This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft File: KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft (raw, json) Hash identifier: 2IP0ffckUzY0hcPnK1huQqEPvMyyZW+b3FKZGrsIGzk= Subject key identifier: 43:2A:02:8E:80:C3:29:66:C8:DB:82:F2:8A:66:2C:F4:64:5E:4B:A0 Authority key identifier: 28:45:F1:F4:D5:9F:81:1D:63:23:DB:4D:86:D4:F4:18:54:ED:E7:44 Certificate issuer: /CN=2845f1f4d59f811d6323db4d86d4f41854ede744 Certificate serial: 019C427DEE24002E457BEF5AE07BAC0B7321 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEXx9NWfgR1jI9tNhtT0GFTt50Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft Manifest number: 120B Signing time: Mon 09 Feb 2026 13:01:14 +0000 Manifest this update: Mon 09 Feb 2026 13:01:14 +0000 Manifest next update: Tue 10 Feb 2026 13:01:14 +0000 Files and hashes: 1: I0UZpWboc5cQ0LGg6PNXqF6lSBw.roa (hash: P/ftwFa1S2VKjprGcKvJDhqUROD7iDtwsuNt3XMlEQ4=) 2: KEXx9NWfgR1jI9tNhtT0GFTt50Q.crl (hash: bqEB8EsHFtQiKKvnGr0T8U0OJMa25KO4cOJUygntpz0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft rsync://rpki.ripe.net/repository/DEFAULT/KEXx9NWfgR1jI9tNhtT0GFTt50Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:ee:24:00:2e:45:7b:ef:5a:e0:7b:ac:0b:73:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2845f1f4d59f811d6323db4d86d4f41854ede744 Validity Not Before: Feb 9 13:01:14 2026 GMT Not After : Feb 10 13:01:14 2026 GMT Subject: CN=432a028e80c32966c8db82f28a662cf4645e4ba0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:26:64:a9:5d:8d:6c:ad:ea:98:61:ef:2d:bf: 46:74:4f:2e:24:59:2e:c2:18:a6:47:c3:ae:8a:20: 39:05:de:0a:f0:e9:a3:46:7a:87:e5:00:71:3b:f3: df:0c:b2:d3:04:92:e6:81:53:1b:3e:cf:40:d4:88: e5:b6:5d:e4:0e:03:d5:da:f2:1e:a3:7a:ee:52:81: c8:86:41:36:91:63:09:2a:c8:f0:e4:86:4f:bc:52: e1:bb:c2:cc:1d:67:2b:42:28:a6:d4:49:7d:91:e9: b5:f7:9d:74:d9:9d:06:91:16:bd:19:69:78:a9:2c: 0a:99:d6:80:4c:36:4d:b1:88:1b:c0:0c:ed:dd:a1: a1:75:64:d7:07:c9:9b:9d:72:ab:2e:0c:77:b2:21: 73:73:9b:9d:67:d1:72:c4:a5:3e:f8:d2:dc:be:e2: 33:40:00:a5:f4:17:d7:fe:f8:68:86:f4:11:17:cd: 94:76:55:c5:79:25:28:e5:79:bc:65:c6:a5:60:a2: 31:53:0e:d9:68:49:20:ac:6c:15:81:5a:c9:3c:92: 27:b0:4f:f1:c6:11:4f:0e:2e:ff:f5:4e:ea:df:c8: 26:9a:16:f1:7a:36:9e:bb:37:d1:46:b7:ac:43:bb: c5:75:7a:90:0a:f1:59:76:d0:35:89:23:a4:6c:59: 98:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:2A:02:8E:80:C3:29:66:C8:DB:82:F2:8A:66:2C:F4:64:5E:4B:A0 X509v3 Authority Key Identifier: keyid:28:45:F1:F4:D5:9F:81:1D:63:23:DB:4D:86:D4:F4:18:54:ED:E7:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEXx9NWfgR1jI9tNhtT0GFTt50Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:ce:a0:6d:e6:43:fa:e5:51:92:b6:37:c3:b2:2a:03:8b:40: 17:07:23:4a:a3:3a:cc:99:5f:41:d9:73:3f:18:03:bd:5e:ac: 32:af:5f:e5:f3:d4:3e:0b:18:93:5d:8a:dc:0b:43:c3:2c:3c: e3:5d:9b:6f:b2:97:29:86:19:62:7e:7e:3e:89:e5:10:1c:4e: a9:f1:67:31:21:2e:18:8e:06:e1:cf:74:83:ee:9f:f5:e3:0c: 30:f1:88:85:7c:50:78:fc:d6:2b:53:f9:6a:78:36:d5:d7:37: cd:be:21:33:21:ea:a4:c6:95:74:64:9b:8f:b0:ec:17:1f:f6: 4e:89:3e:4e:a6:39:3b:5f:68:b6:d8:35:53:aa:54:6e:54:46: aa:ae:c8:ad:a0:b2:93:72:49:13:c2:eb:b8:42:bf:50:3c:b7: 8e:89:5d:43:52:88:0c:d2:5b:02:d1:fc:dd:76:ff:7e:74:42: 7e:cc:79:7d:6a:14:7a:2c:28:0c:91:1c:f6:51:6b:0c:12:1f: 96:d0:6d:0b:37:65:01:a4:ea:fc:a6:e0:f2:07:c7:a5:1a:23: a2:78:6d:f5:77:34:0f:1d:6a:de:4b:8a:83:1b:98:30:c6:84: 7d:5d:da:6b:1b:d3:48:87:6c:cc:a5:ad:36:aa:30:ed:fe:17: ac:03:89:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfe4kAC5Fe+9a4HusC3MhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4NDVmMWY0ZDU5ZjgxMWQ2MzIzZGI0ZDg2ZDRmNDE4NTRl ZGU3NDQwHhcNMjYwMjA5MTMwMTE0WhcNMjYwMjEwMTMwMTE0WjAzMTEwLwYDVQQD Eyg0MzJhMDI4ZTgwYzMyOTY2YzhkYjgyZjI4YTY2MmNmNDY0NWU0YmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCZkqV2NbK3qmGHvLb9GdE8uJFku whimR8OuiiA5Bd4K8OmjRnqH5QBxO/PfDLLTBJLmgVMbPs9A1Ijltl3kDgPV2vIe o3ruUoHIhkE2kWMJKsjw5IZPvFLhu8LMHWcrQiim1El9kem195102Z0GkRa9GWl4 qSwKmdaATDZNsYgbwAzt3aGhdWTXB8mbnXKrLgx3siFzc5udZ9FyxKU++NLcvuIz QACl9BfX/vhohvQRF82UdlXFeSUo5Xm8ZcalYKIxUw7ZaEkgrGwVgVrJPJInsE/x xhFPDi7/9U7q38gmmhbxejaeuzfRRresQ7vFdXqQCvFZdtA1iSOkbFmYPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEMqAo6AwylmyNuC8opmLPRkXkugMB8GA1UdIwQY MBaAFChF8fTVn4EdYyPbTYbU9BhU7edEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0VYeDlOV2ZnUjFqSTl0Tmh0VDBHRlR0NTBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS85MDY5Y2UtZGZlMS00YjhhLWFmMDMt MjI2ZjNiODAzMWI3LzEvS0VYeDlOV2ZnUjFqSTl0Tmh0VDBHRlR0NTBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS85MDY5Y2UtZGZlMS00YjhhLWFmMDMtMjI2ZjNiODAzMWI3 LzEvS0VYeDlOV2ZnUjFqSTl0Tmh0VDBHRlR0NTBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmc6gbeZD +uVRkrY3w7IqA4tAFwcjSqM6zJlfQdlzPxgDvV6sMq9f5fPUPgsYk12K3AtDwyw8 412bb7KXKYYZYn5+PonlEBxOqfFnMSEuGI4G4c90g+6f9eMMMPGIhXxQePzWK1P5 ang21dc3zb4hMyHqpMaVdGSbj7DsFx/2Tok+TqY5O19ottg1U6pUblRGqq7IraCy k3JJE8LruEK/UDy3joldQ1KIDNJbAtH83Xb/fnRCfsx5fWoUeiwoDJEc9lFrDBIf ltBtCzdlAaTq/Kbg8gfHpRojonht9Xc0Dx1q3kuKgxuYMMaEfV3aaxvTSIdszKWt Nqow7f4XrAOJ/Q== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:51 2026 by rpki-client