This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft File: KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft (raw, json) Hash identifier: Pv4tAINLNTxJcDKiVC91q7HcuH7AZ9FpUVeQRcd0hjw= Subject key identifier: CA:5D:C0:69:98:28:93:53:AB:96:40:0C:78:D8:25:03:D1:3D:96:11 Authority key identifier: 29:02:C9:9C:A7:32:C6:4A:19:C7:D9:73:4A:98:FB:24:E5:45:55:49 Certificate issuer: /CN=2902c99ca732c64a19c7d9734a98fb24e5455549 Certificate serial: 019C41D89DF419BB25022144DBD69EF397F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft Manifest number: 117C Signing time: Mon 09 Feb 2026 10:00:40 +0000 Manifest this update: Mon 09 Feb 2026 10:00:40 +0000 Manifest next update: Tue 10 Feb 2026 10:00:40 +0000 Files and hashes: 1: KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl (hash: uohAU52hP+mLJCT2my7JON0S7nN7D5EwPXtbVHgKqC8=) 2: KT302nZV2Y2p4WDMTwVmIhKydvc.roa (hash: RA/+n+j+c+JYu9hIIUbQQ1FyM1sNRqfioO7K+YA4lYo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:9d:f4:19:bb:25:02:21:44:db:d6:9e:f3:97:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2902c99ca732c64a19c7d9734a98fb24e5455549 Validity Not Before: Feb 9 10:00:40 2026 GMT Not After : Feb 10 10:00:40 2026 GMT Subject: CN=ca5dc06998289353ab96400c78d82503d13d9611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:05:b4:f1:3e:e5:8c:bf:3b:bc:84:0a:8c:e5: 8a:f6:d9:5b:71:b9:0f:3a:3e:30:49:06:57:76:cc: db:d3:b1:13:fc:03:d4:c8:5a:c7:87:de:f3:c3:02: 6d:3a:cb:a6:58:4e:b7:ad:c1:0f:eb:42:61:d0:ab: 7d:4f:08:0f:31:78:4d:0d:f9:30:55:9f:8b:8c:83: 3f:78:b0:ef:60:6e:94:d3:90:e6:be:03:7b:94:da: b4:93:47:3d:60:39:40:df:21:4c:7f:30:8b:84:eb: fb:cf:f1:07:4d:a0:af:69:5f:ee:9b:63:c4:ea:ae: 40:8f:63:53:fb:74:89:d7:49:85:e0:b9:ac:1d:a5: 71:76:de:c2:95:00:44:80:cb:b3:29:4f:79:4a:e4: 67:71:8e:9f:cb:0e:f4:c2:3c:87:29:76:48:d8:78: 95:06:8b:0f:49:b2:3a:af:3a:f6:0c:d2:97:d5:8f: 6e:4c:a1:1e:65:d7:e9:23:c0:cc:d1:df:9b:7b:05: 4b:3e:5b:aa:7d:e1:e0:6c:1f:cc:e7:83:bc:da:ad: 8c:6e:1f:7f:c0:fe:3f:bb:0d:1b:75:df:40:6c:75: 57:e4:cd:02:15:67:22:41:24:8e:fe:25:fc:09:ba: 05:2c:5b:87:86:8d:32:e2:0f:55:b8:96:51:42:9f: c0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:5D:C0:69:98:28:93:53:AB:96:40:0C:78:D8:25:03:D1:3D:96:11 X509v3 Authority Key Identifier: keyid:29:02:C9:9C:A7:32:C6:4A:19:C7:D9:73:4A:98:FB:24:E5:45:55:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:7f:a8:f6:36:45:5e:a1:93:60:a2:16:cf:65:a6:61:7d:66: d1:69:df:c0:7e:f2:b9:67:c1:a1:08:a4:43:da:21:11:d1:87: 20:30:c2:9f:53:e9:f4:df:41:c9:e0:92:fc:0e:48:fd:5b:42: 7b:6e:89:69:68:5f:c5:f6:60:fa:25:5f:7f:14:ce:a4:e5:41: 9f:6d:45:af:15:a0:cd:5f:06:bc:ed:76:cc:eb:0e:eb:f5:fc: 50:3b:31:cc:e6:1c:b8:a6:f8:bb:c9:4c:ad:24:e2:0f:29:45: 3a:40:38:ae:ec:e5:60:7f:98:da:31:96:c4:58:52:28:f6:21: cd:35:84:7c:eb:dd:2e:80:f1:05:ed:50:8c:3d:d6:18:60:60: 0e:1c:7b:3d:70:2e:6f:b5:ee:76:24:8f:42:87:19:a4:d9:7f: f5:76:36:90:d6:67:89:2c:56:90:51:9a:c0:d2:d3:15:99:24: 6d:a3:10:48:c3:14:46:cb:5a:00:1f:41:3a:aa:ce:b8:97:81: 55:fd:95:a8:87:92:83:c5:15:1d:99:76:95:9b:f2:20:c6:30: 4f:d2:87:61:ca:76:f0:a9:8a:54:c0:f6:da:c3:5b:a3:81:64: 9d:11:ce:a5:89:c5:65:22:52:e5:86:6b:4c:a5:7b:f6:52:9f: 88:69:53:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2J30GbslAiFE29ae85f5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MDJjOTljYTczMmM2NGExOWM3ZDk3MzRhOThmYjI0ZTU0 NTU1NDkwHhcNMjYwMjA5MTAwMDQwWhcNMjYwMjEwMTAwMDQwWjAzMTEwLwYDVQQD EyhjYTVkYzA2OTk4Mjg5MzUzYWI5NjQwMGM3OGQ4MjUwM2QxM2Q5NjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAW08T7ljL87vIQKjOWK9tlbcbkP Oj4wSQZXdszb07ET/APUyFrHh97zwwJtOsumWE63rcEP60Jh0Kt9TwgPMXhNDfkw VZ+LjIM/eLDvYG6U05DmvgN7lNq0k0c9YDlA3yFMfzCLhOv7z/EHTaCvaV/um2PE 6q5Aj2NT+3SJ10mF4LmsHaVxdt7ClQBEgMuzKU95SuRncY6fyw70wjyHKXZI2HiV BosPSbI6rzr2DNKX1Y9uTKEeZdfpI8DM0d+bewVLPluqfeHgbB/M54O82q2Mbh9/ wP4/uw0bdd9AbHVX5M0CFWciQSSO/iX8CboFLFuHho0y4g9VuJZRQp/AvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMpdwGmYKJNTq5ZADHjYJQPRPZYRMB8GA1UdIwQY MBaAFCkCyZynMsZKGcfZc0qY+yTlRVVJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1FMSm5LY3l4a29aeDlselNwajdKT1ZGVlVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi81NGNhMjQtNmU1Ni00N2QzLWE0Mjkt YjY0OWE1NzhmODljLzEvS1FMSm5LY3l4a29aeDlselNwajdKT1ZGVlVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi81NGNhMjQtNmU1Ni00N2QzLWE0MjktYjY0OWE1NzhmODlj LzEvS1FMSm5LY3l4a29aeDlselNwajdKT1ZGVlVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANn+o9jZF XqGTYKIWz2WmYX1m0WnfwH7yuWfBoQikQ9ohEdGHIDDCn1Pp9N9ByeCS/A5I/VtC e26JaWhfxfZg+iVffxTOpOVBn21FrxWgzV8GvO12zOsO6/X8UDsxzOYcuKb4u8lM rSTiDylFOkA4ruzlYH+Y2jGWxFhSKPYhzTWEfOvdLoDxBe1QjD3WGGBgDhx7PXAu b7XudiSPQocZpNl/9XY2kNZniSxWkFGawNLTFZkkbaMQSMMURstaAB9BOqrOuJeB Vf2VqIeSg8UVHZl2lZvyIMYwT9KHYcp28KmKVMD22sNbo4FknRHOpYnFZSJS5YZr TKV79lKfiGlTYg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:29 2026 by rpki-client