This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.mft File: Kt_vhCTbu4eonZOJhODis-2aq4s.mft (raw, json) Hash identifier: THq5nz3VkgYJjhSD6hxHpcHxyZbL7W4ADQxH36XdWnc= Subject key identifier: 9E:E1:62:A2:C5:1F:E5:E6:CE:F3:75:FF:46:26:48:F8:26:1D:99:C1 Authority key identifier: 2A:DF:EF:84:24:DB:BB:87:A8:9D:93:89:84:E0:E2:B3:ED:9A:AB:8B Certificate issuer: /CN=2adfef8424dbbb87a89d938984e0e2b3ed9aab8b Certificate serial: 019C4322C1049D7C77A49DA0358FAF19356F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kt_vhCTbu4eonZOJhODis-2aq4s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.mft Manifest number: 07F4 Signing time: Mon 09 Feb 2026 16:01:16 +0000 Manifest this update: Mon 09 Feb 2026 16:01:16 +0000 Manifest next update: Tue 10 Feb 2026 16:01:16 +0000 Files and hashes: 1: Kt_vhCTbu4eonZOJhODis-2aq4s.crl (hash: xp6G8tPSk0zMtrcIn5sV1wrlkZ/6xpBaNSu6mYB8JTg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.mft rsync://rpki.ripe.net/repository/DEFAULT/Kt_vhCTbu4eonZOJhODis-2aq4s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:c1:04:9d:7c:77:a4:9d:a0:35:8f:af:19:35:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2adfef8424dbbb87a89d938984e0e2b3ed9aab8b Validity Not Before: Feb 9 16:01:16 2026 GMT Not After : Feb 10 16:01:16 2026 GMT Subject: CN=9ee162a2c51fe5e6cef375ff462648f8261d99c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:52:18:01:de:e5:5e:9f:71:37:e5:03:e7:80: e1:34:fe:29:c4:1f:46:c1:30:a8:2e:80:66:82:e5: 6b:cc:b8:04:3b:80:a9:e3:4f:08:14:27:c9:53:31: 0a:67:c8:58:76:ab:ba:77:fc:9f:9b:e8:28:86:9e: 87:38:0d:0d:25:30:3c:e3:36:a0:2e:9e:fc:31:d4: 4d:ce:9f:51:79:c2:74:60:b3:4d:ef:c6:4a:e8:96: 36:b8:5c:0b:34:32:92:d4:47:3c:ef:28:cc:3f:f4: a2:3c:47:ba:f8:b5:6c:52:13:c8:67:de:b0:35:b2: 5e:e6:ac:8e:9c:02:06:d9:de:3d:02:6f:56:fa:80: 7f:a4:39:89:89:0b:fa:8e:ff:67:90:97:91:8c:28: 79:5e:4d:b0:21:18:02:67:43:e7:96:b3:26:54:29: 27:e6:49:63:a6:76:bd:7b:12:cb:ca:7f:b8:5b:0a: c2:3e:c5:cb:17:b2:e9:c9:61:63:67:88:1f:0a:66: b8:bb:08:ea:bd:e9:e7:f8:7d:23:08:3b:ee:38:76: cb:21:7a:d0:01:df:19:7a:62:dc:b8:43:62:17:32: 9c:55:c0:0d:b5:64:7a:b9:c3:be:b9:ab:ca:d7:d3: ff:c8:f1:a1:1d:7a:e9:67:2b:84:77:8b:11:20:4f: 7b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:E1:62:A2:C5:1F:E5:E6:CE:F3:75:FF:46:26:48:F8:26:1D:99:C1 X509v3 Authority Key Identifier: keyid:2A:DF:EF:84:24:DB:BB:87:A8:9D:93:89:84:E0:E2:B3:ED:9A:AB:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kt_vhCTbu4eonZOJhODis-2aq4s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:0f:c6:07:c9:98:ad:7e:00:43:c9:2e:bc:35:d1:0c:97:2b: eb:5b:8a:79:a5:db:5e:01:44:61:37:97:5d:82:cc:9c:94:8c: 75:8d:34:55:c4:b4:12:90:97:2c:ae:6f:bf:36:95:bb:b7:c7: 5e:93:25:bc:70:5f:6f:61:f9:52:71:7b:2d:e1:90:65:66:8d: 8c:16:96:08:37:cf:91:65:45:4b:fa:14:a2:d7:dd:a5:a3:88: b3:79:ab:22:ec:6a:cd:06:f9:12:79:f5:0f:dd:35:94:64:6a: 14:b0:b5:18:f5:e9:ff:41:72:6f:f6:a9:78:f1:4b:01:80:02: f8:6e:50:23:8d:e1:b1:99:e6:b2:0e:fb:0e:d2:5c:24:78:40: f0:6b:70:3f:83:9c:d2:2e:87:f7:de:37:15:f2:5b:f0:17:b1: d8:bb:01:95:05:5a:39:66:4f:dd:ff:7c:ff:8a:29:48:48:1c: 42:24:7f:78:68:89:52:4c:ba:43:c8:3a:24:c9:10:35:ef:6e: c9:41:84:e9:77:0f:9e:44:88:6a:d3:6d:f1:80:4b:46:75:1f: 94:e7:ae:a4:8f:be:da:65:0b:32:74:ba:4f:d7:26:03:cf:a3: 65:21:ef:c6:03:47:93:06:89:be:43:11:b8:b3:e3:f7:a6:de: 66:8b:d4:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIsEEnXx3pJ2gNY+vGTVvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhZGZlZjg0MjRkYmJiODdhODlkOTM4OTg0ZTBlMmIzZWQ5 YWFiOGIwHhcNMjYwMjA5MTYwMTE2WhcNMjYwMjEwMTYwMTE2WjAzMTEwLwYDVQQD Eyg5ZWUxNjJhMmM1MWZlNWU2Y2VmMzc1ZmY0NjI2NDhmODI2MWQ5OWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVIYAd7lXp9xN+UD54DhNP4pxB9G wTCoLoBmguVrzLgEO4Cp408IFCfJUzEKZ8hYdqu6d/yfm+gohp6HOA0NJTA84zag Lp78MdRNzp9RecJ0YLNN78ZK6JY2uFwLNDKS1Ec87yjMP/SiPEe6+LVsUhPIZ96w NbJe5qyOnAIG2d49Am9W+oB/pDmJiQv6jv9nkJeRjCh5Xk2wIRgCZ0PnlrMmVCkn 5kljpna9exLLyn+4WwrCPsXLF7LpyWFjZ4gfCma4uwjqvenn+H0jCDvuOHbLIXrQ Ad8ZemLcuENiFzKcVcANtWR6ucO+uavK19P/yPGhHXrpZyuEd4sRIE97nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ7hYqLFH+XmzvN1/0YmSPgmHZnBMB8GA1UdIwQY MBaAFCrf74Qk27uHqJ2TiYTg4rPtmquLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3RfdmhDVGJ1NGVvblpPSmhPRGlzLTJhcTRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9mOGQxMTEtN2VjYi00YmE2LWJlZWUt MTFhYTExMTNlOGQ2LzEvS3RfdmhDVGJ1NGVvblpPSmhPRGlzLTJhcTRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9mOGQxMTEtN2VjYi00YmE2LWJlZWUtMTFhYTExMTNlOGQ2 LzEvS3RfdmhDVGJ1NGVvblpPSmhPRGlzLTJhcTRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeQ/GB8mY rX4AQ8kuvDXRDJcr61uKeaXbXgFEYTeXXYLMnJSMdY00VcS0EpCXLK5vvzaVu7fH XpMlvHBfb2H5UnF7LeGQZWaNjBaWCDfPkWVFS/oUotfdpaOIs3mrIuxqzQb5Enn1 D901lGRqFLC1GPXp/0Fyb/apePFLAYAC+G5QI43hsZnmsg77DtJcJHhA8GtwP4Oc 0i6H9943FfJb8Bex2LsBlQVaOWZP3f98/4opSEgcQiR/eGiJUky6Q8g6JMkQNe9u yUGE6XcPnkSIatNt8YBLRnUflOeupI++2mULMnS6T9cmA8+jZSHvxgNHkwaJvkMR uLPj96beZovUAg== -----END CERTIFICATE-----Generated at Tue Feb 10 01:36:08 2026 by rpki-client