This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft File: kCmtIleaaAXB_4se5dc1KQwBNAs.mft (raw, json) Hash identifier: +f3r4zKZJTc7lcxaC4gdGCWy6whW67ObUd1wBHh2tuU= Subject key identifier: 32:CE:92:11:D2:22:6E:08:7D:0E:D9:7F:88:26:BC:83:47:FD:86:96 Authority key identifier: 90:29:AD:22:57:9A:68:05:C1:FF:8B:1E:E5:D7:35:29:0C:01:34:0B Certificate issuer: /CN=9029ad22579a6805c1ff8b1ee5d735290c01340b Certificate serial: 019C420F58F4AD760DA236D9A251224AF7E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft Manifest number: 1779 Signing time: Mon 09 Feb 2026 11:00:27 +0000 Manifest this update: Mon 09 Feb 2026 11:00:27 +0000 Manifest next update: Tue 10 Feb 2026 11:00:27 +0000 Files and hashes: 1: Wazx3LZDxhV9N5q9JPv8h2Qs-YE.roa (hash: KJ3tWSAQqQBPzmhSgtG5aN79Rwb62j6iubPkCvI++ds=) 2: kCmtIleaaAXB_4se5dc1KQwBNAs.crl (hash: gjfPFy78H8qWYUeKiKN5PRKhFSi170V7fvKw2tyDQew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:58:f4:ad:76:0d:a2:36:d9:a2:51:22:4a:f7:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9029ad22579a6805c1ff8b1ee5d735290c01340b Validity Not Before: Feb 9 11:00:27 2026 GMT Not After : Feb 10 11:00:27 2026 GMT Subject: CN=32ce9211d2226e087d0ed97f8826bc8347fd8696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:33:c1:73:39:1f:87:2c:43:7d:4f:d5:e6:43: 92:ff:a5:5d:62:19:80:a0:3f:14:19:bd:b2:88:81: f7:25:cd:79:72:1b:7b:85:be:6c:36:c9:6f:c5:e7: 64:af:3b:e1:2c:30:7e:4b:bf:e4:bb:13:28:53:2e: 31:06:39:c0:a5:25:5e:d5:3a:80:40:3e:8f:ed:40: a8:b6:bc:3f:c1:0d:a2:fe:42:98:5e:fe:d9:6b:db: 93:da:7b:d3:df:27:1d:23:b0:1f:23:0e:a8:b5:bd: 80:ca:ac:38:87:39:da:9b:68:f3:ee:cc:58:a2:6b: be:1f:12:54:75:fe:fd:27:a4:c3:5a:a4:0d:85:18: 91:7b:ce:fd:34:76:fe:e2:5a:0b:51:fa:eb:d1:a4: 81:d5:4d:71:17:da:53:dd:82:28:68:9f:98:31:c1: 66:61:75:fc:9b:36:1a:07:b4:11:d9:1f:74:a9:a0: 0c:8e:4b:eb:05:fb:25:31:30:4c:0e:98:29:41:1d: 43:8d:f5:ab:b3:39:76:60:52:b0:d2:78:bc:d9:dd: fc:12:a6:3c:5d:74:1c:07:67:86:e1:cd:92:92:64: 21:48:ff:44:1d:a5:bd:53:d4:de:9f:d8:db:0c:55: f8:4f:62:97:73:e0:aa:2e:4a:56:c9:8c:4a:5b:64: c5:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:CE:92:11:D2:22:6E:08:7D:0E:D9:7F:88:26:BC:83:47:FD:86:96 X509v3 Authority Key Identifier: keyid:90:29:AD:22:57:9A:68:05:C1:FF:8B:1E:E5:D7:35:29:0C:01:34:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:7d:12:b7:ae:43:2c:a5:c3:37:07:90:4b:a1:21:6f:87:c4: cf:fd:8f:49:58:7a:3d:94:aa:55:bd:6e:33:65:4d:14:14:e8: 52:c4:bb:c9:c5:d0:35:0e:13:1a:f6:fc:6b:f9:79:c7:1f:16: 36:07:58:39:14:5f:0f:da:02:78:38:2c:53:88:3b:12:cb:14: cf:fe:67:18:d2:4f:7e:06:7f:52:93:c4:01:95:c4:07:54:07: 37:c1:02:65:70:ba:62:c4:6c:2a:92:7a:56:04:8f:00:dc:d5: 54:b4:95:ed:1d:be:2c:64:8d:ef:f5:5d:e3:07:fb:e8:3b:44: 9c:65:bb:6d:c6:2d:60:a7:63:29:82:e4:0c:83:9e:3f:b4:4d: 45:7e:24:da:80:b4:4a:5e:f1:27:8b:a9:53:a0:d3:ac:60:35: 3b:ff:79:d5:39:d2:01:4c:82:c4:a0:00:e1:85:95:79:67:df: 3c:2e:a1:a3:16:54:e4:96:9d:c7:be:fb:57:10:1c:20:93:ae: 7b:be:1e:56:1e:6f:27:5a:f3:f2:b5:08:80:01:15:af:9e:a4: f2:cf:cb:1a:64:cb:03:97:23:e0:3b:32:fe:ee:09:1a:01:2a: fa:4a:b3:dd:fd:8a:e7:de:6b:b2:e7:90:f8:a6:62:aa:cb:52: 93:54:87:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD1j0rXYNojbZolEiSvflMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwMjlhZDIyNTc5YTY4MDVjMWZmOGIxZWU1ZDczNTI5MGMw MTM0MGIwHhcNMjYwMjA5MTEwMDI3WhcNMjYwMjEwMTEwMDI3WjAzMTEwLwYDVQQD EygzMmNlOTIxMWQyMjI2ZTA4N2QwZWQ5N2Y4ODI2YmM4MzQ3ZmQ4Njk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzPBczkfhyxDfU/V5kOS/6VdYhmA oD8UGb2yiIH3Jc15cht7hb5sNslvxedkrzvhLDB+S7/kuxMoUy4xBjnApSVe1TqA QD6P7UCotrw/wQ2i/kKYXv7Za9uT2nvT3ycdI7AfIw6otb2Ayqw4hznam2jz7sxY omu+HxJUdf79J6TDWqQNhRiRe879NHb+4loLUfrr0aSB1U1xF9pT3YIoaJ+YMcFm YXX8mzYaB7QR2R90qaAMjkvrBfslMTBMDpgpQR1DjfWrszl2YFKw0ni82d38EqY8 XXQcB2eG4c2SkmQhSP9EHaW9U9Ten9jbDFX4T2KXc+CqLkpWyYxKW2TFGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDLOkhHSIm4IfQ7Zf4gmvINH/YaWMB8GA1UdIwQY MBaAFJAprSJXmmgFwf+LHuXXNSkMATQLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0NtdElsZWFhQVhCXzRzZTVkYzFLUXdCTkFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9lZGFlZmUtYzg3MC00MTQ3LTllM2It Yzc5OWQ2ZDYxNDRhLzEva0NtdElsZWFhQVhCXzRzZTVkYzFLUXdCTkFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9lZGFlZmUtYzg3MC00MTQ3LTllM2ItYzc5OWQ2ZDYxNDRh LzEva0NtdElsZWFhQVhCXzRzZTVkYzFLUXdCTkFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApn0St65D LKXDNweQS6Ehb4fEz/2PSVh6PZSqVb1uM2VNFBToUsS7ycXQNQ4TGvb8a/l5xx8W NgdYORRfD9oCeDgsU4g7EssUz/5nGNJPfgZ/UpPEAZXEB1QHN8ECZXC6YsRsKpJ6 VgSPANzVVLSV7R2+LGSN7/Vd4wf76DtEnGW7bcYtYKdjKYLkDIOeP7RNRX4k2oC0 Sl7xJ4upU6DTrGA1O/951TnSAUyCxKAA4YWVeWffPC6hoxZU5Jadx777VxAcIJOu e74eVh5vJ1rz8rUIgAEVr56k8s/LGmTLA5cj4Dsy/u4JGgEq+kqz3f2K595rsueQ +KZiqstSk1SHSw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:27 2026 by rpki-client