This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft File: kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft (raw, json) Hash identifier: cnllA8e2FYJLdEqVsmp4PWFbEOCV3q60wSTafHySEio= Subject key identifier: 74:94:DE:47:56:C3:86:B6:67:88:69:C8:EA:43:DC:5F:33:B4:01:0C Authority key identifier: 92:6B:93:36:FC:AF:36:57:CE:DE:BA:53:C4:7E:94:80:10:87:7E:20 Certificate issuer: /CN=926b9336fcaf3657cedeba53c47e948010877e20 Certificate serial: 019C43225185A889DAB93618FD2F12DF5439 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 16:00:48 +0000 Manifest this update: Mon 09 Feb 2026 16:00:48 +0000 Manifest next update: Tue 10 Feb 2026 16:00:48 +0000 Files and hashes: 1: 2NDM2UnGAd2KPMu3UUA1fO528tk.roa (hash: WD6GmcclgmWq2djvqA2C1xAumTZt22gmy95ALSn/gmc=) 2: kmuTNvyvNlfO3rpTxH6UgBCHfiA.crl (hash: a9D+BJ8jTPLfWVvnWQf8Vx77J78E1kSxPjRQmH6hcZc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft rsync://rpki.ripe.net/repository/DEFAULT/kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:51:85:a8:89:da:b9:36:18:fd:2f:12:df:54:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=926b9336fcaf3657cedeba53c47e948010877e20 Validity Not Before: Feb 9 16:00:48 2026 GMT Not After : Feb 10 16:00:48 2026 GMT Subject: CN=7494de4756c386b6678869c8ea43dc5f33b4010c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:34:cd:a7:e2:d0:1f:7e:e7:b8:f7:81:50:49: f1:12:ed:3e:61:59:df:e8:79:de:ff:be:40:58:57: 51:93:a2:0b:9a:91:dd:f4:ee:88:23:15:f3:dc:a4: e7:f3:fe:43:2a:29:a0:73:77:62:14:fa:3c:cb:aa: ef:a5:98:d9:d3:81:69:9a:9b:c6:28:e8:da:dd:a0: 81:f9:32:b1:6e:d9:4c:f2:cb:5a:0d:4d:04:41:f0: 3d:c4:e9:a6:73:61:89:d5:04:76:a9:d6:b3:d0:47: d7:6d:ec:4f:8a:f3:2b:35:16:31:2a:27:a7:4c:25: 83:45:7e:b2:de:e1:ef:d7:4c:f1:e0:e2:45:c6:3d: 4f:b1:79:23:52:68:65:8e:4f:f6:0f:0f:3e:bb:39: 88:04:f0:ac:7f:dc:7e:fb:f8:03:78:2a:6b:cd:9d: 4a:0f:ff:67:1f:d8:52:8d:4b:1d:a9:b5:19:51:2f: df:49:48:a1:1f:ea:db:27:0f:74:fc:c9:0c:ac:c7: 31:24:bb:43:82:f1:74:6b:ac:0e:46:c7:da:81:5b: 51:70:79:91:4a:52:9c:b0:85:a2:b6:db:0e:80:d9: 3e:79:c5:0a:73:3d:a8:20:28:69:13:59:2b:7c:de: b3:fe:17:11:05:3d:e8:c8:2a:ec:26:b4:7b:13:09: bf:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:94:DE:47:56:C3:86:B6:67:88:69:C8:EA:43:DC:5F:33:B4:01:0C X509v3 Authority Key Identifier: keyid:92:6B:93:36:FC:AF:36:57:CE:DE:BA:53:C4:7E:94:80:10:87:7E:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:3b:a7:5c:04:94:9d:c1:43:c2:5e:e3:34:f1:0a:b8:ee:ef: 41:87:e6:2e:73:45:c3:94:e5:68:c9:b5:49:ec:fd:ea:82:ed: 08:cf:72:f3:32:11:dd:ba:f1:ee:cc:81:45:3d:ce:2d:f6:b2: 3d:fb:06:28:ae:20:c6:b9:44:a3:d0:f3:47:0b:e7:fc:5b:0c: fc:48:b9:0a:5e:f4:95:03:5f:ad:64:30:9d:5d:e0:ab:db:8e: 62:6e:91:ad:bd:7d:79:5f:62:19:31:ef:a7:9e:c6:37:6b:9a: a3:38:ae:eb:7f:31:ef:e5:26:e4:16:99:89:c1:46:17:0f:fa: 03:71:99:3e:73:ea:00:58:b2:b9:34:03:f8:be:80:9c:c8:45: ef:32:05:73:e4:d7:bb:ad:2f:94:4b:a3:ed:26:0a:1b:25:08: 67:8c:50:1b:19:1a:b1:f1:1a:11:78:c4:cc:41:ab:21:3d:98: dd:33:81:2b:b7:30:c7:a8:64:7c:e9:1f:f9:ee:7e:e3:8d:44: 59:17:54:c3:c9:e5:23:f4:63:ba:d1:f1:7b:57:79:01:44:e2: b8:54:cb:28:98:4e:da:c9:db:cb:b5:89:2a:43:53:dd:70:74: 3e:38:bf:25:ae:e6:2b:5c:9c:77:e4:31:56:5d:08:22:63:7d: 62:2a:c0:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIlGFqInauTYY/S8S31Q5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNmI5MzM2ZmNhZjM2NTdjZWRlYmE1M2M0N2U5NDgwMTA4 NzdlMjAwHhcNMjYwMjA5MTYwMDQ4WhcNMjYwMjEwMTYwMDQ4WjAzMTEwLwYDVQQD Eyg3NDk0ZGU0NzU2YzM4NmI2Njc4ODY5YzhlYTQzZGM1ZjMzYjQwMTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTTNp+LQH37nuPeBUEnxEu0+YVnf 6Hne/75AWFdRk6ILmpHd9O6IIxXz3KTn8/5DKimgc3diFPo8y6rvpZjZ04FpmpvG KOja3aCB+TKxbtlM8staDU0EQfA9xOmmc2GJ1QR2qdaz0EfXbexPivMrNRYxKien TCWDRX6y3uHv10zx4OJFxj1PsXkjUmhljk/2Dw8+uzmIBPCsf9x++/gDeCprzZ1K D/9nH9hSjUsdqbUZUS/fSUihH+rbJw90/MkMrMcxJLtDgvF0a6wORsfagVtRcHmR SlKcsIWittsOgNk+ecUKcz2oIChpE1krfN6z/hcRBT3oyCrsJrR7Ewm/BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHSU3kdWw4a2Z4hpyOpD3F8ztAEMMB8GA1UdIwQY MBaAFJJrkzb8rzZXzt66U8R+lIAQh34gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva211VE52eXZObGZPM3JwVHhINlVnQkNIZmlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9lZmJiZjAtZTRmYS00NDMxLWIxZTct MDZhMjRmYTc0NjY3LzEva211VE52eXZObGZPM3JwVHhINlVnQkNIZmlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi9lZmJiZjAtZTRmYS00NDMxLWIxZTctMDZhMjRmYTc0NjY3 LzEva211VE52eXZObGZPM3JwVHhINlVnQkNIZmlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVjunXASU ncFDwl7jNPEKuO7vQYfmLnNFw5TlaMm1Sez96oLtCM9y8zIR3brx7syBRT3OLfay PfsGKK4gxrlEo9DzRwvn/FsM/Ei5Cl70lQNfrWQwnV3gq9uOYm6Rrb19eV9iGTHv p57GN2uaoziu638x7+Um5BaZicFGFw/6A3GZPnPqAFiyuTQD+L6AnMhF7zIFc+TX u60vlEuj7SYKGyUIZ4xQGxkasfEaEXjEzEGrIT2Y3TOBK7cwx6hkfOkf+e5+441E WRdUw8nlI/RjutHxe1d5AUTiuFTLKJhO2snby7WJKkNT3XB0Pji/Ja7mK1ycd+Qx Vl0IImN9YirAWQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:47:02 2026 by rpki-client