This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.mft File: KoxYiVEmChGj771tgWvVb4Ly_DQ.mft (raw, json) Hash identifier: fgDv6pXGgQ+oVIqtwp1tjEI8nB/qfMYXuVz9567jfTk= Subject key identifier: 18:4A:2A:D1:B3:E8:9B:A9:FE:24:B0:89:FD:BF:F5:4F:B3:FC:B1:1D Authority key identifier: 2A:8C:58:89:51:26:0A:11:A3:EF:BD:6D:81:6B:D5:6F:82:F2:FC:34 Certificate issuer: /CN=2a8c588951260a11a3efbd6d816bd56f82f2fc34 Certificate serial: 019C4358CC1C6CAA702B29671096A0D2BE0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KoxYiVEmChGj771tgWvVb4Ly_DQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.mft Manifest number: 0FBC Signing time: Mon 09 Feb 2026 17:00:18 +0000 Manifest this update: Mon 09 Feb 2026 17:00:18 +0000 Manifest next update: Tue 10 Feb 2026 17:00:18 +0000 Files and hashes: 1: KoxYiVEmChGj771tgWvVb4Ly_DQ.crl (hash: UB+4MquDOmxEe1gPC0HNThN/YN4a2i3k16RLTYp6hi8=) 2: NiKwFXYvjbK-UtzIxxbcdKWTmT8.roa (hash: C+90WWb/JQ7zrn55n+w4S16JKtkV7Mdgc4eSRqUFD2w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.mft rsync://rpki.ripe.net/repository/DEFAULT/KoxYiVEmChGj771tgWvVb4Ly_DQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:cc:1c:6c:aa:70:2b:29:67:10:96:a0:d2:be:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a8c588951260a11a3efbd6d816bd56f82f2fc34 Validity Not Before: Feb 9 17:00:18 2026 GMT Not After : Feb 10 17:00:18 2026 GMT Subject: CN=184a2ad1b3e89ba9fe24b089fdbff54fb3fcb11d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:06:7f:02:fa:e0:4e:a2:0f:11:ca:6c:1e:35: 46:ad:58:30:f4:76:77:8b:be:af:73:2f:bc:9f:85: c0:e2:6c:6c:6f:fe:e0:ea:d8:aa:0e:d6:ef:9a:db: 78:45:d6:10:23:3e:4e:9d:36:b1:23:a9:fb:e1:1f: 4a:15:b5:35:80:5c:61:f7:94:50:dc:5f:d0:ae:20: 41:be:f2:8a:e6:88:32:b3:80:60:dd:44:1f:0d:9e: b4:f2:50:f5:37:0e:f3:06:bd:12:70:7c:9c:51:99: a5:41:a1:dd:89:a2:a8:f5:f1:9b:ba:75:a8:58:1f: 4a:b4:5f:9d:44:5f:c1:44:42:9c:f9:95:f4:b2:07: e2:c6:32:ed:1d:57:a2:67:b6:88:ba:5f:1b:44:89: 0a:87:eb:66:b3:d2:81:2b:78:1f:31:66:37:36:f3: f6:e1:b7:10:9e:04:7f:da:4e:be:1e:35:27:4a:81: 5b:00:3e:78:7f:c5:ed:3a:2e:5e:3d:c2:6f:b3:23: 2d:d0:97:34:75:ab:b1:35:91:42:c5:ed:56:c3:94: 5b:39:03:61:75:39:f5:46:35:fd:3c:6a:d9:04:62: a1:40:76:cc:40:6a:67:31:7d:36:59:9a:73:46:4c: 02:92:58:b2:76:d5:f0:a1:1c:74:31:5a:2e:d0:ee: 6a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:4A:2A:D1:B3:E8:9B:A9:FE:24:B0:89:FD:BF:F5:4F:B3:FC:B1:1D X509v3 Authority Key Identifier: keyid:2A:8C:58:89:51:26:0A:11:A3:EF:BD:6D:81:6B:D5:6F:82:F2:FC:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KoxYiVEmChGj771tgWvVb4Ly_DQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:5e:4b:c3:a0:5e:d8:36:93:47:f0:0e:96:ea:8c:e5:c3:eb: 63:94:79:db:a7:4d:a9:6d:36:64:01:75:2a:f1:f0:77:c5:3f: 34:a9:b9:66:01:43:52:a5:4a:f2:66:b3:b4:bc:71:16:da:12: 58:f7:9b:c1:7e:8d:46:9c:70:c9:31:fe:e1:1b:03:f5:f9:aa: 5b:d5:ba:19:53:68:2b:a1:d7:b9:18:99:32:b4:d4:52:4f:2d: 6a:af:98:da:85:55:bc:16:12:1c:b2:d8:8f:67:ab:d5:92:96: 13:4a:d2:41:d3:49:d6:17:df:d1:1a:0e:ba:ad:09:8e:78:f3: 4e:3f:9e:31:b1:7b:13:b3:91:b1:c7:b7:12:6d:78:93:ff:91: f9:54:b1:cc:7b:0d:00:e5:35:74:00:55:13:62:bf:e1:2e:94: 07:65:e8:14:d3:6d:2d:ef:7b:44:a2:e0:9c:4c:57:38:d2:7c: e2:5c:3d:d4:69:ba:d9:46:82:ac:f6:38:68:4d:5f:dc:06:9d: b7:14:c8:36:22:c0:e2:c1:fc:58:4a:72:bf:93:d5:a5:2b:e5: 2c:66:0a:b0:a9:bb:c6:a8:ed:ef:48:75:7c:60:c0:78:69:12: 0f:68:c8:21:e6:3a:00:93:c8:07:45:2d:f4:52:bf:1e:89:28: fd:20:eb:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWMwcbKpwKylnEJag0r4NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOGM1ODg5NTEyNjBhMTFhM2VmYmQ2ZDgxNmJkNTZmODJm MmZjMzQwHhcNMjYwMjA5MTcwMDE4WhcNMjYwMjEwMTcwMDE4WjAzMTEwLwYDVQQD EygxODRhMmFkMWIzZTg5YmE5ZmUyNGIwODlmZGJmZjU0ZmIzZmNiMTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQZ/AvrgTqIPEcpsHjVGrVgw9HZ3 i76vcy+8n4XA4mxsb/7g6tiqDtbvmtt4RdYQIz5OnTaxI6n74R9KFbU1gFxh95RQ 3F/QriBBvvKK5ogys4Bg3UQfDZ608lD1Nw7zBr0ScHycUZmlQaHdiaKo9fGbunWo WB9KtF+dRF/BREKc+ZX0sgfixjLtHVeiZ7aIul8bRIkKh+tms9KBK3gfMWY3NvP2 4bcQngR/2k6+HjUnSoFbAD54f8XtOi5ePcJvsyMt0Jc0dauxNZFCxe1Ww5RbOQNh dTn1RjX9PGrZBGKhQHbMQGpnMX02WZpzRkwCkliydtXwoRx0MVou0O5qZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBhKKtGz6Jup/iSwif2/9U+z/LEdMB8GA1UdIwQY MBaAFCqMWIlRJgoRo++9bYFr1W+C8vw0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS294WWlWRW1DaEdqNzcxdGdXdlZiNEx5X0RRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi80ZGU0OWMtYWE1OC00NGFmLWIwMmEt MWU4ZDIxOWY4N2FmLzEvS294WWlWRW1DaEdqNzcxdGdXdlZiNEx5X0RRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi80ZGU0OWMtYWE1OC00NGFmLWIwMmEtMWU4ZDIxOWY4N2Fm LzEvS294WWlWRW1DaEdqNzcxdGdXdlZiNEx5X0RRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUl5Lw6Be 2DaTR/AOluqM5cPrY5R526dNqW02ZAF1KvHwd8U/NKm5ZgFDUqVK8maztLxxFtoS WPebwX6NRpxwyTH+4RsD9fmqW9W6GVNoK6HXuRiZMrTUUk8taq+Y2oVVvBYSHLLY j2er1ZKWE0rSQdNJ1hff0RoOuq0JjnjzTj+eMbF7E7ORsce3Em14k/+R+VSxzHsN AOU1dABVE2K/4S6UB2XoFNNtLe97RKLgnExXONJ84lw91Gm62UaCrPY4aE1f3Aad txTINiLA4sH8WEpyv5PVpSvlLGYKsKm7xqjt70h1fGDAeGkSD2jIIeY6AJPIB0Ut 9FK/Hoko/SDrrg== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:09 2026 by rpki-client