This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.mft File: KjbWeMS7ysJK5r6pokyZXEjVk_A.mft (raw, json) Hash identifier: W6xUq8pbT1eCjtKyBmHyozcO7Gv3mcFJ7M7pCXcHoDM= Subject key identifier: 13:90:7D:C1:D5:6B:3D:63:3E:5F:9F:1B:E7:E5:B8:ED:18:CB:8B:9F Authority key identifier: 2A:36:D6:78:C4:BB:CA:C2:4A:E6:BE:A9:A2:4C:99:5C:48:D5:93:F0 Certificate issuer: /CN=2a36d678c4bbcac24ae6bea9a24c995c48d593f0 Certificate serial: 019C427DB72DE66AF21167306E69612A54C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KjbWeMS7ysJK5r6pokyZXEjVk_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 13:01:00 +0000 Manifest this update: Mon 09 Feb 2026 13:01:00 +0000 Manifest next update: Tue 10 Feb 2026 13:01:00 +0000 Files and hashes: 1: KjbWeMS7ysJK5r6pokyZXEjVk_A.crl (hash: ysrfUy1prMCq55CgyhNu1rwu5SDoFbd7lyhKReKFatU=) 2: ZNgK6rPOYQbiev36cRFB7zB9RWE.roa (hash: w0ez/NTzH8N4Z6kf7bnAilQBpsFXHEVSwqd8OI0nbqs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.mft rsync://rpki.ripe.net/repository/DEFAULT/KjbWeMS7ysJK5r6pokyZXEjVk_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:b7:2d:e6:6a:f2:11:67:30:6e:69:61:2a:54:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a36d678c4bbcac24ae6bea9a24c995c48d593f0 Validity Not Before: Feb 9 13:01:00 2026 GMT Not After : Feb 10 13:01:00 2026 GMT Subject: CN=13907dc1d56b3d633e5f9f1be7e5b8ed18cb8b9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d6:dd:75:14:bf:4e:c5:18:c1:b1:76:80:87: 95:59:a6:72:d3:cf:43:0f:ac:6d:b5:cf:5f:06:e2: d9:0d:88:2b:9f:4d:f9:a5:e3:78:82:c0:ae:cb:ca: 27:cc:e0:9c:5f:fc:c7:dd:d2:38:88:36:00:fc:8f: 14:97:44:e6:69:66:c3:57:5b:40:fc:52:50:55:a2: 87:41:6d:d9:47:6e:29:0b:cc:3c:54:46:a2:f7:14: db:86:7a:aa:d4:26:aa:58:32:7f:30:16:ec:be:64: 25:6f:bd:39:cc:b5:9f:5a:60:71:9e:e3:3b:36:6b: 42:78:56:b7:7f:ea:dc:dc:d3:ee:15:88:71:1d:b8: 6a:70:18:6c:ef:9e:4d:00:67:17:b7:64:3b:5a:ed: a3:9d:a9:dd:a3:8c:de:9e:53:49:47:b2:9e:e9:cb: 49:30:db:3e:a4:b8:a1:00:a7:cb:e5:a0:bd:0c:22: f3:0a:fe:21:17:bc:9a:c8:1d:7e:1b:72:9c:8e:83: db:c8:d1:2a:a5:6b:5a:c5:93:c0:a5:9b:ed:8b:c0: 29:18:81:3f:1c:ab:73:8e:3b:65:86:69:9b:7b:79: 57:b4:3c:ad:51:a1:ea:a9:2e:df:13:d2:aa:4f:29: 56:45:d3:50:18:61:32:1a:a7:43:6f:80:e7:74:3b: e2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:90:7D:C1:D5:6B:3D:63:3E:5F:9F:1B:E7:E5:B8:ED:18:CB:8B:9F X509v3 Authority Key Identifier: keyid:2A:36:D6:78:C4:BB:CA:C2:4A:E6:BE:A9:A2:4C:99:5C:48:D5:93:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KjbWeMS7ysJK5r6pokyZXEjVk_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:14:70:1d:5b:2a:ee:47:48:1f:88:25:6c:7b:ea:10:4d:ed: 2f:7d:8b:ee:41:46:c3:e4:8a:7f:7a:71:68:a9:98:77:c1:d7: 84:8c:64:c4:43:df:75:9b:11:8c:2d:ea:3e:3b:2b:6a:a0:b6: 3b:94:25:e7:e8:56:ac:d2:7f:46:3a:bf:a0:50:a3:47:b0:f7: 91:c9:e0:10:e2:84:0a:3a:f6:85:0b:3a:bc:2d:d5:22:8e:cf: 59:9d:4a:e7:33:00:e5:da:b0:51:53:46:1e:e6:79:54:3d:ec: bd:a6:e8:86:34:5f:ed:b0:1d:81:64:c1:f2:0e:51:c1:f8:b3: 7d:0f:bf:92:4e:d6:4c:22:f7:7f:5e:7b:03:31:3e:a4:32:e8: 39:a5:7a:dd:66:69:b4:4b:76:cc:4d:49:df:f4:1c:79:97:36: 71:2c:27:11:04:5a:a6:cc:e2:24:9a:0c:b9:6a:f2:d5:24:1a: 8a:75:a6:e5:2f:80:d5:e7:fe:11:d1:3e:34:28:35:f7:f0:a7: eb:2b:26:70:83:d3:d9:64:01:4b:fb:b5:59:47:02:35:c2:40: 39:ab:f7:a3:0d:f4:99:b6:51:32:9d:e8:cc:27:eb:cb:2b:ce: 59:10:cc:69:0e:e6:73:a1:f1:59:10:33:f6:6e:d6:db:59:c6: a9:f9:40:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfbct5mryEWcwbmlhKlTBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhMzZkNjc4YzRiYmNhYzI0YWU2YmVhOWEyNGM5OTVjNDhk NTkzZjAwHhcNMjYwMjA5MTMwMTAwWhcNMjYwMjEwMTMwMTAwWjAzMTEwLwYDVQQD EygxMzkwN2RjMWQ1NmIzZDYzM2U1ZjlmMWJlN2U1YjhlZDE4Y2I4YjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytbddRS/TsUYwbF2gIeVWaZy089D D6xttc9fBuLZDYgrn035peN4gsCuy8onzOCcX/zH3dI4iDYA/I8Ul0TmaWbDV1tA /FJQVaKHQW3ZR24pC8w8VEai9xTbhnqq1CaqWDJ/MBbsvmQlb705zLWfWmBxnuM7 NmtCeFa3f+rc3NPuFYhxHbhqcBhs755NAGcXt2Q7Wu2jnando4zenlNJR7Ke6ctJ MNs+pLihAKfL5aC9DCLzCv4hF7yayB1+G3KcjoPbyNEqpWtaxZPApZvti8ApGIE/ HKtzjjtlhmmbe3lXtDytUaHqqS7fE9KqTylWRdNQGGEyGqdDb4DndDvifwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBOQfcHVaz1jPl+fG+fluO0Yy4ufMB8GA1UdIwQY MBaAFCo21njEu8rCSua+qaJMmVxI1ZPwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2piV2VNUzd5c0pLNXI2cG9reVpYRWpWa19BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9hMDFmZDMtYTg2Ny00MmM2LTlhMGUt ZGY2NTFiOTY2YjJiLzEvS2piV2VNUzd5c0pLNXI2cG9reVpYRWpWa19BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9hMDFmZDMtYTg2Ny00MmM2LTlhMGUtZGY2NTFiOTY2YjJi LzEvS2piV2VNUzd5c0pLNXI2cG9reVpYRWpWa19BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACBRwHVsq 7kdIH4glbHvqEE3tL32L7kFGw+SKf3pxaKmYd8HXhIxkxEPfdZsRjC3qPjsraqC2 O5Ql5+hWrNJ/Rjq/oFCjR7D3kcngEOKECjr2hQs6vC3VIo7PWZ1K5zMA5dqwUVNG HuZ5VD3svabohjRf7bAdgWTB8g5RwfizfQ+/kk7WTCL3f157AzE+pDLoOaV63WZp tEt2zE1J3/QceZc2cSwnEQRapsziJJoMuWry1SQainWm5S+A1ef+EdE+NCg19/Cn 6ysmcIPT2WQBS/u1WUcCNcJAOav3ow30mbZRMp3ozCfryyvOWRDMaQ7mc6HxWRAz 9m7W21nGqflAOA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:31 2026 by rpki-client