This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft File: KfNCRmRyXVgguqeCcTFDozB2kfM.mft (raw, json) Hash identifier: kbRll/oNP5wGlkeoP+Jui8MT0Z8KjoDlPTx9NYBSM8g= Subject key identifier: CC:22:C3:C4:89:44:04:E4:DF:D4:AD:59:F8:8F:EB:EF:82:94:F8:3D Authority key identifier: 29:F3:42:46:64:72:5D:58:20:BA:A7:82:71:31:43:A3:30:76:91:F3 Certificate issuer: /CN=29f3424664725d5820baa782713143a3307691f3 Certificate serial: 019C43C710FE356E8C17C16D66B342375151 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft Manifest number: 026B Signing time: Mon 09 Feb 2026 19:00:45 +0000 Manifest this update: Mon 09 Feb 2026 19:00:45 +0000 Manifest next update: Tue 10 Feb 2026 19:00:45 +0000 Files and hashes: 1: KfNCRmRyXVgguqeCcTFDozB2kfM.crl (hash: TR44zAAkg3AJNHct3a/315ICTu03Qw45mnBG/x2IAX4=) 2: kNl2FH2h1RUbk8aiFoOzXqbZfiE.roa (hash: 75YFC9si8AQdOYzNPqXE8Vynriw8AkUBVZlHIzni5SA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c7:10:fe:35:6e:8c:17:c1:6d:66:b3:42:37:51:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29f3424664725d5820baa782713143a3307691f3 Validity Not Before: Feb 9 19:00:45 2026 GMT Not After : Feb 10 19:00:45 2026 GMT Subject: CN=cc22c3c4894404e4dfd4ad59f88febef8294f83d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:be:4a:5f:ca:4f:40:3f:e0:1f:63:2b:d0:fe: d7:3e:2d:5d:79:87:bd:e0:a2:c6:32:ea:be:21:90: a6:31:bc:e1:f6:c8:5c:f6:55:72:76:90:d3:61:fe: b1:c0:2d:a7:ee:04:73:69:0c:01:67:8f:b2:4d:f7: dc:d9:27:fc:f5:13:74:85:9f:74:68:16:d1:8d:c3: 53:5f:ce:76:83:af:7d:f8:86:20:5e:8e:e7:e6:23: b1:37:7b:c7:b9:6e:97:66:8c:bc:05:fd:dd:6c:90: 9d:64:d6:12:eb:07:34:cb:fc:d9:ff:75:df:3d:67: 25:cb:cd:73:99:06:a6:fb:58:3d:26:69:2a:36:ee: dc:f5:7d:0b:ef:01:9d:81:87:90:6a:87:ae:42:d5: 5a:3a:33:98:b6:c9:34:19:bc:7f:ce:03:09:81:71: e4:3b:0a:49:10:42:b8:52:0d:79:b6:10:f7:41:62: 01:ff:1a:00:b2:96:fd:50:be:5e:15:02:cd:27:bc: f9:f0:f4:74:d7:a6:74:cc:8d:f1:78:53:41:8d:bc: 33:a9:e7:85:6b:30:7d:60:72:2b:30:33:78:7e:40: c0:41:4e:4d:b7:1a:75:b8:24:df:6e:3b:eb:0a:29: e6:85:39:3a:60:5d:24:2f:3b:36:ba:30:ae:ca:2c: 1d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:22:C3:C4:89:44:04:E4:DF:D4:AD:59:F8:8F:EB:EF:82:94:F8:3D X509v3 Authority Key Identifier: keyid:29:F3:42:46:64:72:5D:58:20:BA:A7:82:71:31:43:A3:30:76:91:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfNCRmRyXVgguqeCcTFDozB2kfM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1298e1-a1e4-4abc-ab1f-649d25a95907/1/KfNCRmRyXVgguqeCcTFDozB2kfM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:fb:26:8b:f9:8a:85:4c:1e:27:e6:62:79:fd:6e:a7:99:4a: 73:a4:72:09:b3:e3:c6:31:ce:9a:2f:09:8f:5b:2e:cd:ea:af: d1:94:f3:7c:f3:bd:a9:c1:b2:39:46:2a:12:2d:17:d7:a4:88: 99:d5:aa:f0:0d:07:02:78:84:7d:b9:7c:ea:50:82:7f:e4:96: 88:e0:b7:fd:f3:a5:5a:4c:95:ce:e3:47:c1:c4:e3:92:94:b0: 9c:b1:09:e5:ea:72:f9:b7:99:23:f1:5a:c8:a3:63:ba:0d:d2: 57:55:1a:e4:61:28:6d:5d:dd:07:34:4a:de:de:c5:55:32:77: 35:fe:e6:9b:86:df:7f:59:a1:a8:94:a3:f7:55:41:49:70:56: c3:16:d7:9f:76:40:f5:b2:ab:82:21:16:59:5d:57:61:ae:db: 09:3a:53:0f:74:49:d1:08:7c:8a:eb:19:01:77:de:04:e9:fb: 97:45:9b:e1:d4:4a:62:6b:72:74:70:19:42:ec:5b:76:f5:4c: 7e:2d:13:37:bc:30:b6:eb:02:8a:7e:7e:a3:cd:66:03:71:2c: e6:4d:83:2a:9a:3c:e5:a4:c6:c5:52:72:62:38:2a:be:c9:3f: 94:59:ca:cb:3e:bd:eb:d3:e6:0e:0b:69:82:75:40:1c:f5:ad: 4d:35:72:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxxD+NW6MF8FtZrNCN1FRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZjM0MjQ2NjQ3MjVkNTgyMGJhYTc4MjcxMzE0M2EzMzA3 NjkxZjMwHhcNMjYwMjA5MTkwMDQ1WhcNMjYwMjEwMTkwMDQ1WjAzMTEwLwYDVQQD EyhjYzIyYzNjNDg5NDQwNGU0ZGZkNGFkNTlmODhmZWJlZjgyOTRmODNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAob5KX8pPQD/gH2Mr0P7XPi1deYe9 4KLGMuq+IZCmMbzh9shc9lVydpDTYf6xwC2n7gRzaQwBZ4+yTffc2Sf89RN0hZ90 aBbRjcNTX852g699+IYgXo7n5iOxN3vHuW6XZoy8Bf3dbJCdZNYS6wc0y/zZ/3Xf PWcly81zmQam+1g9JmkqNu7c9X0L7wGdgYeQaoeuQtVaOjOYtsk0Gbx/zgMJgXHk OwpJEEK4Ug15thD3QWIB/xoAspb9UL5eFQLNJ7z58PR016Z0zI3xeFNBjbwzqeeF azB9YHIrMDN4fkDAQU5Ntxp1uCTfbjvrCinmhTk6YF0kLzs2ujCuyiwd/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMwiw8SJRATk39StWfiP6++ClPg9MB8GA1UdIwQY MBaAFCnzQkZkcl1YILqngnExQ6MwdpHzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2ZOQ1JtUnlYVmdndXFlQ2NURkRvekIya2ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8xMjk4ZTEtYTFlNC00YWJjLWFiMWYt NjQ5ZDI1YTk1OTA3LzEvS2ZOQ1JtUnlYVmdndXFlQ2NURkRvekIya2ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi8xMjk4ZTEtYTFlNC00YWJjLWFiMWYtNjQ5ZDI1YTk1OTA3 LzEvS2ZOQ1JtUnlYVmdndXFlQ2NURkRvekIya2ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApPsmi/mK hUweJ+Zief1up5lKc6RyCbPjxjHOmi8Jj1suzeqv0ZTzfPO9qcGyOUYqEi0X16SI mdWq8A0HAniEfbl86lCCf+SWiOC3/fOlWkyVzuNHwcTjkpSwnLEJ5epy+beZI/Fa yKNjug3SV1Ua5GEobV3dBzRK3t7FVTJ3Nf7mm4bff1mhqJSj91VBSXBWwxbXn3ZA 9bKrgiEWWV1XYa7bCTpTD3RJ0Qh8iusZAXfeBOn7l0Wb4dRKYmtydHAZQuxbdvVM fi0TN7wwtusCin5+o81mA3Es5k2DKpo85aTGxVJyYjgqvsk/lFnKyz6969PmDgtp gnVAHPWtTTVyzw== -----END CERTIFICATE-----Generated at Tue Feb 10 01:07:54 2026 by rpki-client