This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/1b01d8-9b31-4f08-a1c5-e91648ec7de5/1/kpZChU_lYFL93BRr9y57xpSFC2M.mft File: kpZChU_lYFL93BRr9y57xpSFC2M.mft (raw, json) Hash identifier: 6Vl2Qefq5eAj1ovSs0LdiykFtAq+XhwgRpSmLe7dKYk= Subject key identifier: 50:80:37:43:AB:52:30:40:DC:75:ED:60:5D:2F:AB:0F:07:99:E5:2F Authority key identifier: 92:96:42:85:4F:E5:60:52:FD:DC:14:6B:F7:2E:7B:C6:94:85:0B:63 Certificate issuer: /CN=929642854fe56052fddc146bf72e7bc694850b63 Certificate serial: 019C42EAF9B2873A9DC2B0D60A0522C32615 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpZChU_lYFL93BRr9y57xpSFC2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/1b01d8-9b31-4f08-a1c5-e91648ec7de5/1/kpZChU_lYFL93BRr9y57xpSFC2M.mft Manifest number: 08F9 Signing time: Mon 09 Feb 2026 15:00:21 +0000 Manifest this update: Mon 09 Feb 2026 15:00:21 +0000 Manifest next update: Tue 10 Feb 2026 15:00:21 +0000 Files and hashes: 1: kpZChU_lYFL93BRr9y57xpSFC2M.crl (hash: 5cDjtlNpdZ2Lyuk0f6dCFaeYF1esO7qgd9Hs+ZDOgUs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/1b01d8-9b31-4f08-a1c5-e91648ec7de5/1/kpZChU_lYFL93BRr9y57xpSFC2M.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/1b01d8-9b31-4f08-a1c5-e91648ec7de5/1/kpZChU_lYFL93BRr9y57xpSFC2M.mft rsync://rpki.ripe.net/repository/DEFAULT/kpZChU_lYFL93BRr9y57xpSFC2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:ea:f9:b2:87:3a:9d:c2:b0:d6:0a:05:22:c3:26:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=929642854fe56052fddc146bf72e7bc694850b63 Validity Not Before: Feb 9 15:00:21 2026 GMT Not After : Feb 10 15:00:21 2026 GMT Subject: CN=50803743ab523040dc75ed605d2fab0f0799e52f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d9:28:d4:73:6d:34:0e:ca:88:f8:20:bd:76: 36:3a:06:c6:fe:86:0f:04:4b:c7:19:fb:49:b5:1e: 9e:e0:cc:c9:7a:5d:c8:36:1a:33:c0:d5:20:96:05: f9:23:3c:ce:34:0c:19:19:0d:a3:e2:2e:e3:5d:d8: b2:c4:48:4d:da:e0:8b:89:c8:a3:a2:05:f7:77:67: 0a:6d:ac:8f:8c:79:1b:4d:0d:18:39:d0:b1:be:b9: 76:3f:7a:95:af:bc:38:e8:83:4c:11:a0:74:53:48: ef:74:33:63:e8:e2:93:b0:1b:63:fe:56:14:e6:71: 0b:b7:99:12:99:34:1b:f3:f8:f3:e9:85:7e:e4:b1: 02:d5:cd:8a:91:8e:4e:a5:b1:de:7d:35:91:c7:32: fa:53:67:18:b1:16:51:cc:f0:00:0e:21:e3:81:2c: 8a:46:25:da:9e:6d:f8:ad:34:aa:5b:b5:2d:88:62: 23:49:2c:02:40:4c:ff:5e:57:1d:9c:83:4e:7a:db: bc:0a:39:33:1e:d6:d2:e2:ac:fc:58:92:20:bf:91: f0:46:09:16:4a:35:f0:fc:b8:d6:39:fc:ae:4e:c5: 87:bf:73:19:2b:60:82:1e:1a:49:07:e7:08:df:19: a3:a3:2a:9f:62:80:2a:3d:42:7c:8c:7e:cf:be:7e: 0e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:80:37:43:AB:52:30:40:DC:75:ED:60:5D:2F:AB:0F:07:99:E5:2F X509v3 Authority Key Identifier: keyid:92:96:42:85:4F:E5:60:52:FD:DC:14:6B:F7:2E:7B:C6:94:85:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpZChU_lYFL93BRr9y57xpSFC2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1b01d8-9b31-4f08-a1c5-e91648ec7de5/1/kpZChU_lYFL93BRr9y57xpSFC2M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1b01d8-9b31-4f08-a1c5-e91648ec7de5/1/kpZChU_lYFL93BRr9y57xpSFC2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:ca:00:d3:d5:f7:fe:ef:09:55:5e:8c:0f:3f:d1:4f:23:05: 9a:91:5e:83:25:ad:93:23:7a:e6:43:80:9a:0d:10:6a:3a:2d: e1:55:9a:bc:ae:45:79:c1:e5:3c:2b:05:b8:d7:e7:5e:3f:60: e7:c1:91:22:93:e6:42:74:5a:02:bb:d6:28:71:ea:34:1c:50: 2e:83:a9:fa:0d:9f:d4:f7:31:17:b5:3a:96:9e:b0:c6:49:73: c5:e3:82:a5:b9:34:ba:7c:3f:f1:50:aa:26:86:72:27:b9:81: 8f:c5:6d:4f:66:f6:99:e1:ca:63:c0:5b:d4:37:67:87:e7:e0: ae:b3:ec:5b:1a:7d:4d:1f:37:ad:a1:3b:60:90:fb:90:a8:5e: 02:10:e5:8f:b5:29:f1:03:ca:9d:01:d6:de:0a:2e:7c:2c:b9: fb:7f:d2:47:30:1a:89:23:46:ba:39:a8:33:e5:9a:31:68:a0: 68:b7:00:7c:bc:73:8a:d1:72:a1:16:46:dd:50:3a:c0:a3:5c: 6b:a4:09:2b:ef:86:18:c8:d2:42:64:6a:d8:88:69:31:3b:98: ae:29:bc:08:b6:00:28:e8:29:7e:f9:31:91:aa:0b:cc:94:48: 25:d1:a8:f2:28:07:33:2e:c1:52:d0:ec:f5:5a:0a:e3:72:34: 88:29:00:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6vmyhzqdwrDWCgUiwyYVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyOTY0Mjg1NGZlNTYwNTJmZGRjMTQ2YmY3MmU3YmM2OTQ4 NTBiNjMwHhcNMjYwMjA5MTUwMDIxWhcNMjYwMjEwMTUwMDIxWjAzMTEwLwYDVQQD Eyg1MDgwMzc0M2FiNTIzMDQwZGM3NWVkNjA1ZDJmYWIwZjA3OTllNTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9ko1HNtNA7KiPggvXY2OgbG/oYP BEvHGftJtR6e4MzJel3INhozwNUglgX5IzzONAwZGQ2j4i7jXdiyxEhN2uCLicij ogX3d2cKbayPjHkbTQ0YOdCxvrl2P3qVr7w46INMEaB0U0jvdDNj6OKTsBtj/lYU 5nELt5kSmTQb8/jz6YV+5LEC1c2KkY5OpbHefTWRxzL6U2cYsRZRzPAADiHjgSyK RiXanm34rTSqW7UtiGIjSSwCQEz/XlcdnINOetu8CjkzHtbS4qz8WJIgv5HwRgkW SjXw/LjWOfyuTsWHv3MZK2CCHhpJB+cI3xmjoyqfYoAqPUJ8jH7Pvn4OXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFCAN0OrUjBA3HXtYF0vqw8HmeUvMB8GA1UdIwQY MBaAFJKWQoVP5WBS/dwUa/cue8aUhQtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3BaQ2hVX2xZRkw5M0JScjl5NTd4cFNGQzJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xYjAxZDgtOWIzMS00ZjA4LWExYzUt ZTkxNjQ4ZWM3ZGU1LzEva3BaQ2hVX2xZRkw5M0JScjl5NTd4cFNGQzJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8xYjAxZDgtOWIzMS00ZjA4LWExYzUtZTkxNjQ4ZWM3ZGU1 LzEva3BaQ2hVX2xZRkw5M0JScjl5NTd4cFNGQzJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAosoA09X3 /u8JVV6MDz/RTyMFmpFegyWtkyN65kOAmg0Qajot4VWavK5FecHlPCsFuNfnXj9g 58GRIpPmQnRaArvWKHHqNBxQLoOp+g2f1PcxF7U6lp6wxklzxeOCpbk0unw/8VCq JoZyJ7mBj8VtT2b2meHKY8Bb1Ddnh+fgrrPsWxp9TR83raE7YJD7kKheAhDlj7Up 8QPKnQHW3goufCy5+3/SRzAaiSNGujmoM+WaMWigaLcAfLxzitFyoRZG3VA6wKNc a6QJK++GGMjSQmRq2IhpMTuYrim8CLYAKOgpfvkxkaoLzJRIJdGo8igHMy7BUtDs 9VoK43I0iCkAxg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:31:00 2026 by rpki-client