This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.mft File: KxcHiJeUzqBiK9SSHWvb3VbvCwY.mft (raw, json) Hash identifier: c2D0jnszuiucXZxz94zuXEWQ/IEEiEJYgMT+QGQAaWg= Subject key identifier: 9E:BD:E7:7A:53:0E:7B:FA:5C:79:5F:DE:B1:C4:F4:F6:8F:D3:65:F7 Authority key identifier: 2B:17:07:88:97:94:CE:A0:62:2B:D4:92:1D:6B:DB:DD:56:EF:0B:06 Certificate issuer: /CN=2b1707889794cea0622bd4921d6bdbdd56ef0b06 Certificate serial: 019C43FE196A166639148E64864CC77CF12E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxcHiJeUzqBiK9SSHWvb3VbvCwY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.mft Manifest number: 07E0 Signing time: Mon 09 Feb 2026 20:00:51 +0000 Manifest this update: Mon 09 Feb 2026 20:00:51 +0000 Manifest next update: Tue 10 Feb 2026 20:00:51 +0000 Files and hashes: 1: KxcHiJeUzqBiK9SSHWvb3VbvCwY.crl (hash: uK5GIKl/mYbVv+TyZNURyCS0JSHy4o5NQ8y0mCmniRs=) 2: m6f0KblgDdn2oDmiijUoJd1_umI.roa (hash: QlWp9v6ktsMkYvji1hdedyPM7rbbm0wOY1KKEhtnmFw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.mft rsync://rpki.ripe.net/repository/DEFAULT/KxcHiJeUzqBiK9SSHWvb3VbvCwY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:19:6a:16:66:39:14:8e:64:86:4c:c7:7c:f1:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b1707889794cea0622bd4921d6bdbdd56ef0b06 Validity Not Before: Feb 9 20:00:51 2026 GMT Not After : Feb 10 20:00:51 2026 GMT Subject: CN=9ebde77a530e7bfa5c795fdeb1c4f4f68fd365f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:04:bc:d1:df:7c:41:3c:3c:df:7e:bc:93:8e: dc:7f:fb:0d:30:ed:42:4a:3b:fb:6f:13:47:04:f2: 83:38:5a:1e:23:8f:f0:c5:85:61:76:f5:b3:7c:a3: f0:bc:8b:43:42:40:63:43:68:ad:7a:37:b3:cf:8a: 61:27:0e:8d:66:27:ea:85:45:bf:ed:17:03:98:13: 3b:d9:55:72:03:dc:5c:13:52:84:f2:b2:09:3a:6f: 99:4c:25:a6:98:d0:2c:77:bf:4b:f2:8f:60:74:00: 4c:50:2e:09:29:3a:d3:ee:e1:4e:2f:17:09:60:04: 48:80:e6:62:85:8f:f2:f2:27:64:98:d3:33:e6:88: d1:97:e2:3a:32:a4:5f:e8:33:ad:e6:17:e6:a9:ca: 21:fd:4b:e1:d0:35:e5:13:be:fe:cf:b9:98:f6:65: 24:a5:b1:cc:7f:4a:91:33:3c:a6:b9:f3:6a:01:ee: 47:7a:db:69:aa:04:c4:e3:47:a7:54:5c:00:cf:9c: 4d:f4:ad:f8:71:f9:59:9a:92:9b:e4:34:81:a2:77: b3:8a:5c:70:6e:b7:e0:c1:f1:0b:cb:85:ca:cc:e9: d7:1a:c6:be:f7:c9:20:90:36:23:b5:38:32:62:77: a9:25:1f:a8:18:79:8a:58:24:10:08:f0:f2:7e:15: 59:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:BD:E7:7A:53:0E:7B:FA:5C:79:5F:DE:B1:C4:F4:F6:8F:D3:65:F7 X509v3 Authority Key Identifier: keyid:2B:17:07:88:97:94:CE:A0:62:2B:D4:92:1D:6B:DB:DD:56:EF:0B:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxcHiJeUzqBiK9SSHWvb3VbvCwY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:89:bb:17:b0:b8:b8:bc:ef:68:21:92:e3:de:97:33:bd:bb: ab:4d:bd:62:cf:3e:d8:40:0d:22:6b:78:a1:e7:20:41:8d:fe: 86:73:e1:cb:05:7a:50:ab:c0:52:d6:55:a8:c2:38:1e:12:03: d4:11:c5:05:55:d6:0e:08:fc:a2:dd:c5:b4:97:98:cb:e3:f9: 9f:fd:18:d2:fb:85:b7:a5:f8:c7:e6:f6:f0:13:de:9f:42:d8: 25:e1:f1:cd:88:bd:9e:42:f5:6e:5d:8c:af:4b:9e:4f:0b:b2: 15:34:b7:38:ba:df:c5:9c:22:74:10:49:66:78:1d:da:80:c2: 3c:b4:74:0f:0a:90:f2:bf:6f:ef:87:61:90:00:98:67:7f:3b: 55:a5:4a:db:31:b6:fd:cd:11:cd:82:81:1b:82:0b:16:3d:c4: 20:27:e2:55:4d:6e:26:5d:40:3a:b5:ee:18:ff:43:ec:ce:b5: 05:8e:57:42:ce:8a:d9:24:2f:c1:13:33:f4:e4:fd:6b:29:b3: 8e:32:01:de:2d:20:e9:48:d5:4a:c3:38:de:be:a2:3f:be:6b: 85:30:c4:0a:a0:86:85:eb:69:5e:16:ab:82:a1:ed:5b:71:6d: b5:d6:89:77:60:b0:02:57:3c:bc:96:1e:97:10:58:85:52:fc: d4:ee:43:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/hlqFmY5FI5khkzHfPEuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiMTcwNzg4OTc5NGNlYTA2MjJiZDQ5MjFkNmJkYmRkNTZl ZjBiMDYwHhcNMjYwMjA5MjAwMDUxWhcNMjYwMjEwMjAwMDUxWjAzMTEwLwYDVQQD Eyg5ZWJkZTc3YTUzMGU3YmZhNWM3OTVmZGViMWM0ZjRmNjhmZDM2NWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAS80d98QTw83368k47cf/sNMO1C Sjv7bxNHBPKDOFoeI4/wxYVhdvWzfKPwvItDQkBjQ2itejezz4phJw6NZifqhUW/ 7RcDmBM72VVyA9xcE1KE8rIJOm+ZTCWmmNAsd79L8o9gdABMUC4JKTrT7uFOLxcJ YARIgOZihY/y8idkmNMz5ojRl+I6MqRf6DOt5hfmqcoh/Uvh0DXlE77+z7mY9mUk pbHMf0qRMzymufNqAe5HettpqgTE40enVFwAz5xN9K34cflZmpKb5DSBonezilxw brfgwfELy4XKzOnXGsa+98kgkDYjtTgyYnepJR+oGHmKWCQQCPDyfhVZtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ6953pTDnv6XHlf3rHE9PaP02X3MB8GA1UdIwQY MBaAFCsXB4iXlM6gYivUkh1r291W7wsGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3hjSGlKZVV6cUJpSzlTU0hXdmIzVmJ2Q3dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9iYWNjNzctZGYzMC00OTQxLWJlMzMt ZGNiNWI5ZTg4ZTlhLzEvS3hjSGlKZVV6cUJpSzlTU0hXdmIzVmJ2Q3dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9iYWNjNzctZGYzMC00OTQxLWJlMzMtZGNiNWI5ZTg4ZTlh LzEvS3hjSGlKZVV6cUJpSzlTU0hXdmIzVmJ2Q3dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHIm7F7C4 uLzvaCGS496XM727q029Ys8+2EANImt4oecgQY3+hnPhywV6UKvAUtZVqMI4HhID 1BHFBVXWDgj8ot3FtJeYy+P5n/0Y0vuFt6X4x+b28BPen0LYJeHxzYi9nkL1bl2M r0ueTwuyFTS3OLrfxZwidBBJZngd2oDCPLR0DwqQ8r9v74dhkACYZ387VaVK2zG2 /c0RzYKBG4ILFj3EICfiVU1uJl1AOrXuGP9D7M61BY5XQs6K2SQvwRMz9OT9aymz jjIB3i0g6UjVSsM43r6iP75rhTDECqCGhetpXhargqHtW3FttdaJd2CwAlc8vJYe lxBYhVL81O5Dbw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:39:14 2026 by rpki-client