This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.mft File: k4KIfhkEky8RhsLDHGqS_17GQ4c.mft (raw, json) Hash identifier: tJKrFMGU9J8eT5RgfpYTcaLdI3bq83rQ1aZQRD1glO0= Subject key identifier: 03:51:D8:C7:89:A5:37:42:61:49:81:BF:D5:FD:0D:D2:73:C0:EA:1C Authority key identifier: 93:82:88:7E:19:04:93:2F:11:86:C2:C3:1C:6A:92:FF:5E:C6:43:87 Certificate issuer: /CN=9382887e1904932f1186c2c31c6a92ff5ec64387 Certificate serial: 019C4321CF866E1763729D2B3F29E9E9A379 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4KIfhkEky8RhsLDHGqS_17GQ4c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.mft Manifest number: 053F Signing time: Mon 09 Feb 2026 16:00:15 +0000 Manifest this update: Mon 09 Feb 2026 16:00:15 +0000 Manifest next update: Tue 10 Feb 2026 16:00:15 +0000 Files and hashes: 1: k4KIfhkEky8RhsLDHGqS_17GQ4c.crl (hash: KLt4VzSREaLulUImAOQVHW2cbAC9y+3cm8FO8Cr74eY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.mft rsync://rpki.ripe.net/repository/DEFAULT/k4KIfhkEky8RhsLDHGqS_17GQ4c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:cf:86:6e:17:63:72:9d:2b:3f:29:e9:e9:a3:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9382887e1904932f1186c2c31c6a92ff5ec64387 Validity Not Before: Feb 9 16:00:15 2026 GMT Not After : Feb 10 16:00:15 2026 GMT Subject: CN=0351d8c789a53742614981bfd5fd0dd273c0ea1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:9f:d5:ee:24:80:dc:e5:8c:96:35:76:cd:80: 42:ae:12:cd:c9:42:e4:10:5d:48:df:ff:b2:35:39: 15:97:2c:23:ee:2d:d2:c6:10:e5:5b:1d:f8:9c:fa: b5:0b:48:d5:b4:7b:29:f2:b4:23:a9:68:9e:79:06: 42:9b:ea:89:07:b8:b8:b2:49:f8:a6:f2:ab:74:90: 43:a8:db:af:da:a5:d3:e6:86:43:7f:5a:04:c1:6b: 48:89:9f:d6:f8:55:33:2d:33:36:e1:52:07:b5:a5: d7:14:86:36:86:2c:26:15:d6:c8:b9:1a:27:f4:98: 68:f6:fc:16:90:76:27:6e:8b:c9:80:07:43:48:20: 1a:76:2c:46:c8:f5:64:bc:65:08:ef:d2:b7:73:d5: 1a:e7:9a:44:a5:f6:7d:51:b3:99:eb:c0:e0:7d:40: 1e:a9:f1:93:cc:4e:22:81:f6:83:cd:59:21:d5:1f: fd:2e:79:5b:29:dd:07:88:78:16:e3:4a:0e:f5:6f: 82:e5:7b:53:20:a3:5e:e3:4a:c6:b0:f3:3b:fe:79: ce:e9:08:dc:5c:b9:33:4f:eb:a1:30:bc:6e:53:87: bb:9e:56:b1:73:53:24:f8:fb:7f:4f:1f:3c:6d:8f: af:68:de:da:8a:c2:11:a4:dd:7c:3a:05:2d:85:2e: cc:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:51:D8:C7:89:A5:37:42:61:49:81:BF:D5:FD:0D:D2:73:C0:EA:1C X509v3 Authority Key Identifier: keyid:93:82:88:7E:19:04:93:2F:11:86:C2:C3:1C:6A:92:FF:5E:C6:43:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4KIfhkEky8RhsLDHGqS_17GQ4c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:00:7b:86:38:a5:4b:d3:6f:f2:bd:9a:94:5d:90:ac:08:cd: 2c:80:25:b2:96:18:7c:6b:6d:de:fc:67:ad:28:36:a5:de:af: 8d:dd:55:3d:51:11:db:e2:a6:a5:ee:d9:45:a3:18:26:59:a7: 6e:91:7b:fe:3c:ea:62:04:23:79:a5:df:62:5c:e3:6e:4a:cb: 27:8a:15:5f:49:8c:fe:95:3f:29:b1:ee:b5:c7:40:c2:57:50: c6:4c:25:86:2c:56:77:e7:9d:96:1e:d1:ce:ad:2a:95:96:81: 6f:8c:4c:85:02:55:55:d0:a9:11:3c:e0:a3:36:d6:51:78:6e: 46:5b:a1:2b:37:4a:b9:56:bc:1b:5f:54:c5:ab:e8:95:aa:f4: 4f:20:2d:14:76:42:79:2e:d0:c2:2f:a2:72:7d:aa:20:6a:df: f9:a6:6e:c8:95:6a:7e:35:d1:e0:73:0b:f2:82:03:82:b8:cf: 3e:8e:9e:09:f5:b9:61:12:a3:71:fb:47:81:45:30:27:49:f9: b7:7b:4d:0a:3a:eb:f8:ce:74:c6:6c:ab:87:9f:bb:11:23:ae: 71:9c:8e:90:85:4b:9d:0b:39:f3:a8:43:8c:ed:5b:02:08:9b: c1:53:20:40:b8:05:a0:0d:24:bb:4a:cc:a7:46:2e:3e:7f:df: 83:f6:ac:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIc+Gbhdjcp0rPynp6aN5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzODI4ODdlMTkwNDkzMmYxMTg2YzJjMzFjNmE5MmZmNWVj NjQzODcwHhcNMjYwMjA5MTYwMDE1WhcNMjYwMjEwMTYwMDE1WjAzMTEwLwYDVQQD EygwMzUxZDhjNzg5YTUzNzQyNjE0OTgxYmZkNWZkMGRkMjczYzBlYTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5/V7iSA3OWMljV2zYBCrhLNyULk EF1I3/+yNTkVlywj7i3SxhDlWx34nPq1C0jVtHsp8rQjqWieeQZCm+qJB7i4skn4 pvKrdJBDqNuv2qXT5oZDf1oEwWtIiZ/W+FUzLTM24VIHtaXXFIY2hiwmFdbIuRon 9Jho9vwWkHYnbovJgAdDSCAadixGyPVkvGUI79K3c9Ua55pEpfZ9UbOZ68DgfUAe qfGTzE4igfaDzVkh1R/9LnlbKd0HiHgW40oO9W+C5XtTIKNe40rGsPM7/nnO6Qjc XLkzT+uhMLxuU4e7nlaxc1Mk+Pt/Tx88bY+vaN7aisIRpN18OgUthS7MBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFANR2MeJpTdCYUmBv9X9DdJzwOocMB8GA1UdIwQY MBaAFJOCiH4ZBJMvEYbCwxxqkv9exkOHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazRLSWZoa0VreThSaHNMREhHcVNfMTdHUTRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9iZjkwZWItMTVjOC00MGQ4LWEyMjAt NWM5NDU0NjhjNDc1LzEvazRLSWZoa0VreThSaHNMREhHcVNfMTdHUTRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9iZjkwZWItMTVjOC00MGQ4LWEyMjAtNWM5NDU0NjhjNDc1 LzEvazRLSWZoa0VreThSaHNMREhHcVNfMTdHUTRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQgB7hjil S9Nv8r2alF2QrAjNLIAlspYYfGtt3vxnrSg2pd6vjd1VPVER2+Kmpe7ZRaMYJlmn bpF7/jzqYgQjeaXfYlzjbkrLJ4oVX0mM/pU/KbHutcdAwldQxkwlhixWd+edlh7R zq0qlZaBb4xMhQJVVdCpETzgozbWUXhuRluhKzdKuVa8G19Uxavolar0TyAtFHZC eS7Qwi+icn2qIGrf+aZuyJVqfjXR4HML8oIDgrjPPo6eCfW5YRKjcftHgUUwJ0n5 t3tNCjrr+M50xmyrh5+7ESOucZyOkIVLnQs586hDjO1bAgibwVMgQLgFoA0ku0rM p0YuPn/fg/aseA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:30 2026 by rpki-client