This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft File: KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft (raw, json) Hash identifier: yDAh305G043C+melTUrUY8/P8DeGmxT3WHlu5MxNr4E= Subject key identifier: 11:61:F5:80:A1:60:05:00:CC:9D:61:03:C7:E3:24:CF:DE:1B:F4:CF Authority key identifier: 28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F Certificate issuer: /CN=282b2cb977153baad1dd99eec14ce0ca46e2219f Certificate serial: 019C42100E166856A5346AE23F83EF22B0CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft Manifest number: 09E6 Signing time: Mon 09 Feb 2026 11:01:14 +0000 Manifest this update: Mon 09 Feb 2026 11:01:14 +0000 Manifest next update: Tue 10 Feb 2026 11:01:14 +0000 Files and hashes: 1: KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl (hash: ycS/ZcI+95ilXYzDqTQ4Qtn9mO0GPyXadci1QN7Z+bo=) 2: kwICd-Vs81pcwvCcYZ6zEK19fBw.roa (hash: zy91annv+5k1uAmsY5PH/4r77C+x0cRwRxEdrlowj+8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:10:0e:16:68:56:a5:34:6a:e2:3f:83:ef:22:b0:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=282b2cb977153baad1dd99eec14ce0ca46e2219f Validity Not Before: Feb 9 11:01:14 2026 GMT Not After : Feb 10 11:01:14 2026 GMT Subject: CN=1161f580a1600500cc9d6103c7e324cfde1bf4cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:39:ca:53:1e:43:1a:2b:61:1a:3e:e7:9a:3f: 04:18:aa:3e:c4:a8:4b:22:4e:2a:75:0c:44:53:21: 16:46:da:81:ff:39:bf:b2:5e:7c:d2:33:9d:e3:ed: 59:f0:4b:2e:7d:03:94:47:f8:29:19:ec:e8:67:04: c6:c4:32:ec:a9:0f:c1:a3:53:b3:1a:c5:d1:86:c0: b1:8c:f1:1c:42:a3:d5:16:7f:ba:0c:40:ba:82:5c: 5b:16:46:6a:49:57:a2:70:77:d2:c3:12:9a:e2:52: 1e:a2:af:28:8f:2f:03:5b:68:03:69:f6:d7:f1:82: 57:97:8e:5c:7d:a5:f8:d4:dd:11:6d:da:b3:92:4e: c6:56:70:aa:75:6e:25:6b:79:29:d1:4b:a6:54:35: c4:53:07:a6:6f:d8:57:c5:50:1b:e2:b2:5d:da:82: 46:05:df:64:cd:6e:bb:9c:3b:3d:71:bf:d8:42:39: 68:a4:8a:16:2e:41:16:d7:0d:21:5b:70:77:51:48: d1:20:ea:bb:97:8b:6e:21:02:0e:74:2a:f3:14:68: e1:22:78:d0:98:e6:5d:4a:8f:42:0f:b2:c2:70:35: 76:71:dc:f0:75:64:54:71:e6:ec:fc:a1:88:51:cf: 76:c7:9d:8a:37:eb:ac:87:fc:2c:4a:0c:53:57:65: 1c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:61:F5:80:A1:60:05:00:CC:9D:61:03:C7:E3:24:CF:DE:1B:F4:CF X509v3 Authority Key Identifier: keyid:28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:28:f1:24:ed:2e:ed:a2:bb:37:ef:eb:6f:2a:ff:ee:d6:82: 76:1e:05:5c:0d:5b:21:d7:49:02:60:1f:75:df:2e:6d:db:13: b6:c5:d9:79:0b:c9:56:52:bd:ba:51:20:4f:c4:3e:68:18:76: 25:fe:f3:f8:48:ed:51:19:26:76:f3:a8:e9:6b:8b:0f:57:af: b7:ef:9a:94:5d:9e:d0:b1:f3:e3:5e:a3:8c:2f:a7:56:ac:c0: 76:65:74:d1:d2:e1:ac:c4:5b:98:ec:7e:73:17:af:68:c8:30: 28:c5:7c:07:38:91:57:8f:e3:a2:70:04:d3:fa:e5:5a:07:ba: 68:1d:81:54:ae:e0:19:42:97:f1:aa:25:69:a4:28:85:02:7f: 18:a8:cd:d2:c9:e2:28:3b:a2:42:61:7f:11:39:f1:b4:fc:e3: 19:3c:73:8b:aa:79:12:60:e8:c2:ea:91:ef:3c:cf:0a:2f:dc: ef:94:78:12:c8:83:b9:46:37:37:f9:52:54:03:54:48:88:07: 1a:42:34:e8:d0:1b:1c:29:eb:44:ac:cc:1e:95:9c:24:10:90: 7e:aa:ba:ec:43:33:7d:ed:f2:69:f6:b6:43:c5:a2:46:dc:73: ca:2b:8f:b6:1b:b4:a1:15:d9:4e:eb:fb:a7:4c:b6:a3:22:4a: 96:70:b8:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCEA4WaFalNGriP4PvIrDOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4MmIyY2I5NzcxNTNiYWFkMWRkOTllZWMxNGNlMGNhNDZl MjIxOWYwHhcNMjYwMjA5MTEwMTE0WhcNMjYwMjEwMTEwMTE0WjAzMTEwLwYDVQQD EygxMTYxZjU4MGExNjAwNTAwY2M5ZDYxMDNjN2UzMjRjZmRlMWJmNGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTnKUx5DGithGj7nmj8EGKo+xKhL Ik4qdQxEUyEWRtqB/zm/sl580jOd4+1Z8EsufQOUR/gpGezoZwTGxDLsqQ/Bo1Oz GsXRhsCxjPEcQqPVFn+6DEC6glxbFkZqSVeicHfSwxKa4lIeoq8ojy8DW2gDafbX 8YJXl45cfaX41N0Rbdqzkk7GVnCqdW4la3kp0UumVDXEUwemb9hXxVAb4rJd2oJG Bd9kzW67nDs9cb/YQjlopIoWLkEW1w0hW3B3UUjRIOq7l4tuIQIOdCrzFGjhInjQ mOZdSo9CD7LCcDV2cdzwdWRUcebs/KGIUc92x52KN+ush/wsSgxTV2UcawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBFh9YChYAUAzJ1hA8fjJM/eG/TPMB8GA1UdIwQY MBaAFCgrLLl3FTuq0d2Z7sFM4MpG4iGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0Nzc3VYY1ZPNnJSM1pudXdVemd5a2JpSVo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8wYjBiMzMtOThhMS00ODE4LWFkMTgt OTVmMjdkM2U4YWJiLzEvS0Nzc3VYY1ZPNnJSM1pudXdVemd5a2JpSVo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy8wYjBiMzMtOThhMS00ODE4LWFkMTgtOTVmMjdkM2U4YWJi LzEvS0Nzc3VYY1ZPNnJSM1pudXdVemd5a2JpSVo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFyjxJO0u 7aK7N+/rbyr/7taCdh4FXA1bIddJAmAfdd8ubdsTtsXZeQvJVlK9ulEgT8Q+aBh2 Jf7z+EjtURkmdvOo6WuLD1evt++alF2e0LHz416jjC+nVqzAdmV00dLhrMRbmOx+ cxevaMgwKMV8BziRV4/jonAE0/rlWge6aB2BVK7gGUKX8aolaaQohQJ/GKjN0sni KDuiQmF/ETnxtPzjGTxzi6p5EmDowuqR7zzPCi/c75R4EsiDuUY3N/lSVANUSIgH GkI06NAbHCnrRKzMHpWcJBCQfqq67EMzfe3yafa2Q8WiRtxzyiuPthu0oRXZTuv7 p0y2oyJKlnC47Q== -----END CERTIFICATE-----Generated at Mon Feb 9 18:47:25 2026 by rpki-client