This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/44faa2-603b-4376-b87d-c47552549741/1/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.mft File: kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.mft (raw, json) Hash identifier: PXTo+6HnxslGIeKB4Yu9WrimRtwI9xZak1/99ATwElA= Subject key identifier: F1:D0:60:54:83:6D:D6:FE:76:AA:FA:F0:30:4E:B8:AE:74:26:8C:95 Authority key identifier: 91:D2:76:7A:A9:10:E9:57:DC:53:58:02:50:26:E6:C3:70:57:0A:2D Certificate issuer: /CN=91d2767aa910e957dc5358025026e6c370570a2d Certificate serial: 019C427D55F8BA052DB18B4EF262865F763A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/44faa2-603b-4376-b87d-c47552549741/1/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.mft Manifest number: 0231 Signing time: Mon 09 Feb 2026 13:00:36 +0000 Manifest this update: Mon 09 Feb 2026 13:00:36 +0000 Manifest next update: Tue 10 Feb 2026 13:00:36 +0000 Files and hashes: 1: kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.crl (hash: E92AxZkUUJpLqBfnI1l5DudeAnbjIYXeP/WzpM44ho0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/44faa2-603b-4376-b87d-c47552549741/1/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/44faa2-603b-4376-b87d-c47552549741/1/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.mft rsync://rpki.ripe.net/repository/DEFAULT/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:55:f8:ba:05:2d:b1:8b:4e:f2:62:86:5f:76:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91d2767aa910e957dc5358025026e6c370570a2d Validity Not Before: Feb 9 13:00:36 2026 GMT Not After : Feb 10 13:00:36 2026 GMT Subject: CN=f1d06054836dd6fe76aafaf0304eb8ae74268c95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:8e:71:b9:4d:4d:63:49:f2:b0:2b:7a:5d:2a: 34:fc:e3:e3:74:d1:b7:5b:b9:21:11:ed:33:a3:fd: 8a:39:93:0a:75:0b:2f:2b:b6:d9:50:c4:39:34:fc: 60:a8:10:e5:1a:19:bc:6c:2e:27:f2:2c:02:10:82: d0:b2:3d:2e:30:cb:5f:32:7f:87:f0:25:1d:b4:2e: 09:46:08:5c:55:6b:89:5e:97:5e:c5:74:18:f4:95: 72:48:29:37:ae:9d:94:c4:a5:2a:0d:69:5e:ab:6a: 00:25:cb:e4:fa:e2:a6:27:96:32:32:c1:60:9f:b4: ab:bd:db:8c:e2:26:7a:51:69:a7:13:c2:fd:5f:1f: 38:06:98:0c:ea:a6:bb:e9:e7:74:4f:61:70:d5:72: 29:36:e2:64:3f:b9:cd:1f:ac:78:28:42:32:5c:1d: fa:1a:8e:f3:13:d3:fc:d9:ed:70:7c:5a:3f:04:82: d7:c1:4e:f4:6c:c8:fc:88:f9:f8:d7:b8:71:fd:98: 8e:34:64:bb:29:13:c0:65:50:d9:6b:a2:da:64:e4: b5:1f:0b:c6:54:3b:6d:d0:ad:6c:24:6d:73:09:eb: 50:74:a7:95:92:15:f7:70:e1:e7:2a:4f:3d:19:d5: d1:99:11:61:5a:ca:0c:d0:a4:90:71:5e:b3:23:1b: 7f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:D0:60:54:83:6D:D6:FE:76:AA:FA:F0:30:4E:B8:AE:74:26:8C:95 X509v3 Authority Key Identifier: keyid:91:D2:76:7A:A9:10:E9:57:DC:53:58:02:50:26:E6:C3:70:57:0A:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/44faa2-603b-4376-b87d-c47552549741/1/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/44faa2-603b-4376-b87d-c47552549741/1/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:9f:6a:7e:f5:58:11:00:6a:0f:68:4a:23:6e:a1:bc:d0:25: 7c:00:53:36:45:da:a7:81:5f:af:93:c4:6e:d6:fd:66:da:8e: d7:0a:82:1c:a5:fd:fe:21:e6:04:f7:b3:14:34:23:fe:14:29: 19:ed:50:3e:2e:1d:19:fa:f7:24:74:11:aa:a1:fc:97:2f:27: 09:60:2d:c4:d8:2e:6e:5e:c2:bb:42:90:44:4f:0a:ac:4f:f9: 7a:9d:4b:cf:33:3b:2d:98:ef:5b:be:f9:1c:20:7e:b0:7d:92: 45:33:ed:f0:33:c5:a7:0b:54:cb:35:e2:d1:53:6c:74:6e:96: aa:52:5d:8e:86:13:9d:24:97:c7:3c:0f:4b:3b:c5:09:10:01: 6d:ad:24:71:5c:53:d2:fa:8d:86:94:86:99:62:d8:ce:73:19: 2a:d4:0d:7c:f1:51:7d:16:c1:39:3b:22:f2:22:72:5e:ea:a1: cd:ed:69:b8:0e:b2:99:6d:e4:12:dd:ff:fa:f3:05:7f:49:57: 03:19:8e:a5:65:1c:67:44:1d:8c:f4:bd:a8:aa:1c:8b:a4:2b: 4c:c3:31:17:19:11:4b:4f:52:e6:e5:09:65:7e:ee:e2:ca:10: 8d:76:b7:9e:46:9d:6a:c2:eb:0c:22:c4:69:81:84:8a:eb:17: 7e:6e:60:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfVX4ugUtsYtO8mKGX3Y6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxZDI3NjdhYTkxMGU5NTdkYzUzNTgwMjUwMjZlNmMzNzA1 NzBhMmQwHhcNMjYwMjA5MTMwMDM2WhcNMjYwMjEwMTMwMDM2WjAzMTEwLwYDVQQD EyhmMWQwNjA1NDgzNmRkNmZlNzZhYWZhZjAzMDRlYjhhZTc0MjY4Yzk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjY5xuU1NY0nysCt6XSo0/OPjdNG3 W7khEe0zo/2KOZMKdQsvK7bZUMQ5NPxgqBDlGhm8bC4n8iwCEILQsj0uMMtfMn+H 8CUdtC4JRghcVWuJXpdexXQY9JVySCk3rp2UxKUqDWleq2oAJcvk+uKmJ5YyMsFg n7SrvduM4iZ6UWmnE8L9Xx84BpgM6qa76ed0T2Fw1XIpNuJkP7nNH6x4KEIyXB36 Go7zE9P82e1wfFo/BILXwU70bMj8iPn417hx/ZiONGS7KRPAZVDZa6LaZOS1HwvG VDtt0K1sJG1zCetQdKeVkhX3cOHnKk89GdXRmRFhWsoM0KSQcV6zIxt/UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPHQYFSDbdb+dqr68DBOuK50JoyVMB8GA1UdIwQY MBaAFJHSdnqpEOlX3FNYAlAm5sNwVwotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2RKMmVxa1E2VmZjVTFnQ1VDYm13M0JYQ2kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC80NGZhYTItNjAzYi00Mzc2LWI4N2Qt YzQ3NTUyNTQ5NzQxLzEva2RKMmVxa1E2VmZjVTFnQ1VDYm13M0JYQ2kwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC80NGZhYTItNjAzYi00Mzc2LWI4N2QtYzQ3NTUyNTQ5NzQx LzEva2RKMmVxa1E2VmZjVTFnQ1VDYm13M0JYQ2kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZp9qfvVY EQBqD2hKI26hvNAlfABTNkXap4Ffr5PEbtb9ZtqO1wqCHKX9/iHmBPezFDQj/hQp Ge1QPi4dGfr3JHQRqqH8ly8nCWAtxNgubl7Cu0KQRE8KrE/5ep1LzzM7LZjvW775 HCB+sH2SRTPt8DPFpwtUyzXi0VNsdG6WqlJdjoYTnSSXxzwPSzvFCRABba0kcVxT 0vqNhpSGmWLYznMZKtQNfPFRfRbBOTsi8iJyXuqhze1puA6ymW3kEt3/+vMFf0lX AxmOpWUcZ0QdjPS9qKoci6QrTMMxFxkRS09S5uUJZX7u4soQjXa3nkadasLrDCLE aYGEiusXfm5ggA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:36 2026 by rpki-client