This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ac496c-c91b-48b3-af57-79f515dc2f97/1/kmQM5yWUCOpddlb_wCE_IGiNr9w.mft File: kmQM5yWUCOpddlb_wCE_IGiNr9w.mft (raw, json) Hash identifier: GP5ZTt57kmYW4oETp+xDSw1knf7jCib3LnhvpXnVUfU= Subject key identifier: 49:60:AB:7A:96:E7:A2:D2:43:41:27:4A:34:8F:D9:D9:5F:93:7B:B4 Authority key identifier: 92:64:0C:E7:25:94:08:EA:5D:76:56:FF:C0:21:3F:20:68:8D:AF:DC Certificate issuer: /CN=92640ce7259408ea5d7656ffc0213f20688dafdc Certificate serial: 019C43592697DFD16E23E5CA7C90445FFBBC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmQM5yWUCOpddlb_wCE_IGiNr9w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ac496c-c91b-48b3-af57-79f515dc2f97/1/kmQM5yWUCOpddlb_wCE_IGiNr9w.mft Manifest number: 0590 Signing time: Mon 09 Feb 2026 17:00:41 +0000 Manifest this update: Mon 09 Feb 2026 17:00:41 +0000 Manifest next update: Tue 10 Feb 2026 17:00:41 +0000 Files and hashes: 1: kmQM5yWUCOpddlb_wCE_IGiNr9w.crl (hash: UtdNZPGoghwm249grieZjHLs1lAhBkXRYPUaokxB/R0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ac496c-c91b-48b3-af57-79f515dc2f97/1/kmQM5yWUCOpddlb_wCE_IGiNr9w.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/ac496c-c91b-48b3-af57-79f515dc2f97/1/kmQM5yWUCOpddlb_wCE_IGiNr9w.mft rsync://rpki.ripe.net/repository/DEFAULT/kmQM5yWUCOpddlb_wCE_IGiNr9w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:26:97:df:d1:6e:23:e5:ca:7c:90:44:5f:fb:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92640ce7259408ea5d7656ffc0213f20688dafdc Validity Not Before: Feb 9 17:00:41 2026 GMT Not After : Feb 10 17:00:41 2026 GMT Subject: CN=4960ab7a96e7a2d24341274a348fd9d95f937bb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5c:be:c9:68:69:c9:f2:cb:43:a4:db:37:fc: 55:89:d1:18:76:14:0a:56:08:7e:cc:3e:8e:84:3d: 74:4f:cd:ff:47:13:1c:d7:01:97:a9:43:0a:bc:ae: 0a:70:11:01:37:1b:15:4f:8b:9d:46:83:83:9a:e1: 68:0f:cc:17:bb:c2:85:37:9a:32:ea:2f:df:cc:76: a8:1f:b6:bc:08:db:19:37:9d:21:05:32:f9:7e:02: c5:65:71:81:b4:fe:39:f3:ea:9f:94:e8:c9:70:3e: 7a:55:52:d7:5e:0d:97:41:83:98:99:18:8b:76:e2: ac:81:84:f1:b9:03:ae:d7:e7:b5:00:b1:b0:c6:a0: 70:37:db:02:3d:d8:c8:f9:2c:4c:01:ed:5b:a2:c8: 55:65:25:ae:8f:5e:04:db:c2:0d:8a:b8:6e:89:f7: 63:9f:7e:ba:2b:ac:b5:e5:6a:71:b6:e7:94:1e:8d: 21:cc:0f:54:1c:66:55:7c:ff:2e:c9:05:9c:33:76: 44:79:86:23:53:82:f7:6d:78:f2:bc:a6:ca:c7:36: 89:f3:6a:2d:a5:f2:45:b3:38:6d:e3:f1:e4:e5:6a: 2c:b6:97:c7:4e:93:36:0e:a6:84:de:b2:99:34:98: 8c:d0:96:6f:6a:8b:d4:d2:f8:fb:62:2f:95:02:29: da:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:60:AB:7A:96:E7:A2:D2:43:41:27:4A:34:8F:D9:D9:5F:93:7B:B4 X509v3 Authority Key Identifier: keyid:92:64:0C:E7:25:94:08:EA:5D:76:56:FF:C0:21:3F:20:68:8D:AF:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmQM5yWUCOpddlb_wCE_IGiNr9w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ac496c-c91b-48b3-af57-79f515dc2f97/1/kmQM5yWUCOpddlb_wCE_IGiNr9w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ac496c-c91b-48b3-af57-79f515dc2f97/1/kmQM5yWUCOpddlb_wCE_IGiNr9w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:97:b1:2c:32:3c:70:26:b7:e3:a3:d5:29:61:d5:e6:18:0f: 72:e8:94:35:09:53:9b:f2:07:33:6b:4f:b7:fa:ed:c7:1e:0e: 99:6f:3c:95:c8:39:d2:80:81:df:c2:3b:99:59:78:79:a4:4f: 67:85:72:9b:8a:42:28:72:5d:a1:4e:76:1d:00:b1:7a:90:44: e9:49:5a:0c:46:37:f6:7a:69:a5:b5:4e:9b:81:b8:22:5b:83: 6e:4f:a8:cd:f7:28:b2:82:55:b4:21:13:db:d4:38:53:35:8f: d4:33:38:e4:43:92:1f:99:3f:9f:e7:e2:f1:31:7f:58:29:75: f0:71:40:c4:59:a7:53:a8:ed:40:69:08:7e:cd:f4:a4:b8:61: 82:be:9a:4c:b3:4a:1b:b7:e9:6c:6b:a0:f4:68:00:23:82:2f: c5:16:cc:fc:bc:7f:40:b3:c6:9b:65:1b:d3:44:36:c9:94:7c: 19:55:a8:8d:58:2b:b4:cc:40:3a:8a:6f:91:38:f2:6c:a8:e9: 6d:26:40:73:e7:17:d9:d2:9d:01:7b:c4:09:5e:1d:37:e4:78: 98:0d:af:a6:41:9f:1f:79:fe:c3:3d:ca:0f:d7:db:1e:f7:59: d9:92:ac:b2:49:79:64:2e:48:77:57:27:2c:d3:5f:23:2e:75: 08:31:53:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWSaX39FuI+XKfJBEX/u8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNjQwY2U3MjU5NDA4ZWE1ZDc2NTZmZmMwMjEzZjIwNjg4 ZGFmZGMwHhcNMjYwMjA5MTcwMDQxWhcNMjYwMjEwMTcwMDQxWjAzMTEwLwYDVQQD Eyg0OTYwYWI3YTk2ZTdhMmQyNDM0MTI3NGEzNDhmZDlkOTVmOTM3YmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlly+yWhpyfLLQ6TbN/xVidEYdhQK Vgh+zD6OhD10T83/RxMc1wGXqUMKvK4KcBEBNxsVT4udRoODmuFoD8wXu8KFN5oy 6i/fzHaoH7a8CNsZN50hBTL5fgLFZXGBtP458+qflOjJcD56VVLXXg2XQYOYmRiL duKsgYTxuQOu1+e1ALGwxqBwN9sCPdjI+SxMAe1boshVZSWuj14E28INirhuifdj n366K6y15WpxtueUHo0hzA9UHGZVfP8uyQWcM3ZEeYYjU4L3bXjyvKbKxzaJ82ot pfJFszht4/Hk5WostpfHTpM2DqaE3rKZNJiM0JZvaovU0vj7Yi+VAinaHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFElgq3qW56LSQ0EnSjSP2dlfk3u0MB8GA1UdIwQY MBaAFJJkDOcllAjqXXZW/8AhPyBoja/cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva21RTTV5V1VDT3BkZGxiX3dDRV9JR2lOcjl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9hYzQ5NmMtYzkxYi00OGIzLWFmNTct NzlmNTE1ZGMyZjk3LzEva21RTTV5V1VDT3BkZGxiX3dDRV9JR2lOcjl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9hYzQ5NmMtYzkxYi00OGIzLWFmNTctNzlmNTE1ZGMyZjk3 LzEva21RTTV5V1VDT3BkZGxiX3dDRV9JR2lOcjl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACJexLDI8 cCa346PVKWHV5hgPcuiUNQlTm/IHM2tPt/rtxx4OmW88lcg50oCB38I7mVl4eaRP Z4Vym4pCKHJdoU52HQCxepBE6UlaDEY39npppbVOm4G4IluDbk+ozfcosoJVtCET 29Q4UzWP1DM45EOSH5k/n+fi8TF/WCl18HFAxFmnU6jtQGkIfs30pLhhgr6aTLNK G7fpbGug9GgAI4IvxRbM/Lx/QLPGm2Ub00Q2yZR8GVWojVgrtMxAOopvkTjybKjp bSZAc+cX2dKdAXvECV4dN+R4mA2vpkGfH3n+wz3KD9fbHvdZ2ZKsskl5ZC5Id1cn LNNfIy51CDFTRQ== -----END CERTIFICATE-----Generated at Tue Feb 10 00:17:19 2026 by rpki-client