This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft File: KZWUToTcN7pqQtaLseK5pEIehKQ.mft (raw, json) Hash identifier: ouIsKWg1gHvFtjB+DC1IZr5Lxjsmi4nlB2MZPpiy6iI= Subject key identifier: 64:E6:B4:FE:9A:B5:18:F3:2C:86:40:61:76:72:C4:CD:94:24:91:38 Authority key identifier: 29:95:94:4E:84:DC:37:BA:6A:42:D6:8B:B1:E2:B9:A4:42:1E:84:A4 Certificate issuer: /CN=2995944e84dc37ba6a42d68bb1e2b9a4421e84a4 Certificate serial: 019C2E5299D36A92ACCBCCD2C81CF0884C93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft Manifest number: 1805 Signing time: Thu 05 Feb 2026 15:01:31 +0000 Manifest this update: Thu 05 Feb 2026 15:01:31 +0000 Manifest next update: Fri 06 Feb 2026 15:01:31 +0000 Files and hashes: 1: KZWUToTcN7pqQtaLseK5pEIehKQ.crl (hash: HEIC+AYQgtIueevGNzRP5SD0nVtWXtzAEk2qw4TXxKc=) 2: REMIC3qlblupLlRlDy8YWtuHeGs.roa (hash: Jx2qxwn04q0eIKP0O31CsM6H6HSDWevmv7hr0SA1D6o=) 3: jqkc2v-EDfDqyX3RgGBk8W5KdEw.roa (hash: J6Uk//qcGJOT6wNTUI4e5Z8Vod7CmZ9RrMaWF9PPJeM=) 4: rrH1j10hPF7JqcYJAD3BPexcKzg.roa (hash: +IMZpUPrslETwFxcXPRLWmZpXfSU9RCOH9gP9Q/CH5w=) 5: y-cUmsyd1f2Nqa9AjFf-HrgBRvY.roa (hash: K08tIX67yafvJ07B2O/CtxAn2jeh7RiwSsp1rC6qb3c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 12:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:2e:52:99:d3:6a:92:ac:cb:cc:d2:c8:1c:f0:88:4c:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2995944e84dc37ba6a42d68bb1e2b9a4421e84a4 Validity Not Before: Feb 5 15:01:31 2026 GMT Not After : Feb 6 15:01:31 2026 GMT Subject: CN=64e6b4fe9ab518f32c8640617672c4cd94249138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bf:58:72:66:1d:2d:2e:55:71:85:22:e7:3b: b3:ea:28:a7:a8:57:83:25:6c:d6:0b:3a:cf:82:d6: 02:31:a3:9c:69:f0:6b:bb:ff:8a:2c:b8:8b:cd:e1: 36:a7:13:00:fd:dd:aa:fc:78:3a:50:85:f2:16:d4: 72:d8:b3:7e:f1:07:cc:d0:28:9b:b6:e9:94:77:96: 7d:f1:2e:54:de:33:cf:c9:1a:8b:31:ab:fc:02:c0: 6d:41:c3:69:26:e9:96:25:83:89:c4:04:03:f4:6c: 47:45:11:02:fa:41:ff:1c:40:6e:f0:e6:06:2d:e9: 38:52:12:a8:13:a0:8d:e1:b9:aa:70:33:5d:4c:2e: 93:16:d9:66:71:22:ef:e0:23:8d:46:a0:5b:48:ec: 49:a2:8b:84:45:5a:ce:6a:e3:f7:c9:00:17:20:d0: c5:94:6e:e0:5f:4d:7a:70:0c:6e:f7:c3:9e:5b:43: 42:2a:e2:61:7c:54:c4:f6:83:0a:1f:c7:e2:c4:f1: e5:fd:d4:58:c5:f5:49:55:f1:e1:b9:e4:cf:f7:ea: e8:97:42:c5:02:10:f3:a0:3b:2a:df:ff:f2:fe:e2: 54:12:a1:d9:b0:8e:fb:af:88:c1:3e:27:af:ad:21: da:59:de:14:3c:a6:e0:85:7f:a6:8e:78:c3:c3:a5: 68:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:E6:B4:FE:9A:B5:18:F3:2C:86:40:61:76:72:C4:CD:94:24:91:38 X509v3 Authority Key Identifier: keyid:29:95:94:4E:84:DC:37:BA:6A:42:D6:8B:B1:E2:B9:A4:42:1E:84:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:94:ab:0b:0e:6e:1d:e6:08:24:7a:01:6d:10:cf:fb:9b:6f: b5:38:0a:cb:85:0b:27:e0:a4:3d:3e:51:d2:13:5e:c5:d3:8f: 46:ee:0f:99:6b:68:ab:ca:a6:33:6c:aa:d2:04:62:a7:b2:e9: 6b:7a:47:de:9f:7e:8f:58:f4:67:d5:b8:1e:f2:a1:0a:1e:e9: e1:ed:be:4a:86:3d:d5:fd:9e:e0:30:9f:20:d6:9f:5b:4e:41: 0f:57:78:6f:55:95:cc:6a:cf:72:5f:8a:11:3c:c8:1e:02:6a: 5e:75:44:3c:05:74:26:01:9b:d0:d4:9b:1a:99:97:73:f9:0e: 4a:68:74:34:16:e1:6a:5d:7a:00:f7:e7:3e:10:88:8a:b0:2d: be:73:71:b3:e8:34:55:e3:9d:62:bc:69:72:24:e5:f5:ec:69: 9a:78:25:84:35:91:16:9b:9c:85:31:66:0e:dd:f4:a2:cf:c7: 6c:d6:f3:2c:4d:a1:c5:0a:aa:08:28:ac:28:c2:c2:72:a7:90: 25:f1:be:c4:cb:96:f9:ae:5c:21:6b:e2:64:d3:c9:b0:5c:1e: 6a:68:c5:a4:6a:da:99:04:88:a1:7c:cd:47:09:3e:85:63:34: 93:15:b8:29:c4:4d:3e:07:8a:bd:07:c0:fc:85:92:f0:4f:39: 2b:f7:6d:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwuUpnTapKsy8zSyBzwiEyTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5OTU5NDRlODRkYzM3YmE2YTQyZDY4YmIxZTJiOWE0NDIx ZTg0YTQwHhcNMjYwMjA1MTUwMTMxWhcNMjYwMjA2MTUwMTMxWjAzMTEwLwYDVQQD Eyg2NGU2YjRmZTlhYjUxOGYzMmM4NjQwNjE3NjcyYzRjZDk0MjQ5MTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb9YcmYdLS5VcYUi5zuz6iinqFeD JWzWCzrPgtYCMaOcafBru/+KLLiLzeE2pxMA/d2q/Hg6UIXyFtRy2LN+8QfM0Cib tumUd5Z98S5U3jPPyRqLMav8AsBtQcNpJumWJYOJxAQD9GxHRREC+kH/HEBu8OYG Lek4UhKoE6CN4bmqcDNdTC6TFtlmcSLv4CONRqBbSOxJoouERVrOauP3yQAXINDF lG7gX016cAxu98OeW0NCKuJhfFTE9oMKH8fixPHl/dRYxfVJVfHhueTP9+rol0LF AhDzoDsq3//y/uJUEqHZsI77r4jBPievrSHaWd4UPKbghX+mjnjDw6VoZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGTmtP6atRjzLIZAYXZyxM2UJJE4MB8GA1UdIwQY MBaAFCmVlE6E3De6akLWi7HiuaRCHoSkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1pXVVRvVGNON3BxUXRhTHNlSzVwRUllaEtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hMTIwNjktYTA2MS00NDJlLTliZmIt MzM4YmRkNDM5ZWUxLzEvS1pXVVRvVGNON3BxUXRhTHNlSzVwRUllaEtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hMTIwNjktYTA2MS00NDJlLTliZmItMzM4YmRkNDM5ZWUx LzEvS1pXVVRvVGNON3BxUXRhTHNlSzVwRUllaEtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq5SrCw5u HeYIJHoBbRDP+5tvtTgKy4ULJ+CkPT5R0hNexdOPRu4PmWtoq8qmM2yq0gRip7Lp a3pH3p9+j1j0Z9W4HvKhCh7p4e2+SoY91f2e4DCfINafW05BD1d4b1WVzGrPcl+K ETzIHgJqXnVEPAV0JgGb0NSbGpmXc/kOSmh0NBbhal16APfnPhCIirAtvnNxs+g0 VeOdYrxpciTl9expmnglhDWRFpuchTFmDt30os/HbNbzLE2hxQqqCCisKMLCcqeQ JfG+xMuW+a5cIWviZNPJsFweamjFpGramQSIoXzNRwk+hWM0kxW4KcRNPgeKvQfA /IWS8E85K/dthA== -----END CERTIFICATE-----Generated at Thu Feb 5 19:48:03 2026 by rpki-client