This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft File: KR2Dw_S4d899CEy1MMSp42_PetA.mft (raw, json) Hash identifier: K4YRg1v7rWX2PD38HbjZA/6Nizr+ktrf6w90+xKWfGQ= Subject key identifier: 05:7F:61:B1:69:C5:EF:D6:97:58:F7:EC:87:C7:80:2E:AA:B0:75:D5 Authority key identifier: 29:1D:83:C3:F4:B8:77:CF:7D:08:4C:B5:30:C4:A9:E3:6F:CF:7A:D0 Certificate issuer: /CN=291d83c3f4b877cf7d084cb530c4a9e36fcf7ad0 Certificate serial: 019C427D4999CD2C9685BE31FC715F3E01B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft Manifest number: 151E Signing time: Mon 09 Feb 2026 13:00:32 +0000 Manifest this update: Mon 09 Feb 2026 13:00:32 +0000 Manifest next update: Tue 10 Feb 2026 13:00:32 +0000 Files and hashes: 1: KR2Dw_S4d899CEy1MMSp42_PetA.crl (hash: uQJ7yxaK3+NLzju29POJMkMFx0SH9zbKAraXaGW4BXA=) 2: OanOJuK9CZ_mb2tpFiyRDvcrz5U.roa (hash: RvtNKgA+zQQgPu+BNKHT0hit3/vh/z6l5c5kWO+Jb0g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:49:99:cd:2c:96:85:be:31:fc:71:5f:3e:01:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=291d83c3f4b877cf7d084cb530c4a9e36fcf7ad0 Validity Not Before: Feb 9 13:00:32 2026 GMT Not After : Feb 10 13:00:32 2026 GMT Subject: CN=057f61b169c5efd69758f7ec87c7802eaab075d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:aa:f1:61:89:6d:fe:32:e4:f7:15:6c:7c:70: 69:bc:da:f4:ad:99:ff:e9:be:01:ad:f4:ff:5f:af: 72:c2:3b:48:fc:4e:6a:f3:75:ef:6f:f5:2a:35:e2: 8a:65:78:56:39:79:b9:ca:d2:55:9a:2b:4b:f7:5c: c3:f8:02:b5:e3:8c:67:a6:8c:d2:d1:a4:f4:9b:16: 4c:23:7d:46:ab:9e:5c:65:5b:3f:99:3c:37:06:0d: 12:9a:74:cf:2d:6f:d6:2d:34:ff:ae:7b:85:31:3d: 3b:1f:19:54:64:4c:01:37:aa:24:da:e1:53:0b:9f: 65:9d:de:98:e1:45:98:d0:b4:36:a2:60:69:c1:fd: d5:30:ad:09:74:f7:b1:5c:8c:08:c7:5f:2b:ba:47: 11:15:8b:6f:1a:7b:f2:5f:4d:f0:2d:45:88:aa:53: c8:6f:19:0d:71:2d:c8:31:52:e7:3e:fb:3a:7a:3c: bd:7f:77:e1:5e:f3:66:b0:e3:06:2c:8a:a9:c3:f4: 46:35:2f:58:58:53:13:dd:7a:ef:b2:5e:9c:ee:7c: 7b:cc:99:3b:1d:94:62:17:f6:98:2b:2f:45:b9:02: d4:9d:8c:57:3d:3b:98:6c:0f:d9:12:45:e4:e2:94: 33:ba:15:50:70:d9:15:fe:54:b7:9b:16:83:b1:53: 74:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:7F:61:B1:69:C5:EF:D6:97:58:F7:EC:87:C7:80:2E:AA:B0:75:D5 X509v3 Authority Key Identifier: keyid:29:1D:83:C3:F4:B8:77:CF:7D:08:4C:B5:30:C4:A9:E3:6F:CF:7A:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:eb:22:db:32:51:3c:84:e9:c5:fc:c1:0c:e3:94:44:9e:cf: a3:8f:74:34:3b:da:57:25:4b:9d:21:b7:98:43:04:61:98:25: 8a:78:dc:7c:85:eb:5c:f3:6e:93:d2:00:ca:c4:5e:54:fa:69: 60:63:15:77:70:26:73:d1:1f:16:e1:52:7d:6d:ca:a1:39:32: ce:c2:7e:d1:4c:e1:f9:52:47:4a:91:48:ee:b4:a0:0b:a0:4d: d3:7e:7d:6c:28:d1:bb:08:2e:7c:32:cc:97:e6:f9:e0:a9:bc: 93:f7:86:aa:cf:43:13:33:69:0e:5e:ea:2f:93:e8:18:43:28: fd:83:5a:c2:4b:f7:ad:e6:49:ca:fb:47:d6:3e:b7:08:8b:1e: bb:de:18:fe:07:74:ed:8b:76:ee:74:f2:54:53:0d:65:bd:25: 85:57:b1:21:02:45:a4:de:d7:69:8d:f2:2c:56:1a:b4:5a:64: c4:f5:07:6b:96:4d:76:52:dd:27:65:65:e1:9b:49:d4:64:e2: 8a:26:9d:61:5f:04:33:cf:15:1d:5a:0b:ce:f8:d9:85:fe:3b: 71:3a:84:64:42:de:f5:b0:83:48:b5:d5:e4:74:32:5d:03:f6: 3a:38:40:77:2d:a3:26:e8:c4:bc:c9:48:a2:ef:44:1f:dd:ed: fd:c5:56:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfUmZzSyWhb4x/HFfPgG0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MWQ4M2MzZjRiODc3Y2Y3ZDA4NGNiNTMwYzRhOWUzNmZj ZjdhZDAwHhcNMjYwMjA5MTMwMDMyWhcNMjYwMjEwMTMwMDMyWjAzMTEwLwYDVQQD EygwNTdmNjFiMTY5YzVlZmQ2OTc1OGY3ZWM4N2M3ODAyZWFhYjA3NWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46rxYYlt/jLk9xVsfHBpvNr0rZn/ 6b4BrfT/X69ywjtI/E5q83Xvb/UqNeKKZXhWOXm5ytJVmitL91zD+AK144xnpozS 0aT0mxZMI31Gq55cZVs/mTw3Bg0SmnTPLW/WLTT/rnuFMT07HxlUZEwBN6ok2uFT C59lnd6Y4UWY0LQ2omBpwf3VMK0JdPexXIwIx18rukcRFYtvGnvyX03wLUWIqlPI bxkNcS3IMVLnPvs6ejy9f3fhXvNmsOMGLIqpw/RGNS9YWFMT3Xrvsl6c7nx7zJk7 HZRiF/aYKy9FuQLUnYxXPTuYbA/ZEkXk4pQzuhVQcNkV/lS3mxaDsVN0TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAV/YbFpxe/Wl1j37IfHgC6qsHXVMB8GA1UdIwQY MBaAFCkdg8P0uHfPfQhMtTDEqeNvz3rQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1IyRHdfUzRkODk5Q0V5MU1NU3A0Ml9QZXRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS81OTQ1NjktNmYxOC00NjBhLWExOTYt ZmZjZDQ3NzM0OWZjLzEvS1IyRHdfUzRkODk5Q0V5MU1NU3A0Ml9QZXRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS81OTQ1NjktNmYxOC00NjBhLWExOTYtZmZjZDQ3NzM0OWZj LzEvS1IyRHdfUzRkODk5Q0V5MU1NU3A0Ml9QZXRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnusi2zJR PITpxfzBDOOURJ7Po490NDvaVyVLnSG3mEMEYZglinjcfIXrXPNuk9IAysReVPpp YGMVd3Amc9EfFuFSfW3KoTkyzsJ+0Uzh+VJHSpFI7rSgC6BN0359bCjRuwgufDLM l+b54Km8k/eGqs9DEzNpDl7qL5PoGEMo/YNawkv3reZJyvtH1j63CIseu94Y/gd0 7Yt27nTyVFMNZb0lhVexIQJFpN7XaY3yLFYatFpkxPUHa5ZNdlLdJ2Vl4ZtJ1GTi iiadYV8EM88VHVoLzvjZhf47cTqEZELe9bCDSLXV5HQyXQP2OjhAdy2jJujEvMlI ou9EH93t/cVWKA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:49:12 2026 by rpki-client