This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.mft File: kKfL8X0LoKJqsBpkBgFBEUziudE.mft (raw, json) Hash identifier: QXePqAIHg9TbQjPTCIRkyGV4i/IzShEQ9nsrwz75zV8= Subject key identifier: 64:22:A3:E4:8F:D5:A9:A2:E8:9A:CE:BE:7F:23:B8:47:29:4F:B9:7F Authority key identifier: 90:A7:CB:F1:7D:0B:A0:A2:6A:B0:1A:64:06:01:41:11:4C:E2:B9:D1 Certificate issuer: /CN=90a7cbf17d0ba0a26ab01a64060141114ce2b9d1 Certificate serial: 019C41A25DCC88E44F4B3A08CF3D3020A995 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKfL8X0LoKJqsBpkBgFBEUziudE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.mft Manifest number: 0A9B Signing time: Mon 09 Feb 2026 09:01:25 +0000 Manifest this update: Mon 09 Feb 2026 09:01:25 +0000 Manifest next update: Tue 10 Feb 2026 09:01:25 +0000 Files and hashes: 1: 9ysfhP83Nmm5ft1dF01KIz9IUpQ.roa (hash: 18cwGXFTJaQbHW96LZdk67APWAeUaMFUp7iHSl3ZJFk=) 2: kKfL8X0LoKJqsBpkBgFBEUziudE.crl (hash: yirJDKe5JJLrrJfsr2JPKQI+ITIpZEjFmzAQ0iPpD7o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.mft rsync://rpki.ripe.net/repository/DEFAULT/kKfL8X0LoKJqsBpkBgFBEUziudE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:5d:cc:88:e4:4f:4b:3a:08:cf:3d:30:20:a9:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90a7cbf17d0ba0a26ab01a64060141114ce2b9d1 Validity Not Before: Feb 9 09:01:25 2026 GMT Not After : Feb 10 09:01:25 2026 GMT Subject: CN=6422a3e48fd5a9a2e89acebe7f23b847294fb97f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a5:3d:07:37:75:d6:c7:35:75:16:71:29:d6: 20:bc:6c:63:bf:49:45:c9:bb:e7:7c:4f:c5:b2:eb: ee:8d:50:91:fc:08:fa:a5:9c:98:26:09:4f:de:35: 29:0a:7e:91:b5:11:73:0e:22:05:89:ea:e3:83:0d: 31:bc:92:33:84:cf:0c:fe:46:0b:75:a0:00:f4:53: 19:bc:8f:b2:84:df:70:17:d9:bb:d9:15:8f:11:cd: af:16:66:cb:1e:e8:ba:94:d8:26:74:5a:a1:2c:fa: 91:0e:a7:d7:ca:ee:d7:90:55:bb:4e:2e:54:90:7f: 7a:02:58:01:5f:03:fb:08:c4:5c:d7:ee:9e:69:30: 83:06:e4:62:0c:71:de:42:d1:55:b7:0b:4c:bd:61: a6:8f:3b:a4:26:18:a4:f4:86:28:04:f6:92:16:3d: 91:d3:57:72:5b:ae:3d:2d:f9:37:84:56:5c:9a:f9: 4e:ad:de:95:e4:a5:45:dc:60:79:76:42:cc:5a:7e: 07:ff:29:bf:4a:ad:da:bd:e9:f7:f4:8d:50:28:bc: a9:69:75:d7:08:ac:54:c7:0c:98:fe:3d:bb:56:bd: e2:b4:9e:6e:d4:4a:15:29:08:65:82:8e:16:ba:ec: 2d:bb:e7:ab:1b:ab:df:76:71:d8:12:98:79:50:78: eb:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:22:A3:E4:8F:D5:A9:A2:E8:9A:CE:BE:7F:23:B8:47:29:4F:B9:7F X509v3 Authority Key Identifier: keyid:90:A7:CB:F1:7D:0B:A0:A2:6A:B0:1A:64:06:01:41:11:4C:E2:B9:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKfL8X0LoKJqsBpkBgFBEUziudE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:ed:29:45:2c:8b:eb:09:19:e1:eb:a5:8c:d7:c9:4b:a7:e2: 4e:64:72:60:13:02:4c:d5:d3:3a:3e:6a:39:76:83:69:3b:e2: 6c:41:09:b8:3c:c1:4a:e2:e3:87:63:98:9d:e9:d4:dd:8b:db: 03:cf:b6:f4:eb:90:a4:f8:72:06:7e:ef:ca:87:f7:51:22:0b: 68:d5:d0:ba:7b:39:e0:be:79:1e:52:f6:ac:14:db:61:dc:0f: 90:af:56:fe:48:45:f5:3d:63:8a:83:91:38:63:e3:6a:2a:67: a8:e7:52:a6:0e:e9:49:0a:2a:da:16:9f:d0:03:85:24:a6:80: d4:cd:41:d5:2c:c0:10:7e:aa:11:28:9a:a9:72:e8:b7:39:33: 1f:79:23:07:ef:d6:6a:d8:82:b8:17:97:94:29:ae:cc:e0:7c: 2a:7c:04:7d:18:88:ee:f5:81:04:e3:cc:81:f4:cc:dd:0c:07: d9:bc:ac:63:15:ad:7f:d3:42:a6:18:ed:93:79:82:96:87:4a: 02:f5:a3:32:04:08:31:93:43:61:7c:78:ce:27:56:34:9c:54: 9b:a6:43:de:3e:b4:91:2b:fc:53:68:44:e8:2c:44:7b:03:8f: fa:16:05:00:a8:28:01:0d:2f:7c:a8:18:bb:13:83:be:e2:0b: b2:e9:f0:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBol3MiORPSzoIzz0wIKmVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwYTdjYmYxN2QwYmEwYTI2YWIwMWE2NDA2MDE0MTExNGNl MmI5ZDEwHhcNMjYwMjA5MDkwMTI1WhcNMjYwMjEwMDkwMTI1WjAzMTEwLwYDVQQD Eyg2NDIyYTNlNDhmZDVhOWEyZTg5YWNlYmU3ZjIzYjg0NzI5NGZiOTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKU9Bzd11sc1dRZxKdYgvGxjv0lF ybvnfE/FsuvujVCR/Aj6pZyYJglP3jUpCn6RtRFzDiIFierjgw0xvJIzhM8M/kYL daAA9FMZvI+yhN9wF9m72RWPEc2vFmbLHui6lNgmdFqhLPqRDqfXyu7XkFW7Ti5U kH96AlgBXwP7CMRc1+6eaTCDBuRiDHHeQtFVtwtMvWGmjzukJhik9IYoBPaSFj2R 01dyW649Lfk3hFZcmvlOrd6V5KVF3GB5dkLMWn4H/ym/Sq3aven39I1QKLypaXXX CKxUxwyY/j27Vr3itJ5u1EoVKQhlgo4Wuuwtu+erG6vfdnHYEph5UHjrQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGQio+SP1ami6JrOvn8juEcpT7l/MB8GA1UdIwQY MBaAFJCny/F9C6CiarAaZAYBQRFM4rnRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0tmTDhYMExvS0pxc0Jwa0JnRkJFVXppdWRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS85MGVkOGQtZjkxZS00NGI2LWE4NGYt ZWRmYmZlZTcwYWY1LzEva0tmTDhYMExvS0pxc0Jwa0JnRkJFVXppdWRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS85MGVkOGQtZjkxZS00NGI2LWE4NGYtZWRmYmZlZTcwYWY1 LzEva0tmTDhYMExvS0pxc0Jwa0JnRkJFVXppdWRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl+0pRSyL 6wkZ4euljNfJS6fiTmRyYBMCTNXTOj5qOXaDaTvibEEJuDzBSuLjh2OYnenU3Yvb A8+29OuQpPhyBn7vyof3USILaNXQuns54L55HlL2rBTbYdwPkK9W/khF9T1jioOR OGPjaipnqOdSpg7pSQoq2haf0AOFJKaA1M1B1SzAEH6qESiaqXLotzkzH3kjB+/W atiCuBeXlCmuzOB8KnwEfRiI7vWBBOPMgfTM3QwH2bysYxWtf9NCphjtk3mClodK AvWjMgQIMZNDYXx4zidWNJxUm6ZD3j60kSv8U2hE6CxEewOP+hYFAKgoAQ0vfKgY uxODvuILsunwrQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:51 2026 by rpki-client