This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft File: KcmwQBb28CGDMHwX32MKAonsW7U.mft (raw, json) Hash identifier: 4sj1gXc23/rL9KSMA0cCtj/CbwNrmy+8Hl3VTzc0ZUc= Subject key identifier: 72:8A:7C:6D:4B:B8:64:CD:EB:94:E6:25:B6:4A:79:2E:F5:6A:EF:C9 Authority key identifier: 29:C9:B0:40:16:F6:F0:21:83:30:7C:17:DF:63:0A:02:89:EC:5B:B5 Certificate issuer: /CN=29c9b04016f6f02183307c17df630a0289ec5bb5 Certificate serial: 019C4322399033FAC3F11CA170F52A082CF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcmwQBb28CGDMHwX32MKAonsW7U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft Manifest number: 1072 Signing time: Mon 09 Feb 2026 16:00:42 +0000 Manifest this update: Mon 09 Feb 2026 16:00:42 +0000 Manifest next update: Tue 10 Feb 2026 16:00:42 +0000 Files and hashes: 1: KcmwQBb28CGDMHwX32MKAonsW7U.crl (hash: fq5q861yOY3h+CTWWjCJeoqTlKB7bG0WOm3CKrWg8kA=) 2: hTiJ6cCS_TiS4eI7qxisMIha6WA.roa (hash: RYMk/98nEg7OxXi5y6LpcIy05kfPWnp4XSK+7SVu8ys=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft rsync://rpki.ripe.net/repository/DEFAULT/KcmwQBb28CGDMHwX32MKAonsW7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:39:90:33:fa:c3:f1:1c:a1:70:f5:2a:08:2c:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29c9b04016f6f02183307c17df630a0289ec5bb5 Validity Not Before: Feb 9 16:00:42 2026 GMT Not After : Feb 10 16:00:42 2026 GMT Subject: CN=728a7c6d4bb864cdeb94e625b64a792ef56aefc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c2:47:23:b5:ca:15:f1:b7:92:f2:b4:f7:89: 04:5d:a7:7e:a9:39:ec:24:30:9e:c6:97:0f:19:51: 23:2f:7c:85:34:1f:02:c8:4b:89:d2:69:e2:e8:a8: 90:2d:4b:7a:23:ad:6d:16:b7:3a:6c:a9:3e:75:18: f4:e7:bd:69:46:b0:89:f3:cb:da:21:92:61:02:4b: 16:0e:6e:5b:41:e8:b4:26:bd:67:e8:60:3d:09:24: 6a:96:42:22:e7:8d:3b:b4:51:53:41:fd:c0:73:b8: 6a:25:7b:66:ae:63:f9:e5:c2:51:2c:49:48:ce:3b: 96:08:7e:b9:9d:b0:ec:80:f4:6e:53:b4:19:a0:2b: a0:a9:7e:44:55:2c:ca:86:5a:19:5c:d2:56:c7:a5: 21:82:2c:5c:14:4f:bb:80:c9:cc:9f:94:42:58:74: 92:90:df:0c:6d:c7:dc:8e:2a:77:97:cc:73:53:e9: 22:ff:a8:1c:ed:93:7f:82:0f:85:a1:12:51:35:e1: 02:cb:e4:9d:28:23:63:65:63:c2:41:1d:43:ae:d2: e0:1d:e4:3b:9c:ce:32:bf:05:81:ce:6c:81:1c:fd: af:b2:ef:f7:7f:ee:db:17:e6:17:83:9f:28:39:48: 48:19:56:15:eb:81:b0:5e:45:22:18:05:dd:27:9d: 6e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:8A:7C:6D:4B:B8:64:CD:EB:94:E6:25:B6:4A:79:2E:F5:6A:EF:C9 X509v3 Authority Key Identifier: keyid:29:C9:B0:40:16:F6:F0:21:83:30:7C:17:DF:63:0A:02:89:EC:5B:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcmwQBb28CGDMHwX32MKAonsW7U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:65:47:44:77:a1:d9:37:dc:77:a1:b1:82:df:10:7c:ce:cd: dd:d2:31:6e:12:6e:60:ee:3e:05:1a:e9:e3:d8:47:50:bd:5b: dc:1d:0c:0c:e1:03:be:b8:ee:4f:09:ec:c4:3e:57:00:b8:61: d6:d8:87:5e:58:7f:b3:61:1b:1b:b7:f1:20:4e:44:82:61:d5: a4:63:3f:e3:dc:db:aa:6d:73:89:6f:e9:e5:06:58:51:97:f4: bd:52:78:4e:65:20:65:35:ad:90:0e:6a:6b:d1:23:00:5b:d7: ed:ce:98:46:4a:68:17:f3:c6:af:eb:ca:4e:e0:e3:9a:c1:e0: ad:74:75:dd:52:73:4c:dc:6f:9f:59:6c:14:ae:e9:b7:aa:38: 07:63:a1:11:e9:c2:55:cf:1f:eb:86:5c:15:fe:c1:cf:47:02: b9:a9:c8:91:c4:22:44:f8:7a:a2:bc:93:c1:28:e8:0f:c6:75: d9:09:98:59:a0:48:7f:56:0f:fe:54:3e:3b:35:5d:64:6b:8f: 22:f3:0b:d3:2d:2c:de:1e:17:95:fc:fd:1e:2d:bc:b7:2c:ed: 7d:ae:03:bf:cc:c8:ad:82:4c:48:ae:22:95:91:53:60:83:4f: ce:fe:9a:71:fd:95:f8:c1:6c:3f:71:de:c0:ff:d3:fd:43:ca: b6:d2:83:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIjmQM/rD8RyhcPUqCCz4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YzliMDQwMTZmNmYwMjE4MzMwN2MxN2RmNjMwYTAyODll YzViYjUwHhcNMjYwMjA5MTYwMDQyWhcNMjYwMjEwMTYwMDQyWjAzMTEwLwYDVQQD Eyg3MjhhN2M2ZDRiYjg2NGNkZWI5NGU2MjViNjRhNzkyZWY1NmFlZmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMJHI7XKFfG3kvK094kEXad+qTns JDCexpcPGVEjL3yFNB8CyEuJ0mni6KiQLUt6I61tFrc6bKk+dRj0571pRrCJ88va IZJhAksWDm5bQei0Jr1n6GA9CSRqlkIi5407tFFTQf3Ac7hqJXtmrmP55cJRLElI zjuWCH65nbDsgPRuU7QZoCugqX5EVSzKhloZXNJWx6UhgixcFE+7gMnMn5RCWHSS kN8Mbcfcjip3l8xzU+ki/6gc7ZN/gg+FoRJRNeECy+SdKCNjZWPCQR1DrtLgHeQ7 nM4yvwWBzmyBHP2vsu/3f+7bF+YXg58oOUhIGVYV64GwXkUiGAXdJ51u0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHKKfG1LuGTN65TmJbZKeS71au/JMB8GA1UdIwQY MBaAFCnJsEAW9vAhgzB8F99jCgKJ7Fu1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2Ntd1FCYjI4Q0dETUh3WDMyTUtBb25zVzdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81NTE4NDctMzMyZC00ZTI3LWI0N2Et MWQ1OTFiYmQ0MDYwLzEvS2Ntd1FCYjI4Q0dETUh3WDMyTUtBb25zVzdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy81NTE4NDctMzMyZC00ZTI3LWI0N2EtMWQ1OTFiYmQ0MDYw LzEvS2Ntd1FCYjI4Q0dETUh3WDMyTUtBb25zVzdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiWVHRHeh 2Tfcd6Gxgt8QfM7N3dIxbhJuYO4+BRrp49hHUL1b3B0MDOEDvrjuTwnsxD5XALhh 1tiHXlh/s2EbG7fxIE5EgmHVpGM/49zbqm1ziW/p5QZYUZf0vVJ4TmUgZTWtkA5q a9EjAFvX7c6YRkpoF/PGr+vKTuDjmsHgrXR13VJzTNxvn1lsFK7pt6o4B2OhEenC Vc8f64ZcFf7Bz0cCuanIkcQiRPh6oryTwSjoD8Z12QmYWaBIf1YP/lQ+OzVdZGuP IvML0y0s3h4Xlfz9Hi28tyztfa4Dv8zIrYJMSK4ilZFTYINPzv6acf2V+MFsP3He wP/T/UPKttKDRA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:54:11 2026 by rpki-client