This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft File: KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft (raw, json) Hash identifier: paK+sTzxn+dwUrmt/ipoLfDB5Dnd8V8LkKfoEaDrZV0= Subject key identifier: 2D:6F:FB:C0:B2:22:F4:25:93:26:BA:37:05:BB:25:D0:46:6E:D3:25 Authority key identifier: 28:CB:66:1A:64:39:68:F3:F8:1E:7B:11:9E:EB:96:C5:0D:2D:39:C7 Certificate issuer: /CN=28cb661a643968f3f81e7b119eeb96c50d2d39c7 Certificate serial: 019C420FEB1092F4E180FD715E8C37D76A42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft Manifest number: 15B6 Signing time: Mon 09 Feb 2026 11:01:05 +0000 Manifest this update: Mon 09 Feb 2026 11:01:05 +0000 Manifest next update: Tue 10 Feb 2026 11:01:05 +0000 Files and hashes: 1: KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.crl (hash: 4vYPQdEuJFB2/7DAKaNny4T+MCnQvG5O0IDY+YjfSng=) 2: jJO0sxZTcZ6JEt0Fk0adQwE8ax8.roa (hash: zoeDpAsCDg15ZqeXjdLWt/zPvQ+0f3jQu+TzTt0DwhY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft rsync://rpki.ripe.net/repository/DEFAULT/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:eb:10:92:f4:e1:80:fd:71:5e:8c:37:d7:6a:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28cb661a643968f3f81e7b119eeb96c50d2d39c7 Validity Not Before: Feb 9 11:01:05 2026 GMT Not After : Feb 10 11:01:05 2026 GMT Subject: CN=2d6ffbc0b222f4259326ba3705bb25d0466ed325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d6:5e:fe:2c:fa:23:e1:1a:bf:23:5b:22:bb: 38:1a:8d:44:aa:46:d6:05:c2:a8:5a:b9:da:c4:f4: fb:73:a5:f4:8d:f4:24:b4:75:05:9c:57:fd:a9:25: 5a:65:40:f2:7d:77:3d:82:b4:e5:79:be:77:b5:90: 65:38:15:6b:ad:a6:bc:83:87:f4:c6:e2:7d:3e:94: bd:62:5d:2d:c4:7d:03:af:86:51:4e:cd:42:29:ed: 9e:ad:46:b7:65:bc:9d:41:96:9f:32:0a:e8:b8:45: c8:27:30:a0:38:03:64:d7:44:88:81:b3:d0:66:6d: 08:0e:02:2d:ec:f2:3b:f2:f8:64:f0:ca:27:f6:68: e4:69:47:32:ec:f3:70:4d:2a:18:78:ea:bf:b8:8d: 4f:1f:86:1a:fb:3a:ff:26:46:3f:33:8e:e9:66:0a: 79:33:a7:f1:bc:1c:4d:77:1d:ea:84:d6:00:e6:9d: 3f:21:d1:07:e0:f5:30:26:66:cc:42:76:19:35:d3: 21:0f:d4:eb:f6:bb:92:8b:01:2d:29:1c:af:19:1d: 27:39:23:75:a8:f5:7b:5a:50:e7:20:b1:a8:8d:37: 67:c5:c9:46:4a:40:a5:06:52:69:b2:c5:fd:88:7a: 44:9d:78:23:b7:de:3d:c0:1a:3d:58:b0:2b:72:43: 6c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:6F:FB:C0:B2:22:F4:25:93:26:BA:37:05:BB:25:D0:46:6E:D3:25 X509v3 Authority Key Identifier: keyid:28:CB:66:1A:64:39:68:F3:F8:1E:7B:11:9E:EB:96:C5:0D:2D:39:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:8e:b0:6e:3b:45:42:1c:31:56:95:0e:bd:28:83:b9:fa:28: 61:f1:65:07:98:4e:60:33:19:45:aa:9c:eb:49:66:c2:18:55: 11:08:12:f2:5f:cf:a7:16:9b:d7:24:e0:63:80:e9:fb:86:8d: 58:6b:82:5d:3d:99:4b:2d:df:c6:48:14:c9:a0:6c:93:5c:7a: b0:b4:df:a2:1b:16:0a:68:c6:25:39:0d:bf:72:c4:09:8d:d9: d2:cf:9f:22:d6:9b:fc:af:83:43:57:a3:a4:0e:b5:cb:95:e9: 78:2e:6d:dd:13:10:6b:75:d4:18:69:5d:74:26:74:03:39:f3: 29:17:88:ca:c2:06:f7:af:88:a9:8d:c7:80:e5:b9:74:ee:78: f8:6d:4c:af:f4:24:19:70:47:0a:2f:25:ab:fe:2b:a0:80:3a: 30:d4:c1:47:52:01:25:c3:66:6e:46:61:ae:1c:b5:07:6e:b4: e8:2c:b2:d5:4d:94:25:4d:c6:73:98:07:38:f9:3c:5a:27:f8: e5:d4:cf:63:a5:93:10:30:f8:98:9f:6b:07:7e:48:6e:5b:de: 54:25:fe:4c:a2:14:43:a3:21:32:a3:a8:64:e6:c5:3b:8b:6b: 1c:19:17:e4:71:da:c2:b8:18:f1:a4:53:a6:51:00:ee:7f:3b: 93:20:c6:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD+sQkvThgP1xXow312pCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4Y2I2NjFhNjQzOTY4ZjNmODFlN2IxMTllZWI5NmM1MGQy ZDM5YzcwHhcNMjYwMjA5MTEwMTA1WhcNMjYwMjEwMTEwMTA1WjAzMTEwLwYDVQQD EygyZDZmZmJjMGIyMjJmNDI1OTMyNmJhMzcwNWJiMjVkMDQ2NmVkMzI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4NZe/iz6I+EavyNbIrs4Go1EqkbW BcKoWrnaxPT7c6X0jfQktHUFnFf9qSVaZUDyfXc9grTleb53tZBlOBVrraa8g4f0 xuJ9PpS9Yl0txH0Dr4ZRTs1CKe2erUa3ZbydQZafMgrouEXIJzCgOANk10SIgbPQ Zm0IDgIt7PI78vhk8Mon9mjkaUcy7PNwTSoYeOq/uI1PH4Ya+zr/JkY/M47pZgp5 M6fxvBxNdx3qhNYA5p0/IdEH4PUwJmbMQnYZNdMhD9Tr9ruSiwEtKRyvGR0nOSN1 qPV7WlDnILGojTdnxclGSkClBlJpssX9iHpEnXgjt949wBo9WLArckNsJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC1v+8CyIvQlkya6NwW7JdBGbtMlMB8GA1UdIwQY MBaAFCjLZhpkOWjz+B57EZ7rlsUNLTnHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS010bUdtUTVhUFA0SG5zUm51dVd4UTB0T2NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8yNzZiZjctN2ExNS00YzU2LWFjNTYt N2Q0ZTY4ZGQ0Y2NlLzEvS010bUdtUTVhUFA0SG5zUm51dVd4UTB0T2NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8yNzZiZjctN2ExNS00YzU2LWFjNTYtN2Q0ZTY4ZGQ0Y2Nl LzEvS010bUdtUTVhUFA0SG5zUm51dVd4UTB0T2NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbI6wbjtF QhwxVpUOvSiDufooYfFlB5hOYDMZRaqc60lmwhhVEQgS8l/Ppxab1yTgY4Dp+4aN WGuCXT2ZSy3fxkgUyaBsk1x6sLTfohsWCmjGJTkNv3LECY3Z0s+fItab/K+DQ1ej pA61y5XpeC5t3RMQa3XUGGlddCZ0AznzKReIysIG96+IqY3HgOW5dO54+G1Mr/Qk GXBHCi8lq/4roIA6MNTBR1IBJcNmbkZhrhy1B2606Cyy1U2UJU3Gc5gHOPk8Wif4 5dTPY6WTEDD4mJ9rB35IblveVCX+TKIUQ6MhMqOoZObFO4trHBkX5HHawrgY8aRT plEA7n87kyDGyw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:14 2026 by rpki-client