This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft File: K0lf5W80diAmqUA18yDwqQt6JWY.mft (raw, json) Hash identifier: 6RUewLXCKdBMZwxxD1IWmD6OCmfoT8Iw/GPZaGsSzHw= Subject key identifier: FF:BB:C4:9A:A1:14:6E:9F:34:E5:66:3F:C6:A0:02:66:B7:A0:93:8C Authority key identifier: 2B:49:5F:E5:6F:34:76:20:26:A9:40:35:F3:20:F0:A9:0B:7A:25:66 Certificate issuer: /CN=2b495fe56f34762026a94035f320f0a90b7a2566 Certificate serial: 019C427E274356785645C068D150A85B8238 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft Manifest number: 180F Signing time: Mon 09 Feb 2026 13:01:29 +0000 Manifest this update: Mon 09 Feb 2026 13:01:29 +0000 Manifest next update: Tue 10 Feb 2026 13:01:29 +0000 Files and hashes: 1: K0lf5W80diAmqUA18yDwqQt6JWY.crl (hash: YOFunh7TtWsUIJQFpBAOyKnuyS+a1z/k4rGJmz8gqNI=) 2: n4FzGfOnav3SfPJfBEXT0u_w5Gs.roa (hash: sICEtaK7xm2Dr27UIi1Ga/8/sweTHAtwdDoH5h6MJ1A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7e:27:43:56:78:56:45:c0:68:d1:50:a8:5b:82:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b495fe56f34762026a94035f320f0a90b7a2566 Validity Not Before: Feb 9 13:01:29 2026 GMT Not After : Feb 10 13:01:29 2026 GMT Subject: CN=ffbbc49aa1146e9f34e5663fc6a00266b7a0938c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:21:ed:23:36:80:bc:69:59:6e:bc:cb:36:a4: eb:bf:b4:f6:3e:fb:7d:59:27:24:34:40:f3:83:1a: 5b:23:ed:17:65:d0:b5:99:5e:b6:ee:8d:8a:a8:5b: 6a:0e:cf:dd:ba:a2:3f:07:9a:fc:85:09:71:b7:dd: 48:fc:3c:c9:fb:9c:f9:a3:96:19:be:a5:17:f5:81: 4a:1d:e4:80:3e:b4:0e:95:d3:69:bb:1b:11:a1:6f: 5f:24:2a:8f:68:2d:63:58:9e:e3:75:e9:56:d5:92: 5a:54:e3:13:c6:3e:6a:62:76:a5:6f:19:4c:0a:28: 6e:34:b9:48:c5:bd:6f:18:b2:2a:c0:78:7a:57:b2: 1a:89:e5:ac:a8:26:c7:a6:ac:e7:0f:a2:56:d8:d0: 1d:b7:35:1f:0f:e6:11:a0:af:63:11:8b:9c:95:17: 7f:af:82:1f:92:73:42:51:76:fe:d8:d3:43:39:a5: 4b:cd:23:fd:eb:b4:89:2e:77:4f:5f:09:2f:6c:e6: 1f:11:a1:a3:27:7e:72:4a:5d:15:ca:ae:da:3e:7f: 67:77:3e:a7:0f:76:55:55:c1:5c:18:45:b4:ca:40: 5c:60:7f:f3:63:d4:c5:06:57:ab:60:fb:a0:ab:86: bd:55:49:f2:ce:72:5a:2d:61:84:e9:f6:b9:f7:9e: f2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:BB:C4:9A:A1:14:6E:9F:34:E5:66:3F:C6:A0:02:66:B7:A0:93:8C X509v3 Authority Key Identifier: keyid:2B:49:5F:E5:6F:34:76:20:26:A9:40:35:F3:20:F0:A9:0B:7A:25:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:a1:ed:48:19:fa:66:37:8a:14:49:6d:bd:7b:1c:6f:e2:1a: bf:b0:42:07:23:78:5b:35:94:6d:a9:e3:45:e6:b4:0e:ff:5a: 53:12:29:e3:a0:03:b8:62:f8:62:21:ac:9d:49:09:5e:ec:3b: 44:6a:8a:f5:74:23:05:79:b8:0a:97:e5:cf:fa:74:07:23:6d: e1:fe:30:bc:2b:4f:bd:d9:38:6a:ac:d5:48:ce:94:83:04:7b: a7:de:8f:ba:75:5a:89:f0:8c:f4:d8:37:41:94:2d:81:1e:a3: 90:93:40:66:3d:ee:43:0e:15:ba:49:9c:ed:67:ea:9d:11:55: b6:9d:f0:a9:5d:ff:ff:58:f1:79:69:10:89:5a:ea:4f:36:17: a2:4c:26:bd:99:f5:00:f7:be:dc:82:91:d9:eb:4d:78:a4:3f: 17:bc:2b:e0:4d:45:f9:c9:6d:90:5c:a7:2d:7b:a9:ef:4c:da: db:0d:61:3d:03:dd:01:b6:7e:aa:41:fa:e2:56:a4:df:9f:3d: 06:95:d9:c6:5f:8e:73:bd:28:14:a6:2f:e4:7f:94:65:c4:89: 2a:d3:3c:1d:d5:d7:90:ae:7b:63:6e:ab:4b:37:32:d5:98:43: 4e:4e:46:62:92:8b:fa:ef:68:2d:76:ba:1d:bf:ae:37:0e:90: b5:b5:b5:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfidDVnhWRcBo0VCoW4I4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNDk1ZmU1NmYzNDc2MjAyNmE5NDAzNWYzMjBmMGE5MGI3 YTI1NjYwHhcNMjYwMjA5MTMwMTI5WhcNMjYwMjEwMTMwMTI5WjAzMTEwLwYDVQQD EyhmZmJiYzQ5YWExMTQ2ZTlmMzRlNTY2M2ZjNmEwMDI2NmI3YTA5MzhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyHtIzaAvGlZbrzLNqTrv7T2Pvt9 WSckNEDzgxpbI+0XZdC1mV627o2KqFtqDs/duqI/B5r8hQlxt91I/DzJ+5z5o5YZ vqUX9YFKHeSAPrQOldNpuxsRoW9fJCqPaC1jWJ7jdelW1ZJaVOMTxj5qYnalbxlM CihuNLlIxb1vGLIqwHh6V7IaieWsqCbHpqznD6JW2NAdtzUfD+YRoK9jEYuclRd/ r4IfknNCUXb+2NNDOaVLzSP967SJLndPXwkvbOYfEaGjJ35ySl0Vyq7aPn9ndz6n D3ZVVcFcGEW0ykBcYH/zY9TFBlerYPugq4a9VUnyznJaLWGE6fa5957ycQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+7xJqhFG6fNOVmP8agAma3oJOMMB8GA1UdIwQY MBaAFCtJX+VvNHYgJqlANfMg8KkLeiVmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzBsZjVXODBkaUFtcVVBMTh5RHdxUXQ2SldZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80ZDI0YzctNzQ3Ny00ZjdmLWE4YjQt OWQ2Mzc5NTIxMWQzLzEvSzBsZjVXODBkaUFtcVVBMTh5RHdxUXQ2SldZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80ZDI0YzctNzQ3Ny00ZjdmLWE4YjQtOWQ2Mzc5NTIxMWQz LzEvSzBsZjVXODBkaUFtcVVBMTh5RHdxUXQ2SldZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPKHtSBn6 ZjeKFEltvXscb+Iav7BCByN4WzWUbanjRea0Dv9aUxIp46ADuGL4YiGsnUkJXuw7 RGqK9XQjBXm4Cpflz/p0ByNt4f4wvCtPvdk4aqzVSM6UgwR7p96PunVaifCM9Ng3 QZQtgR6jkJNAZj3uQw4Vukmc7WfqnRFVtp3wqV3//1jxeWkQiVrqTzYXokwmvZn1 APe+3IKR2etNeKQ/F7wr4E1F+cltkFynLXup70za2w1hPQPdAbZ+qkH64lak3589 BpXZxl+Oc70oFKYv5H+UZcSJKtM8HdXXkK57Y26rSzcy1ZhDTk5GYpKL+u9oLXa6 Hb+uNw6QtbW1XQ== -----END CERTIFICATE-----Generated at Mon Feb 9 17:01:54 2026 by rpki-client