This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft File: KBeCQ6CGawkSctHh60UeceQTuZo.mft (raw, json) Hash identifier: VGr5O78XzaxEbsS/pqKvqCyXwOle1/DQ+PGGSNrxURU= Subject key identifier: 00:35:B0:02:F1:AD:AA:E3:87:7F:DD:D9:3C:C5:83:63:03:D9:7A:45 Authority key identifier: 28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A Certificate issuer: /CN=28178243a0866b091272d1e1eb451e71e413b99a Certificate serial: 019BF6F6152A988DD46F6AE92F0F23D81002 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft Manifest number: 082C Signing time: Sun 25 Jan 2026 21:01:20 +0000 Manifest this update: Sun 25 Jan 2026 21:01:20 +0000 Manifest next update: Mon 26 Jan 2026 21:01:20 +0000 Files and hashes: 1: KBeCQ6CGawkSctHh60UeceQTuZo.crl (hash: eZvoqvNx+lpmum6iMWteqlEGbCOJkzmOJo1JNtNhbNY=) 2: Maj2D8cSqrB3CLI5LyrvNUbe9TI.roa (hash: b021eDbkKPvvVAW1JJTFEOe1gdVYy/RtiqJ/4iLcPI4=) 3: cHGfrQ2RRCrzMuQN1_zdwWiDk3I.roa (hash: EJXHDQe6ZDkATsWeN7+btkC/hG9y8A/gHxLok69CX5s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f6:15:2a:98:8d:d4:6f:6a:e9:2f:0f:23:d8:10:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28178243a0866b091272d1e1eb451e71e413b99a Validity Not Before: Jan 25 21:01:20 2026 GMT Not After : Jan 26 21:01:20 2026 GMT Subject: CN=0035b002f1adaae3877fddd93cc5836303d97a45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:16:53:35:63:95:3f:98:4e:a0:bf:6e:79:02: 63:d7:44:c9:6a:23:64:ed:63:05:65:71:f3:00:d6: a2:dc:11:34:e2:fe:ac:f5:16:03:08:9a:82:65:50: d3:02:c8:85:0f:c8:e5:28:23:d7:59:66:eb:92:46: d0:5e:96:40:3b:04:d9:c9:6d:3f:f8:b6:2a:95:88: 89:63:82:3d:6f:b7:33:22:4f:7d:b7:a0:ce:c8:e7: 3b:f8:87:22:ff:88:ae:3d:6c:50:ea:9f:1c:33:c0: 45:41:23:e9:57:60:89:c7:88:00:0e:89:2b:2a:d2: 81:19:23:df:38:d8:96:84:ea:f6:a1:08:bb:c1:13: 76:ac:6e:6c:51:a7:da:f9:2c:12:8c:05:ad:e8:be: bf:b4:e6:3b:0c:05:e3:55:39:cd:81:ef:e9:7b:50: 0d:7f:a0:36:08:0f:14:25:91:59:42:a2:12:a8:47: 20:32:a5:75:90:13:db:11:c1:17:1f:7a:86:51:ba: 61:6d:37:cd:f7:7e:86:2b:cd:78:b9:38:e6:65:60: 1f:ed:a5:f8:73:72:ba:9f:de:3f:21:53:50:61:32: bc:da:76:38:ef:09:24:d0:7c:f4:d2:94:c1:30:93: 13:c8:0e:c8:0a:62:91:8b:02:01:25:0a:a8:69:99: 3e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:35:B0:02:F1:AD:AA:E3:87:7F:DD:D9:3C:C5:83:63:03:D9:7A:45 X509v3 Authority Key Identifier: keyid:28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:78:f4:f6:7c:eb:8a:5d:b9:97:89:2f:bd:c8:7d:b3:be:3d: b1:7d:c5:8b:13:e4:54:3a:b8:7d:8d:e6:07:2f:54:8e:1e:ee: cf:99:6b:eb:55:7b:90:cd:05:3e:6f:dc:dc:c9:20:2d:5b:a6: f3:44:0b:96:c1:a3:0a:4f:a2:95:e3:06:a0:1c:16:7e:0d:6e: 25:44:d5:94:a1:53:71:4e:a1:bc:15:4e:89:67:dd:68:02:ab: 1d:21:a4:e7:98:c2:d4:02:6c:fc:71:e5:f0:16:88:18:a3:3e: e6:58:94:af:d8:3a:e8:72:aa:bf:b9:2f:40:88:31:07:30:ad: 50:e9:46:b5:d3:fd:49:ae:9e:7f:94:f3:f2:eb:6e:89:f0:e1: 52:66:08:a4:c4:59:95:43:bf:8c:22:9e:8f:30:6e:c0:51:82: 14:34:a2:de:fc:13:d9:13:04:e6:de:24:40:8a:88:81:65:6b: 99:14:ca:bb:02:20:1c:4d:d0:ab:7b:89:76:7f:64:b9:8f:1d: 73:20:df:28:d5:82:7e:9c:8e:3f:6d:59:fc:82:ba:1a:a6:1f: 6e:0e:26:96:c2:4b:38:42:f9:b3:b7:f9:9f:0d:ae:72:b5:43: dd:04:aa:f4:20:6a:4a:2b:ea:c2:d2:50:4c:c3:c6:a1:d4:32: b7:e9:35:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29hUqmI3Ub2rpLw8j2BACMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4MTc4MjQzYTA4NjZiMDkxMjcyZDFlMWViNDUxZTcxZTQx M2I5OWEwHhcNMjYwMTI1MjEwMTIwWhcNMjYwMTI2MjEwMTIwWjAzMTEwLwYDVQQD EygwMDM1YjAwMmYxYWRhYWUzODc3ZmRkZDkzY2M1ODM2MzAzZDk3YTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRZTNWOVP5hOoL9ueQJj10TJaiNk 7WMFZXHzANai3BE04v6s9RYDCJqCZVDTAsiFD8jlKCPXWWbrkkbQXpZAOwTZyW0/ +LYqlYiJY4I9b7czIk99t6DOyOc7+Ici/4iuPWxQ6p8cM8BFQSPpV2CJx4gADokr KtKBGSPfONiWhOr2oQi7wRN2rG5sUafa+SwSjAWt6L6/tOY7DAXjVTnNge/pe1AN f6A2CA8UJZFZQqISqEcgMqV1kBPbEcEXH3qGUbphbTfN936GK814uTjmZWAf7aX4 c3K6n94/IVNQYTK82nY47wkk0Hz00pTBMJMTyA7ICmKRiwIBJQqoaZk+SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAA1sALxrarjh3/d2TzFg2MD2XpFMB8GA1UdIwQY MBaAFCgXgkOghmsJEnLR4etFHnHkE7maMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0JlQ1E2Q0dhd2tTY3RIaDYwVWVjZVFUdVpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS83NDdkYjgtYWM1Ny00NmE4LWI2MzIt NmNlM2MwM2ExMzRjLzEvS0JlQ1E2Q0dhd2tTY3RIaDYwVWVjZVFUdVpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS83NDdkYjgtYWM1Ny00NmE4LWI2MzItNmNlM2MwM2ExMzRj LzEvS0JlQ1E2Q0dhd2tTY3RIaDYwVWVjZVFUdVpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw3j09nzr il25l4kvvch9s749sX3FixPkVDq4fY3mBy9Ujh7uz5lr61V7kM0FPm/c3MkgLVum 80QLlsGjCk+ileMGoBwWfg1uJUTVlKFTcU6hvBVOiWfdaAKrHSGk55jC1AJs/HHl 8BaIGKM+5liUr9g66HKqv7kvQIgxBzCtUOlGtdP9Sa6ef5Tz8utuifDhUmYIpMRZ lUO/jCKejzBuwFGCFDSi3vwT2RME5t4kQIqIgWVrmRTKuwIgHE3Qq3uJdn9kuY8d cyDfKNWCfpyOP21Z/IK6GqYfbg4mlsJLOEL5s7f5nw2ucrVD3QSq9CBqSivqwtJQ TMPGodQyt+k1ZA== -----END CERTIFICATE-----Generated at Mon Jan 26 05:57:08 2026 by rpki-client