This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.mft File: kg6KqqAOJVZRVcWbjMO42BuhSSA.mft (raw, json) Hash identifier: 2vINoeFI4u1UyfNlxa7XFBiYqokWmmck/UVkJk64Fhg= Subject key identifier: A8:06:1E:86:23:A7:40:25:0C:CB:10:53:0A:0A:6A:54:86:3F:DC:D5 Authority key identifier: 92:0E:8A:AA:A0:0E:25:56:51:55:C5:9B:8C:C3:B8:D8:1B:A1:49:20 Certificate issuer: /CN=920e8aaaa00e25565155c59b8cc3b8d81ba14920 Certificate serial: 019C43C6C5166EAC2043856AA975C9C2CC99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kg6KqqAOJVZRVcWbjMO42BuhSSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.mft Manifest number: 06D5 Signing time: Mon 09 Feb 2026 19:00:25 +0000 Manifest this update: Mon 09 Feb 2026 19:00:25 +0000 Manifest next update: Tue 10 Feb 2026 19:00:25 +0000 Files and hashes: 1: kg6KqqAOJVZRVcWbjMO42BuhSSA.crl (hash: OLsQj7H2jboy+jMmEsfv8T23UrEcLmYiZox/NN5d7RM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.mft rsync://rpki.ripe.net/repository/DEFAULT/kg6KqqAOJVZRVcWbjMO42BuhSSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c6:c5:16:6e:ac:20:43:85:6a:a9:75:c9:c2:cc:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=920e8aaaa00e25565155c59b8cc3b8d81ba14920 Validity Not Before: Feb 9 19:00:25 2026 GMT Not After : Feb 10 19:00:25 2026 GMT Subject: CN=a8061e8623a740250ccb10530a0a6a54863fdcd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:6f:e6:ce:55:a0:cf:02:32:00:29:14:9c:9a: d5:ca:ec:69:c2:75:54:ba:8d:74:b8:47:c6:fe:57: aa:59:1b:50:fa:ff:74:f5:e9:30:88:51:b4:77:a0: 81:86:70:6d:7f:66:0d:b3:bd:63:d4:83:bc:84:20: 1e:e3:13:2a:76:63:e8:0c:f8:cb:72:af:49:88:a5: 19:cb:fb:ed:d9:ed:e7:0c:17:0c:d3:7d:d0:e4:b5: 68:a5:fd:e7:c0:cc:60:ef:bd:8a:bf:9f:6f:d2:0a: 29:70:7e:79:ef:29:c6:ce:88:0f:f9:98:71:cd:a7: 40:72:39:9e:50:e0:6f:a0:0c:4a:f8:db:d7:aa:84: 08:cc:81:97:4c:70:d3:fa:c7:17:07:cb:9f:88:96: 30:67:2e:a9:89:4e:a2:be:25:e8:3d:77:f0:55:f6: e4:bd:87:99:5d:b7:e6:95:5e:9c:43:08:c2:6d:15: e7:ee:61:59:89:22:e2:0e:84:6a:09:da:19:59:26: 3e:4c:26:9e:94:6a:f3:5a:86:48:1d:c0:49:41:bf: e6:d8:c1:84:44:f5:7b:20:89:dd:fc:10:7d:a5:15: b8:05:f3:ed:54:d0:78:97:1d:a4:89:24:6d:3d:70: 86:56:a8:f4:5d:82:b9:cb:bf:e3:d2:e3:53:a7:2c: ee:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:06:1E:86:23:A7:40:25:0C:CB:10:53:0A:0A:6A:54:86:3F:DC:D5 X509v3 Authority Key Identifier: keyid:92:0E:8A:AA:A0:0E:25:56:51:55:C5:9B:8C:C3:B8:D8:1B:A1:49:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kg6KqqAOJVZRVcWbjMO42BuhSSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:0c:99:e1:cf:0d:51:d9:5e:ad:ac:8b:7a:7a:40:bf:b2:88: a8:d8:72:0b:a4:16:af:c3:12:f5:c3:b4:fa:72:39:24:5a:b1: b3:70:fb:6e:5f:11:dc:1e:d4:c6:51:3b:38:79:5e:48:27:9f: 34:bf:02:a4:41:f1:7d:29:6f:2e:f1:99:fd:54:bd:a4:08:39: c0:76:5f:88:53:3e:17:c3:6a:32:b2:43:25:0d:ee:78:3f:e3: fa:5f:d6:80:90:31:1f:6c:07:d0:96:1d:94:b9:0a:58:77:da: e5:5c:cf:cb:39:ef:d2:1f:74:15:18:ff:9b:47:0b:76:46:19: 11:e0:52:ff:bb:02:57:e4:b8:5d:b2:92:26:91:51:2d:2e:5f: 84:82:22:12:52:a8:01:c4:66:2e:6b:3c:3a:c5:42:3e:42:e8: 5f:92:dc:b7:ce:f5:59:a3:c2:68:37:79:21:bd:25:eb:74:b3: 06:b8:8f:f2:e7:84:fd:b4:be:37:6a:07:23:0a:37:00:17:c3: 92:7c:eb:00:ba:fd:0a:5c:e6:40:e3:51:57:0a:db:a9:db:44: 35:a9:0f:84:36:50:1d:4b:87:a8:9a:86:b6:3c:35:56:22:44: 2e:1f:33:10:98:a8:55:a4:a2:26:55:42:3e:14:b8:bc:c2:bf: 30:0a:0a:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxsUWbqwgQ4VqqXXJwsyZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMGU4YWFhYTAwZTI1NTY1MTU1YzU5YjhjYzNiOGQ4MWJh MTQ5MjAwHhcNMjYwMjA5MTkwMDI1WhcNMjYwMjEwMTkwMDI1WjAzMTEwLwYDVQQD EyhhODA2MWU4NjIzYTc0MDI1MGNjYjEwNTMwYTBhNmE1NDg2M2ZkY2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22/mzlWgzwIyACkUnJrVyuxpwnVU uo10uEfG/leqWRtQ+v909ekwiFG0d6CBhnBtf2YNs71j1IO8hCAe4xMqdmPoDPjL cq9JiKUZy/vt2e3nDBcM033Q5LVopf3nwMxg772Kv59v0gopcH557ynGzogP+Zhx zadAcjmeUOBvoAxK+NvXqoQIzIGXTHDT+scXB8ufiJYwZy6piU6iviXoPXfwVfbk vYeZXbfmlV6cQwjCbRXn7mFZiSLiDoRqCdoZWSY+TCaelGrzWoZIHcBJQb/m2MGE RPV7IInd/BB9pRW4BfPtVNB4lx2kiSRtPXCGVqj0XYK5y7/j0uNTpyzuVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKgGHoYjp0AlDMsQUwoKalSGP9zVMB8GA1UdIwQY MBaAFJIOiqqgDiVWUVXFm4zDuNgboUkgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2c2S3FxQU9KVlpSVmNXYmpNTzQyQnVoU1NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8xZmMyNjQtODg1Zi00OWU0LTg0NTEt ODFhY2ZlMTc1ZGY3LzEva2c2S3FxQU9KVlpSVmNXYmpNTzQyQnVoU1NBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC8xZmMyNjQtODg1Zi00OWU0LTg0NTEtODFhY2ZlMTc1ZGY3 LzEva2c2S3FxQU9KVlpSVmNXYmpNTzQyQnVoU1NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMgyZ4c8N UdlerayLenpAv7KIqNhyC6QWr8MS9cO0+nI5JFqxs3D7bl8R3B7UxlE7OHleSCef NL8CpEHxfSlvLvGZ/VS9pAg5wHZfiFM+F8NqMrJDJQ3ueD/j+l/WgJAxH2wH0JYd lLkKWHfa5VzPyznv0h90FRj/m0cLdkYZEeBS/7sCV+S4XbKSJpFRLS5fhIIiElKo AcRmLms8OsVCPkLoX5Lct871WaPCaDd5Ib0l63SzBriP8ueE/bS+N2oHIwo3ABfD knzrALr9ClzmQONRVwrbqdtENakPhDZQHUuHqJqGtjw1ViJELh8zEJioVaSiJlVC PhS4vMK/MAoKVw== -----END CERTIFICATE-----Generated at Tue Feb 10 00:17:03 2026 by rpki-client