This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft File: kFFjeaBC33RF5C77NkbR8lpn1QQ.mft (raw, json) Hash identifier: zHE12zL0Sq3RTOi5KRAar0bk3XKfjcqfRLePWZSkXBo= Subject key identifier: 4C:3E:39:EB:32:57:01:31:55:48:B5:28:06:BA:54:32:48:39:DB:B7 Authority key identifier: 90:51:63:79:A0:42:DF:74:45:E4:2E:FB:36:46:D1:F2:5A:67:D5:04 Certificate issuer: /CN=90516379a042df7445e42efb3646d1f25a67d504 Certificate serial: 019C420F2C725680D8E48A7A365FCA8908A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFFjeaBC33RF5C77NkbR8lpn1QQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 11:00:16 +0000 Manifest this update: Mon 09 Feb 2026 11:00:16 +0000 Manifest next update: Tue 10 Feb 2026 11:00:16 +0000 Files and hashes: 1: IB47LcL5EYCAXhYGlZmz2Yqr9cw.roa (hash: JbEdz7DRUOFf0b29xjdSZVDAgz011LT+vbXjqHH3Ipg=) 2: kFFjeaBC33RF5C77NkbR8lpn1QQ.crl (hash: YCiTImm8DO3u241UUJ1JRtAP8rCUXf0e5Jsz+PQx3TM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft rsync://rpki.ripe.net/repository/DEFAULT/kFFjeaBC33RF5C77NkbR8lpn1QQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:2c:72:56:80:d8:e4:8a:7a:36:5f:ca:89:08:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90516379a042df7445e42efb3646d1f25a67d504 Validity Not Before: Feb 9 11:00:16 2026 GMT Not After : Feb 10 11:00:16 2026 GMT Subject: CN=4c3e39eb325701315548b52806ba54324839dbb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9a:75:32:3a:58:ce:d9:4a:36:2a:53:44:67: e8:7c:e9:50:6f:ba:dc:50:be:7f:31:63:11:19:6c: 91:0f:04:bc:79:28:cf:2c:27:00:7c:9c:e3:4b:79: 27:53:25:55:af:ed:3d:8d:d4:81:b9:bc:8b:02:c2: d2:a6:21:53:d6:89:18:0c:2e:a6:9e:b9:c3:83:44: 6d:c1:4c:43:8d:25:30:8c:cc:e8:06:bc:01:4a:11: 58:ba:0d:73:92:ca:d4:c7:32:a2:5a:10:11:d4:c3: 03:c8:64:3b:5f:86:f6:8e:4f:92:37:81:5d:eb:ab: 0f:2a:0a:44:b0:b1:2a:03:6c:39:79:12:1b:17:00: 89:bd:f4:bb:c6:7a:10:b1:36:38:6d:7c:20:02:a3: 61:5e:67:89:01:af:03:2d:c8:14:61:e1:3c:01:64: 62:32:bb:53:c1:fc:9d:f5:f2:bc:3a:b6:00:03:ee: dd:1f:a6:81:18:a5:28:0f:17:91:f8:c5:c2:cc:7f: 2c:7a:39:9a:39:21:31:f0:e7:1d:71:c3:78:7e:d5: 9d:22:93:52:c5:ec:38:7a:82:51:2a:62:73:85:ae: 23:62:3b:d5:15:28:8b:98:b1:d4:b0:92:e8:0a:50: 02:f8:d6:a1:72:42:81:0b:da:12:9b:37:a5:ec:fe: 45:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:3E:39:EB:32:57:01:31:55:48:B5:28:06:BA:54:32:48:39:DB:B7 X509v3 Authority Key Identifier: keyid:90:51:63:79:A0:42:DF:74:45:E4:2E:FB:36:46:D1:F2:5A:67:D5:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFFjeaBC33RF5C77NkbR8lpn1QQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:c4:17:ed:ac:64:e8:3b:f4:1b:47:40:21:a1:10:72:46:dd: 82:2f:84:83:5e:cf:3e:81:d8:48:37:76:0d:7f:81:fa:ff:8e: 37:b2:80:10:0c:dc:43:f1:54:33:5e:1f:79:97:e9:b7:f5:9f: 3c:8e:8e:77:36:27:cb:5e:03:da:03:ab:a4:5f:b2:19:f8:5b: 64:50:13:29:39:eb:4a:5d:44:0d:df:c2:f9:8f:36:f4:78:85: c8:ac:b2:35:7e:dc:3c:40:dc:fe:8f:4d:20:5e:57:c1:5a:42: 3b:3e:27:57:90:2f:26:7c:84:83:38:ad:9c:db:ae:35:04:a3: 68:97:23:97:4c:da:b7:31:76:5f:a5:fb:ee:a6:10:fa:07:d3: ed:81:55:a3:aa:aa:f3:91:25:14:9a:f1:a8:87:e2:75:ed:6f: 8d:cd:b9:f9:4a:46:9d:67:29:0e:8e:ab:b5:49:9d:be:e1:65: b4:f0:8a:4d:80:53:6c:79:9a:9a:ac:80:10:b8:d6:3b:31:dd: 3a:bf:cd:9d:89:8a:29:80:bf:91:8f:32:8d:7c:f5:20:eb:ed: 9c:1c:b7:94:61:ab:c7:09:84:5a:66:46:b9:ef:e3:0e:85:38: 9a:36:ae:23:03:0a:1f:c8:62:35:20:8e:37:da:aa:8a:96:0d: f3:8a:24:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCDyxyVoDY5Ip6Nl/KiQimMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwNTE2Mzc5YTA0MmRmNzQ0NWU0MmVmYjM2NDZkMWYyNWE2 N2Q1MDQwHhcNMjYwMjA5MTEwMDE2WhcNMjYwMjEwMTEwMDE2WjAzMTEwLwYDVQQD Eyg0YzNlMzllYjMyNTcwMTMxNTU0OGI1MjgwNmJhNTQzMjQ4MzlkYmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJp1MjpYztlKNipTRGfofOlQb7rc UL5/MWMRGWyRDwS8eSjPLCcAfJzjS3knUyVVr+09jdSBubyLAsLSpiFT1okYDC6m nrnDg0RtwUxDjSUwjMzoBrwBShFYug1zksrUxzKiWhAR1MMDyGQ7X4b2jk+SN4Fd 66sPKgpEsLEqA2w5eRIbFwCJvfS7xnoQsTY4bXwgAqNhXmeJAa8DLcgUYeE8AWRi MrtTwfyd9fK8OrYAA+7dH6aBGKUoDxeR+MXCzH8sejmaOSEx8OcdccN4ftWdIpNS xew4eoJRKmJzha4jYjvVFSiLmLHUsJLoClAC+NahckKBC9oSmzel7P5FqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEw+OesyVwExVUi1KAa6VDJIOdu3MB8GA1UdIwQY MBaAFJBRY3mgQt90ReQu+zZG0fJaZ9UEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0ZGamVhQkMzM1JGNUM3N05rYlI4bHBuMVFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9hNWQ5OGYtZmE3ZS00MDFmLTgwOGYt NDRhOTFiYTE3YjA4LzEva0ZGamVhQkMzM1JGNUM3N05rYlI4bHBuMVFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9hNWQ5OGYtZmE3ZS00MDFmLTgwOGYtNDRhOTFiYTE3YjA4 LzEva0ZGamVhQkMzM1JGNUM3N05rYlI4bHBuMVFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANcQX7axk 6Dv0G0dAIaEQckbdgi+Eg17PPoHYSDd2DX+B+v+ON7KAEAzcQ/FUM14feZfpt/Wf PI6OdzYny14D2gOrpF+yGfhbZFATKTnrSl1EDd/C+Y829HiFyKyyNX7cPEDc/o9N IF5XwVpCOz4nV5AvJnyEgzitnNuuNQSjaJcjl0zatzF2X6X77qYQ+gfT7YFVo6qq 85ElFJrxqIfide1vjc25+UpGnWcpDo6rtUmdvuFltPCKTYBTbHmamqyAELjWOzHd Or/NnYmKKYC/kY8yjXz1IOvtnBy3lGGrxwmEWmZGue/jDoU4mjauIwMKH8hiNSCO N9qqipYN84okJA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:24 2026 by rpki-client