This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft File: kbP11vQ-gwcfp35tPru3k1L5YbU.mft (raw, json) Hash identifier: gbi6hyoRTc1R6gSvBewOEJyEJ7r8Hbt2yukj07uZCCg= Subject key identifier: 7C:24:4F:D0:48:1B:55:70:3F:5E:3B:73:FC:19:18:54:1D:7A:FA:5F Authority key identifier: 91:B3:F5:D6:F4:3E:83:07:1F:A7:7E:6D:3E:BB:B7:93:52:F9:61:B5 Certificate issuer: /CN=91b3f5d6f43e83071fa77e6d3ebbb79352f961b5 Certificate serial: 019C42B4363EE487C41AA830D529222710C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft Manifest number: 10ED Signing time: Mon 09 Feb 2026 14:00:32 +0000 Manifest this update: Mon 09 Feb 2026 14:00:32 +0000 Manifest next update: Tue 10 Feb 2026 14:00:32 +0000 Files and hashes: 1: gMde_Z2AYAfDjgfQgADaIVzJfHA.roa (hash: ohh0Sm+ArlanntYsQ32zJOzQvbfP0sXTcTAxiE+zWSU=) 2: kbP11vQ-gwcfp35tPru3k1L5YbU.crl (hash: d+VXtNrcxXKJ5VMNrGGrmzHdoanIbdsHCkH5iOaSsbI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:36:3e:e4:87:c4:1a:a8:30:d5:29:22:27:10:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91b3f5d6f43e83071fa77e6d3ebbb79352f961b5 Validity Not Before: Feb 9 14:00:32 2026 GMT Not After : Feb 10 14:00:32 2026 GMT Subject: CN=7c244fd0481b55703f5e3b73fc1918541d7afa5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:30:42:dc:cd:83:f7:a9:e2:4e:4e:1d:85:7f: 67:8d:2a:20:b4:d9:58:3b:9c:61:d7:1f:53:9b:e3: 3e:77:ef:e7:e4:03:5a:09:2e:19:cb:78:3c:51:32: eb:b4:4f:83:05:af:d8:6b:9d:08:ac:c3:1b:b9:a4: 15:f0:29:ba:c7:56:26:41:80:31:9a:55:3e:a2:fd: 11:82:45:dc:7c:d6:1b:bb:40:12:08:d7:75:6b:71: 8e:ed:3f:8f:7a:59:34:e2:01:26:48:a8:f0:8b:7d: 67:98:29:a4:fb:c5:1a:fa:4f:a8:b3:7b:c7:64:6b: 29:41:4e:96:b3:cb:3d:cd:4a:a8:27:05:7a:c8:85: 72:a8:f2:b2:38:67:52:31:63:2c:6b:9f:d6:64:09: 32:53:14:37:ae:e1:48:0d:a2:fe:63:a9:1c:39:83: d2:02:c0:de:73:93:86:ce:1e:ca:01:15:07:32:18: 74:b1:f4:c9:72:e3:ec:4d:d1:b8:f8:79:cd:54:b5: b0:87:7c:70:63:45:90:fe:a5:20:24:f6:f3:d2:1f: cd:16:b7:95:a3:88:f6:6f:85:a6:f5:57:bd:4d:13: 8c:fe:11:65:90:af:b7:9d:b1:08:00:fd:0b:aa:6d: 4a:b5:a3:37:c5:db:c1:76:5d:d4:36:ad:5f:f5:ab: 2b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:24:4F:D0:48:1B:55:70:3F:5E:3B:73:FC:19:18:54:1D:7A:FA:5F X509v3 Authority Key Identifier: keyid:91:B3:F5:D6:F4:3E:83:07:1F:A7:7E:6D:3E:BB:B7:93:52:F9:61:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:22:ca:ab:7e:87:89:48:d0:6c:06:0b:f0:66:f1:19:d0:8e: 93:d3:d6:2b:6a:86:36:0f:4c:8b:a7:5a:3e:20:93:c0:2f:c1: 23:17:d9:a3:68:d3:04:4c:46:7b:18:99:dc:5a:43:ea:1c:2f: 98:b3:f9:cb:96:28:1f:7d:80:e9:8a:31:84:31:98:ba:67:cb: 43:5f:30:db:73:1e:0b:3f:ca:18:20:d5:6f:4c:db:2d:81:f7: 9f:df:c7:33:a4:9c:9e:9a:f0:1a:78:e2:2b:b5:ae:92:7b:45: 3d:ce:fa:50:b7:f7:b3:28:41:c1:bf:d3:32:9c:01:cc:f9:50: 44:42:aa:e4:9c:17:8a:5e:76:3a:83:ab:17:27:3d:70:a7:5f: 1c:40:54:67:2d:1a:f5:26:e1:16:32:a6:48:82:b3:25:37:99: da:ae:d2:8e:71:7b:d7:d8:32:cc:3a:f1:e9:05:15:7d:16:c3: a7:61:5b:d8:e2:c1:15:15:55:b4:32:c8:90:f1:58:74:59:f3: ad:f7:4f:f7:2d:64:1a:09:c8:df:a2:8c:4f:3a:83:c6:de:75: 9c:15:4d:ef:37:02:8f:12:75:38:1e:9c:ef:68:89:7a:c6:52: ce:13:e2:63:79:8b:d5:9f:6d:39:25:fe:66:2d:16:6a:62:bd: 0c:2d:90:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtDY+5IfEGqgw1SkiJxDCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxYjNmNWQ2ZjQzZTgzMDcxZmE3N2U2ZDNlYmJiNzkzNTJm OTYxYjUwHhcNMjYwMjA5MTQwMDMyWhcNMjYwMjEwMTQwMDMyWjAzMTEwLwYDVQQD Eyg3YzI0NGZkMDQ4MWI1NTcwM2Y1ZTNiNzNmYzE5MTg1NDFkN2FmYTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzBC3M2D96niTk4dhX9njSogtNlY O5xh1x9Tm+M+d+/n5ANaCS4Zy3g8UTLrtE+DBa/Ya50IrMMbuaQV8Cm6x1YmQYAx mlU+ov0RgkXcfNYbu0ASCNd1a3GO7T+Pelk04gEmSKjwi31nmCmk+8Ua+k+os3vH ZGspQU6Ws8s9zUqoJwV6yIVyqPKyOGdSMWMsa5/WZAkyUxQ3ruFIDaL+Y6kcOYPS AsDec5OGzh7KARUHMhh0sfTJcuPsTdG4+HnNVLWwh3xwY0WQ/qUgJPbz0h/NFreV o4j2b4Wm9Ve9TROM/hFlkK+3nbEIAP0Lqm1KtaM3xdvBdl3UNq1f9asrDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHwkT9BIG1VwP147c/wZGFQdevpfMB8GA1UdIwQY MBaAFJGz9db0PoMHH6d+bT67t5NS+WG1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2JQMTF2US1nd2NmcDM1dFBydTNrMUw1WWJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS84N2E4NjMtZGE2Zi00OTgxLTkzNzgt YjJjZDRlNTgxMDBlLzEva2JQMTF2US1nd2NmcDM1dFBydTNrMUw1WWJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS84N2E4NjMtZGE2Zi00OTgxLTkzNzgtYjJjZDRlNTgxMDBl LzEva2JQMTF2US1nd2NmcDM1dFBydTNrMUw1WWJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKyLKq36H iUjQbAYL8GbxGdCOk9PWK2qGNg9Mi6daPiCTwC/BIxfZo2jTBExGexiZ3FpD6hwv mLP5y5YoH32A6YoxhDGYumfLQ18w23MeCz/KGCDVb0zbLYH3n9/HM6ScnprwGnji K7WukntFPc76ULf3syhBwb/TMpwBzPlQREKq5JwXil52OoOrFyc9cKdfHEBUZy0a 9SbhFjKmSIKzJTeZ2q7SjnF719gyzDrx6QUVfRbDp2Fb2OLBFRVVtDLIkPFYdFnz rfdP9y1kGgnI36KMTzqDxt51nBVN7zcCjxJ1OB6c72iJesZSzhPiY3mL1Z9tOSX+ Zi0WamK9DC2QNA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:31:04 2026 by rpki-client