This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.mft File: KUeYd2hkfuuKDzhgxEF2JHzm_Fk.mft (raw, json) Hash identifier: Kgj+AvheM5wF7opUGQ6CDcFXAOxpV+Jfm4e0X3XG51c= Subject key identifier: E3:67:71:05:58:F8:E2:E7:0E:02:16:A5:62:CF:EA:E0:F1:31:DC:0A Authority key identifier: 29:47:98:77:68:64:7E:EB:8A:0F:38:60:C4:41:76:24:7C:E6:FC:59 Certificate issuer: /CN=2947987768647eeb8a0f3860c44176247ce6fc59 Certificate serial: 019C427DA4AB7112EB5112B07D3C89AAA273 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.mft Manifest number: 1027 Signing time: Mon 09 Feb 2026 13:00:56 +0000 Manifest this update: Mon 09 Feb 2026 13:00:56 +0000 Manifest next update: Tue 10 Feb 2026 13:00:56 +0000 Files and hashes: 1: KUeYd2hkfuuKDzhgxEF2JHzm_Fk.crl (hash: /+bsgWgLjwf4CLH3DcxCUcE2WJy9ZNtUwdtNW7yfJlQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.mft rsync://rpki.ripe.net/repository/DEFAULT/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:a4:ab:71:12:eb:51:12:b0:7d:3c:89:aa:a2:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2947987768647eeb8a0f3860c44176247ce6fc59 Validity Not Before: Feb 9 13:00:56 2026 GMT Not After : Feb 10 13:00:56 2026 GMT Subject: CN=e367710558f8e2e70e0216a562cfeae0f131dc0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c1:e7:94:d5:a7:55:e2:5d:2c:f1:f9:46:34: c9:98:8c:54:b3:18:bc:0e:05:01:45:22:6e:59:e8: 65:f2:b0:38:1e:01:1e:d2:8b:11:c3:82:e9:e9:7b: c6:f6:a5:0f:36:a1:96:66:91:d0:a4:73:51:41:c8: 87:d2:be:35:1f:c0:b2:cf:e2:5f:9b:b1:ce:75:23: cf:d2:5c:c1:f5:c3:2b:c2:17:43:4c:a6:85:4f:ef: b9:5a:00:2f:36:7a:10:42:20:a1:3d:e6:7c:43:fa: 97:48:0f:0c:14:25:bb:0a:5c:41:0f:be:ea:61:4e: dc:82:5d:56:01:5b:55:24:08:df:46:c5:ec:5c:ca: 35:3d:99:c2:45:25:0d:a7:78:96:3d:97:b8:21:ed: 50:b5:cb:ac:a5:b9:e0:ca:e4:28:f0:f4:75:8c:47: 3e:19:e1:da:04:15:0f:aa:fb:de:53:27:e2:61:59: bf:1a:d0:94:34:70:a4:02:e2:c9:11:76:be:29:08: 64:68:e2:7e:8f:5f:fb:57:a6:36:0f:5b:56:bc:0e: 4f:65:e0:d8:e9:fe:27:1d:5e:be:6d:e0:fe:0f:41: 08:63:34:7c:93:36:d0:c3:47:c0:b2:b2:15:a6:2c: 22:40:44:cb:d0:a7:67:af:9f:58:3f:91:8e:15:e2: 1a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:67:71:05:58:F8:E2:E7:0E:02:16:A5:62:CF:EA:E0:F1:31:DC:0A X509v3 Authority Key Identifier: keyid:29:47:98:77:68:64:7E:EB:8A:0F:38:60:C4:41:76:24:7C:E6:FC:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:be:24:b3:69:a8:8c:de:52:f1:13:2c:fb:d7:37:af:8b:21: 75:4a:5c:b8:b2:4a:a4:a0:cd:a1:14:7e:d3:db:c1:23:45:30: 87:23:30:3c:8b:63:e7:a3:4b:39:ad:f2:17:5e:5f:41:6d:e7: f2:e5:87:c9:28:88:c3:17:87:cf:0d:4c:ba:15:1c:b5:7e:fa: 0b:77:6a:d4:33:03:e6:81:47:40:63:30:ae:a8:fb:24:0a:8a: 45:23:a3:38:82:45:d6:00:51:9c:1a:2e:b5:b0:4e:c3:8e:ef: ee:1e:dd:27:b1:af:47:57:c9:19:20:26:83:e1:25:91:3d:a1: 8d:83:e7:10:c3:bd:71:b9:60:17:7f:20:91:f2:00:b8:a6:22: c7:f6:97:1d:b2:7d:a4:bb:e9:85:cb:3b:e1:7a:4b:f3:77:27: bf:10:3f:31:57:06:2f:e8:75:fb:68:f3:f6:bd:1e:2f:4d:f5: 49:c9:e7:18:51:6a:56:f6:ce:4d:d2:e4:cd:56:0a:bc:f4:22: 76:ef:54:2a:08:19:40:40:b0:55:e8:39:bb:9e:da:9d:f6:4d: 23:04:f4:bf:8c:91:92:8a:3d:4d:f4:5e:3f:3e:7b:ef:05:fc: 3c:39:d5:f9:6c:b7:86:f1:95:63:c6:37:63:27:c5:88:35:da: 25:6e:1c:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfaSrcRLrURKwfTyJqqJzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NDc5ODc3Njg2NDdlZWI4YTBmMzg2MGM0NDE3NjI0N2Nl NmZjNTkwHhcNMjYwMjA5MTMwMDU2WhcNMjYwMjEwMTMwMDU2WjAzMTEwLwYDVQQD EyhlMzY3NzEwNTU4ZjhlMmU3MGUwMjE2YTU2MmNmZWFlMGYxMzFkYzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocHnlNWnVeJdLPH5RjTJmIxUsxi8 DgUBRSJuWehl8rA4HgEe0osRw4Lp6XvG9qUPNqGWZpHQpHNRQciH0r41H8Cyz+Jf m7HOdSPP0lzB9cMrwhdDTKaFT++5WgAvNnoQQiChPeZ8Q/qXSA8MFCW7ClxBD77q YU7cgl1WAVtVJAjfRsXsXMo1PZnCRSUNp3iWPZe4Ie1QtcuspbngyuQo8PR1jEc+ GeHaBBUPqvveUyfiYVm/GtCUNHCkAuLJEXa+KQhkaOJ+j1/7V6Y2D1tWvA5PZeDY 6f4nHV6+beD+D0EIYzR8kzbQw0fAsrIVpiwiQETL0Kdnr59YP5GOFeIaAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFONncQVY+OLnDgIWpWLP6uDxMdwKMB8GA1UdIwQY MBaAFClHmHdoZH7rig84YMRBdiR85vxZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1VlWWQyaGtmdXVLRHpoZ3hFRjJKSHptX0ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9lZGVmYjMtMTM4ZC00YWU2LTk0ODct NWRhYjFiNGE1YzYxLzEvS1VlWWQyaGtmdXVLRHpoZ3hFRjJKSHptX0ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9lZGVmYjMtMTM4ZC00YWU2LTk0ODctNWRhYjFiNGE1YzYx LzEvS1VlWWQyaGtmdXVLRHpoZ3hFRjJKSHptX0ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmL4ks2mo jN5S8RMs+9c3r4shdUpcuLJKpKDNoRR+09vBI0UwhyMwPItj56NLOa3yF15fQW3n 8uWHySiIwxeHzw1MuhUctX76C3dq1DMD5oFHQGMwrqj7JAqKRSOjOIJF1gBRnBou tbBOw47v7h7dJ7GvR1fJGSAmg+ElkT2hjYPnEMO9cblgF38gkfIAuKYix/aXHbJ9 pLvphcs74XpL83cnvxA/MVcGL+h1+2jz9r0eL031ScnnGFFqVvbOTdLkzVYKvPQi du9UKggZQECwVeg5u57anfZNIwT0v4yRkoo9TfRePz577wX8PDnV+Wy3hvGVY8Y3 YyfFiDXaJW4cpg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:53:37 2026 by rpki-client