This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.mft File: ksDPBKFPb_eLGPDAB1eIIgr3ORw.mft (raw, json) Hash identifier: ofmCf3G2Voh1ubjqrdLO9/H5w0TmAy6BYq868p8ikms= Subject key identifier: 70:DD:25:A0:7D:9C:EE:F2:73:68:1F:1A:7C:55:7B:B9:D9:C1:39:8C Authority key identifier: 92:C0:CF:04:A1:4F:6F:F7:8B:18:F0:C0:07:57:88:22:0A:F7:39:1C Certificate issuer: /CN=92c0cf04a14f6ff78b18f0c0075788220af7391c Certificate serial: 019C439006ACE0B3FEC8B28C8C46ED1A3FE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksDPBKFPb_eLGPDAB1eIIgr3ORw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.mft Manifest number: 28 Signing time: Mon 09 Feb 2026 18:00:38 +0000 Manifest this update: Mon 09 Feb 2026 18:00:38 +0000 Manifest next update: Tue 10 Feb 2026 18:00:38 +0000 Files and hashes: 1: H-oaoSxJaeI8ELGKoMHlBqtTmBI.roa (hash: pqm+tBEvB6VJYlLNeVfb+SIF3kwpRFZv8Qqe2+lb3Y4=) 2: ksDPBKFPb_eLGPDAB1eIIgr3ORw.crl (hash: teCH0x5XpxsU1Wb0TQRDdHZbEfuiwdMNQr/oZYt79Yg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.mft rsync://rpki.ripe.net/repository/DEFAULT/ksDPBKFPb_eLGPDAB1eIIgr3ORw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:06:ac:e0:b3:fe:c8:b2:8c:8c:46:ed:1a:3f:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92c0cf04a14f6ff78b18f0c0075788220af7391c Validity Not Before: Feb 9 18:00:38 2026 GMT Not After : Feb 10 18:00:38 2026 GMT Subject: CN=70dd25a07d9ceef273681f1a7c557bb9d9c1398c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1d:c3:39:c2:b6:c8:f9:99:4d:3e:25:93:61: 01:27:23:f4:3c:ea:65:17:f8:2e:32:63:f1:27:74: b2:c4:e7:7b:42:61:de:93:76:8d:9a:38:d5:45:78: 44:4b:e5:60:c1:d4:45:7a:9f:aa:6b:c8:25:92:21: 8e:49:c5:7b:8b:0b:64:e0:a9:6e:c3:28:03:22:82: 1d:85:17:99:9e:43:d1:40:53:20:de:7f:4a:f0:ac: 5d:44:b6:91:83:ce:7c:ac:af:2f:70:72:4b:e3:fd: c7:b6:a0:22:70:73:4f:09:79:5c:9f:a6:73:e6:be: 82:95:5e:2c:36:ef:5a:c7:52:2d:fe:f4:ce:d7:2d: 5d:36:a4:9d:4e:f1:99:41:17:c6:3f:a5:ab:0b:4a: 0c:0d:54:e3:b2:87:d8:1d:e9:27:5c:29:f1:b9:2f: 10:5b:39:93:29:76:b0:88:a4:5d:cc:b2:13:22:ba: 6c:88:0f:a9:5b:33:97:8c:b4:1b:9d:5a:8e:6b:0b: 67:00:04:2d:d2:5e:b3:27:5c:d1:22:0e:1a:8b:de: 52:aa:d6:ed:b4:46:db:22:b3:53:b4:57:d1:30:f7: a3:cc:b3:63:5b:fa:3d:59:e0:1d:51:36:d5:1c:50: 2c:b1:eb:f4:4d:15:82:69:d0:25:20:84:0a:24:36: 48:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:DD:25:A0:7D:9C:EE:F2:73:68:1F:1A:7C:55:7B:B9:D9:C1:39:8C X509v3 Authority Key Identifier: keyid:92:C0:CF:04:A1:4F:6F:F7:8B:18:F0:C0:07:57:88:22:0A:F7:39:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksDPBKFPb_eLGPDAB1eIIgr3ORw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ef384d-ce4d-492e-9565-4cf5deda5c4c/1/ksDPBKFPb_eLGPDAB1eIIgr3ORw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:8b:14:2a:27:ab:21:49:22:59:05:61:eb:e2:87:25:fd:c2: 7e:5f:56:26:4e:90:83:60:09:fe:d7:41:6f:7d:be:1e:d4:bc: e8:24:06:77:b5:11:fc:77:02:0f:da:f7:62:a2:91:8c:d2:a5: e1:b7:55:61:fd:87:4e:c4:d3:17:5b:4b:13:49:73:c7:71:bd: df:a7:52:3b:ad:10:db:61:db:26:ae:a9:8c:bb:26:77:97:54: 98:10:10:24:83:a6:1d:f7:44:7e:a9:8b:12:9c:81:c3:41:0f: c0:e4:7a:0e:1a:fd:17:c8:10:50:0f:68:59:33:2b:12:5e:89: cc:df:18:e2:de:da:5d:7c:50:6f:7b:c7:24:15:ea:22:23:80: b0:8d:4a:98:d8:b2:3e:f2:57:03:2f:2e:f9:35:73:71:85:96: a6:66:d8:ed:9a:80:80:ad:11:eb:ca:72:0f:fa:f8:01:17:56: d9:80:40:95:bc:b4:ef:2a:90:90:4c:b5:8e:9c:9b:32:a8:28: 63:e7:5c:ed:64:66:ff:2b:ce:ab:b9:2c:fd:93:0f:c2:fc:fe: 5d:39:c7:09:9f:35:24:c0:c9:c5:e8:41:fd:dd:1c:3f:e2:ee: 85:ba:80:5d:64:2b:4b:5e:6b:5c:b3:ed:d9:f4:d5:80:d8:84: 65:19:72:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkAas4LP+yLKMjEbtGj/iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyYzBjZjA0YTE0ZjZmZjc4YjE4ZjBjMDA3NTc4ODIyMGFm NzM5MWMwHhcNMjYwMjA5MTgwMDM4WhcNMjYwMjEwMTgwMDM4WjAzMTEwLwYDVQQD Eyg3MGRkMjVhMDdkOWNlZWYyNzM2ODFmMWE3YzU1N2JiOWQ5YzEzOThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoB3DOcK2yPmZTT4lk2EBJyP0POpl F/guMmPxJ3SyxOd7QmHek3aNmjjVRXhES+VgwdRFep+qa8glkiGOScV7iwtk4Klu wygDIoIdhReZnkPRQFMg3n9K8KxdRLaRg858rK8vcHJL4/3HtqAicHNPCXlcn6Zz 5r6ClV4sNu9ax1It/vTO1y1dNqSdTvGZQRfGP6WrC0oMDVTjsofYHeknXCnxuS8Q WzmTKXawiKRdzLITIrpsiA+pWzOXjLQbnVqOawtnAAQt0l6zJ1zRIg4ai95Sqtbt tEbbIrNTtFfRMPejzLNjW/o9WeAdUTbVHFAssev0TRWCadAlIIQKJDZIjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHDdJaB9nO7yc2gfGnxVe7nZwTmMMB8GA1UdIwQY MBaAFJLAzwShT2/3ixjwwAdXiCIK9zkcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3NEUEJLRlBiX2VMR1BEQUIxZUlJZ3IzT1J3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9lZjM4NGQtY2U0ZC00OTJlLTk1NjUt NGNmNWRlZGE1YzRjLzEva3NEUEJLRlBiX2VMR1BEQUIxZUlJZ3IzT1J3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9lZjM4NGQtY2U0ZC00OTJlLTk1NjUtNGNmNWRlZGE1YzRj LzEva3NEUEJLRlBiX2VMR1BEQUIxZUlJZ3IzT1J3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI4sUKier IUkiWQVh6+KHJf3Cfl9WJk6Qg2AJ/tdBb32+HtS86CQGd7UR/HcCD9r3YqKRjNKl 4bdVYf2HTsTTF1tLE0lzx3G936dSO60Q22HbJq6pjLsmd5dUmBAQJIOmHfdEfqmL EpyBw0EPwOR6Dhr9F8gQUA9oWTMrEl6JzN8Y4t7aXXxQb3vHJBXqIiOAsI1KmNiy PvJXAy8u+TVzcYWWpmbY7ZqAgK0R68pyD/r4ARdW2YBAlby07yqQkEy1jpybMqgo Y+dc7WRm/yvOq7ks/ZMPwvz+XTnHCZ81JMDJxehB/d0cP+LuhbqAXWQrS15rXLPt 2fTVgNiEZRlyQA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:55 2026 by rpki-client