This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft File: KkVY4mVr-JczOJWU3xRNIdHcAxM.mft (raw, json) Hash identifier: g4CtWCusIaEDxcqcTpOYTdKEPYoDVzmNqm9whiRQN88= Subject key identifier: 52:49:DD:B9:34:73:93:47:BA:50:29:22:BE:3A:92:8C:A9:93:90:C3 Authority key identifier: 2A:45:58:E2:65:6B:F8:97:33:38:95:94:DF:14:4D:21:D1:DC:03:13 Certificate issuer: /CN=2a4558e2656bf89733389594df144d21d1dc0313 Certificate serial: 019C42EB0091606CBF80D9142CE1546EAB1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KkVY4mVr-JczOJWU3xRNIdHcAxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft Manifest number: 07A9 Signing time: Mon 09 Feb 2026 15:00:23 +0000 Manifest this update: Mon 09 Feb 2026 15:00:23 +0000 Manifest next update: Tue 10 Feb 2026 15:00:23 +0000 Files and hashes: 1: KkVY4mVr-JczOJWU3xRNIdHcAxM.crl (hash: 84IkuIn4QRgUD3K9pELOsdEPoKHEWoRWarDCJhnFjTI=) 2: RVZM-kFR80ko6aXVrtr5bZIVB6E.roa (hash: U18fR6M6ECujVh8EJIN+7p0bRY+B368ox20l60Irpyo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft rsync://rpki.ripe.net/repository/DEFAULT/KkVY4mVr-JczOJWU3xRNIdHcAxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:00:91:60:6c:bf:80:d9:14:2c:e1:54:6e:ab:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a4558e2656bf89733389594df144d21d1dc0313 Validity Not Before: Feb 9 15:00:23 2026 GMT Not After : Feb 10 15:00:23 2026 GMT Subject: CN=5249ddb934739347ba502922be3a928ca99390c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b8:3b:2f:eb:05:ba:cd:ce:2f:71:f9:85:e6: 03:a1:62:e4:a3:be:b2:58:6c:94:31:76:52:e7:83: da:2f:57:b9:96:ae:f7:53:82:56:09:03:4a:95:af: a1:2f:08:86:c9:cd:89:91:70:3b:1d:b2:85:ad:a2: 20:21:ab:39:d9:ce:13:26:e1:0c:fe:e3:3a:c3:5d: 43:67:cc:d2:ad:5b:b6:f6:b1:e2:d1:96:5f:1e:a5: b9:76:68:e2:7d:90:ba:f2:ca:50:4c:c7:14:18:6a: 5d:af:85:fa:de:dd:72:6b:1f:42:01:69:48:24:e4: 66:e5:99:7b:60:1f:d4:09:cf:25:51:15:41:d9:81: 8e:6e:87:d0:94:46:cb:77:f1:18:b7:81:76:e9:68: b3:be:0d:10:a5:c3:68:00:60:61:c8:22:d8:7b:8f: 97:18:8f:f5:dd:23:35:ca:07:fe:44:65:d3:7e:33: 20:ab:92:c8:67:80:f1:db:1e:61:78:95:be:28:08: 0f:16:69:d1:5f:b1:38:ec:f9:df:df:04:71:9d:57: ad:13:88:85:fe:cd:da:8c:86:23:3f:d8:90:bf:06: 90:35:31:5e:0e:7e:8b:3c:27:d5:38:d2:28:79:60: a8:f4:44:3e:1a:de:fd:e4:73:1f:be:be:e2:fc:cb: 89:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:49:DD:B9:34:73:93:47:BA:50:29:22:BE:3A:92:8C:A9:93:90:C3 X509v3 Authority Key Identifier: keyid:2A:45:58:E2:65:6B:F8:97:33:38:95:94:DF:14:4D:21:D1:DC:03:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KkVY4mVr-JczOJWU3xRNIdHcAxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:86:2c:76:8f:c1:69:7b:98:f0:2f:92:0c:a0:ae:fe:00:f4: 4c:2c:78:64:31:cf:ba:4d:4c:03:2a:95:7f:a2:06:ec:d5:ad: 36:39:2e:72:6a:ed:9c:2a:1a:12:d1:44:0a:a4:4d:6e:9a:ff: d9:90:82:1e:a6:31:f8:9f:3a:4c:83:eb:ca:30:3f:df:f6:7d: 23:0c:2c:42:96:f5:72:8c:7b:96:8f:35:df:1a:e3:3d:e9:6c: a3:2a:52:4c:e8:2a:89:80:fb:70:62:e6:8a:50:9e:4b:3f:c3: 59:dc:73:1f:07:09:61:32:21:25:3e:03:6c:a3:bb:5a:79:43: 01:05:c1:b2:9e:8d:85:f9:b4:1c:b5:27:34:78:9f:cc:2a:4c: 36:8c:cd:86:3f:fb:0a:b3:03:0c:21:f5:27:56:67:33:15:a3: 9c:bd:df:c0:66:47:c3:10:40:fd:d8:c5:e2:fa:f8:14:99:35: 4c:01:06:d9:f8:2c:26:d7:99:27:26:e0:61:f3:b0:8e:b7:4d: bd:98:51:dd:a6:9c:de:39:f1:8c:df:91:0b:58:07:e0:9a:c4: 96:e3:0b:83:16:c0:73:4b:62:b5:43:05:e5:ba:8e:1c:cc:d8: f8:11:a0:91:95:35:cc:ca:73:59:c0:36:e8:2a:a7:ba:d4:d0: 42:88:3d:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6wCRYGy/gNkULOFUbqsfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhNDU1OGUyNjU2YmY4OTczMzM4OTU5NGRmMTQ0ZDIxZDFk YzAzMTMwHhcNMjYwMjA5MTUwMDIzWhcNMjYwMjEwMTUwMDIzWjAzMTEwLwYDVQQD Eyg1MjQ5ZGRiOTM0NzM5MzQ3YmE1MDI5MjJiZTNhOTI4Y2E5OTM5MGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7g7L+sFus3OL3H5heYDoWLko76y WGyUMXZS54PaL1e5lq73U4JWCQNKla+hLwiGyc2JkXA7HbKFraIgIas52c4TJuEM /uM6w11DZ8zSrVu29rHi0ZZfHqW5dmjifZC68spQTMcUGGpdr4X63t1yax9CAWlI JORm5Zl7YB/UCc8lURVB2YGObofQlEbLd/EYt4F26Wizvg0QpcNoAGBhyCLYe4+X GI/13SM1ygf+RGXTfjMgq5LIZ4Dx2x5heJW+KAgPFmnRX7E47Pnf3wRxnVetE4iF /s3ajIYjP9iQvwaQNTFeDn6LPCfVONIoeWCo9EQ+Gt795HMfvr7i/MuJ1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFJJ3bk0c5NHulApIr46koypk5DDMB8GA1UdIwQY MBaAFCpFWOJla/iXMziVlN8UTSHR3AMTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2tWWTRtVnItSmN6T0pXVTN4Uk5JZEhjQXhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9kNWMzOGYtNGZjMy00MjgzLTljMzkt OTA1NTI4M2YwZWFlLzEvS2tWWTRtVnItSmN6T0pXVTN4Uk5JZEhjQXhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9kNWMzOGYtNGZjMy00MjgzLTljMzktOTA1NTI4M2YwZWFl LzEvS2tWWTRtVnItSmN6T0pXVTN4Uk5JZEhjQXhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlYYsdo/B aXuY8C+SDKCu/gD0TCx4ZDHPuk1MAyqVf6IG7NWtNjkucmrtnCoaEtFECqRNbpr/ 2ZCCHqYx+J86TIPryjA/3/Z9IwwsQpb1cox7lo813xrjPelsoypSTOgqiYD7cGLm ilCeSz/DWdxzHwcJYTIhJT4DbKO7WnlDAQXBsp6Nhfm0HLUnNHifzCpMNozNhj/7 CrMDDCH1J1ZnMxWjnL3fwGZHwxBA/djF4vr4FJk1TAEG2fgsJteZJybgYfOwjrdN vZhR3aac3jnxjN+RC1gH4JrEluMLgxbAc0titUMF5bqOHMzY+BGgkZU1zMpzWcA2 6CqnutTQQog9eQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:20 2026 by rpki-client