This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.mft File: K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.mft (raw, json) Hash identifier: NJj0HmMFl7tBqBZQKwWt3zKrVRXtcWP1hyj/XTHTd2c= Subject key identifier: 02:C7:46:B0:DC:99:4D:F4:98:8D:71:24:B6:FD:F3:A5:93:45:B1:DD Authority key identifier: 2B:73:AA:84:37:BC:67:23:51:9D:0F:32:0B:F1:F1:70:41:41:A5:3D Certificate issuer: /CN=2b73aa8437bc6723519d0f320bf1f1704141a53d Certificate serial: 019C420F66FA64BD12BAF48C3E3EA71A1645 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.mft Manifest number: 05D9 Signing time: Mon 09 Feb 2026 11:00:31 +0000 Manifest this update: Mon 09 Feb 2026 11:00:31 +0000 Manifest next update: Tue 10 Feb 2026 11:00:31 +0000 Files and hashes: 1: HNWOK-qSzLEKLOiT1RxncC81FBw.roa (hash: VsSGzqx4mMKPsvTq4Mnx3YPfOOngg/lj8h0zkR3wf/A=) 2: K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.crl (hash: 9/D/eAZCwpM4mLulG2oE6bxGwRoBG/B3IvdSMYEBRYU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.mft rsync://rpki.ripe.net/repository/DEFAULT/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:66:fa:64:bd:12:ba:f4:8c:3e:3e:a7:1a:16:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b73aa8437bc6723519d0f320bf1f1704141a53d Validity Not Before: Feb 9 11:00:31 2026 GMT Not After : Feb 10 11:00:31 2026 GMT Subject: CN=02c746b0dc994df4988d7124b6fdf3a59345b1dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a3:4c:a0:88:63:dd:b0:14:8b:51:42:61:74: 41:aa:8a:f9:ad:c3:a6:de:ff:3e:ec:ee:07:93:58: ce:b0:51:66:e4:9f:ed:a3:67:6e:8d:95:3f:48:2c: 46:4f:79:53:26:24:79:94:e6:5e:a7:73:59:11:44: 20:b8:42:f7:9e:c1:52:23:69:f1:a2:b7:e7:85:a6: 32:15:2d:fc:2d:77:4d:38:4a:48:89:ef:50:ce:a1: f4:e3:b4:63:d9:3a:c9:37:05:6c:71:7a:74:c5:62: 7e:7b:36:ff:ad:4e:57:c0:0f:39:a7:c8:c0:68:04: 49:39:fe:e1:04:70:e3:b9:3c:ce:11:37:4d:cb:71: af:db:75:79:77:35:3c:95:6c:cd:75:bc:af:92:98: 9a:59:8f:0c:70:08:4e:4d:d1:c6:7d:e0:5a:56:fb: cd:84:94:f0:89:fe:a8:d7:ba:bd:e2:cb:32:a6:fa: 93:15:ab:1a:b1:70:ab:8a:01:53:00:64:f5:a0:33: e7:a5:16:9b:7f:8f:9e:3f:cc:ac:61:52:ad:81:e7: ca:5c:40:71:9f:c4:18:de:f4:5b:8f:e3:06:aa:78: 44:a2:6b:6f:bf:3b:3d:86:b4:b1:3c:fe:39:f6:df: dc:bf:f1:29:58:d6:68:78:8e:50:fb:b0:c0:b0:d9: a0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:C7:46:B0:DC:99:4D:F4:98:8D:71:24:B6:FD:F3:A5:93:45:B1:DD X509v3 Authority Key Identifier: keyid:2B:73:AA:84:37:BC:67:23:51:9D:0F:32:0B:F1:F1:70:41:41:A5:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:53:0d:55:0a:42:b6:52:19:e9:3a:97:0c:4b:68:01:2d:64: b9:48:f1:63:fc:c0:b8:61:e7:cf:43:63:41:19:df:5a:22:9e: f5:2c:4e:12:83:ce:60:3c:9a:d5:66:b0:9d:c8:c3:3b:0f:06: 75:db:72:ec:8c:c7:d1:ca:f2:ea:f6:7b:bc:55:42:92:56:ce: 51:34:eb:a0:34:2b:e4:62:66:da:b8:09:be:50:38:e3:16:65: fc:ea:bb:81:79:b8:74:bd:0d:b4:0d:62:d7:3f:1d:ab:4b:05: d8:f0:27:2e:8c:1f:f8:d3:fd:29:af:52:4a:bc:8e:64:eb:a4: 68:8d:74:2c:75:cd:b2:1d:ca:58:72:95:d8:5e:12:cb:5f:8f: c7:ee:47:4f:2b:b1:d3:62:f4:c9:85:46:71:ca:32:b2:fe:b0: 21:b7:80:7d:56:53:fc:9a:20:51:c8:03:08:8c:59:82:bf:02: d5:a8:62:1c:9c:73:05:5c:29:4f:62:52:eb:61:75:cf:23:5c: bc:d2:06:b6:b4:f1:d2:ab:db:c3:20:03:b1:99:a2:b0:21:ad: 3f:ea:de:b0:59:be:f3:1b:76:e1:56:10:51:dc:76:ab:1c:94: 5e:fd:eb:b4:5f:21:86:1f:98:ad:ad:fb:d2:7e:7c:d0:8b:15: 59:47:48:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD2b6ZL0SuvSMPj6nGhZFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNzNhYTg0MzdiYzY3MjM1MTlkMGYzMjBiZjFmMTcwNDE0 MWE1M2QwHhcNMjYwMjA5MTEwMDMxWhcNMjYwMjEwMTEwMDMxWjAzMTEwLwYDVQQD EygwMmM3NDZiMGRjOTk0ZGY0OTg4ZDcxMjRiNmZkZjNhNTkzNDViMWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKNMoIhj3bAUi1FCYXRBqor5rcOm 3v8+7O4Hk1jOsFFm5J/to2dujZU/SCxGT3lTJiR5lOZep3NZEUQguEL3nsFSI2nx orfnhaYyFS38LXdNOEpIie9QzqH047Rj2TrJNwVscXp0xWJ+ezb/rU5XwA85p8jA aARJOf7hBHDjuTzOETdNy3Gv23V5dzU8lWzNdbyvkpiaWY8McAhOTdHGfeBaVvvN hJTwif6o17q94ssypvqTFasasXCrigFTAGT1oDPnpRabf4+eP8ysYVKtgefKXEBx n8QY3vRbj+MGqnhEomtvvzs9hrSxPP459t/cv/EpWNZoeI5Q+7DAsNmg7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFALHRrDcmU30mI1xJLb986WTRbHdMB8GA1UdIwQY MBaAFCtzqoQ3vGcjUZ0PMgvx8XBBQaU9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzNPcWhEZThaeU5SblE4eUNfSHhjRUZCcFQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9iMGNhOTQtMGYxYi00ODhmLTk3MjMt NTIxZmNlNmI2NGQ5LzEvSzNPcWhEZThaeU5SblE4eUNfSHhjRUZCcFQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9iMGNhOTQtMGYxYi00ODhmLTk3MjMtNTIxZmNlNmI2NGQ5 LzEvSzNPcWhEZThaeU5SblE4eUNfSHhjRUZCcFQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsVMNVQpC tlIZ6TqXDEtoAS1kuUjxY/zAuGHnz0NjQRnfWiKe9SxOEoPOYDya1WawncjDOw8G ddty7IzH0cry6vZ7vFVCklbOUTTroDQr5GJm2rgJvlA44xZl/Oq7gXm4dL0NtA1i 1z8dq0sF2PAnLowf+NP9Ka9SSryOZOukaI10LHXNsh3KWHKV2F4Sy1+Px+5HTyux 02L0yYVGccoysv6wIbeAfVZT/JogUcgDCIxZgr8C1ahiHJxzBVwpT2JS62F1zyNc vNIGtrTx0qvbwyADsZmisCGtP+resFm+8xt24VYQUdx2qxyUXv3rtF8hhh+Yra37 0n580IsVWUdIJg== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:17 2026 by rpki-client