This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/4554ae-999a-4703-bfe4-ce60b6534e37/1/KACGzY28R99NOJtyhcq7ixVieuY.mft File: KACGzY28R99NOJtyhcq7ixVieuY.mft (raw, json) Hash identifier: EFoTbzDXifN7Xpybmss4kafK48T0Uj1YBDLzf5U6gzw= Subject key identifier: 1C:F7:C3:17:10:46:37:B8:B4:78:84:E2:A1:17:F1:BA:7F:8E:DE:BA Authority key identifier: 28:00:86:CD:8D:BC:47:DF:4D:38:9B:72:85:CA:BB:8B:15:62:7A:E6 Certificate issuer: /CN=280086cd8dbc47df4d389b7285cabb8b15627ae6 Certificate serial: 019C41D856CF7F95B85E18C376C0D108C15F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KACGzY28R99NOJtyhcq7ixVieuY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/4554ae-999a-4703-bfe4-ce60b6534e37/1/KACGzY28R99NOJtyhcq7ixVieuY.mft Manifest number: 5E Signing time: Mon 09 Feb 2026 10:00:22 +0000 Manifest this update: Mon 09 Feb 2026 10:00:22 +0000 Manifest next update: Tue 10 Feb 2026 10:00:22 +0000 Files and hashes: 1: KACGzY28R99NOJtyhcq7ixVieuY.crl (hash: m8SG7LBr97Ard6o49RQlQV3vpRhD0KgLGnKlkSroFNI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/4554ae-999a-4703-bfe4-ce60b6534e37/1/KACGzY28R99NOJtyhcq7ixVieuY.crl rsync://rpki.ripe.net/repository/DEFAULT/97/4554ae-999a-4703-bfe4-ce60b6534e37/1/KACGzY28R99NOJtyhcq7ixVieuY.mft rsync://rpki.ripe.net/repository/DEFAULT/KACGzY28R99NOJtyhcq7ixVieuY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:56:cf:7f:95:b8:5e:18:c3:76:c0:d1:08:c1:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=280086cd8dbc47df4d389b7285cabb8b15627ae6 Validity Not Before: Feb 9 10:00:22 2026 GMT Not After : Feb 10 10:00:22 2026 GMT Subject: CN=1cf7c317104637b8b47884e2a117f1ba7f8edeba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7e:50:de:89:07:9d:31:05:7f:c9:8a:bb:ea: 6e:ed:0e:31:eb:c8:6b:fb:9e:81:ee:e2:21:32:1c: e3:25:67:b5:4e:99:76:e6:14:65:82:96:10:0c:75: 78:71:8b:97:39:b0:ac:9a:56:a9:84:c1:9f:7e:3d: 73:70:05:4e:e1:f1:b0:33:bc:59:36:78:db:31:1d: f2:cd:58:58:18:de:4a:21:26:aa:d4:0e:47:38:cf: f9:e6:11:28:21:e3:e2:3a:a3:ab:b2:04:55:9c:24: d2:87:05:4c:b0:2d:69:d6:54:f7:17:c6:af:04:d4: da:23:24:8f:a3:2c:bb:66:3f:dc:5d:39:0d:7d:c1: 51:43:25:5d:be:52:8f:a2:dd:29:1e:3a:76:6d:7c: 3f:fb:fe:98:6c:7e:7e:c8:5e:9a:56:2f:66:5a:5e: 0b:bd:3d:ec:5b:2c:73:bb:5e:fa:d1:3e:54:e7:2d: 4c:3d:8b:ee:7e:e8:19:05:72:8f:aa:ff:e9:3e:83: 04:43:81:ad:73:a4:d3:a4:24:0a:e8:95:90:dc:65: 49:bd:72:7a:c5:f6:65:a1:1e:94:8f:ac:fd:7f:f2: 2e:de:7c:05:32:fa:69:4c:73:06:89:47:44:16:0c: 15:d5:86:aa:ec:cd:3f:68:d9:70:93:09:0e:b4:ad: a5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:F7:C3:17:10:46:37:B8:B4:78:84:E2:A1:17:F1:BA:7F:8E:DE:BA X509v3 Authority Key Identifier: keyid:28:00:86:CD:8D:BC:47:DF:4D:38:9B:72:85:CA:BB:8B:15:62:7A:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KACGzY28R99NOJtyhcq7ixVieuY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4554ae-999a-4703-bfe4-ce60b6534e37/1/KACGzY28R99NOJtyhcq7ixVieuY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4554ae-999a-4703-bfe4-ce60b6534e37/1/KACGzY28R99NOJtyhcq7ixVieuY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:94:48:ec:3d:27:d5:a9:1e:2e:37:11:e3:ad:3b:d3:e1:68: b4:10:5a:07:49:b3:88:f8:c9:5b:db:cd:a4:b4:99:bd:f8:98: 17:04:f9:00:ca:93:ba:e4:13:96:99:b4:05:36:c4:c2:d1:e2: ca:6b:43:37:8c:03:c1:a0:31:ba:8a:b6:0e:75:6b:74:b9:0c: 59:39:4d:fe:8d:37:0e:f0:a4:3b:b4:22:fd:6e:33:75:5a:1c: 16:43:c9:b5:ba:ee:cd:ad:de:a3:c0:10:26:4a:4a:a6:f1:2c: 78:9c:44:68:00:b6:87:28:0a:89:f5:72:c2:b2:35:4e:69:42: 73:65:75:46:3e:ef:30:05:c0:c5:4f:85:24:26:96:9e:91:f6: 46:e9:1d:42:b4:bf:7b:a4:b4:b9:64:c0:88:a9:52:29:e7:1d: c0:60:d3:fd:3c:97:17:bf:72:3e:85:53:34:28:45:c5:9d:c9: 77:f6:4f:95:9e:11:34:72:de:4b:91:50:48:7c:b3:51:fe:03: cf:1c:8c:ea:15:bd:47:6e:8a:74:d9:10:0b:40:e6:cc:56:56: 6b:d2:b8:99:df:15:65:60:ef:50:8a:50:05:e9:2a:8d:d2:88: 4c:18:c8:c9:48:d7:cc:52:dc:08:e8:63:59:d1:a1:bc:f3:c1: ce:0a:36:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2FbPf5W4XhjDdsDRCMFfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4MDA4NmNkOGRiYzQ3ZGY0ZDM4OWI3Mjg1Y2FiYjhiMTU2 MjdhZTYwHhcNMjYwMjA5MTAwMDIyWhcNMjYwMjEwMTAwMDIyWjAzMTEwLwYDVQQD EygxY2Y3YzMxNzEwNDYzN2I4YjQ3ODg0ZTJhMTE3ZjFiYTdmOGVkZWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsX5Q3okHnTEFf8mKu+pu7Q4x68hr +56B7uIhMhzjJWe1Tpl25hRlgpYQDHV4cYuXObCsmlaphMGffj1zcAVO4fGwM7xZ NnjbMR3yzVhYGN5KISaq1A5HOM/55hEoIePiOqOrsgRVnCTShwVMsC1p1lT3F8av BNTaIySPoyy7Zj/cXTkNfcFRQyVdvlKPot0pHjp2bXw/+/6YbH5+yF6aVi9mWl4L vT3sWyxzu1760T5U5y1MPYvufugZBXKPqv/pPoMEQ4Gtc6TTpCQK6JWQ3GVJvXJ6 xfZloR6Uj6z9f/Iu3nwFMvppTHMGiUdEFgwV1Yaq7M0/aNlwkwkOtK2ljQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBz3wxcQRje4tHiE4qEX8bp/jt66MB8GA1UdIwQY MBaAFCgAhs2NvEffTTibcoXKu4sVYnrmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0FDR3pZMjhSOTlOT0p0eWhjcTdpeFZpZXVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny80NTU0YWUtOTk5YS00NzAzLWJmZTQt Y2U2MGI2NTM0ZTM3LzEvS0FDR3pZMjhSOTlOT0p0eWhjcTdpeFZpZXVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny80NTU0YWUtOTk5YS00NzAzLWJmZTQtY2U2MGI2NTM0ZTM3 LzEvS0FDR3pZMjhSOTlOT0p0eWhjcTdpeFZpZXVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADJRI7D0n 1akeLjcR46070+FotBBaB0mziPjJW9vNpLSZvfiYFwT5AMqTuuQTlpm0BTbEwtHi ymtDN4wDwaAxuoq2DnVrdLkMWTlN/o03DvCkO7Qi/W4zdVocFkPJtbruza3eo8AQ JkpKpvEseJxEaAC2hygKifVywrI1TmlCc2V1Rj7vMAXAxU+FJCaWnpH2RukdQrS/ e6S0uWTAiKlSKecdwGDT/TyXF79yPoVTNChFxZ3Jd/ZPlZ4RNHLeS5FQSHyzUf4D zxyM6hW9R26KdNkQC0DmzFZWa9K4md8VZWDvUIpQBekqjdKITBjIyUjXzFLcCOhj WdGhvPPBzgo2LQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:29 2026 by rpki-client