This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.mft File: kLCsKbEI83Ixb79OqT4UhzGkxOk.mft (raw, json) Hash identifier: DLawaPOiJU0L4P/vgLQtlQo+xNLRmV35f7fm6AWdVJw= Subject key identifier: 75:81:7C:CA:36:DB:DC:32:70:91:0A:48:2B:CF:62:A3:6A:53:3E:FB Authority key identifier: 90:B0:AC:29:B1:08:F3:72:31:6F:BF:4E:A9:3E:14:87:31:A4:C4:E9 Certificate issuer: /CN=90b0ac29b108f372316fbf4ea93e148731a4c4e9 Certificate serial: 019C41D8BF1539B4CCB109B11365B9CCBD6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kLCsKbEI83Ixb79OqT4UhzGkxOk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.mft Manifest number: 1813 Signing time: Mon 09 Feb 2026 10:00:49 +0000 Manifest this update: Mon 09 Feb 2026 10:00:49 +0000 Manifest next update: Tue 10 Feb 2026 10:00:49 +0000 Files and hashes: 1: kLCsKbEI83Ixb79OqT4UhzGkxOk.crl (hash: vPWWICW15cCQFKmwMZMEKY0oIjeSliryLvbxVh2JgN8=) 2: qv3Ej32YD_b_UD9Nd2LLu7Onshs.roa (hash: QDsiGpgCL1OjBF1UVwY4OIbEFPuPDLsm5/b5USJqJRw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.mft rsync://rpki.ripe.net/repository/DEFAULT/kLCsKbEI83Ixb79OqT4UhzGkxOk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:bf:15:39:b4:cc:b1:09:b1:13:65:b9:cc:bd:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90b0ac29b108f372316fbf4ea93e148731a4c4e9 Validity Not Before: Feb 9 10:00:49 2026 GMT Not After : Feb 10 10:00:49 2026 GMT Subject: CN=75817cca36dbdc3270910a482bcf62a36a533efb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3b:33:13:a5:a8:7c:e5:5b:29:cc:96:54:0a: 93:ff:ea:e6:d9:a5:e4:02:ae:2a:81:38:a8:f3:76: 3e:ab:3f:e8:89:44:00:d2:48:c3:e4:d0:91:c8:47: 9c:d7:66:ac:ef:08:37:4b:36:40:fd:a5:44:03:2d: 16:cf:cd:8a:bf:97:cd:c9:1b:03:f0:01:9b:97:e6: 24:92:24:c3:80:1e:24:c4:6c:01:eb:d8:f7:d6:e3: f9:b6:8b:65:9f:33:1d:4d:85:6f:c9:e0:98:39:7c: e1:04:21:98:f6:9f:1d:f3:f8:f4:b0:40:ee:b4:0e: ba:26:b3:cc:ee:6d:92:ff:fe:f8:99:c2:e6:ea:8f: 79:f1:72:b8:3e:cf:81:ee:1e:d9:af:51:0b:b0:30: bd:ea:21:8f:d3:3f:e6:21:dd:91:d9:26:fb:ab:aa: 4c:ae:16:db:1e:48:ff:89:6a:b2:c6:7a:15:12:f5: 25:92:a7:3d:a2:46:01:65:ab:10:37:2f:52:50:8c: 7c:9e:b2:5b:6a:43:b5:85:f8:3a:4a:ed:e9:ff:bc: 3d:8d:77:02:b8:e0:e4:37:f8:8c:91:a7:69:79:f1: 43:83:e4:72:4c:57:c6:70:e2:25:0e:6e:18:70:ff: 08:57:00:99:0c:82:89:63:33:69:89:6a:b2:ba:ed: 72:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:81:7C:CA:36:DB:DC:32:70:91:0A:48:2B:CF:62:A3:6A:53:3E:FB X509v3 Authority Key Identifier: keyid:90:B0:AC:29:B1:08:F3:72:31:6F:BF:4E:A9:3E:14:87:31:A4:C4:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLCsKbEI83Ixb79OqT4UhzGkxOk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:ae:d4:4e:8a:11:f9:cf:78:19:3a:69:7c:df:54:da:86:5d: 5b:ee:1c:f1:3b:a9:88:f6:5a:fe:3f:f3:dc:a5:7d:1e:ad:5e: bc:66:ef:26:01:27:6e:13:5b:fd:43:a3:35:8f:ff:1b:ef:8a: fb:35:04:e3:b3:40:7d:49:76:15:69:38:4f:d0:c9:11:e7:50: 58:d8:2d:62:3c:f6:84:6f:71:c1:70:19:15:e5:b5:c4:20:e5: da:63:ae:49:75:1b:6c:e8:ed:8d:42:24:29:33:92:92:49:1f: 1e:b1:49:6f:95:74:62:65:d4:fa:c9:06:5a:25:f5:21:1f:fe: 64:3e:ea:16:3b:3e:fc:20:37:a9:c7:d1:e6:0e:3e:a6:91:1a: 88:00:e1:84:eb:1b:8d:8d:15:18:2f:d1:6b:a2:fa:d4:b0:72: ec:60:11:7f:9d:7e:63:36:2f:cb:01:99:a7:65:01:14:0d:5e: 16:ea:73:78:8f:79:cc:ac:bf:b2:86:8f:b0:a7:69:59:5e:67: 43:e1:81:b0:ac:58:04:b4:4e:39:e7:e9:6c:21:2d:f9:67:75: 2b:28:14:7b:19:72:d7:64:20:09:50:8a:8c:fa:6a:f1:60:5b: 10:9a:ac:c6:69:5a:36:d3:85:d5:8b:63:be:fb:e1:42:72:38: 28:ba:c7:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2L8VObTMsQmxE2W5zL1tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwYjBhYzI5YjEwOGYzNzIzMTZmYmY0ZWE5M2UxNDg3MzFh NGM0ZTkwHhcNMjYwMjA5MTAwMDQ5WhcNMjYwMjEwMTAwMDQ5WjAzMTEwLwYDVQQD Eyg3NTgxN2NjYTM2ZGJkYzMyNzA5MTBhNDgyYmNmNjJhMzZhNTMzZWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDszE6WofOVbKcyWVAqT/+rm2aXk Aq4qgTio83Y+qz/oiUQA0kjD5NCRyEec12as7wg3SzZA/aVEAy0Wz82Kv5fNyRsD 8AGbl+YkkiTDgB4kxGwB69j31uP5totlnzMdTYVvyeCYOXzhBCGY9p8d8/j0sEDu tA66JrPM7m2S//74mcLm6o958XK4Ps+B7h7Zr1ELsDC96iGP0z/mId2R2Sb7q6pM rhbbHkj/iWqyxnoVEvUlkqc9okYBZasQNy9SUIx8nrJbakO1hfg6Su3p/7w9jXcC uODkN/iMkadpefFDg+RyTFfGcOIlDm4YcP8IVwCZDIKJYzNpiWqyuu1yZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHWBfMo229wycJEKSCvPYqNqUz77MB8GA1UdIwQY MBaAFJCwrCmxCPNyMW+/Tqk+FIcxpMTpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0xDc0tiRUk4M0l4Yjc5T3FUNFVoekdreE9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8yZjYzMmMtYmQ1NC00MDM2LTkwYjYt ZDI1M2NkM2U3YTM0LzEva0xDc0tiRUk4M0l4Yjc5T3FUNFVoekdreE9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8yZjYzMmMtYmQ1NC00MDM2LTkwYjYtZDI1M2NkM2U3YTM0 LzEva0xDc0tiRUk4M0l4Yjc5T3FUNFVoekdreE9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARq7UTooR +c94GTppfN9U2oZdW+4c8TupiPZa/j/z3KV9Hq1evGbvJgEnbhNb/UOjNY//G++K +zUE47NAfUl2FWk4T9DJEedQWNgtYjz2hG9xwXAZFeW1xCDl2mOuSXUbbOjtjUIk KTOSkkkfHrFJb5V0YmXU+skGWiX1IR/+ZD7qFjs+/CA3qcfR5g4+ppEaiADhhOsb jY0VGC/Ra6L61LBy7GARf51+YzYvywGZp2UBFA1eFupzeI95zKy/soaPsKdpWV5n Q+GBsKxYBLROOefpbCEt+Wd1KygUexly12QgCVCKjPpq8WBbEJqsxmlaNtOF1Ytj vvvhQnI4KLrH0A== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:27 2026 by rpki-client