This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft File: 00KrFW1a4VOtFlKOh9nIR53ApKU.mft (raw, json) Hash identifier: wffeotM3OHvUAflOgkjEsVGgUvphAIiaOgVeei8YswY= Subject key identifier: 90:54:26:A8:D4:D0:09:5B:F9:45:1A:D2:0B:9C:55:E6:5B:10:99:45 Authority key identifier: D3:42:AB:15:6D:5A:E1:53:AD:16:52:8E:87:D9:C8:47:9D:C0:A4:A5 Certificate issuer: /CN=d342ab156d5ae153ad16528e87d9c8479dc0a4a5 Certificate serial: 019C42EB8752F2FEEEC0652F30D3715F20FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 15:00:57 +0000 Manifest this update: Mon 09 Feb 2026 15:00:57 +0000 Manifest next update: Tue 10 Feb 2026 15:00:57 +0000 Files and hashes: 1: 00KrFW1a4VOtFlKOh9nIR53ApKU.crl (hash: HHP8f8VI+B8wJRVP0LUE73uaQn47/iK6O/EKTPaKCSQ=) 2: m-OH61lf9VVgWjii0PINezzjttE.roa (hash: 2GsJyhthbzFVpryryMCfZ+0hcAAlxYfWmqigOWWbj9A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:87:52:f2:fe:ee:c0:65:2f:30:d3:71:5f:20:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d342ab156d5ae153ad16528e87d9c8479dc0a4a5 Validity Not Before: Feb 9 15:00:57 2026 GMT Not After : Feb 10 15:00:57 2026 GMT Subject: CN=905426a8d4d0095bf9451ad20b9c55e65b109945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:5e:8c:7d:04:16:48:f2:ff:3b:a5:d2:f6:a8: 1d:11:70:16:33:66:b2:61:76:4e:a9:a6:5f:93:60: 50:56:5d:ab:57:79:c6:33:70:d2:6b:42:6b:bc:1a: bb:1c:97:b9:70:83:75:c5:59:06:db:0c:e8:93:7f: 99:7f:74:4e:28:72:73:19:15:b7:c1:59:ef:4a:a4: f3:1d:1e:b1:9b:98:0f:50:2c:ff:b2:40:d7:11:3d: 24:3f:29:75:3d:a2:21:ac:b8:65:74:8b:ce:c5:2a: 3e:e9:d2:52:9c:9f:8a:a2:61:61:98:f4:5d:24:53: cc:f5:b4:ec:7e:c4:e3:28:01:5b:0c:32:74:10:cc: 68:9a:a8:96:81:43:b9:a5:26:5b:e8:4d:ab:e1:fe: 70:8f:14:ba:2c:b2:b9:30:0f:99:99:52:c8:bd:a8: 59:b7:85:dc:2b:e0:6a:bf:dc:20:88:6f:2d:0c:97: dd:1f:95:bb:98:aa:e8:41:38:2e:5e:0a:12:63:07: 94:78:c6:72:56:6e:c8:13:b6:37:80:6f:73:69:dc: a4:3f:dd:c7:79:54:15:e0:02:d2:b2:65:0f:6e:5d: 27:8e:e9:f5:3a:0b:a2:26:e9:c7:00:8b:1b:4b:87: 0b:95:0f:c0:94:8d:c2:9c:43:71:db:88:6b:3c:26: dd:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:54:26:A8:D4:D0:09:5B:F9:45:1A:D2:0B:9C:55:E6:5B:10:99:45 X509v3 Authority Key Identifier: keyid:D3:42:AB:15:6D:5A:E1:53:AD:16:52:8E:87:D9:C8:47:9D:C0:A4:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:61:9e:5f:e2:a0:33:74:50:d1:5f:1f:c7:7c:c5:47:bc:e3: f2:2d:70:19:0d:56:8b:dc:be:3f:57:db:b3:1f:47:b0:41:da: eb:a4:f1:ea:bf:20:62:b4:9a:07:11:ca:94:0f:5b:c4:23:68: c6:db:fd:5d:32:90:30:84:cd:28:22:aa:a0:a2:6f:00:a6:39: 5c:a6:f6:0e:a6:4c:92:56:7b:a1:bc:8d:d0:7e:4f:9a:9d:6d: d1:9a:fb:f1:f9:7a:94:99:2d:c7:16:41:8e:72:42:b3:a1:31: dc:d8:a0:e2:6a:18:69:ff:31:c3:a0:6e:93:3f:02:52:fd:00: 4e:89:a0:08:a1:19:a6:0c:0e:0a:c7:99:68:98:de:4a:aa:df: 12:4c:c8:59:4a:60:9d:dd:f5:b1:59:82:0c:88:c0:ba:a4:21: 1b:ff:9d:b8:96:c4:ce:46:83:a5:4c:df:ee:0e:96:da:6c:17: 1a:a9:39:46:ff:f4:79:f4:b5:23:d4:1e:9e:7b:c7:e2:18:e5: 34:90:c9:ab:57:d8:0f:30:b8:29:88:e8:99:5c:03:bb:58:c4: e9:04:f0:88:57:0b:6c:f0:16:7f:19:11:6c:8d:da:ba:33:d3: 98:2b:6d:53:5e:9d:c0:a4:60:bc:3f:bf:c5:0d:8d:a6:84:e0: 85:bd:fa:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC64dS8v7uwGUvMNNxXyD6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNDJhYjE1NmQ1YWUxNTNhZDE2NTI4ZTg3ZDljODQ3OWRj MGE0YTUwHhcNMjYwMjA5MTUwMDU3WhcNMjYwMjEwMTUwMDU3WjAzMTEwLwYDVQQD Eyg5MDU0MjZhOGQ0ZDAwOTViZjk0NTFhZDIwYjljNTVlNjViMTA5OTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+V6MfQQWSPL/O6XS9qgdEXAWM2ay YXZOqaZfk2BQVl2rV3nGM3DSa0JrvBq7HJe5cIN1xVkG2wzok3+Zf3ROKHJzGRW3 wVnvSqTzHR6xm5gPUCz/skDXET0kPyl1PaIhrLhldIvOxSo+6dJSnJ+KomFhmPRd JFPM9bTsfsTjKAFbDDJ0EMxomqiWgUO5pSZb6E2r4f5wjxS6LLK5MA+ZmVLIvahZ t4XcK+Bqv9wgiG8tDJfdH5W7mKroQTguXgoSYweUeMZyVm7IE7Y3gG9zadykP93H eVQV4ALSsmUPbl0njun1OguiJunHAIsbS4cLlQ/AlI3CnENx24hrPCbd1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJBUJqjU0Alb+UUa0gucVeZbEJlFMB8GA1UdIwQY MBaAFNNCqxVtWuFTrRZSjofZyEedwKSlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDBLckZXMWE0Vk90RmxLT2g5bklSNTNBcEtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8yNjM0NDctMGM4MC00Y2RhLWI5MTUt MDgxYTYzN2Y3MDNlLzEvMDBLckZXMWE0Vk90RmxLT2g5bklSNTNBcEtVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8yNjM0NDctMGM4MC00Y2RhLWI5MTUtMDgxYTYzN2Y3MDNl LzEvMDBLckZXMWE0Vk90RmxLT2g5bklSNTNBcEtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt2GeX+Kg M3RQ0V8fx3zFR7zj8i1wGQ1Wi9y+P1fbsx9HsEHa66Tx6r8gYrSaBxHKlA9bxCNo xtv9XTKQMITNKCKqoKJvAKY5XKb2DqZMklZ7obyN0H5Pmp1t0Zr78fl6lJktxxZB jnJCs6Ex3Nig4moYaf8xw6Bukz8CUv0ATomgCKEZpgwOCseZaJjeSqrfEkzIWUpg nd31sVmCDIjAuqQhG/+duJbEzkaDpUzf7g6W2mwXGqk5Rv/0efS1I9QennvH4hjl NJDJq1fYDzC4KYjomVwDu1jE6QTwiFcLbPAWfxkRbI3aujPTmCttU16dwKRgvD+/ xQ2NpoTghb36wA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:00 2026 by rpki-client