This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft File: koAW21XmZLpyHhmumrQxbBDZZwg.mft (raw, json) Hash identifier: /xue1GROhHyhxkFGYzwpv1YYoZ0YOvmlZsRKtnMWUGY= Subject key identifier: 0F:DE:2B:20:16:F0:D6:D5:BA:07:84:A9:14:6E:9E:6F:D3:5E:E9:B3 Authority key identifier: 92:80:16:DB:55:E6:64:BA:72:1E:19:AE:9A:B4:31:6C:10:D9:67:08 Certificate issuer: /CN=928016db55e664ba721e19ae9ab4316c10d96708 Certificate serial: 019C4434DA2EE8C94CF65775E4A71AB48C95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft Manifest number: 1813 Signing time: Mon 09 Feb 2026 21:00:40 +0000 Manifest this update: Mon 09 Feb 2026 21:00:40 +0000 Manifest next update: Tue 10 Feb 2026 21:00:40 +0000 Files and hashes: 1: f1xxhacm7jnvbldN6spjT65Vwn8.roa (hash: rqkDD8hNvJtlHHJ4fiGoQKM/oQxgw1TdOWMEVdkAPbI=) 2: koAW21XmZLpyHhmumrQxbBDZZwg.crl (hash: N6pvg/dPPSP4GEoyAjGWxKYsv1c/TmnC1SH/IsoU6nY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:34:da:2e:e8:c9:4c:f6:57:75:e4:a7:1a:b4:8c:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=928016db55e664ba721e19ae9ab4316c10d96708 Validity Not Before: Feb 9 21:00:40 2026 GMT Not After : Feb 10 21:00:40 2026 GMT Subject: CN=0fde2b2016f0d6d5ba0784a9146e9e6fd35ee9b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c3:7f:53:51:86:29:bb:27:11:25:a0:c1:2e: ff:f6:d4:94:01:66:ab:28:78:57:9f:c8:d5:b5:04: 0f:d2:32:1b:1c:fd:3d:db:87:12:74:ab:e3:ae:d1: 79:25:c3:1d:0f:18:47:c0:bc:cb:62:92:b9:a1:ca: 5c:77:40:8a:3d:b7:4c:32:da:7f:9e:ee:ae:42:c4: f8:fd:73:c4:54:b4:5d:93:86:04:b1:00:00:2c:17: 94:92:f3:f0:90:27:52:fe:fc:f9:69:44:01:ea:13: 4f:fe:3a:93:bb:fa:76:7d:20:0c:be:41:05:5e:73: 58:e7:98:0c:cd:3e:12:cf:51:40:e6:44:e8:b9:0d: fe:97:73:c1:18:80:bf:e9:95:f4:b9:51:65:c7:68: 5e:92:b2:9d:1a:71:d7:d9:96:01:0f:34:23:f9:c6: 65:4e:23:a0:7f:b0:bf:c5:4f:64:ea:fd:74:5b:99: 3e:dc:f9:3e:3a:8d:81:04:ec:18:1e:a2:9d:5d:e7: a2:6a:55:e3:17:91:3f:ee:66:a9:6d:da:3e:6a:3a: 50:25:7a:0a:b9:89:36:53:57:71:31:d4:3d:5d:8a: 30:d4:37:8a:94:56:57:bf:a9:33:94:1f:43:ae:dd: c0:7c:94:4d:b6:2a:45:7a:1a:38:d5:a8:46:f5:d2: c9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:DE:2B:20:16:F0:D6:D5:BA:07:84:A9:14:6E:9E:6F:D3:5E:E9:B3 X509v3 Authority Key Identifier: keyid:92:80:16:DB:55:E6:64:BA:72:1E:19:AE:9A:B4:31:6C:10:D9:67:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:f4:d7:20:f6:17:49:ee:19:8e:28:9b:24:e5:28:95:05:b1: 82:34:ae:7a:f4:13:57:7a:4c:55:9e:9b:2f:d6:e0:d7:4c:76: 5a:be:47:aa:be:54:1f:ed:ff:f2:1b:69:79:15:6a:6a:a0:5f: c4:39:6b:8c:4b:b8:3c:1b:b3:64:53:f4:c4:3f:ce:50:0a:cc: 17:9d:ed:2c:8f:bf:e0:84:08:75:eb:ae:d0:51:a4:b9:95:79: 7a:a5:45:ff:5e:5f:2e:b2:0b:d0:ce:13:c1:20:fa:3b:73:78: a5:b4:18:08:6e:1a:de:07:0f:12:21:6e:09:46:4b:dd:37:ab: 1a:b9:10:86:7f:7c:55:6b:f0:88:6c:a7:87:a6:a6:72:b2:e5: d9:2c:f2:2d:ac:cc:20:6d:42:28:26:c6:19:2d:58:13:1c:5b: 67:62:a0:2a:3d:d0:94:dc:54:37:0e:5e:95:4a:1d:88:cf:52: 2a:a1:d1:6c:ba:b6:8d:a0:75:7c:19:63:55:3f:dc:0e:09:2d: 89:8e:0c:c0:a9:2b:36:a9:a9:b8:29:07:76:9d:b9:a1:f1:3c: 2d:54:f2:c5:f5:95:e2:fa:e8:3f:60:1d:ab:9b:f6:5f:2a:e5: 57:04:7d:d2:a1:3b:99:d9:e8:57:93:25:5f:55:60:d4:4c:56: 78:83:5b:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxENNou6MlM9ld15KcatIyVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyODAxNmRiNTVlNjY0YmE3MjFlMTlhZTlhYjQzMTZjMTBk OTY3MDgwHhcNMjYwMjA5MjEwMDQwWhcNMjYwMjEwMjEwMDQwWjAzMTEwLwYDVQQD EygwZmRlMmIyMDE2ZjBkNmQ1YmEwNzg0YTkxNDZlOWU2ZmQzNWVlOWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsN/U1GGKbsnESWgwS7/9tSUAWar KHhXn8jVtQQP0jIbHP0924cSdKvjrtF5JcMdDxhHwLzLYpK5ocpcd0CKPbdMMtp/ nu6uQsT4/XPEVLRdk4YEsQAALBeUkvPwkCdS/vz5aUQB6hNP/jqTu/p2fSAMvkEF XnNY55gMzT4Sz1FA5kTouQ3+l3PBGIC/6ZX0uVFlx2hekrKdGnHX2ZYBDzQj+cZl TiOgf7C/xU9k6v10W5k+3Pk+Oo2BBOwYHqKdXeeialXjF5E/7mapbdo+ajpQJXoK uYk2U1dxMdQ9XYow1DeKlFZXv6kzlB9Drt3AfJRNtipFeho41ahG9dLJ5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA/eKyAW8NbVugeEqRRunm/TXumzMB8GA1UdIwQY MBaAFJKAFttV5mS6ch4Zrpq0MWwQ2WcIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva29BVzIxWG1aTHB5SGhtdW1yUXhiQkRaWndnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83MjFhMWMtY2YzOS00NDQ4LTg4M2It ZTg5Y2RhYjgyZTFjLzEva29BVzIxWG1aTHB5SGhtdW1yUXhiQkRaWndnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83MjFhMWMtY2YzOS00NDQ4LTg4M2ItZTg5Y2RhYjgyZTFj LzEva29BVzIxWG1aTHB5SGhtdW1yUXhiQkRaWndnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM/TXIPYX Se4ZjiibJOUolQWxgjSuevQTV3pMVZ6bL9bg10x2Wr5Hqr5UH+3/8htpeRVqaqBf xDlrjEu4PBuzZFP0xD/OUArMF53tLI+/4IQIdeuu0FGkuZV5eqVF/15fLrIL0M4T wSD6O3N4pbQYCG4a3gcPEiFuCUZL3TerGrkQhn98VWvwiGynh6amcrLl2SzyLazM IG1CKCbGGS1YExxbZ2KgKj3QlNxUNw5elUodiM9SKqHRbLq2jaB1fBljVT/cDgkt iY4MwKkrNqmpuCkHdp25ofE8LVTyxfWV4vroP2Adq5v2XyrlVwR90qE7mdnoV5Ml X1Vg1ExWeINb2A== -----END CERTIFICATE-----Generated at Tue Feb 10 01:22:13 2026 by rpki-client