This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.mft File: KfzfdinE4A6QbxQ19EndEJ9BC2w.mft (raw, json) Hash identifier: 2eitabU4cYWzYpHSTBo92xBA08bhaVbM/qTba7u3f9A= Subject key identifier: 1B:F9:8D:9B:58:A0:31:10:6B:1E:05:99:9D:73:1D:AF:1A:15:1D:1A Authority key identifier: 29:FC:DF:76:29:C4:E0:0E:90:6F:14:35:F4:49:DD:10:9F:41:0B:6C Certificate issuer: /CN=29fcdf7629c4e00e906f1435f449dd109f410b6c Certificate serial: 019C4390A2C7276FA14B482796459A938DE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfzfdinE4A6QbxQ19EndEJ9BC2w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.mft Manifest number: 14EE Signing time: Mon 09 Feb 2026 18:01:18 +0000 Manifest this update: Mon 09 Feb 2026 18:01:18 +0000 Manifest next update: Tue 10 Feb 2026 18:01:18 +0000 Files and hashes: 1: E8wnMkiSbVSzBboh28_7QoxLc2I.roa (hash: zCR5rbo9HIv2yKajw50w0oXIYg6lZF+5ym6K0CZI1dU=) 2: KfzfdinE4A6QbxQ19EndEJ9BC2w.crl (hash: SQQoZfd7v6kMxRnbqQAJFt6pBijaG0fEyBoafvrzv6I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.mft rsync://rpki.ripe.net/repository/DEFAULT/KfzfdinE4A6QbxQ19EndEJ9BC2w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:a2:c7:27:6f:a1:4b:48:27:96:45:9a:93:8d:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29fcdf7629c4e00e906f1435f449dd109f410b6c Validity Not Before: Feb 9 18:01:18 2026 GMT Not After : Feb 10 18:01:18 2026 GMT Subject: CN=1bf98d9b58a031106b1e05999d731daf1a151d1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:01:63:2f:0d:91:20:1a:83:18:03:3b:27:49: e1:71:08:06:1e:bd:45:44:bb:ba:6d:a6:48:8c:71: 24:b8:1a:11:ba:60:10:50:67:b8:d5:94:31:da:d9: 8e:c2:1f:70:7d:7a:23:73:16:bc:b4:01:54:ce:9c: 8a:35:11:89:86:86:fd:86:af:3c:87:34:73:fa:1b: fe:bf:a6:51:7a:4c:69:d0:d1:c6:12:19:36:ba:af: 38:b1:2b:f6:9c:ba:c4:b7:29:88:25:68:5e:e4:1c: e1:b8:78:5a:35:4d:a3:9a:49:42:4c:db:0e:f1:8b: fa:90:b0:b8:50:81:e9:e1:f1:3f:9a:88:37:f5:19: 09:e3:e3:81:db:95:59:75:e0:dc:e2:cf:b6:05:5c: ed:91:2c:d6:9e:ec:78:b3:be:de:88:89:0a:75:dd: fd:cc:26:03:9c:33:bc:dc:3c:0d:e0:dd:af:96:2b: ba:ed:54:a9:10:ad:cf:43:60:f6:02:15:b2:c0:7b: 08:43:18:f5:6a:6d:94:46:f9:cf:99:cd:cd:09:79: 91:1e:35:1d:40:ab:a4:07:77:38:66:63:bb:c6:e0: c5:64:80:a5:13:d1:46:62:f7:40:1d:d7:48:e2:e0: c7:52:dd:8a:bc:a0:11:47:ee:27:7d:5a:ab:de:ff: 7b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:F9:8D:9B:58:A0:31:10:6B:1E:05:99:9D:73:1D:AF:1A:15:1D:1A X509v3 Authority Key Identifier: keyid:29:FC:DF:76:29:C4:E0:0E:90:6F:14:35:F4:49:DD:10:9F:41:0B:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfzfdinE4A6QbxQ19EndEJ9BC2w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:2a:80:1d:c7:5c:f2:cd:bf:4b:40:8d:ad:fb:a7:c9:20:bc: eb:92:10:59:91:51:ee:a0:12:63:c2:8f:5c:bf:c8:0a:ac:05: b0:51:6d:51:f5:e5:13:37:e2:75:0d:90:30:40:e5:da:54:43: ef:65:de:f6:48:3a:1e:04:82:54:e8:b5:cb:d1:1f:35:54:0c: 1d:75:28:eb:64:76:28:4e:86:0b:73:bd:00:f6:50:03:02:83: 43:be:05:ba:c7:dd:bc:17:6d:ea:ef:a2:7c:02:30:84:17:0d: e8:98:ba:65:ea:7f:ad:ff:a1:fb:c1:10:c4:1e:c5:71:a2:89: c9:aa:37:1b:d5:0b:73:ad:ea:5c:c1:2f:88:f5:f7:d1:b7:b8: 3e:73:e1:b3:11:a1:9b:d9:ea:95:fa:bf:79:5e:86:db:52:57: ea:28:0e:5f:db:67:24:45:1b:92:18:73:5f:01:70:c0:d2:4d: 30:b1:16:46:9a:b1:25:5c:e7:e4:66:17:05:74:e3:69:24:74: 35:2b:cc:f5:b6:22:a2:48:4d:26:ba:d5:8a:ac:e7:d1:c6:81: c8:64:eb:f3:bd:5d:d0:e4:d0:71:2d:8d:a3:48:87:e9:32:aa: 27:7b:4c:20:52:24:22:a3:bd:a4:8e:bc:df:cf:b5:b5:83:ec: 77:0d:8a:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkKLHJ2+hS0gnlkWak43jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZmNkZjc2MjljNGUwMGU5MDZmMTQzNWY0NDlkZDEwOWY0 MTBiNmMwHhcNMjYwMjA5MTgwMTE4WhcNMjYwMjEwMTgwMTE4WjAzMTEwLwYDVQQD EygxYmY5OGQ5YjU4YTAzMTEwNmIxZTA1OTk5ZDczMWRhZjFhMTUxZDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgFjLw2RIBqDGAM7J0nhcQgGHr1F RLu6baZIjHEkuBoRumAQUGe41ZQx2tmOwh9wfXojcxa8tAFUzpyKNRGJhob9hq88 hzRz+hv+v6ZRekxp0NHGEhk2uq84sSv2nLrEtymIJWhe5BzhuHhaNU2jmklCTNsO 8Yv6kLC4UIHp4fE/mog39RkJ4+OB25VZdeDc4s+2BVztkSzWnux4s77eiIkKdd39 zCYDnDO83DwN4N2vliu67VSpEK3PQ2D2AhWywHsIQxj1am2URvnPmc3NCXmRHjUd QKukB3c4ZmO7xuDFZIClE9FGYvdAHddI4uDHUt2KvKARR+4nfVqr3v97FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBv5jZtYoDEQax4FmZ1zHa8aFR0aMB8GA1UdIwQY MBaAFCn833YpxOAOkG8UNfRJ3RCfQQtsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2Z6ZmRpbkU0QTZRYnhRMTlFbmRFSjlCQzJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9kNDdiZTgtMmZmMC00YzkzLWI5MTIt OTA1ZTc2M2YwNDhkLzEvS2Z6ZmRpbkU0QTZRYnhRMTlFbmRFSjlCQzJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9kNDdiZTgtMmZmMC00YzkzLWI5MTItOTA1ZTc2M2YwNDhk LzEvS2Z6ZmRpbkU0QTZRYnhRMTlFbmRFSjlCQzJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQCqAHcdc 8s2/S0CNrfunySC865IQWZFR7qASY8KPXL/ICqwFsFFtUfXlEzfidQ2QMEDl2lRD 72Xe9kg6HgSCVOi1y9EfNVQMHXUo62R2KE6GC3O9APZQAwKDQ74FusfdvBdt6u+i fAIwhBcN6Ji6Zep/rf+h+8EQxB7FcaKJyao3G9ULc63qXMEviPX30be4PnPhsxGh m9nqlfq/eV6G21JX6igOX9tnJEUbkhhzXwFwwNJNMLEWRpqxJVzn5GYXBXTjaSR0 NSvM9bYiokhNJrrViqzn0caByGTr871d0OTQcS2No0iH6TKqJ3tMIFIkIqO9pI68 38+1tYPsdw2KQg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:15 2026 by rpki-client