This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft File: KqggK00MXBEdN08emLc9tJJNZLE.mft (raw, json) Hash identifier: SaulDVsionzTRP4MXW87TI6tF13bIL3itwPBpHODoQk= Subject key identifier: 90:4C:F8:6F:B9:D4:23:6B:09:5B:65:FC:0B:03:16:A9:C7:E6:21:9A Authority key identifier: 2A:A8:20:2B:4D:0C:5C:11:1D:37:4F:1E:98:B7:3D:B4:92:4D:64:B1 Certificate issuer: /CN=2aa8202b4d0c5c111d374f1e98b73db4924d64b1 Certificate serial: 019C432238563C472AB59DA667154E6148BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft Manifest number: 0E45 Signing time: Mon 09 Feb 2026 16:00:41 +0000 Manifest this update: Mon 09 Feb 2026 16:00:41 +0000 Manifest next update: Tue 10 Feb 2026 16:00:41 +0000 Files and hashes: 1: KqggK00MXBEdN08emLc9tJJNZLE.crl (hash: rIKYek/CIw4dl4YEFpSpCTvRkzRDeYG0s4VQkiO4thU=) 2: Ws4in-OWRWSEcoBN7waoCEBULUk.roa (hash: Uju7zYqejr4rhXJP4MJKAs7Vc49ym9vbx4ol+jWt7tA=) 3: hQ65-JJPcn9XxnJlMV8R8YaKILg.roa (hash: BnQj/39qzfqqWoNJrrD5UWocu4HxdA3qcueXigYXVac=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:38:56:3c:47:2a:b5:9d:a6:67:15:4e:61:48:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa8202b4d0c5c111d374f1e98b73db4924d64b1 Validity Not Before: Feb 9 16:00:41 2026 GMT Not After : Feb 10 16:00:41 2026 GMT Subject: CN=904cf86fb9d4236b095b65fc0b0316a9c7e6219a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fc:b8:18:da:2c:1d:be:03:c8:05:2a:6b:b8: 3b:6f:ef:f3:bb:8b:db:48:14:87:87:00:2b:fa:3d: 39:a7:2f:2e:7e:cd:93:38:47:76:45:11:3a:74:27: a3:8d:86:0d:9f:34:01:1e:87:8e:ec:f0:c8:e0:21: 7e:38:c9:a9:e4:6c:41:08:0b:6d:f2:e2:8e:4b:bb: e6:12:65:20:e8:71:c0:81:64:df:0a:72:7f:a0:97: dc:d9:00:95:0e:e5:16:2e:74:f2:69:b3:ab:e0:37: 28:35:f6:07:14:e4:3f:4b:46:f7:00:76:74:85:57: bf:ea:17:e2:25:7e:99:cc:16:70:fd:ae:b4:9d:b7: 6b:ff:9d:73:b9:76:14:e1:58:ef:14:02:3e:25:ad: c1:83:ca:fa:7c:22:3d:9c:f0:09:5b:89:48:d1:35: 08:dd:20:6d:8b:16:d9:31:8a:3a:f4:d4:ec:6d:c3: aa:94:36:a0:dd:1f:53:92:56:c1:38:98:f2:ac:f2: 1d:ec:98:af:c2:79:1f:13:96:62:9f:74:3a:6e:87: d2:93:60:ce:08:7f:ce:72:b3:28:46:46:46:0b:e2: 99:84:c4:88:a2:72:87:6b:4c:96:85:66:30:12:68: 7d:31:00:f9:8e:4e:98:ca:b0:e1:9c:61:85:7a:8c: e8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:4C:F8:6F:B9:D4:23:6B:09:5B:65:FC:0B:03:16:A9:C7:E6:21:9A X509v3 Authority Key Identifier: keyid:2A:A8:20:2B:4D:0C:5C:11:1D:37:4F:1E:98:B7:3D:B4:92:4D:64:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:fd:e4:f3:05:53:0e:b1:69:19:09:a7:78:7c:ad:8d:b0:81: 74:1e:6e:f9:34:b7:d0:78:dc:e4:3b:81:a9:5e:04:51:00:6b: f1:c1:68:34:e4:19:cf:ba:1e:91:37:fa:d0:3f:e8:03:48:5a: 7d:f0:f8:73:84:c9:e3:f4:2b:7f:01:a8:33:ef:52:0d:64:79: 2a:6e:91:5e:41:c1:78:10:cc:cf:9c:d4:b8:88:01:6b:be:72: 2a:b3:8c:67:24:b7:81:fd:8b:72:f6:a0:6e:60:13:c6:77:7f: 8d:8d:ab:49:9e:b4:f3:de:21:51:87:72:d2:79:b5:56:b4:02: 3d:2b:3b:79:ab:d4:fd:7f:4d:c4:66:36:d3:cb:58:ac:3f:f4: 01:51:c3:ec:e8:7b:cc:21:0c:9c:ac:29:0e:a8:38:0f:25:46: f3:0a:c5:a1:21:38:d9:36:2b:db:6e:f7:77:69:3b:ac:8a:26: a1:16:96:13:41:3f:7b:55:88:8e:5f:93:fc:37:8d:cb:aa:23: df:f2:9b:b9:71:69:b5:49:02:e9:c2:3a:2e:8c:81:a4:84:05: f1:fd:b4:47:0a:db:7f:33:c6:a3:b7:18:b3:22:5a:19:c2:3f: 33:ff:49:82:44:61:0a:00:4f:7a:c6:ef:a1:da:18:b4:05:4f: 2e:f6:bb:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIjhWPEcqtZ2mZxVOYUi9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYTgyMDJiNGQwYzVjMTExZDM3NGYxZTk4YjczZGI0OTI0 ZDY0YjEwHhcNMjYwMjA5MTYwMDQxWhcNMjYwMjEwMTYwMDQxWjAzMTEwLwYDVQQD Eyg5MDRjZjg2ZmI5ZDQyMzZiMDk1YjY1ZmMwYjAzMTZhOWM3ZTYyMTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufy4GNosHb4DyAUqa7g7b+/zu4vb SBSHhwAr+j05py8ufs2TOEd2RRE6dCejjYYNnzQBHoeO7PDI4CF+OMmp5GxBCAtt 8uKOS7vmEmUg6HHAgWTfCnJ/oJfc2QCVDuUWLnTyabOr4DcoNfYHFOQ/S0b3AHZ0 hVe/6hfiJX6ZzBZw/a60nbdr/51zuXYU4VjvFAI+Ja3Bg8r6fCI9nPAJW4lI0TUI 3SBtixbZMYo69NTsbcOqlDag3R9TklbBOJjyrPId7JivwnkfE5Zin3Q6bofSk2DO CH/OcrMoRkZGC+KZhMSIonKHa0yWhWYwEmh9MQD5jk6YyrDhnGGFeozokwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJBM+G+51CNrCVtl/AsDFqnH5iGaMB8GA1UdIwQY MBaAFCqoICtNDFwRHTdPHpi3PbSSTWSxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3FnZ0swME1YQkVkTjA4ZW1MYzl0SkpOWkxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8yN2IzYjMtNGIyMi00NzQwLWE2NWEt NmU3YmFlNWZmODk4LzEvS3FnZ0swME1YQkVkTjA4ZW1MYzl0SkpOWkxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8yN2IzYjMtNGIyMi00NzQwLWE2NWEtNmU3YmFlNWZmODk4 LzEvS3FnZ0swME1YQkVkTjA4ZW1MYzl0SkpOWkxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApP3k8wVT DrFpGQmneHytjbCBdB5u+TS30Hjc5DuBqV4EUQBr8cFoNOQZz7oekTf60D/oA0ha ffD4c4TJ4/QrfwGoM+9SDWR5Km6RXkHBeBDMz5zUuIgBa75yKrOMZyS3gf2Lcvag bmATxnd/jY2rSZ60894hUYdy0nm1VrQCPSs7eavU/X9NxGY208tYrD/0AVHD7Oh7 zCEMnKwpDqg4DyVG8wrFoSE42TYr2273d2k7rIomoRaWE0E/e1WIjl+T/DeNy6oj 3/KbuXFptUkC6cI6LoyBpIQF8f20RwrbfzPGo7cYsyJaGcI/M/9JgkRhCgBPesbv odoYtAVPLva7Ew== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:16 2026 by rpki-client