This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.mft File: KRhGRySLVVI5mcu3_lsgqZ_nO-M.mft (raw, json) Hash identifier: t460s9OsxKaJEV8yVQs+2xNoKrvZltndWzg0/TLdEEQ= Subject key identifier: E3:4B:6D:B1:F8:BF:EA:9A:66:1A:B9:4B:E5:F5:21:2E:B8:7E:9D:66 Authority key identifier: 29:18:46:47:24:8B:55:52:39:99:CB:B7:FE:5B:20:A9:9F:E7:3B:E3 Certificate issuer: /CN=29184647248b55523999cbb7fe5b20a99fe73be3 Certificate serial: 019C427D7C5C0B0C3EB704A10594F3ACA5DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRhGRySLVVI5mcu3_lsgqZ_nO-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 13:00:45 +0000 Manifest this update: Mon 09 Feb 2026 13:00:45 +0000 Manifest next update: Tue 10 Feb 2026 13:00:45 +0000 Files and hashes: 1: KRhGRySLVVI5mcu3_lsgqZ_nO-M.crl (hash: TiSFUYEup2LTBD3asE4PiB2vFtV5k5Y3wc9fDlIquUU=) 2: roC7E9RumHxLB3VVJXEkh6LWBXY.roa (hash: ZVaSktEMxUUuiyBU7JPF0ZEtx8YRLICCeEQDBd6wK6Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.mft rsync://rpki.ripe.net/repository/DEFAULT/KRhGRySLVVI5mcu3_lsgqZ_nO-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:7c:5c:0b:0c:3e:b7:04:a1:05:94:f3:ac:a5:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29184647248b55523999cbb7fe5b20a99fe73be3 Validity Not Before: Feb 9 13:00:45 2026 GMT Not After : Feb 10 13:00:45 2026 GMT Subject: CN=e34b6db1f8bfea9a661ab94be5f5212eb87e9d66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f0:e0:ca:5a:e8:8e:0f:f3:0f:0d:68:86:b6: 7f:25:d0:7f:d0:57:24:50:f0:9f:9f:bf:36:cc:c3: 93:f7:c7:28:30:a8:73:12:18:81:20:da:51:04:b3: 61:59:fc:1b:95:aa:6a:c8:cc:86:22:93:b7:fb:a2: 6f:97:54:00:49:c2:b8:c3:e6:3d:20:a9:c0:35:3d: ae:60:56:69:9c:01:6f:7d:5b:6a:b2:ab:2a:7b:a5: e3:34:7e:5f:f8:be:0a:06:e1:ad:9e:33:e6:2e:a8: 60:b3:10:a2:a9:3e:99:0a:c8:c1:53:3f:f5:ed:f4: 34:5f:4f:30:aa:48:72:49:e1:aa:45:ea:6e:d6:09: 25:c8:46:38:7a:20:54:52:40:59:34:70:1f:b1:31: 34:82:9a:db:c6:98:9b:1c:7f:0c:d6:41:f7:61:ff: e0:fe:69:2a:8e:f3:93:ea:b0:21:07:51:c6:51:20: e8:11:6f:2b:8b:59:63:36:d9:11:57:92:65:4f:db: c3:e0:83:ec:f0:49:7c:7b:e9:2c:6b:ce:61:fb:e2: dc:1f:d6:a7:6a:2d:ea:3c:dc:07:13:99:d1:5a:eb: 68:96:71:2c:19:97:7c:ac:8e:34:47:09:0d:e7:5e: bb:15:99:56:8e:63:88:3a:80:c9:cc:e6:08:f8:35: d3:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:4B:6D:B1:F8:BF:EA:9A:66:1A:B9:4B:E5:F5:21:2E:B8:7E:9D:66 X509v3 Authority Key Identifier: keyid:29:18:46:47:24:8B:55:52:39:99:CB:B7:FE:5B:20:A9:9F:E7:3B:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRhGRySLVVI5mcu3_lsgqZ_nO-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:15:6e:45:f6:f1:fb:cf:93:6c:64:10:19:41:25:59:32:6f: 59:a0:fc:ea:5f:dc:e5:6f:2f:fb:34:e6:cf:30:26:9d:73:bd: f1:29:7a:76:21:8d:c3:3c:f2:33:37:ad:67:c9:61:13:6f:e1: 35:f9:09:da:ef:da:b8:f7:2f:8e:cf:ef:f7:8f:c9:42:0f:05: 09:a0:54:83:72:08:52:55:4c:e0:08:d6:1a:59:d8:e0:bc:2f: b8:1d:e9:63:50:b6:34:44:e8:d8:87:ed:79:0f:26:02:0b:ad: c1:04:d4:42:5c:2d:c7:02:f6:61:a0:70:1a:a9:ba:31:d0:47: 65:3d:de:e3:74:dc:ff:d5:84:bf:e1:60:d9:3b:cc:3d:b9:e4: 1c:ee:d5:22:a5:68:4b:06:b9:1c:86:5d:12:9e:d5:16:52:5e: f6:50:6d:58:49:ef:46:20:72:f3:f2:bb:44:9e:db:6b:82:10: b9:d9:88:9e:a1:45:9c:c0:34:42:6f:80:96:95:ed:1f:ba:1f: 3b:01:91:d7:c8:3e:6c:ea:81:2c:54:15:84:57:ac:c1:2b:17: f7:02:51:71:42:38:53:b2:35:52:a9:30:de:7a:fd:5b:9c:bd: 67:bf:44:40:10:c4:b4:77:f6:4c:01:3a:d0:eb:38:98:2d:e8: fd:e3:2c:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfXxcCww+twShBZTzrKXaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MTg0NjQ3MjQ4YjU1NTIzOTk5Y2JiN2ZlNWIyMGE5OWZl NzNiZTMwHhcNMjYwMjA5MTMwMDQ1WhcNMjYwMjEwMTMwMDQ1WjAzMTEwLwYDVQQD EyhlMzRiNmRiMWY4YmZlYTlhNjYxYWI5NGJlNWY1MjEyZWI4N2U5ZDY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5vDgylrojg/zDw1ohrZ/JdB/0Fck UPCfn782zMOT98coMKhzEhiBINpRBLNhWfwblapqyMyGIpO3+6Jvl1QAScK4w+Y9 IKnANT2uYFZpnAFvfVtqsqsqe6XjNH5f+L4KBuGtnjPmLqhgsxCiqT6ZCsjBUz/1 7fQ0X08wqkhySeGqRepu1gklyEY4eiBUUkBZNHAfsTE0gprbxpibHH8M1kH3Yf/g /mkqjvOT6rAhB1HGUSDoEW8ri1ljNtkRV5JlT9vD4IPs8El8e+ksa85h++LcH9an ai3qPNwHE5nRWutolnEsGZd8rI40RwkN5167FZlWjmOIOoDJzOYI+DXT4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFONLbbH4v+qaZhq5S+X1IS64fp1mMB8GA1UdIwQY MBaAFCkYRkcki1VSOZnLt/5bIKmf5zvjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1JoR1J5U0xWVkk1bWN1M19sc2dxWl9uTy1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS81NjAzNmItMjNkOC00YjM3LWI1NDYt OGZjMjM3M2ZjMjZlLzEvS1JoR1J5U0xWVkk1bWN1M19sc2dxWl9uTy1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS81NjAzNmItMjNkOC00YjM3LWI1NDYtOGZjMjM3M2ZjMjZl LzEvS1JoR1J5U0xWVkk1bWN1M19sc2dxWl9uTy1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXxVuRfbx +8+TbGQQGUElWTJvWaD86l/c5W8v+zTmzzAmnXO98Sl6diGNwzzyMzetZ8lhE2/h NfkJ2u/auPcvjs/v94/JQg8FCaBUg3IIUlVM4AjWGlnY4LwvuB3pY1C2NETo2Ift eQ8mAgutwQTUQlwtxwL2YaBwGqm6MdBHZT3e43Tc/9WEv+Fg2TvMPbnkHO7VIqVo Swa5HIZdEp7VFlJe9lBtWEnvRiBy8/K7RJ7ba4IQudmInqFFnMA0Qm+AlpXtH7of OwGR18g+bOqBLFQVhFeswSsX9wJRcUI4U7I1Uqkw3nr9W5y9Z79EQBDEtHf2TAE6 0Os4mC3o/eMsjQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:43 2026 by rpki-client