This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/688da5-d238-47ce-b2e8-890ffea8d0bc/1/kgm43V6nJYkIN4Zh8rqe-JrToLE.mft File: kgm43V6nJYkIN4Zh8rqe-JrToLE.mft (raw, json) Hash identifier: tir9D3VK9KBg+q79wLcNCHzEGyt3l+oArLPRg9e69Vo= Subject key identifier: A0:BF:23:96:89:08:A5:09:98:E6:B6:81:43:0B:38:C4:D0:85:AB:2D Authority key identifier: 92:09:B8:DD:5E:A7:25:89:08:37:86:61:F2:BA:9E:F8:9A:D3:A0:B1 Certificate issuer: /CN=9209b8dd5ea7258908378661f2ba9ef89ad3a0b1 Certificate serial: 019C42B45C614009FCDCD69DFA58E66BFBF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kgm43V6nJYkIN4Zh8rqe-JrToLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/688da5-d238-47ce-b2e8-890ffea8d0bc/1/kgm43V6nJYkIN4Zh8rqe-JrToLE.mft Manifest number: 0383 Signing time: Mon 09 Feb 2026 14:00:42 +0000 Manifest this update: Mon 09 Feb 2026 14:00:42 +0000 Manifest next update: Tue 10 Feb 2026 14:00:42 +0000 Files and hashes: 1: F6o9j4Ie6b4y0wHKIVuz_fNCXFg.roa (hash: +0BcBPAOax0BdntxWWSdx/T51z6sfm76K1uE6tYz2Uk=) 2: kgm43V6nJYkIN4Zh8rqe-JrToLE.crl (hash: ErENYJLOcij2U38JhA1p4f8Bh5qW/8I9QSmiFTE1Q+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/688da5-d238-47ce-b2e8-890ffea8d0bc/1/kgm43V6nJYkIN4Zh8rqe-JrToLE.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/688da5-d238-47ce-b2e8-890ffea8d0bc/1/kgm43V6nJYkIN4Zh8rqe-JrToLE.mft rsync://rpki.ripe.net/repository/DEFAULT/kgm43V6nJYkIN4Zh8rqe-JrToLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:5c:61:40:09:fc:dc:d6:9d:fa:58:e6:6b:fb:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9209b8dd5ea7258908378661f2ba9ef89ad3a0b1 Validity Not Before: Feb 9 14:00:42 2026 GMT Not After : Feb 10 14:00:42 2026 GMT Subject: CN=a0bf23968908a50998e6b681430b38c4d085ab2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ac:43:f7:d2:a8:ec:e7:27:fe:b9:b3:26:89: 13:1c:6e:ca:2b:23:e9:a7:a6:b6:db:d1:fa:a7:d3: 5b:0d:d0:6e:c7:10:6f:4a:7c:13:3e:d4:e8:ee:1b: 21:75:4b:cb:bc:ab:c4:58:c9:19:c8:3c:9f:30:ef: 41:23:04:64:f2:94:94:84:44:a9:f5:3d:a0:f3:da: a9:af:92:29:32:22:19:66:25:37:ae:f5:09:ba:42: 97:74:2c:c5:f7:dc:a8:c1:28:0c:db:a5:68:10:bb: bd:20:50:0c:76:08:95:59:a4:3a:59:e3:74:f9:e7: 86:99:6b:4f:7d:61:c6:4a:37:da:99:0c:f0:eb:8c: 88:19:36:e0:8d:03:8c:e7:7e:6b:51:fc:4a:9d:4f: 83:0c:4e:cd:2e:a4:39:1d:bd:dc:84:1c:73:c6:f3: 3f:69:92:ca:31:6e:0e:d2:02:af:82:28:75:f7:0d: 65:d6:31:43:1c:77:73:db:63:7a:c7:0c:ce:3b:9e: cc:b3:bc:0f:85:67:63:26:62:85:02:a8:67:8a:ac: e2:5d:cb:5e:a4:db:04:69:fc:03:25:d1:b0:12:a5: ec:11:0b:23:fc:f8:4e:18:c0:94:f7:2c:aa:4c:b8: 8e:46:28:21:be:7d:17:bf:43:88:bb:39:33:de:29: 2f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:BF:23:96:89:08:A5:09:98:E6:B6:81:43:0B:38:C4:D0:85:AB:2D X509v3 Authority Key Identifier: keyid:92:09:B8:DD:5E:A7:25:89:08:37:86:61:F2:BA:9E:F8:9A:D3:A0:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kgm43V6nJYkIN4Zh8rqe-JrToLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/688da5-d238-47ce-b2e8-890ffea8d0bc/1/kgm43V6nJYkIN4Zh8rqe-JrToLE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/688da5-d238-47ce-b2e8-890ffea8d0bc/1/kgm43V6nJYkIN4Zh8rqe-JrToLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:88:cc:9c:76:a8:ef:8b:de:f3:78:a9:5c:3f:bb:06:dc:06: eb:c4:7d:c8:2f:75:00:08:d9:46:41:80:4d:4b:d8:2e:95:94: df:a3:69:e2:fd:4c:84:6f:e1:42:54:c2:b9:12:5e:96:e4:a5: 64:a1:fc:ba:b6:0b:8d:fc:4d:c7:c5:06:53:e4:98:25:d3:ef: fa:40:65:6c:41:34:7f:dc:d3:a5:a9:5e:02:36:4b:7b:32:f0: 6a:99:b1:7c:fb:5c:ea:92:e1:ad:08:fc:ea:02:a3:68:73:5e: 07:dc:cf:3a:57:68:66:dd:98:39:50:fb:08:5f:01:8a:57:bd: 23:15:cf:0e:0f:f0:7a:cd:9c:d5:42:58:bb:04:06:4b:29:b5: 90:9c:d1:90:dc:4b:c2:5d:3a:04:ab:5e:11:ba:fa:b8:e3:fe: 3b:3e:6f:29:a6:38:65:10:8b:a1:66:4d:6d:36:f6:1c:31:07: c4:8f:0f:f5:1c:62:47:4f:f4:d6:29:b4:bd:be:b9:01:90:b0: a3:b4:83:de:55:f7:9c:74:71:4d:ee:62:b6:75:7a:74:ec:42: 19:54:4c:0b:90:18:ff:cd:8a:1c:f5:be:88:09:cc:72:2a:46: b7:77:d1:0c:3e:ff:fd:08:6b:9f:23:20:2e:3d:2f:f7:9a:1a: 08:3f:1c:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtFxhQAn83Nad+ljma/v2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMDliOGRkNWVhNzI1ODkwODM3ODY2MWYyYmE5ZWY4OWFk M2EwYjEwHhcNMjYwMjA5MTQwMDQyWhcNMjYwMjEwMTQwMDQyWjAzMTEwLwYDVQQD EyhhMGJmMjM5Njg5MDhhNTA5OThlNmI2ODE0MzBiMzhjNGQwODVhYjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaxD99Ko7Ocn/rmzJokTHG7KKyPp p6a229H6p9NbDdBuxxBvSnwTPtTo7hshdUvLvKvEWMkZyDyfMO9BIwRk8pSUhESp 9T2g89qpr5IpMiIZZiU3rvUJukKXdCzF99yowSgM26VoELu9IFAMdgiVWaQ6WeN0 +eeGmWtPfWHGSjfamQzw64yIGTbgjQOM535rUfxKnU+DDE7NLqQ5Hb3chBxzxvM/ aZLKMW4O0gKvgih19w1l1jFDHHdz22N6xwzOO57Ms7wPhWdjJmKFAqhniqziXcte pNsEafwDJdGwEqXsEQsj/PhOGMCU9yyqTLiORighvn0Xv0OIuzkz3ikv2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKC/I5aJCKUJmOa2gUMLOMTQhastMB8GA1UdIwQY MBaAFJIJuN1epyWJCDeGYfK6nvia06CxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2dtNDNWNm5KWWtJTjRaaDhycWUtSnJUb0xFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy82ODhkYTUtZDIzOC00N2NlLWIyZTgt ODkwZmZlYThkMGJjLzEva2dtNDNWNm5KWWtJTjRaaDhycWUtSnJUb0xFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy82ODhkYTUtZDIzOC00N2NlLWIyZTgtODkwZmZlYThkMGJj LzEva2dtNDNWNm5KWWtJTjRaaDhycWUtSnJUb0xFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUIjMnHao 74ve83ipXD+7BtwG68R9yC91AAjZRkGATUvYLpWU36Np4v1MhG/hQlTCuRJeluSl ZKH8urYLjfxNx8UGU+SYJdPv+kBlbEE0f9zTpaleAjZLezLwapmxfPtc6pLhrQj8 6gKjaHNeB9zPOldoZt2YOVD7CF8Bile9IxXPDg/wes2c1UJYuwQGSym1kJzRkNxL wl06BKteEbr6uOP+Oz5vKaY4ZRCLoWZNbTb2HDEHxI8P9RxiR0/01im0vb65AZCw o7SD3lX3nHRxTe5itnV6dOxCGVRMC5AY/82KHPW+iAnMcipGt3fRDD7//QhrnyMg Lj0v95oaCD8c8Q== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:18 2026 by rpki-client