This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft File: KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft (raw, json) Hash identifier: yN+twRIAzWG1XgV3khB/Fgz4U9XAXkzl9qZ7phGgZg4= Subject key identifier: 7A:61:D8:AA:1F:40:06:02:93:81:25:9C:B0:CF:5D:D2:03:EB:97:C4 Authority key identifier: 29:18:7F:81:15:97:DD:03:51:3B:E4:2F:43:15:5B:C1:5A:3A:0B:3F Certificate issuer: /CN=29187f811597dd03513be42f43155bc15a3a0b3f Certificate serial: 019C43FD88F279115F1EFC8AFF9096399473 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft Manifest number: 1817 Signing time: Mon 09 Feb 2026 20:00:14 +0000 Manifest this update: Mon 09 Feb 2026 20:00:14 +0000 Manifest next update: Tue 10 Feb 2026 20:00:14 +0000 Files and hashes: 1: KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl (hash: 5fkxZhXitso3n35NqsKTHHwf2e7oPrzy/1WNdJdMm/g=) 2: fhF1gg6tTaPV39pNHXzapn66B-4.roa (hash: 2B1HxgzGj1c2eVd/8cGSVbgWEoR1+FiouVzHrmQHR7I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:88:f2:79:11:5f:1e:fc:8a:ff:90:96:39:94:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29187f811597dd03513be42f43155bc15a3a0b3f Validity Not Before: Feb 9 20:00:14 2026 GMT Not After : Feb 10 20:00:14 2026 GMT Subject: CN=7a61d8aa1f4006029381259cb0cf5dd203eb97c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:39:82:6b:ba:be:e8:5a:10:31:fb:be:ca:01: fb:c2:d2:4c:b6:02:da:cf:31:8f:c8:07:d6:f5:9f: c1:b0:85:40:22:ca:f3:5c:2d:62:db:47:55:c1:f9: 73:c3:4a:bd:4d:1c:0a:b5:6f:d2:df:ab:8f:8b:96: 15:f5:94:13:57:51:75:bc:5b:3a:c6:36:c2:03:c6: bf:f5:48:c5:2c:94:6d:13:5b:fb:fd:15:90:65:64: b4:92:fe:1d:f7:d8:13:80:84:b5:b7:fc:cf:08:5f: f1:f9:ca:d5:d5:10:93:93:8d:ad:b4:dc:02:2c:7b: 2a:a9:6e:f6:a9:85:b7:ef:61:c9:6c:72:89:a0:5a: 06:a9:fb:0f:79:ef:49:db:f9:65:d4:68:a6:34:ec: ae:a9:06:20:a9:2c:cc:a1:65:07:ec:e1:11:98:41: b4:c4:c0:ed:1e:a5:a8:08:01:de:0f:78:54:42:40: ac:6a:78:87:5f:7b:b2:07:f6:4d:dc:a3:a8:3b:a8: 81:ae:e2:a4:85:71:90:04:d9:bd:8a:a4:fa:e0:05: 1d:e3:c4:26:9d:b6:00:41:3e:e8:d9:3b:07:9e:90: b4:7c:a2:36:55:95:60:6c:6a:89:7f:a9:00:db:43: e7:e1:32:25:36:b9:02:d0:46:1c:a8:3c:6f:73:76: 36:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:61:D8:AA:1F:40:06:02:93:81:25:9C:B0:CF:5D:D2:03:EB:97:C4 X509v3 Authority Key Identifier: keyid:29:18:7F:81:15:97:DD:03:51:3B:E4:2F:43:15:5B:C1:5A:3A:0B:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:3e:77:6d:85:ef:a5:15:db:47:f9:9b:71:91:b2:43:ab:86: 4f:04:57:7c:00:61:38:8a:b2:ad:a5:ae:70:b4:b9:6b:0e:d7: 36:95:89:8a:ec:e5:d8:bf:3a:41:fa:19:aa:d7:25:13:6a:9f: f3:da:e9:b2:7b:b1:60:bf:1d:d9:aa:a6:3a:44:14:1a:72:e4: 4b:b6:f9:26:67:10:7e:e2:78:b8:f7:a7:e7:b9:67:3f:3f:31: 36:7d:00:48:1c:11:fd:e6:44:d4:3b:01:0f:ae:13:b8:93:91: c7:37:44:67:0b:fe:d3:6a:7c:50:1d:9e:28:26:55:59:c9:1c: 52:ba:40:21:bf:35:56:1c:20:4f:24:cc:ae:46:2e:9c:72:66: f3:d2:e2:6d:e8:0f:56:df:f5:af:57:2c:57:f7:45:5f:19:15: e3:6f:c7:c6:66:97:a2:b5:a1:5c:cc:89:f4:e7:d1:ea:49:47: 9b:cd:bf:05:92:9d:be:4b:d3:cb:81:a6:b8:d0:16:06:dc:d5: 0c:b6:91:62:82:3a:73:cc:77:3a:da:40:3f:74:69:0c:98:4c: ee:e1:13:31:fb:1d:ef:36:f1:f9:83:24:a7:59:0f:db:85:df: a6:52:b6:42:64:4b:a9:d2:19:74:1f:54:a3:3a:28:fd:dc:d6: db:98:7b:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/YjyeRFfHvyK/5CWOZRzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MTg3ZjgxMTU5N2RkMDM1MTNiZTQyZjQzMTU1YmMxNWEz YTBiM2YwHhcNMjYwMjA5MjAwMDE0WhcNMjYwMjEwMjAwMDE0WjAzMTEwLwYDVQQD Eyg3YTYxZDhhYTFmNDAwNjAyOTM4MTI1OWNiMGNmNWRkMjAzZWI5N2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTmCa7q+6FoQMfu+ygH7wtJMtgLa zzGPyAfW9Z/BsIVAIsrzXC1i20dVwflzw0q9TRwKtW/S36uPi5YV9ZQTV1F1vFs6 xjbCA8a/9UjFLJRtE1v7/RWQZWS0kv4d99gTgIS1t/zPCF/x+crV1RCTk42ttNwC LHsqqW72qYW372HJbHKJoFoGqfsPee9J2/ll1GimNOyuqQYgqSzMoWUH7OERmEG0 xMDtHqWoCAHeD3hUQkCsaniHX3uyB/ZN3KOoO6iBruKkhXGQBNm9iqT64AUd48Qm nbYAQT7o2TsHnpC0fKI2VZVgbGqJf6kA20Pn4TIlNrkC0EYcqDxvc3Y2UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHph2KofQAYCk4ElnLDPXdID65fEMB8GA1UdIwQY MBaAFCkYf4EVl90DUTvkL0MVW8FaOgs/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1JoX2dSV1gzUU5STy1RdlF4VmJ3Vm82Q3o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC84YzAwNmQtNTBmNS00NDVkLWI3ZTgt MjQ5OTRiMDQwZjQxLzEvS1JoX2dSV1gzUU5STy1RdlF4VmJ3Vm82Q3o4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC84YzAwNmQtNTBmNS00NDVkLWI3ZTgtMjQ5OTRiMDQwZjQx LzEvS1JoX2dSV1gzUU5STy1RdlF4VmJ3Vm82Q3o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOD53bYXv pRXbR/mbcZGyQ6uGTwRXfABhOIqyraWucLS5aw7XNpWJiuzl2L86QfoZqtclE2qf 89rpsnuxYL8d2aqmOkQUGnLkS7b5JmcQfuJ4uPen57lnPz8xNn0ASBwR/eZE1DsB D64TuJORxzdEZwv+02p8UB2eKCZVWckcUrpAIb81VhwgTyTMrkYunHJm89LibegP Vt/1r1csV/dFXxkV42/HxmaXorWhXMyJ9OfR6klHm82/BZKdvkvTy4GmuNAWBtzV DLaRYoI6c8x3OtpAP3RpDJhM7uETMfsd7zbx+YMkp1kP24XfplK2QmRLqdIZdB9U ozoo/dzW25h7Og== -----END CERTIFICATE-----Generated at Tue Feb 10 01:37:55 2026 by rpki-client