest next update: Tue 10 Feb 2026 14:00:22 +0000 Files and hashes: 1: kH0CMEqKBjCv5qmF5NwJAHhR-Dk.crl (hash: Mgpcu1SKU6aSstHDBEyCUk53tWM8caDKEaeCx2+gNrE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/1571dd-2e9e-4a50-b812-961a06d2acf4/1/kH0CMEqKBjCv5qmF5NwJAHhR-Dk.crl rsync://rpki.ripe.net/repository/DEFAULT/96/1571dd-2e9e-4a50-b812-961a06d2acf4/1/kH0CMEqKBjCv5qmF5NwJAHhR-Dk.mft rsync://rpki.ripe.net/repository/DEFAULT/kH0CMEqKBjCv5qmF5NwJAHhR-Dk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:10:b5:0e:d4:e7:26:e6:02:9c:99:d1:3d:90:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=907d02304a8a0630afe6a985e4dc09007851f839 Validity Not Before: Feb 9 14:00:22 2026 GMT Not After : Feb 10 14:00:22 2026 GMT Subject: CN=39e1484ca74f003881ef7073ccc9ed2581caeeb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:96:cc:bf:b1:ec:48:68:eb:9a:78:93:17:7a: c4:c9:82:f3:26:88:50:84:c6:d2:44:78:cd:65:57: 31:ad:f3:ab:28:19:ac:7f:3d:10:6a:71:05:0a:e6: a6:1a:3d:8f:ca:0e:28:26:78:3d:3e:4f:0b:c5:61: 63:3e:58:c3:6f:fd:b3:e8:9c:83:42:92:cb:75:17: 9c:a1:0e:a6:84:88:70:1e:fd:43:23:23:36:f9:94: 41:fc:38:af:c3:6c:29:28:36:54:84:07:71:d6:83: a4:8a:2e:66:e2:46:c0:ff:48:02:ef:e9:39:37:b8: 29:df:52:5d:7f:64:8a:4c:cf:d5:45:40:b7:2a:16: ad:ff:9b:de:fc:aa:7e:94:90:ff:a7:d6:7b:56:78: db:41:b4:ce:aa:a0:06:11:70:79:e1:0f:72:f9:2a: d1:69:5f:26:4e:a1:36:24:e8:8b:0b:4e:ae:d0:f1: b8:e7:b5:2f:2b:c1:e0:bd:85:7e:fa:73:cf:a5:f0: 0a:3f:c3:ab:5d:eb:c2:49:fe:fb:25:4c:92:3b:09: f3:b6:b5:bb:00:1a:7c:f9:f3:4a:ab:b6:9c:19:15: 15:72:e9:30:38:b1:f2:3c:d4:9c:10:28:7c:09:7f: 83:85:18:1e:cf:bc:d9:f4:f4:96:0e:94:35:83:a4: ad:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:E1:48:4C:A7:4F:00:38:81:EF:70:73:CC:C9:ED:25:81:CA:EE:B2 X509v3 Authority Key Identifier: keyid:90:7D:02:30:4A:8A:06:30:AF:E6:A9:85:E4:DC:09:00:78:51:F8:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kH0CMEqKBjCv5qmF5NwJAHhR-Dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1571dd-2e9e-4a50-b812-961a06d2acf4/1/kH0CMEqKBjCv5qmF5NwJAHhR-Dk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1571dd-2e9e-4a50-b812-961a06d2acf4/1/kH0CMEqKBjCv5qmF5NwJAHhR-Dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:73:a0:ed:00:d2:dc:8d:f9:61:f1:f2:71:e5:51:ef:c4:e0: 3c:71:c9:30:e1:5e:f0:5d:04:8c:58:5a:43:d6:a2:af:71:f4: 7d:b5:13:03:f4:e3:35:14:11:4c:da:56:97:af:6c:1e:23:63: b4:cd:1f:de:6b:20:ab:e2:ed:8e:2c:c1:88:19:61:eb:01:07: 1a:14:ea:80:d8:3d:33:7b:48:bf:73:8d:fc:a3:11:44:a0:e6: d6:1a:c5:e6:02:ba:60:85:93:da:ae:51:b1:12:c7:63:d5:b9: 1f:40:ce:14:4f:3a:ef:85:e5:cf:e5:00:6f:15:cb:36:b4:98: a1:0f:af:1c:a1:ad:39:8a:36:af:2d:96:81:77:5a:2a:02:ae: 43:5d:9a:f6:3b:59:2b:e3:47:dc:4f:e7:0e:7c:be:d6:98:f0: 42:7c:da:32:38:c4:15:e3:1c:01:51:47:85:0e:17:a7:42:e3: fb:b2:bc:d0:da:b4:a2:e7:18:51:91:ed:ab:b1:eb:b9:b0:c1: 1a:f4:3a:36:b7:0b:c6:04:1f:6b:3c:89:b0:48:15:4e:2e:22: ea:e3:8e:1d:56:d2:73:f6:d6:5f:7c:ac:d9:32:c2:00:54:1e: a0:d8:55:1b:d0:92:39:90:50:34:aa:5b:1f:4c:55:45:f4:b2: 22:e5:f6:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtBC1DtTnJuYCnJnRPZCpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwN2QwMjMwNGE4YTA2MzBhZmU2YTk4NWU0ZGMwOTAwNzg1 MWY4MzkwHhcNMjYwMjA5MTQwMDIyWhcNMjYwMjEwMTQwMDIyWjAzMTEwLwYDVQQD EygzOWUxNDg0Y2E3NGYwMDM4ODFlZjcwNzNjY2M5ZWQyNTgxY2FlZWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypbMv7HsSGjrmniTF3rEyYLzJohQ hMbSRHjNZVcxrfOrKBmsfz0QanEFCuamGj2Pyg4oJng9Pk8LxWFjPljDb/2z6JyD QpLLdRecoQ6mhIhwHv1DIyM2+ZRB/Divw2wpKDZUhAdx1oOkii5m4kbA/0gC7+k5 N7gp31Jdf2SKTM/VRUC3Khat/5ve/Kp+lJD/p9Z7VnjbQbTOqqAGEXB54Q9y+SrR aV8mTqE2JOiLC06u0PG457UvK8HgvYV++nPPpfAKP8OrXevCSf77JUySOwnztrW7 ABp8+fNKq7acGRUVcukwOLHyPNScECh8CX+DhRgez7zZ9PSWDpQ1g6StAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDnhSEynTwA4ge9wc8zJ7SWByu6yMB8GA1UdIwQY MBaAFJB9AjBKigYwr+apheTcCQB4Ufg5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0gwQ01FcUtCakN2NXFtRjVOd0pBSGhSLURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8xNTcxZGQtMmU5ZS00YTUwLWI4MTIt OTYxYTA2ZDJhY2Y0LzEva0gwQ01FcUtCakN2NXFtRjVOd0pBSGhSLURrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni8xNTcxZGQtMmU5ZS00YTUwLWI4MTItOTYxYTA2ZDJhY2Y0 LzEva0gwQ01FcUtCakN2NXFtRjVOd0pBSGhSLURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOXOg7QDS 3I35YfHyceVR78TgPHHJMOFe8F0EjFhaQ9air3H0fbUTA/TjNRQRTNpWl69sHiNj tM0f3msgq+LtjizBiBlh6wEHGhTqgNg9M3tIv3ON/KMRRKDm1hrF5gK6YIWT2q5R sRLHY9W5H0DOFE8674Xlz+UAbxXLNrSYoQ+vHKGtOYo2ry2WgXdaKgKuQ12a9jtZ K+NH3E/nDny+1pjwQnzaMjjEFeMcAVFHhQ4Xp0Lj+7K80Nq0oucYUZHtq7HrubDB GvQ6NrcLxgQfazyJsEgVTi4i6uOOHVbSc/bWX3ys2TLCAFQeoNhVG9CSOZBQNKpb H0xVRfSyIuX2sw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:38 2026 by rpki-client