This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.mft File: kVijd10MXrOPIPDvmjYRBhpRlbM.mft (raw, json) Hash identifier: HdcNl0iSr14a5dT2peokPp23XEPzzbHP58xPMUyQlWQ= Subject key identifier: 1E:8D:12:3E:45:66:82:EA:61:12:D5:98:45:B8:0C:8C:BB:68:5C:B9 Authority key identifier: 91:58:A3:77:5D:0C:5E:B3:8F:20:F0:EF:9A:36:11:06:1A:51:95:B3 Certificate issuer: /CN=9158a3775d0c5eb38f20f0ef9a3611061a5195b3 Certificate serial: 019C427E17863072C9C8D383A73C4E38D9DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kVijd10MXrOPIPDvmjYRBhpRlbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 13:01:25 +0000 Manifest this update: Mon 09 Feb 2026 13:01:25 +0000 Manifest next update: Tue 10 Feb 2026 13:01:25 +0000 Files and hashes: 1: kVijd10MXrOPIPDvmjYRBhpRlbM.crl (hash: 0g7EiEW/hUXMGGSV2LbETPIN2WngTK3q3/kAVaz1CtQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.mft rsync://rpki.ripe.net/repository/DEFAULT/kVijd10MXrOPIPDvmjYRBhpRlbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7e:17:86:30:72:c9:c8:d3:83:a7:3c:4e:38:d9:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9158a3775d0c5eb38f20f0ef9a3611061a5195b3 Validity Not Before: Feb 9 13:01:25 2026 GMT Not After : Feb 10 13:01:25 2026 GMT Subject: CN=1e8d123e456682ea6112d59845b80c8cbb685cb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:85:20:b6:59:31:2f:96:fe:3b:3f:c3:d9:33: 8c:76:e7:c8:bd:cc:37:d7:32:c4:b6:94:f2:15:60: 03:80:41:8b:98:c2:a4:1c:d4:a3:cd:b6:ec:bc:22: be:6c:3e:c1:18:88:9f:af:1f:71:9c:fe:97:26:69: 13:29:96:57:c3:74:3a:40:5a:8c:a9:6f:79:a8:da: 63:4a:f6:cb:24:19:cc:a8:f1:07:76:51:09:f1:f1: 1a:39:0f:02:19:e3:3d:5a:07:3b:d6:07:f5:7c:35: 62:c3:43:d5:f0:24:c5:5a:b4:aa:21:4c:79:23:e1: 9e:62:7b:81:48:90:63:a5:58:63:7d:df:16:c7:e8: 14:72:99:64:a6:6a:15:e4:ef:78:70:2e:d1:aa:d5: cc:66:50:72:8d:6a:1e:af:a6:e0:fe:fc:5f:bb:7e: 1c:9f:f3:2e:48:77:9a:6f:62:28:6a:71:b6:8c:be: a8:0a:3b:a5:3a:ac:ba:99:56:cd:6b:7a:14:38:1e: 53:dd:6b:1f:ff:cd:46:b0:b5:2f:a5:f5:b1:69:a4: ce:7f:84:12:62:d7:74:6c:19:3d:70:10:1c:f2:de: 56:66:04:e0:df:28:f4:e8:f6:b6:a2:d8:4e:54:cb: 13:91:00:72:0f:f0:9e:9c:43:b2:d9:94:2d:ac:8d: 57:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:8D:12:3E:45:66:82:EA:61:12:D5:98:45:B8:0C:8C:BB:68:5C:B9 X509v3 Authority Key Identifier: keyid:91:58:A3:77:5D:0C:5E:B3:8F:20:F0:EF:9A:36:11:06:1A:51:95:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kVijd10MXrOPIPDvmjYRBhpRlbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:89:13:95:13:22:08:0b:3b:0e:cf:6a:01:ec:fd:f9:b5:a9: 26:35:e3:aa:11:c1:2a:bf:7d:19:22:d7:4e:3c:fe:0c:cb:4b: c5:68:f2:cc:d6:6e:d9:27:8c:12:d4:e2:a1:97:0b:94:67:e2: c1:fe:d3:ac:da:66:92:9b:bb:b2:ba:64:bb:76:ab:9d:f3:c0: c2:fc:70:af:92:78:8e:4d:72:e5:04:46:9a:48:6b:54:99:d9: bf:b2:73:a4:7c:5c:34:79:a5:07:85:f0:be:fd:81:c2:14:ba: 17:96:22:06:7d:39:5d:24:d9:ec:8e:a6:6f:6a:f1:aa:2a:a9: 80:52:ff:cf:02:1e:5f:3c:9b:95:2e:d4:95:29:2e:7d:d6:e7: df:4f:39:16:55:e3:c3:67:79:32:e9:c6:11:67:72:b1:9f:3d: 27:a9:7c:61:35:97:06:00:dc:10:f8:1b:a9:63:88:cf:04:f2: 58:99:53:75:0f:f3:f8:ef:0e:59:fe:32:7a:82:95:07:58:46: f4:78:1b:82:8c:e8:7a:62:2b:8a:be:13:f1:f0:c0:df:3c:22: 56:e9:a5:0a:d8:15:25:88:f2:d4:8e:bc:e6:96:d7:a2:3a:53: b6:90:8f:4b:6f:e4:de:9c:8e:3c:12:7c:b8:9e:9c:59:5c:cd: 08:8f:6b:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfheGMHLJyNODpzxOONnfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxNThhMzc3NWQwYzVlYjM4ZjIwZjBlZjlhMzYxMTA2MWE1 MTk1YjMwHhcNMjYwMjA5MTMwMTI1WhcNMjYwMjEwMTMwMTI1WjAzMTEwLwYDVQQD EygxZThkMTIzZTQ1NjY4MmVhNjExMmQ1OTg0NWI4MGM4Y2JiNjg1Y2I5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4UgtlkxL5b+Oz/D2TOMdufIvcw3 1zLEtpTyFWADgEGLmMKkHNSjzbbsvCK+bD7BGIifrx9xnP6XJmkTKZZXw3Q6QFqM qW95qNpjSvbLJBnMqPEHdlEJ8fEaOQ8CGeM9Wgc71gf1fDViw0PV8CTFWrSqIUx5 I+GeYnuBSJBjpVhjfd8Wx+gUcplkpmoV5O94cC7RqtXMZlByjWoer6bg/vxfu34c n/MuSHeab2IoanG2jL6oCjulOqy6mVbNa3oUOB5T3Wsf/81GsLUvpfWxaaTOf4QS Ytd0bBk9cBAc8t5WZgTg3yj06Pa2othOVMsTkQByD/CenEOy2ZQtrI1XEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB6NEj5FZoLqYRLVmEW4DIy7aFy5MB8GA1UdIwQY MBaAFJFYo3ddDF6zjyDw75o2EQYaUZWzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1ZpamQxME1Yck9QSVBEdm1qWVJCaHBSbGJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC81Yzc2NWMtODNmMy00NWQxLTg5MzAt OGQwNGY4Nzc5NDIzLzEva1ZpamQxME1Yck9QSVBEdm1qWVJCaHBSbGJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC81Yzc2NWMtODNmMy00NWQxLTg5MzAtOGQwNGY4Nzc5NDIz LzEva1ZpamQxME1Yck9QSVBEdm1qWVJCaHBSbGJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKokTlRMi CAs7Ds9qAez9+bWpJjXjqhHBKr99GSLXTjz+DMtLxWjyzNZu2SeMEtTioZcLlGfi wf7TrNpmkpu7srpku3arnfPAwvxwr5J4jk1y5QRGmkhrVJnZv7JzpHxcNHmlB4Xw vv2BwhS6F5YiBn05XSTZ7I6mb2rxqiqpgFL/zwIeXzyblS7UlSkufdbn3085FlXj w2d5MunGEWdysZ89J6l8YTWXBgDcEPgbqWOIzwTyWJlTdQ/z+O8OWf4yeoKVB1hG 9HgbgozoemIrir4T8fDA3zwiVumlCtgVJYjy1I685pbXojpTtpCPS2/k3pyOPBJ8 uJ6cWVzNCI9rLQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:36 2026 by rpki-client