This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.mft File: KgV9tw5HTrSgd_oT875N17Y4C1Q.mft (raw, json) Hash identifier: C0makuM730k9kpaFBx9ctYVk5wZ/hQO5/UvrJe1TZb4= Subject key identifier: 01:E0:19:A8:29:D5:73:5C:1D:5E:D0:86:C8:39:46:38:39:1F:4B:1F Authority key identifier: 2A:05:7D:B7:0E:47:4E:B4:A0:77:FA:13:F3:BE:4D:D7:B6:38:0B:54 Certificate issuer: /CN=2a057db70e474eb4a077fa13f3be4dd7b6380b54 Certificate serial: 019C40FD52D2D3B195B92B38BE150F82A9FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgV9tw5HTrSgd_oT875N17Y4C1Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.mft Manifest number: 1207 Signing time: Mon 09 Feb 2026 06:01:09 +0000 Manifest this update: Mon 09 Feb 2026 06:01:09 +0000 Manifest next update: Tue 10 Feb 2026 06:01:09 +0000 Files and hashes: 1: KgV9tw5HTrSgd_oT875N17Y4C1Q.crl (hash: OB3laO6wnd3xAd+7bYXUGSis5tKMapgRDyXk5+xSMSU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.mft rsync://rpki.ripe.net/repository/DEFAULT/KgV9tw5HTrSgd_oT875N17Y4C1Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:40:fd:52:d2:d3:b1:95:b9:2b:38:be:15:0f:82:a9:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a057db70e474eb4a077fa13f3be4dd7b6380b54 Validity Not Before: Feb 9 06:01:09 2026 GMT Not After : Feb 10 06:01:09 2026 GMT Subject: CN=01e019a829d5735c1d5ed086c8394638391f4b1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8d:0c:88:af:84:f3:3c:f0:8f:24:f7:6b:61: 1d:1c:81:7d:3f:11:09:c3:f7:ee:be:9b:4a:88:94: 7b:66:f9:a7:0c:81:58:e6:72:06:95:b0:8e:b8:8e: 6d:6f:c8:99:9b:d0:16:67:9a:95:b7:3f:f0:be:17: d6:99:03:c8:24:0b:4c:9f:3a:47:7e:b8:dd:a8:c6: ad:d8:76:ca:93:4e:16:ec:ef:0d:32:73:1b:49:45: 24:ef:e1:c9:a6:cf:90:cc:81:58:a9:6b:99:f5:0e: 61:dc:e4:c3:c9:fd:13:c4:14:fd:15:60:19:6c:67: 1c:ab:97:de:8e:7b:82:af:37:26:8a:51:24:4d:71: f6:d7:a5:a2:8e:f6:8e:1a:a6:6e:65:04:83:17:79: 19:78:7b:23:6c:f9:d9:cb:0e:dd:9e:72:b8:f3:40: 97:e5:9c:e8:53:e9:1c:c1:61:a7:23:ce:02:c1:16: a6:70:61:9f:89:fa:5d:b0:ba:37:da:00:86:c4:13: 05:72:0b:29:8c:f3:66:bd:1e:51:ce:94:3d:9e:aa: 66:23:b4:38:e3:0b:c1:04:0b:79:9e:03:79:a1:9c: 53:72:d8:f2:70:95:a1:9d:f4:26:2f:b2:da:31:72: d8:ca:da:ac:65:0b:7d:67:ff:78:72:33:2f:3c:3d: a1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:E0:19:A8:29:D5:73:5C:1D:5E:D0:86:C8:39:46:38:39:1F:4B:1F X509v3 Authority Key Identifier: keyid:2A:05:7D:B7:0E:47:4E:B4:A0:77:FA:13:F3:BE:4D:D7:B6:38:0B:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgV9tw5HTrSgd_oT875N17Y4C1Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:11:47:73:47:41:bf:54:4e:3a:ae:db:4a:3e:76:40:61:f8: e1:29:84:0f:14:0f:3d:9d:78:03:c8:58:06:a0:8c:8d:1f:32: 20:04:79:64:ee:25:95:e4:7d:cd:28:e8:0d:a0:56:94:77:ed: 75:2d:4b:dd:4b:63:01:78:24:5c:93:b2:7b:dc:6b:1e:5c:a3: ad:f5:77:e8:14:30:ea:22:7a:c2:5d:99:9f:ed:41:5e:77:61: d2:25:a7:a6:2c:5e:74:0b:3e:b9:8b:fe:ea:40:65:f0:5c:5a: 8a:95:c1:a9:9c:35:3f:e3:6b:c4:df:49:72:80:cd:3a:db:4d: 4e:64:39:93:6e:86:b3:f1:95:79:ca:fc:04:91:ae:b7:91:9b: d5:2f:d2:a7:8f:11:56:0b:fe:6e:44:c4:4b:db:38:41:76:04: 11:53:6e:33:1b:0b:6a:c3:3e:89:fb:5f:bb:50:e6:c9:59:03: 50:02:eb:03:65:52:2b:b8:1b:8f:e3:fd:dd:0e:ad:56:65:c1: 4a:81:45:e4:69:d0:ff:e5:cf:e6:85:80:37:22:a8:b8:a0:ef: e9:d4:59:0d:af:ed:fe:8e:54:cd:ab:6b:01:19:5c:17:6a:75: b0:a6:e8:71:01:32:f9:98:8e:67:59:d8:7b:7c:f0:bc:e6:cb: 70:3b:f0:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxA/VLS07GVuSs4vhUPgqn/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhMDU3ZGI3MGU0NzRlYjRhMDc3ZmExM2YzYmU0ZGQ3YjYz ODBiNTQwHhcNMjYwMjA5MDYwMTA5WhcNMjYwMjEwMDYwMTA5WjAzMTEwLwYDVQQD EygwMWUwMTlhODI5ZDU3MzVjMWQ1ZWQwODZjODM5NDYzODM5MWY0YjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmI0MiK+E8zzwjyT3a2EdHIF9PxEJ w/fuvptKiJR7ZvmnDIFY5nIGlbCOuI5tb8iZm9AWZ5qVtz/wvhfWmQPIJAtMnzpH frjdqMat2HbKk04W7O8NMnMbSUUk7+HJps+QzIFYqWuZ9Q5h3OTDyf0TxBT9FWAZ bGccq5fejnuCrzcmilEkTXH216WijvaOGqZuZQSDF3kZeHsjbPnZyw7dnnK480CX 5ZzoU+kcwWGnI84CwRamcGGfifpdsLo32gCGxBMFcgspjPNmvR5RzpQ9nqpmI7Q4 4wvBBAt5ngN5oZxTctjycJWhnfQmL7LaMXLYytqsZQt9Z/94cjMvPD2h7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAHgGagp1XNcHV7Qhsg5Rjg5H0sfMB8GA1UdIwQY MBaAFCoFfbcOR060oHf6E/O+Tde2OAtUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2dWOXR3NUhUclNnZF9vVDg3NU4xN1k0QzFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9kOTc4ZmYtNzRhMS00OTE1LTk1OWEt YzAzNTY4ZGMwOGIzLzEvS2dWOXR3NUhUclNnZF9vVDg3NU4xN1k0QzFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9kOTc4ZmYtNzRhMS00OTE1LTk1OWEtYzAzNTY4ZGMwOGIz LzEvS2dWOXR3NUhUclNnZF9vVDg3NU4xN1k0QzFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGxFHc0dB v1ROOq7bSj52QGH44SmEDxQPPZ14A8hYBqCMjR8yIAR5ZO4lleR9zSjoDaBWlHft dS1L3UtjAXgkXJOye9xrHlyjrfV36BQw6iJ6wl2Zn+1BXndh0iWnpixedAs+uYv+ 6kBl8FxaipXBqZw1P+NrxN9JcoDNOttNTmQ5k26Gs/GVecr8BJGut5Gb1S/Sp48R Vgv+bkTES9s4QXYEEVNuMxsLasM+iftfu1DmyVkDUALrA2VSK7gbj+P93Q6tVmXB SoFF5GnQ/+XP5oWANyKouKDv6dRZDa/t/o5UzatrARlcF2p1sKbocQEy+ZiOZ1nY e3zwvObLcDvwfA== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:26 2026 by rpki-client