This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.mft File: Ks4Sb6WDCREIPkX1g8rbCKY-xvk.mft (raw, json) Hash identifier: pyqbrzf6nM1rGiFpgS78gPucnBk+ZHTaLofljhtEASE= Subject key identifier: 30:42:FE:E9:9D:30:8A:8D:E8:CB:8E:F7:CD:A9:0A:D0:37:62:74:BC Authority key identifier: 2A:CE:12:6F:A5:83:09:11:08:3E:45:F5:83:CA:DB:08:A6:3E:C6:F9 Certificate issuer: /CN=2ace126fa5830911083e45f583cadb08a63ec6f9 Certificate serial: 019C427E0FFB40E13E85C8CB793F3E5A568E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.mft Manifest number: 1814 Signing time: Mon 09 Feb 2026 13:01:23 +0000 Manifest this update: Mon 09 Feb 2026 13:01:23 +0000 Manifest next update: Tue 10 Feb 2026 13:01:23 +0000 Files and hashes: 1: EGeXD8B0vr0bu-ghfGdkYui_6lA.roa (hash: gPUVhthzwyALXJfc203Rfoe0hmjn8DnicOu690skbKo=) 2: Ks4Sb6WDCREIPkX1g8rbCKY-xvk.crl (hash: 2zy9R62qe1h7uh2INuO/h3C5h0TY78COhyKTAJlQbY8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.mft rsync://rpki.ripe.net/repository/DEFAULT/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7e:0f:fb:40:e1:3e:85:c8:cb:79:3f:3e:5a:56:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ace126fa5830911083e45f583cadb08a63ec6f9 Validity Not Before: Feb 9 13:01:23 2026 GMT Not After : Feb 10 13:01:23 2026 GMT Subject: CN=3042fee99d308a8de8cb8ef7cda90ad0376274bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9f:48:52:b4:55:34:42:43:6f:9e:a9:86:e3: 33:c4:76:8a:97:9d:c8:59:00:8c:15:86:1e:13:61: 12:e7:0d:34:e9:ae:65:af:08:38:40:17:49:d7:75: 5a:50:31:db:30:6a:b1:fe:99:d7:b9:be:c4:7b:3a: fc:2a:47:f7:3d:02:e0:94:64:68:86:32:3f:5d:d2: b2:3c:97:84:9e:b9:72:ed:dd:0b:46:15:89:94:dc: 15:4a:73:b5:bd:59:b2:70:8f:29:c7:ab:2e:e1:18: 4e:e9:6d:94:37:44:7c:f6:04:f4:96:f0:ee:30:66: d3:2d:2a:88:cf:7c:45:d4:ea:88:2e:0e:ec:3f:6c: 15:c3:6c:66:6a:06:3c:70:a0:6d:3b:68:42:60:e3: b0:99:be:01:b9:4b:ad:ea:c9:c7:d0:5a:d5:50:ff: de:73:3d:6a:80:4b:7d:6e:01:eb:2c:64:5b:1c:61: c1:24:e3:75:e1:8c:12:ec:af:43:96:66:a3:4d:94: 9f:f9:e6:46:8f:c9:61:22:2c:14:1d:dc:99:07:1f: 5d:74:2b:79:e6:1b:fe:6a:58:f8:0a:c4:16:5a:a1: 66:f7:36:c6:1d:28:c4:8d:4a:c6:29:db:79:90:b6: 8e:ad:a5:b0:9b:8f:91:bd:68:d6:c1:cf:06:9b:16: 02:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:42:FE:E9:9D:30:8A:8D:E8:CB:8E:F7:CD:A9:0A:D0:37:62:74:BC X509v3 Authority Key Identifier: keyid:2A:CE:12:6F:A5:83:09:11:08:3E:45:F5:83:CA:DB:08:A6:3E:C6:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:1e:fd:2b:28:e9:85:d3:8f:05:fe:99:ee:70:7d:a2:ad:39: ea:eb:d1:3a:2f:de:a9:44:14:d9:19:66:a8:99:1c:70:6a:5a: ba:17:75:c2:2b:54:c4:04:d1:c0:db:64:66:77:30:27:ed:b2: 6d:84:71:a0:64:d6:cd:9e:17:d6:fa:d3:2b:3e:1b:43:10:1b: 9a:df:f8:b4:ff:c1:ea:81:05:5b:34:38:56:d0:57:2d:12:33: c2:5e:d8:ec:89:97:21:c8:0d:9d:c5:d0:f1:be:35:e7:1f:25: 99:be:89:e7:d4:f6:d7:73:11:ac:94:32:49:5d:4b:66:bf:73: ef:6f:4c:7e:15:41:67:a7:e8:8b:7f:d4:58:d7:7a:12:56:3e: 07:ac:6c:2a:91:70:4f:85:ed:6a:c9:69:36:f5:55:16:a4:85: 03:b4:e8:93:d9:3c:1e:b9:e5:08:8f:f5:0f:8f:35:94:4f:4b: 75:d9:a9:17:fa:9a:bc:20:c7:c3:a5:41:73:db:6b:92:fd:63: 1f:dc:e9:95:ae:0a:c6:f9:40:2e:1a:7d:d0:e9:2d:9f:ec:d9: ae:28:40:96:40:1b:01:1d:0c:dc:3c:31:c8:c9:7a:e9:48:9d: 59:70:00:ed:18:90:e9:5d:ef:f5:34:b4:94:2a:87:f7:2a:8a: 43:9a:32:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfg/7QOE+hcjLeT8+WlaOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhY2UxMjZmYTU4MzA5MTEwODNlNDVmNTgzY2FkYjA4YTYz ZWM2ZjkwHhcNMjYwMjA5MTMwMTIzWhcNMjYwMjEwMTMwMTIzWjAzMTEwLwYDVQQD EygzMDQyZmVlOTlkMzA4YThkZThjYjhlZjdjZGE5MGFkMDM3NjI3NGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZ9IUrRVNEJDb56phuMzxHaKl53I WQCMFYYeE2ES5w006a5lrwg4QBdJ13VaUDHbMGqx/pnXub7Eezr8Kkf3PQLglGRo hjI/XdKyPJeEnrly7d0LRhWJlNwVSnO1vVmycI8px6su4RhO6W2UN0R89gT0lvDu MGbTLSqIz3xF1OqILg7sP2wVw2xmagY8cKBtO2hCYOOwmb4BuUut6snH0FrVUP/e cz1qgEt9bgHrLGRbHGHBJON14YwS7K9DlmajTZSf+eZGj8lhIiwUHdyZBx9ddCt5 5hv+alj4CsQWWqFm9zbGHSjEjUrGKdt5kLaOraWwm4+RvWjWwc8GmxYCHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDBC/umdMIqN6MuO982pCtA3YnS8MB8GA1UdIwQY MBaAFCrOEm+lgwkRCD5F9YPK2wimPsb5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3M0U2I2V0RDUkVJUGtYMWc4cmJDS1kteHZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9iNzNiZDItYWI5NC00YWMzLTkzYzQt NmNiY2I3ZTNkOGQyLzEvS3M0U2I2V0RDUkVJUGtYMWc4cmJDS1kteHZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi9iNzNiZDItYWI5NC00YWMzLTkzYzQtNmNiY2I3ZTNkOGQy LzEvS3M0U2I2V0RDUkVJUGtYMWc4cmJDS1kteHZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhB79Kyjp hdOPBf6Z7nB9oq056uvROi/eqUQU2RlmqJkccGpauhd1witUxATRwNtkZncwJ+2y bYRxoGTWzZ4X1vrTKz4bQxAbmt/4tP/B6oEFWzQ4VtBXLRIzwl7Y7ImXIcgNncXQ 8b415x8lmb6J59T213MRrJQySV1LZr9z729MfhVBZ6foi3/UWNd6ElY+B6xsKpFw T4XtaslpNvVVFqSFA7Tok9k8HrnlCI/1D481lE9LddmpF/qavCDHw6VBc9trkv1j H9zpla4KxvlALhp90Oktn+zZrihAlkAbAR0M3DwxyMl66UidWXAA7RiQ6V3v9TS0 lCqH9yqKQ5oyXA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:31 2026 by rpki-client