This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/e6d373-44c6-48f7-8b76-fa91c75fb9dc/1/kzIOi-fHTKZVx8PpeLwapg_Y20Q.mft File: kzIOi-fHTKZVx8PpeLwapg_Y20Q.mft (raw, json) Hash identifier: WewJo/YXktwx7IbVV4lO2DEwXM9HSgTvX76py7nfiXo= Subject key identifier: 0F:9F:EA:7F:CE:A5:F4:86:89:1B:C3:31:DD:B2:75:7E:4B:ED:E3:DD Authority key identifier: 93:32:0E:8B:E7:C7:4C:A6:55:C7:C3:E9:78:BC:1A:A6:0F:D8:DB:44 Certificate issuer: /CN=93320e8be7c74ca655c7c3e978bc1aa60fd8db44 Certificate serial: 019C438FFBEE76FD857D100BE07AD8A09BC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kzIOi-fHTKZVx8PpeLwapg_Y20Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/e6d373-44c6-48f7-8b76-fa91c75fb9dc/1/kzIOi-fHTKZVx8PpeLwapg_Y20Q.mft Manifest number: 17A0 Signing time: Mon 09 Feb 2026 18:00:35 +0000 Manifest this update: Mon 09 Feb 2026 18:00:35 +0000 Manifest next update: Tue 10 Feb 2026 18:00:35 +0000 Files and hashes: 1: kzIOi-fHTKZVx8PpeLwapg_Y20Q.crl (hash: tX9tf2IkqDs2wBx+K5y19v6rH2ljW0Iw5WNAom8hH90=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/e6d373-44c6-48f7-8b76-fa91c75fb9dc/1/kzIOi-fHTKZVx8PpeLwapg_Y20Q.crl rsync://rpki.ripe.net/repository/DEFAULT/99/e6d373-44c6-48f7-8b76-fa91c75fb9dc/1/kzIOi-fHTKZVx8PpeLwapg_Y20Q.mft rsync://rpki.ripe.net/repository/DEFAULT/kzIOi-fHTKZVx8PpeLwapg_Y20Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:fb:ee:76:fd:85:7d:10:0b:e0:7a:d8:a0:9b:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93320e8be7c74ca655c7c3e978bc1aa60fd8db44 Validity Not Before: Feb 9 18:00:35 2026 GMT Not After : Feb 10 18:00:35 2026 GMT Subject: CN=0f9fea7fcea5f486891bc331ddb2757e4bede3dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:23:0e:e2:62:84:09:f6:39:65:b3:ec:66:99: 76:3a:ae:f2:42:dd:66:f0:23:6c:b4:62:b0:72:cb: e4:83:35:ba:53:80:57:ce:4a:b8:0e:36:a4:ee:35: 80:c6:48:3b:f3:02:27:d9:eb:54:1d:73:1b:df:0c: 0c:69:61:62:e4:5f:79:ba:31:44:ef:9b:e2:b7:c8: 01:2d:dc:5c:e7:4a:6f:4d:37:e8:09:dd:bb:62:11: 9f:5b:1f:1f:6c:56:8b:e7:72:46:bb:a5:47:bb:70: c7:d3:86:87:06:37:bf:df:3e:a7:fd:f5:5b:9c:4f: 62:38:4b:a4:6a:15:5c:c2:35:a1:7d:4f:03:b2:37: fb:ff:d9:44:3f:c2:1c:ef:fc:bc:c7:bf:60:2d:4f: bf:51:a0:06:c1:60:9f:70:60:69:72:0c:d3:aa:78: 39:96:ec:42:88:32:91:a5:9a:29:cd:ad:70:6a:7b: 2f:bc:a1:d8:75:aa:b2:9d:07:9e:45:45:8a:a1:63: 9b:43:0f:0f:ab:1e:2a:fe:40:85:7c:06:ec:a3:b1: 9f:88:39:ef:08:9f:af:ba:db:b8:c3:9c:ef:aa:bb: b8:08:1e:3b:da:ee:4b:ba:06:1c:e6:b8:b7:eb:88: 4a:39:0b:1b:ea:7b:17:52:34:f8:37:7b:c4:51:08: 3f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:9F:EA:7F:CE:A5:F4:86:89:1B:C3:31:DD:B2:75:7E:4B:ED:E3:DD X509v3 Authority Key Identifier: keyid:93:32:0E:8B:E7:C7:4C:A6:55:C7:C3:E9:78:BC:1A:A6:0F:D8:DB:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kzIOi-fHTKZVx8PpeLwapg_Y20Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e6d373-44c6-48f7-8b76-fa91c75fb9dc/1/kzIOi-fHTKZVx8PpeLwapg_Y20Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e6d373-44c6-48f7-8b76-fa91c75fb9dc/1/kzIOi-fHTKZVx8PpeLwapg_Y20Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:13:56:b1:76:99:e1:bb:41:4c:15:57:7f:36:96:82:00:d4: 2f:10:61:c2:93:1c:de:96:80:26:4b:73:de:d8:89:6b:a1:94: 72:62:aa:0e:ab:9a:bf:e5:4a:31:72:8d:2b:f1:0b:bf:d3:68: 77:43:43:c5:d6:ba:f7:88:db:db:98:bc:55:99:af:80:5a:b6: ee:d0:47:7c:03:8f:32:13:cb:1f:49:78:f5:d3:be:10:8e:bf: e5:dd:e9:a4:70:c3:42:38:2e:55:82:7f:4b:fc:e5:53:de:a3: 55:46:01:45:64:c8:b8:6d:f4:ed:5f:b1:de:36:cd:80:6f:69: de:d9:78:1b:2c:f3:a6:00:9a:47:72:0c:21:38:58:e0:dc:21: 07:bb:2a:e1:12:f9:11:a0:f7:45:7a:f0:a7:d8:0c:43:71:43: 87:74:09:ac:d7:a1:d2:04:bc:93:61:c7:d4:b5:1a:d3:23:53: 24:9f:5b:07:88:77:3c:11:df:1f:a8:b2:c8:c8:c9:fe:00:9c: 8e:94:26:1d:2e:5e:a4:31:45:59:20:f4:6a:4a:71:2a:3a:e0: af:4b:7c:2b:8b:71:06:12:bb:a0:eb:21:ce:f3:9f:39:1b:d2: bd:cd:1b:7c:d7:a1:ce:df:b8:96:6d:55:73:59:e6:60:3f:8b: a8:fe:1d:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj/vudv2FfRAL4HrYoJvDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMzIwZThiZTdjNzRjYTY1NWM3YzNlOTc4YmMxYWE2MGZk OGRiNDQwHhcNMjYwMjA5MTgwMDM1WhcNMjYwMjEwMTgwMDM1WjAzMTEwLwYDVQQD EygwZjlmZWE3ZmNlYTVmNDg2ODkxYmMzMzFkZGIyNzU3ZTRiZWRlM2RkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiMO4mKECfY5ZbPsZpl2Oq7yQt1m 8CNstGKwcsvkgzW6U4BXzkq4Djak7jWAxkg78wIn2etUHXMb3wwMaWFi5F95ujFE 75vit8gBLdxc50pvTTfoCd27YhGfWx8fbFaL53JGu6VHu3DH04aHBje/3z6n/fVb nE9iOEukahVcwjWhfU8Dsjf7/9lEP8Ic7/y8x79gLU+/UaAGwWCfcGBpcgzTqng5 luxCiDKRpZopza1wansvvKHYdaqynQeeRUWKoWObQw8Pqx4q/kCFfAbso7GfiDnv CJ+vutu4w5zvqru4CB472u5LugYc5ri364hKOQsb6nsXUjT4N3vEUQg/mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA+f6n/OpfSGiRvDMd2ydX5L7ePdMB8GA1UdIwQY MBaAFJMyDovnx0ymVcfD6Xi8GqYP2NtEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3pJT2ktZkhUS1pWeDhQcGVMd2FwZ19ZMjBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9lNmQzNzMtNDRjNi00OGY3LThiNzYt ZmE5MWM3NWZiOWRjLzEva3pJT2ktZkhUS1pWeDhQcGVMd2FwZ19ZMjBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9lNmQzNzMtNDRjNi00OGY3LThiNzYtZmE5MWM3NWZiOWRj LzEva3pJT2ktZkhUS1pWeDhQcGVMd2FwZ19ZMjBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZhNWsXaZ 4btBTBVXfzaWggDULxBhwpMc3paAJktz3tiJa6GUcmKqDquav+VKMXKNK/ELv9No d0NDxda694jb25i8VZmvgFq27tBHfAOPMhPLH0l49dO+EI6/5d3ppHDDQjguVYJ/ S/zlU96jVUYBRWTIuG307V+x3jbNgG9p3tl4GyzzpgCaR3IMIThY4NwhB7sq4RL5 EaD3RXrwp9gMQ3FDh3QJrNeh0gS8k2HH1LUa0yNTJJ9bB4h3PBHfH6iyyMjJ/gCc jpQmHS5epDFFWSD0akpxKjrgr0t8K4txBhK7oOshzvOfORvSvc0bfNehzt+4lm1V c1nmYD+LqP4dPQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:09 2026 by rpki-client