This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft File: KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft (raw, json) Hash identifier: ovxgydzNGOaSjiKel801fV7RamU88MAvC3r45rdrHi8= Subject key identifier: 78:AF:F1:4D:F5:05:99:56:19:52:CB:46:C9:92:89:0A:9A:82:D8:98 Authority key identifier: 28:95:FB:CB:CF:88:D1:AD:9B:19:FC:42:C7:AA:11:AD:3D:2A:7E:A0 Certificate issuer: /CN=2895fbcbcf88d1ad9b19fc42c7aa11ad3d2a7ea0 Certificate serial: 019C42B43726DEE881096AA22420BF1B4257 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJX7y8-I0a2bGfxCx6oRrT0qfqA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft Manifest number: 170E Signing time: Mon 09 Feb 2026 14:00:32 +0000 Manifest this update: Mon 09 Feb 2026 14:00:32 +0000 Manifest next update: Tue 10 Feb 2026 14:00:32 +0000 Files and hashes: 1: KJX7y8-I0a2bGfxCx6oRrT0qfqA.crl (hash: clMjIZedHs9oRwMdEdHv4gOiUtihmOdnzFqo1Tz7208=) 2: vG3ETTisgvR8uHGsP-7vqX6UxOU.roa (hash: jLQe3Tz3snh6BMY0+c4cK7G/UdU3rVW7/eW9hxngsAY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft rsync://rpki.ripe.net/repository/DEFAULT/KJX7y8-I0a2bGfxCx6oRrT0qfqA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:37:26:de:e8:81:09:6a:a2:24:20:bf:1b:42:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2895fbcbcf88d1ad9b19fc42c7aa11ad3d2a7ea0 Validity Not Before: Feb 9 14:00:32 2026 GMT Not After : Feb 10 14:00:32 2026 GMT Subject: CN=78aff14df50599561952cb46c992890a9a82d898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:91:92:45:1b:b8:e6:92:80:6c:83:83:e3:1e: ac:de:1a:27:01:73:82:7c:a6:fd:6b:86:c0:76:4e: 89:7e:6a:80:a3:f0:b7:29:8d:8e:3c:b2:a6:46:25: 73:9a:f4:07:6a:3f:8f:f6:ef:6c:c3:6c:2d:ad:b3: 09:c8:4d:0b:e2:08:33:34:87:e3:7d:3d:e7:e3:09: b2:bf:54:07:02:48:12:de:6a:30:4b:7c:4f:24:e2: ee:31:a4:af:cc:a0:83:38:36:07:36:e2:08:c7:d1: ca:d3:5f:27:78:ff:05:b7:74:4c:f9:88:3b:4b:10: b9:66:19:99:2f:45:0e:e1:e5:b1:bb:a3:b4:f9:9c: 03:fa:5a:6a:1d:ba:62:f6:fa:cb:ea:79:a9:02:7d: d3:16:37:34:85:b8:91:33:f6:de:58:34:a5:70:c1: 0d:ee:99:1d:fb:a8:6a:98:8e:f5:ba:77:69:e0:1b: dc:20:53:e1:1f:bc:cd:10:c1:c7:e2:80:f2:69:a2: cc:15:39:bd:0c:d1:08:ac:e1:ea:bb:ef:6e:56:2c: 94:3a:a5:81:cb:20:6c:0e:27:86:9f:a6:fe:bb:b3: 3d:f7:d8:22:07:3c:53:ba:9a:79:30:bf:2e:02:3a: 0a:4d:9a:8e:02:e9:a6:c8:75:90:67:56:44:6a:1a: 5d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:AF:F1:4D:F5:05:99:56:19:52:CB:46:C9:92:89:0A:9A:82:D8:98 X509v3 Authority Key Identifier: keyid:28:95:FB:CB:CF:88:D1:AD:9B:19:FC:42:C7:AA:11:AD:3D:2A:7E:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJX7y8-I0a2bGfxCx6oRrT0qfqA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:40:a1:87:8f:e4:22:cc:dd:6f:49:c5:b2:a4:1d:e0:cc:53: a3:83:4b:48:ac:ad:f8:72:ac:d8:99:1f:7b:2b:c9:39:df:ee: 91:b7:6a:b9:5a:a8:db:72:4d:c9:17:89:f9:7d:8a:9d:e8:19: f9:56:b5:50:a9:72:8e:12:c1:28:f6:d1:ea:e4:9e:c0:5d:0c: ba:42:bb:de:be:3c:cb:a4:80:da:70:8b:e9:3e:09:f0:d3:ab: 72:48:80:3a:28:4d:90:ea:1d:c3:bc:6b:39:c8:59:83:18:03: 03:3b:6e:51:9d:eb:e5:7d:21:c4:11:7b:3d:a9:f1:c8:8d:02: 53:bf:71:2e:6e:e5:31:ca:eb:bb:cb:87:65:8f:9f:4c:8b:e7: 59:c5:f7:a2:2e:76:d4:04:de:c6:73:98:05:6f:f2:f3:88:62: 73:01:b3:11:17:17:47:8e:92:c5:49:01:90:fb:36:39:fa:4e: 53:c4:5d:a5:2d:06:91:99:fa:06:06:60:2b:0f:59:e4:e0:39: 87:5a:d3:c7:3f:94:9b:84:cb:19:93:5b:af:cc:7e:d2:27:b1: f8:47:8b:b1:cc:7d:7f:94:ee:d0:77:74:5f:9a:e3:49:c9:97: 32:fa:89:38:7b:ae:b4:35:fa:d4:b3:78:b6:20:b8:10:6c:8b: d3:dd:cb:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtDcm3uiBCWqiJCC/G0JXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4OTVmYmNiY2Y4OGQxYWQ5YjE5ZmM0MmM3YWExMWFkM2Qy YTdlYTAwHhcNMjYwMjA5MTQwMDMyWhcNMjYwMjEwMTQwMDMyWjAzMTEwLwYDVQQD Eyg3OGFmZjE0ZGY1MDU5OTU2MTk1MmNiNDZjOTkyODkwYTlhODJkODk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15GSRRu45pKAbIOD4x6s3honAXOC fKb9a4bAdk6JfmqAo/C3KY2OPLKmRiVzmvQHaj+P9u9sw2wtrbMJyE0L4ggzNIfj fT3n4wmyv1QHAkgS3mowS3xPJOLuMaSvzKCDODYHNuIIx9HK018neP8Ft3RM+Yg7 SxC5ZhmZL0UO4eWxu6O0+ZwD+lpqHbpi9vrL6nmpAn3TFjc0hbiRM/beWDSlcMEN 7pkd+6hqmI71undp4BvcIFPhH7zNEMHH4oDyaaLMFTm9DNEIrOHqu+9uViyUOqWB yyBsDieGn6b+u7M999giBzxTupp5ML8uAjoKTZqOAummyHWQZ1ZEahpdgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHiv8U31BZlWGVLLRsmSiQqagtiYMB8GA1UdIwQY MBaAFCiV+8vPiNGtmxn8QseqEa09Kn6gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0pYN3k4LUkwYTJiR2Z4Q3g2b1JyVDBxZnFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9lNWI1YWItNmFmNS00M2Q1LWI0ZTIt NDk2NmIzY2ZjODdkLzEvS0pYN3k4LUkwYTJiR2Z4Q3g2b1JyVDBxZnFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9lNWI1YWItNmFmNS00M2Q1LWI0ZTItNDk2NmIzY2ZjODdk LzEvS0pYN3k4LUkwYTJiR2Z4Q3g2b1JyVDBxZnFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALUChh4/k Iszdb0nFsqQd4MxTo4NLSKyt+HKs2JkfeyvJOd/ukbdquVqo23JNyReJ+X2KnegZ +Va1UKlyjhLBKPbR6uSewF0MukK73r48y6SA2nCL6T4J8NOrckiAOihNkOodw7xr OchZgxgDAztuUZ3r5X0hxBF7PanxyI0CU79xLm7lMcrru8uHZY+fTIvnWcX3oi52 1ATexnOYBW/y84hicwGzERcXR46SxUkBkPs2OfpOU8RdpS0GkZn6BgZgKw9Z5OA5 h1rTxz+Um4TLGZNbr8x+0iex+EeLscx9f5Tu0Hd0X5rjScmXMvqJOHuutDX61LN4 tiC4EGyL093LeA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:21 2026 by rpki-client