This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.mft File: KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.mft (raw, json) Hash identifier: bpdSx5CaSahToMXp30PwtVrTxRPVOXQl1tKmnS8/G6M= Subject key identifier: FB:8C:9A:8E:D2:91:DB:EF:F5:50:75:57:78:66:7A:9A:E9:D1:0A:25 Authority key identifier: 2A:52:75:AD:89:C9:97:6B:51:03:0C:5B:D2:56:79:9B:79:26:56:0C Certificate issuer: /CN=2a5275ad89c9976b51030c5bd256799b7926560c Certificate serial: 019C40FD3FAE11B2587D67BDBC4B1CD9C80F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.mft Manifest number: 0BBF Signing time: Mon 09 Feb 2026 06:01:04 +0000 Manifest this update: Mon 09 Feb 2026 06:01:04 +0000 Manifest next update: Tue 10 Feb 2026 06:01:04 +0000 Files and hashes: 1: KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.crl (hash: pRa745sQ2eZgrye7q7+YvkSYH82qNDwoXngBxxCbuMU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.mft rsync://rpki.ripe.net/repository/DEFAULT/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:40:fd:3f:ae:11:b2:58:7d:67:bd:bc:4b:1c:d9:c8:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a5275ad89c9976b51030c5bd256799b7926560c Validity Not Before: Feb 9 06:01:04 2026 GMT Not After : Feb 10 06:01:04 2026 GMT Subject: CN=fb8c9a8ed291dbeff550755778667a9ae9d10a25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ad:a3:d1:b7:4a:7f:af:03:aa:30:9d:0b:29: 2b:2c:c9:00:11:94:08:5a:0d:c9:bb:b8:c4:e8:81: 71:cd:7b:9e:2c:b8:ac:40:6a:0c:9e:be:ef:be:a0: 06:4b:e9:9a:bc:48:4e:e1:31:99:69:e2:28:3e:e5: 03:55:58:5c:17:49:30:c3:94:06:0c:da:c9:3d:70: 28:07:3f:d0:28:ce:3b:a1:10:27:ad:4e:6d:67:62: 73:44:22:a4:7e:9f:10:a7:65:54:9d:59:9a:0b:ea: 98:31:fe:f0:9e:96:03:56:bc:6b:bd:c7:e0:82:7b: 76:b3:db:4c:68:fe:a8:4d:78:13:dc:59:99:b9:6a: a6:20:93:47:a8:a7:3f:5f:ec:d3:25:9c:0b:8c:37: 49:c3:cd:c6:13:b2:b5:c1:df:95:20:94:cd:b3:00: 4b:2a:d2:78:8b:4c:d4:29:1d:43:42:40:a1:65:e9: b1:e0:b1:1e:d2:a5:8f:3b:3e:cc:c1:f7:b9:a8:ea: 6b:a9:59:c1:e8:43:bf:6a:05:d8:b5:88:1c:1a:c2: d5:8b:98:a3:9c:23:7f:12:23:7d:95:89:bf:f9:4c: c1:f3:5e:d9:30:1a:de:92:20:64:75:64:a8:b2:6c: a0:01:cf:3b:b9:59:ad:b5:b3:37:79:4f:e8:30:31: 52:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:8C:9A:8E:D2:91:DB:EF:F5:50:75:57:78:66:7A:9A:E9:D1:0A:25 X509v3 Authority Key Identifier: keyid:2A:52:75:AD:89:C9:97:6B:51:03:0C:5B:D2:56:79:9B:79:26:56:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:ea:6e:f4:cb:35:d0:2c:5d:77:b8:bf:2f:f8:59:7a:11:fe: b4:10:38:45:64:77:85:52:b9:9e:db:18:c2:88:70:31:62:2e: 50:c8:2f:fa:4c:b9:58:27:ab:04:8c:5f:86:24:ab:eb:64:1c: fa:7e:e6:fb:ff:2a:b3:ed:ce:7d:b2:89:86:fd:7c:a2:94:72: b4:8c:4c:22:90:81:d0:db:d8:78:c1:23:38:fb:86:3c:7c:43: ba:6c:0a:b0:7f:f0:14:9c:5b:30:58:b3:72:b3:a5:1b:d1:e6: f5:e4:47:96:7a:14:6e:4e:a7:72:7c:fd:e6:5d:3f:69:ca:1c: 28:2f:ce:c7:4f:fc:35:51:99:9d:19:27:f5:af:32:f7:5f:1a: b6:53:51:ee:39:1a:25:a1:98:ea:19:99:37:4e:e9:fa:e1:c6: ac:31:0c:9a:f1:91:b5:d7:f3:8f:e1:46:cf:9f:31:ea:7d:05: 91:48:0d:f3:02:c1:45:20:78:40:5d:2f:ec:d9:4e:20:e9:a9: 55:51:b2:67:4a:98:21:91:f2:91:5b:29:0b:ae:84:49:78:3f: be:bb:28:29:93:a3:17:d8:a0:a9:3d:2f:9e:74:57:91:cf:75: 19:51:c6:98:2f:6c:84:31:59:72:ed:f2:e3:1e:17:98:55:47: e3:70:74:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxA/T+uEbJYfWe9vEsc2cgPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhNTI3NWFkODljOTk3NmI1MTAzMGM1YmQyNTY3OTliNzky NjU2MGMwHhcNMjYwMjA5MDYwMTA0WhcNMjYwMjEwMDYwMTA0WjAzMTEwLwYDVQQD EyhmYjhjOWE4ZWQyOTFkYmVmZjU1MDc1NTc3ODY2N2E5YWU5ZDEwYTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2a2j0bdKf68DqjCdCykrLMkAEZQI Wg3Ju7jE6IFxzXueLLisQGoMnr7vvqAGS+mavEhO4TGZaeIoPuUDVVhcF0kww5QG DNrJPXAoBz/QKM47oRAnrU5tZ2JzRCKkfp8Qp2VUnVmaC+qYMf7wnpYDVrxrvcfg gnt2s9tMaP6oTXgT3FmZuWqmIJNHqKc/X+zTJZwLjDdJw83GE7K1wd+VIJTNswBL KtJ4i0zUKR1DQkChZemx4LEe0qWPOz7Mwfe5qOprqVnB6EO/agXYtYgcGsLVi5ij nCN/EiN9lYm/+UzB817ZMBrekiBkdWSosmygAc87uVmttbM3eU/oMDFScQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPuMmo7Skdvv9VB1V3hmeprp0QolMB8GA1UdIwQY MBaAFCpSda2JyZdrUQMMW9JWeZt5JlYMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2xKMXJZbkpsMnRSQXd4YjBsWjVtM2ttVmd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC85YmMyZDgtOTMyMC00YTMxLWE3ZDQt MTE1NjY5MGE0M2I1LzEvS2xKMXJZbkpsMnRSQXd4YjBsWjVtM2ttVmd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC85YmMyZDgtOTMyMC00YTMxLWE3ZDQtMTE1NjY5MGE0M2I1 LzEvS2xKMXJZbkpsMnRSQXd4YjBsWjVtM2ttVmd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdupu9Ms1 0Cxdd7i/L/hZehH+tBA4RWR3hVK5ntsYwohwMWIuUMgv+ky5WCerBIxfhiSr62Qc +n7m+/8qs+3OfbKJhv18opRytIxMIpCB0NvYeMEjOPuGPHxDumwKsH/wFJxbMFiz crOlG9Hm9eRHlnoUbk6ncnz95l0/acocKC/Ox0/8NVGZnRkn9a8y918atlNR7jka JaGY6hmZN07p+uHGrDEMmvGRtdfzj+FGz58x6n0FkUgN8wLBRSB4QF0v7NlOIOmp VVGyZ0qYIZHykVspC66ESXg/vrsoKZOjF9igqT0vnnRXkc91GVHGmC9shDFZcu3y 4x4XmFVH43B0qA== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:28 2026 by rpki-client