This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft File: kIp-pxKAHkyP64Wz8HjQW6EBquE.mft (raw, json) Hash identifier: h/s3cgHjHM+uxb5PoEBf5JMxFUNV446r8YGF7y4gjWw= Subject key identifier: A2:7D:85:6F:53:74:25:F2:99:DA:EB:63:2C:82:D3:50:A6:6F:DC:22 Authority key identifier: 90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1 Certificate issuer: /CN=908a7ea712801e4c8feb85b3f078d05ba101aae1 Certificate serial: 019C42466A17F6BD02081B221EBE27260690 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 12:00:36 +0000 Manifest this update: Mon 09 Feb 2026 12:00:36 +0000 Manifest next update: Tue 10 Feb 2026 12:00:36 +0000 Files and hashes: 1: gmcTjO0RV1Up_jbIfk_CZHi4V2A.roa (hash: Gqp9iA7OYQl9mvBvIysw6E+42GR1MiVOzZC/chm6YUU=) 2: kIp-pxKAHkyP64Wz8HjQW6EBquE.crl (hash: ipxhPkGr0ZdDgJIN6c74SEXMl8R/2pNL1LYRqRNhLn8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:6a:17:f6:bd:02:08:1b:22:1e:be:27:26:06:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908a7ea712801e4c8feb85b3f078d05ba101aae1 Validity Not Before: Feb 9 12:00:36 2026 GMT Not After : Feb 10 12:00:36 2026 GMT Subject: CN=a27d856f537425f299daeb632c82d350a66fdc22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:0f:01:ec:74:6d:fa:c0:76:52:a4:d4:f6:f4: 98:97:9b:51:08:3a:62:b1:2d:75:a1:ea:1b:72:85: e3:f8:2e:74:0d:90:b0:3b:ac:bc:73:da:69:90:47: 58:8b:07:43:d3:2c:36:34:98:ab:07:4b:83:bd:e4: d7:bc:fa:d9:76:73:73:94:91:e9:5d:ce:ab:3b:94: e9:a7:b8:52:34:ca:d2:02:f0:98:fc:98:ea:00:0a: a4:b6:7b:36:be:29:24:28:80:3b:a1:e2:a1:b6:6c: 99:2d:13:f8:1b:14:d9:dd:b9:11:8d:fd:11:84:35: 42:04:2a:fc:e0:2b:97:41:5f:7b:bb:3f:fb:cb:50: c7:c8:be:8c:cb:24:52:c8:d2:c2:5a:d8:9c:9e:11: de:98:f5:e3:b5:87:16:18:99:3e:6b:74:5e:07:b6: 52:4e:2b:e5:55:37:de:fe:f9:c3:87:e9:85:85:7b: 4a:2f:85:85:dc:dc:04:54:7c:95:b5:87:66:7a:2e: e8:92:43:1e:c4:1b:b4:cf:e7:40:bd:b9:b0:58:46: 20:53:d1:a8:c7:47:ab:37:27:4a:8e:95:27:78:22: ba:f4:fa:a6:9e:f4:00:85:6d:a0:72:43:d4:50:6b: f2:da:ba:e2:b0:b2:24:28:e8:3d:85:24:49:dc:b3: c8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:7D:85:6F:53:74:25:F2:99:DA:EB:63:2C:82:D3:50:A6:6F:DC:22 X509v3 Authority Key Identifier: keyid:90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:22:ad:3f:5b:35:a7:1b:b0:17:b6:b8:fa:41:d6:1d:da:06: 89:1b:2d:55:87:d7:ac:07:fb:82:98:0b:d5:a9:31:34:46:67: 54:9e:c3:ea:77:de:b6:45:10:e7:b5:ef:8a:83:94:82:68:7f: ab:15:ae:58:ea:b7:9f:7f:1c:ee:53:0f:e0:8d:13:94:67:f5: e6:a3:79:a7:fc:f2:06:4f:04:c2:58:47:4e:84:dd:07:fc:b5: a6:96:b6:c2:93:99:78:27:13:76:1b:cb:cd:6a:95:d1:43:17: 4a:bf:d0:14:0b:64:48:89:c0:12:03:36:6f:72:85:dd:a1:dd: 26:48:16:21:2c:dd:80:66:f0:88:fa:e4:dd:ad:2e:c2:7f:26: 46:ac:70:ba:56:a8:74:4b:8c:fc:1f:31:de:af:fb:2a:58:b2: 67:07:97:b9:da:d4:49:0f:09:b4:00:1c:a0:b1:78:90:7d:1d: b0:52:22:d8:55:b9:61:b1:be:76:29:0a:8a:a3:5d:30:24:ae: ab:80:b2:69:98:76:e3:6c:88:bc:b1:be:75:ba:be:48:42:4e: db:f4:3d:c6:ef:49:f8:3e:11:82:28:52:c4:01:51:f3:73:0d: ec:56:d2:84:c0:93:fc:95:90:2c:cf:95:fe:b6:81:6f:fa:52: cb:dc:e2:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRmoX9r0CCBsiHr4nJgaQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwOGE3ZWE3MTI4MDFlNGM4ZmViODViM2YwNzhkMDViYTEw MWFhZTEwHhcNMjYwMjA5MTIwMDM2WhcNMjYwMjEwMTIwMDM2WjAzMTEwLwYDVQQD EyhhMjdkODU2ZjUzNzQyNWYyOTlkYWViNjMyYzgyZDM1MGE2NmZkYzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7w8B7HRt+sB2UqTU9vSYl5tRCDpi sS11oeobcoXj+C50DZCwO6y8c9ppkEdYiwdD0yw2NJirB0uDveTXvPrZdnNzlJHp Xc6rO5Tpp7hSNMrSAvCY/JjqAAqktns2vikkKIA7oeKhtmyZLRP4GxTZ3bkRjf0R hDVCBCr84CuXQV97uz/7y1DHyL6MyyRSyNLCWticnhHemPXjtYcWGJk+a3ReB7ZS TivlVTfe/vnDh+mFhXtKL4WF3NwEVHyVtYdmei7okkMexBu0z+dAvbmwWEYgU9Go x0erNydKjpUneCK69PqmnvQAhW2gckPUUGvy2rrisLIkKOg9hSRJ3LPIdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKJ9hW9TdCXymdrrYyyC01Cmb9wiMB8GA1UdIwQY MBaAFJCKfqcSgB5Mj+uFs/B40FuhAarhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0lwLXB4S0FIa3lQNjRXejhIalFXNkVCcXVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC84NjA1ZTYtZDlmNC00YzMyLWI0ZDEt MWExMmNjMGIwNDA2LzEva0lwLXB4S0FIa3lQNjRXejhIalFXNkVCcXVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC84NjA1ZTYtZDlmNC00YzMyLWI0ZDEtMWExMmNjMGIwNDA2 LzEva0lwLXB4S0FIa3lQNjRXejhIalFXNkVCcXVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXyKtP1s1 pxuwF7a4+kHWHdoGiRstVYfXrAf7gpgL1akxNEZnVJ7D6nfetkUQ57XvioOUgmh/ qxWuWOq3n38c7lMP4I0TlGf15qN5p/zyBk8EwlhHToTdB/y1ppa2wpOZeCcTdhvL zWqV0UMXSr/QFAtkSInAEgM2b3KF3aHdJkgWISzdgGbwiPrk3a0uwn8mRqxwulao dEuM/B8x3q/7KliyZweXudrUSQ8JtAAcoLF4kH0dsFIi2FW5YbG+dikKiqNdMCSu q4CyaZh242yIvLG+dbq+SEJO2/Q9xu9J+D4RgihSxAFR83MN7FbShMCT/JWQLM+V /raBb/pSy9ziiQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:30 2026 by rpki-client