This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.mft File: Kksu12XR1HipbYLxJgEen7dS_Ic.mft (raw, json) Hash identifier: GgWK3tLqjJN1Uh05kKg9TDRHOGhiKezilagAgcXkhqY= Subject key identifier: 96:E4:3D:46:2B:2A:13:6D:E8:7A:85:64:EB:29:3E:01:97:7A:CA:61 Authority key identifier: 2A:4B:2E:D7:65:D1:D4:78:A9:6D:82:F1:26:01:1E:9F:B7:52:FC:87 Certificate issuer: /CN=2a4b2ed765d1d478a96d82f126011e9fb752fc87 Certificate serial: 019C420FA9BDA275A45CD65507B9D2934B6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kksu12XR1HipbYLxJgEen7dS_Ic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.mft Manifest number: 180B Signing time: Mon 09 Feb 2026 11:00:48 +0000 Manifest this update: Mon 09 Feb 2026 11:00:48 +0000 Manifest next update: Tue 10 Feb 2026 11:00:48 +0000 Files and hashes: 1: Kksu12XR1HipbYLxJgEen7dS_Ic.crl (hash: Hm8tvZVAhYkVF14OOcC6IMkz38V7cphOxdOQltfQwL0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.mft rsync://rpki.ripe.net/repository/DEFAULT/Kksu12XR1HipbYLxJgEen7dS_Ic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:a9:bd:a2:75:a4:5c:d6:55:07:b9:d2:93:4b:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a4b2ed765d1d478a96d82f126011e9fb752fc87 Validity Not Before: Feb 9 11:00:48 2026 GMT Not After : Feb 10 11:00:48 2026 GMT Subject: CN=96e43d462b2a136de87a8564eb293e01977aca61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bf:75:84:10:84:61:5d:07:63:23:7c:60:da: c7:fc:bb:7c:10:67:a0:90:f8:dd:f0:f5:85:17:80: 99:e8:0c:4d:70:b6:d7:b8:e4:d7:e9:d0:24:8e:0b: 1f:9b:00:9b:9f:0c:15:81:fa:3f:1e:d8:94:88:6a: 62:85:2a:d7:1f:61:18:99:9b:34:3a:2d:73:a8:73: 31:d2:b9:df:a9:fe:1c:bc:5a:cb:df:c1:47:52:67: 2b:de:a5:dc:ba:eb:b7:d1:70:40:d4:ed:30:ca:9a: 7e:e2:c7:90:b9:95:12:f1:16:7a:e2:0b:de:82:b7: 69:64:fe:18:0c:2d:1f:61:85:ab:d0:76:7b:49:f1: 62:40:38:4a:fd:e4:a3:87:f9:82:af:a6:cc:b0:79: 1a:ac:9f:59:e8:65:9b:e3:a6:79:30:76:d6:f6:f7: 79:67:cf:bb:b7:94:b0:92:9c:ee:f1:47:80:51:1f: dc:ae:d2:4c:ae:4d:79:a9:a0:40:f8:c9:90:4d:da: 49:79:bc:e4:e4:97:63:cd:4e:20:e3:07:06:c4:8a: 97:50:3c:02:16:a0:66:f6:4b:a2:74:ac:0a:44:6e: ae:29:8e:46:56:66:b6:c1:50:02:55:88:f5:6a:90: 7d:8c:c8:e3:08:0c:7f:52:a2:74:d6:72:be:32:54: 6e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E4:3D:46:2B:2A:13:6D:E8:7A:85:64:EB:29:3E:01:97:7A:CA:61 X509v3 Authority Key Identifier: keyid:2A:4B:2E:D7:65:D1:D4:78:A9:6D:82:F1:26:01:1E:9F:B7:52:FC:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kksu12XR1HipbYLxJgEen7dS_Ic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:7b:d7:32:86:9c:2f:74:5b:47:58:b4:7e:ce:ca:00:cf:12: d3:31:da:a7:ca:8b:99:09:af:16:c7:84:c8:9a:a1:1a:c5:40: 17:44:37:bd:31:b9:89:62:3e:4f:b3:70:fd:55:b6:ac:f3:5c: d4:b8:80:09:9c:86:dd:7c:ab:01:9e:2f:cc:56:8a:aa:6b:2c: 99:b7:83:21:d6:f0:70:c0:8e:1f:62:fa:bc:0e:1d:77:64:a6: 33:3e:b7:17:88:d0:3a:e2:91:dd:28:9a:64:cb:e6:32:d3:02: ed:20:59:42:da:ee:a4:c8:ca:6b:07:f0:21:59:eb:07:cb:2d: a4:2d:4f:63:31:be:19:e9:c9:16:1e:fa:1c:47:08:5b:ca:8c: 39:c4:23:ea:ac:af:61:26:28:7a:d5:26:34:23:5d:be:98:e7: 41:20:87:f2:13:22:b6:21:51:5f:51:c1:75:0a:dd:88:02:bc: 69:27:72:4c:62:a3:08:1c:3a:ec:8b:93:a4:12:f9:1c:27:1b: 9f:00:36:fa:eb:90:c2:38:fa:7e:c3:cd:eb:f3:29:bc:9e:fb: ad:4b:a2:1a:6c:9e:60:fd:7a:b0:93:e9:8a:0f:08:71:4d:56: b8:a1:32:2a:5d:9f:03:3a:69:87:23:29:d5:ef:11:10:bb:e4: 6f:cd:6a:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD6m9onWkXNZVB7nSk0tvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhNGIyZWQ3NjVkMWQ0NzhhOTZkODJmMTI2MDExZTlmYjc1 MmZjODcwHhcNMjYwMjA5MTEwMDQ4WhcNMjYwMjEwMTEwMDQ4WjAzMTEwLwYDVQQD Eyg5NmU0M2Q0NjJiMmExMzZkZTg3YTg1NjRlYjI5M2UwMTk3N2FjYTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy791hBCEYV0HYyN8YNrH/Lt8EGeg kPjd8PWFF4CZ6AxNcLbXuOTX6dAkjgsfmwCbnwwVgfo/HtiUiGpihSrXH2EYmZs0 Oi1zqHMx0rnfqf4cvFrL38FHUmcr3qXcuuu30XBA1O0wypp+4seQuZUS8RZ64gve grdpZP4YDC0fYYWr0HZ7SfFiQDhK/eSjh/mCr6bMsHkarJ9Z6GWb46Z5MHbW9vd5 Z8+7t5Swkpzu8UeAUR/crtJMrk15qaBA+MmQTdpJebzk5JdjzU4g4wcGxIqXUDwC FqBm9kuidKwKRG6uKY5GVma2wVACVYj1apB9jMjjCAx/UqJ01nK+MlRugQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJbkPUYrKhNt6HqFZOspPgGXesphMB8GA1UdIwQY MBaAFCpLLtdl0dR4qW2C8SYBHp+3UvyHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2tzdTEyWFIxSGlwYllMeEpnRWVuN2RTX0ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC80OWUwYjItMWUyYS00MzJhLWJhMTkt MTE1OTg4ZDgxMjg5LzEvS2tzdTEyWFIxSGlwYllMeEpnRWVuN2RTX0ljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC80OWUwYjItMWUyYS00MzJhLWJhMTktMTE1OTg4ZDgxMjg5 LzEvS2tzdTEyWFIxSGlwYllMeEpnRWVuN2RTX0ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoXvXMoac L3RbR1i0fs7KAM8S0zHap8qLmQmvFseEyJqhGsVAF0Q3vTG5iWI+T7Nw/VW2rPNc 1LiACZyG3XyrAZ4vzFaKqmssmbeDIdbwcMCOH2L6vA4dd2SmMz63F4jQOuKR3Sia ZMvmMtMC7SBZQtrupMjKawfwIVnrB8stpC1PYzG+GenJFh76HEcIW8qMOcQj6qyv YSYoetUmNCNdvpjnQSCH8hMitiFRX1HBdQrdiAK8aSdyTGKjCBw67IuTpBL5HCcb nwA2+uuQwjj6fsPN6/MpvJ77rUuiGmyeYP16sJPpig8IcU1WuKEyKl2fAzpphyMp 1e8RELvkb81q7Q== -----END CERTIFICATE-----Generated at Mon Feb 9 20:06:38 2026 by rpki-client