This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft File: kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft (raw, json) Hash identifier: Vb+je6i7R8u19Egwn38dTE9VLYllQ2mZZP5SXBDrCGQ= Subject key identifier: D2:65:0E:5D:03:EE:C1:AA:CA:C1:5E:97:10:C9:EC:F6:54:17:FA:7F Authority key identifier: 91:4B:7D:1E:6E:72:D5:5C:8D:1C:4A:3E:82:41:D7:1D:CF:8E:3B:F1 Certificate issuer: /CN=914b7d1e6e72d55c8d1c4a3e8241d71dcf8e3bf1 Certificate serial: 019C427D0A9FE7FF14ED25B528F4F3012411 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft Manifest number: 16AB Signing time: Mon 09 Feb 2026 13:00:16 +0000 Manifest this update: Mon 09 Feb 2026 13:00:16 +0000 Manifest next update: Tue 10 Feb 2026 13:00:16 +0000 Files and hashes: 1: HW-WD3YmA183Eg5SjeKZRN7F6vo.roa (hash: qS+dps2UAxlaxbw7uwyr1mlazMmXktC7iMhFMsxdPKo=) 2: kUt9Hm5y1VyNHEo-gkHXHc-OO_E.crl (hash: 7JtYrFs/b/Fg3BbcVJ9rW99HgsWgThahE3Wq25P2nd0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft rsync://rpki.ripe.net/repository/DEFAULT/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:0a:9f:e7:ff:14:ed:25:b5:28:f4:f3:01:24:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914b7d1e6e72d55c8d1c4a3e8241d71dcf8e3bf1 Validity Not Before: Feb 9 13:00:16 2026 GMT Not After : Feb 10 13:00:16 2026 GMT Subject: CN=d2650e5d03eec1aacac15e9710c9ecf65417fa7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:9a:ec:47:02:cf:cf:7d:9d:18:72:69:2d:c5: 64:1e:1a:1c:46:21:80:5f:63:67:65:90:8a:e9:1b: f3:c0:e2:bd:30:4e:22:ea:d7:08:d2:ff:8b:59:6e: 06:48:9a:b6:71:6c:df:4b:2b:ac:12:2f:d7:44:1d: 60:c6:b6:3b:1e:f5:7e:b8:7b:73:69:da:71:11:a4: 46:62:ee:99:93:3d:cf:1e:00:37:0b:40:04:fa:76: a7:a7:3e:cb:75:d1:f8:4f:e0:a8:d2:ee:8b:bb:49: 55:e6:eb:53:35:3a:ed:e1:eb:18:48:d9:18:bc:5e: 75:93:ab:c5:c5:0c:81:82:8d:ff:11:31:e6:c2:e7: a6:d0:1d:f3:ae:71:24:cf:13:08:49:3d:a5:0a:3b: dc:80:4f:51:3b:92:f8:37:a0:ec:47:54:53:07:b9: ea:43:cf:5a:66:00:f5:c4:ce:48:19:bc:73:fd:5c: eb:40:3e:42:fd:58:1f:d3:2b:32:23:76:29:44:b7: c9:da:d0:de:7d:fb:7a:d8:b3:b5:cc:98:ef:7c:4d: d1:49:b0:6b:7d:a4:78:21:f7:82:e0:c8:6b:60:ad: da:e0:3f:c8:46:4f:7d:bb:32:0d:1e:dd:c0:c9:44: 2d:db:7f:84:df:3b:5f:ca:77:a0:15:1a:61:1d:dd: 41:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:65:0E:5D:03:EE:C1:AA:CA:C1:5E:97:10:C9:EC:F6:54:17:FA:7F X509v3 Authority Key Identifier: keyid:91:4B:7D:1E:6E:72:D5:5C:8D:1C:4A:3E:82:41:D7:1D:CF:8E:3B:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:16:1e:e3:e5:16:2d:5b:c1:be:77:17:47:d2:e8:ae:16:1f: 9a:f9:22:eb:a4:8c:59:96:e6:96:47:d0:28:29:b0:9f:e3:dd: 40:ac:51:92:4e:3d:ca:67:8a:aa:d7:3c:9e:a5:54:b7:a2:ca: f0:02:3f:b6:30:7f:02:8b:20:38:6c:ab:29:6e:84:4f:8c:a5: 51:96:90:fb:cc:86:cf:d1:11:75:c9:8a:dc:44:ce:38:f4:98: 41:b0:30:54:1e:74:20:c1:23:1b:02:b8:9b:00:54:73:d9:a4: a4:67:02:98:c3:b1:3d:b3:7f:a9:5a:50:25:c2:b7:85:a7:8e: 4c:f9:fc:fb:87:ce:a2:5c:3b:67:60:74:5a:2e:db:cf:40:a1: 8e:83:96:86:06:4e:ad:8d:58:0d:f9:be:b6:f8:44:13:90:1d: 56:26:b7:76:2d:f0:e2:c7:17:14:fb:1e:c8:0d:65:f6:1c:9a: e5:ee:b8:6e:dd:a2:f2:0d:e7:66:ba:30:83:93:08:9f:0c:f3: bb:8e:01:37:c2:64:1e:08:6f:0e:47:29:3e:74:48:05:d4:b8: ff:9d:b6:18:33:64:e7:61:86:29:05:25:48:94:d5:16:76:e8: 88:5b:99:54:8c:49:1e:60:47:fb:40:72:40:40:3e:99:e3:0f: 83:2c:16:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfQqf5/8U7SW1KPTzASQRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxNGI3ZDFlNmU3MmQ1NWM4ZDFjNGEzZTgyNDFkNzFkY2Y4 ZTNiZjEwHhcNMjYwMjA5MTMwMDE2WhcNMjYwMjEwMTMwMDE2WjAzMTEwLwYDVQQD EyhkMjY1MGU1ZDAzZWVjMWFhY2FjMTVlOTcxMGM5ZWNmNjU0MTdmYTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6JrsRwLPz32dGHJpLcVkHhocRiGA X2NnZZCK6RvzwOK9ME4i6tcI0v+LWW4GSJq2cWzfSyusEi/XRB1gxrY7HvV+uHtz adpxEaRGYu6Zkz3PHgA3C0AE+nanpz7LddH4T+Co0u6Lu0lV5utTNTrt4esYSNkY vF51k6vFxQyBgo3/ETHmwuem0B3zrnEkzxMIST2lCjvcgE9RO5L4N6DsR1RTB7nq Q89aZgD1xM5IGbxz/VzrQD5C/Vgf0ysyI3YpRLfJ2tDefft62LO1zJjvfE3RSbBr faR4IfeC4MhrYK3a4D/IRk99uzINHt3AyUQt23+E3ztfynegFRphHd1BJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNJlDl0D7sGqysFelxDJ7PZUF/p/MB8GA1UdIwQY MBaAFJFLfR5uctVcjRxKPoJB1x3PjjvxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1V0OUhtNXkxVnlOSEVvLWdrSFhIYy1PT19FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy84MzQ5ZTQtNjljYy00MTQwLWE3NDQt YWJlZDc0NDE1YjhmLzEva1V0OUhtNXkxVnlOSEVvLWdrSFhIYy1PT19FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy84MzQ5ZTQtNjljYy00MTQwLWE3NDQtYWJlZDc0NDE1Yjhm LzEva1V0OUhtNXkxVnlOSEVvLWdrSFhIYy1PT19FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvRYe4+UW LVvBvncXR9LorhYfmvki66SMWZbmlkfQKCmwn+PdQKxRkk49ymeKqtc8nqVUt6LK 8AI/tjB/AosgOGyrKW6ET4ylUZaQ+8yGz9ERdcmK3ETOOPSYQbAwVB50IMEjGwK4 mwBUc9mkpGcCmMOxPbN/qVpQJcK3haeOTPn8+4fOolw7Z2B0Wi7bz0ChjoOWhgZO rY1YDfm+tvhEE5AdVia3di3w4scXFPseyA1l9hya5e64bt2i8g3nZrowg5MInwzz u44BN8JkHghvDkcpPnRIBdS4/522GDNk52GGKQUlSJTVFnboiFuZVIxJHmBH+0By QEA+meMPgywW+w== -----END CERTIFICATE-----Generated at Mon Feb 9 18:46:09 2026 by rpki-client