This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft File: koDT5GcpaPhuiVXbYgy3ZdudcUI.mft (raw, json) Hash identifier: rVOb4L+f0Go9bM12mY0PFDaRtf2jq05gKQH6zvW/wRY= Subject key identifier: 5C:D3:C5:4B:26:A6:48:D5:10:11:47:84:71:DF:30:35:6A:CF:B5:21 Authority key identifier: 92:80:D3:E4:67:29:68:F8:6E:89:55:DB:62:0C:B7:65:DB:9D:71:42 Certificate issuer: /CN=9280d3e4672968f86e8955db620cb765db9d7142 Certificate serial: 019BF650D6E8D9B25816B57FFB86EA782BB5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koDT5GcpaPhuiVXbYgy3ZdudcUI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft Manifest number: 0C18 Signing time: Sun 25 Jan 2026 18:00:51 +0000 Manifest this update: Sun 25 Jan 2026 18:00:51 +0000 Manifest next update: Mon 26 Jan 2026 18:00:51 +0000 Files and hashes: 1: koDT5GcpaPhuiVXbYgy3ZdudcUI.crl (hash: FSbopk5fwB36kCISKQE9d7XQvB3mqNBxZQNmd3egfE8=) 2: lDc3tS_p7tCgEhrNKf_-eSIcLqg.roa (hash: kzElkKos01LmCGpTnk/MyVTZjZ5HsnG3CnANkjfIhL8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft rsync://rpki.ripe.net/repository/DEFAULT/koDT5GcpaPhuiVXbYgy3ZdudcUI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:50:d6:e8:d9:b2:58:16:b5:7f:fb:86:ea:78:2b:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9280d3e4672968f86e8955db620cb765db9d7142 Validity Not Before: Jan 25 18:00:51 2026 GMT Not After : Jan 26 18:00:51 2026 GMT Subject: CN=5cd3c54b26a648d51011478471df30356acfb521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b3:90:ba:a9:d7:4e:32:ad:5f:b6:ea:27:5e: 31:be:c7:39:44:9c:7e:90:89:89:6e:9a:3f:84:62: 89:53:4d:ed:05:c5:c0:24:e7:04:3e:60:e8:bd:15: 26:8f:87:4e:0c:df:16:d5:2a:e2:80:11:2a:77:a6: c6:eb:e2:4a:72:96:d6:c1:a3:ca:8a:d5:fc:8d:e9: c6:13:2d:2d:64:fc:3d:e9:ca:65:cd:c4:7b:f5:03: 09:6d:95:fe:94:77:e8:e9:02:01:18:1b:91:4e:15: 8f:08:b2:61:43:7a:2d:0f:19:0a:4d:14:ee:e0:c6: da:fd:cc:ba:9c:00:30:b6:2b:e6:1d:7a:f4:af:6e: af:ed:47:3b:da:ec:19:5a:f3:c7:9e:70:97:f6:d6: 2e:a0:65:b6:c9:11:b3:ff:3e:8b:29:c3:a8:bb:81: cb:da:76:29:b1:af:9f:e6:95:30:a2:4e:f5:f0:d6: 40:60:19:39:52:19:89:52:da:ec:da:c8:5e:ea:b1: 5a:e5:49:4e:53:ad:73:78:ee:7d:b7:ba:03:42:84: ae:12:96:c9:1c:54:23:76:e5:d8:72:e5:00:11:e3: 1b:c0:1c:be:48:66:15:48:b4:a4:da:ba:92:62:d4: aa:43:89:40:b0:d6:06:be:75:bd:cf:de:b3:ed:33: 69:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:D3:C5:4B:26:A6:48:D5:10:11:47:84:71:DF:30:35:6A:CF:B5:21 X509v3 Authority Key Identifier: keyid:92:80:D3:E4:67:29:68:F8:6E:89:55:DB:62:0C:B7:65:DB:9D:71:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koDT5GcpaPhuiVXbYgy3ZdudcUI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:f4:b7:9f:64:91:f3:69:54:02:a5:99:20:1a:29:97:5b:87: 02:16:e4:67:c2:45:f5:17:2f:e2:39:64:08:b3:6e:6f:01:12: b9:56:fc:55:e6:99:f7:19:e1:87:08:7f:d3:99:09:72:9e:3b: 2b:18:40:cf:19:ae:2b:a7:f1:74:be:ac:d5:1a:df:1b:78:94: d3:28:ad:1c:bf:31:e8:e7:19:fd:7d:cc:81:3e:cc:31:68:c2: 20:4b:6a:51:ba:1d:2f:ab:ee:f6:51:81:40:bd:98:00:6d:d0: 1a:56:7f:7d:32:3a:f2:30:0e:aa:ac:76:2e:93:39:33:3d:23: 58:6b:f4:57:07:f3:4f:26:f6:9b:a2:7e:9e:8c:25:c0:ba:ed: 37:fb:18:e1:87:6e:a6:53:5c:f0:b2:8a:f9:62:70:ac:13:90: 51:5f:05:a2:7f:8b:69:48:80:ce:56:ea:60:a5:23:5d:c6:e5: aa:05:e2:3f:d1:d2:02:34:bb:4c:86:79:5a:38:aa:1f:37:1b: bb:81:e0:b8:63:33:f0:84:de:d6:76:54:1c:09:e9:33:fc:17: 2c:a6:5a:67:2f:24:97:30:b5:aa:d2:b0:81:f2:32:03:6b:3f: bb:a0:a0:0e:3c:e5:a0:56:0e:8a:8e:3f:da:20:84:6d:de:14: 4e:fb:9f:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UNbo2bJYFrV/+4bqeCu1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyODBkM2U0NjcyOTY4Zjg2ZTg5NTVkYjYyMGNiNzY1ZGI5 ZDcxNDIwHhcNMjYwMTI1MTgwMDUxWhcNMjYwMTI2MTgwMDUxWjAzMTEwLwYDVQQD Eyg1Y2QzYzU0YjI2YTY0OGQ1MTAxMTQ3ODQ3MWRmMzAzNTZhY2ZiNTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLOQuqnXTjKtX7bqJ14xvsc5RJx+ kImJbpo/hGKJU03tBcXAJOcEPmDovRUmj4dODN8W1SrigBEqd6bG6+JKcpbWwaPK itX8jenGEy0tZPw96cplzcR79QMJbZX+lHfo6QIBGBuRThWPCLJhQ3otDxkKTRTu 4Mba/cy6nAAwtivmHXr0r26v7Uc72uwZWvPHnnCX9tYuoGW2yRGz/z6LKcOou4HL 2nYpsa+f5pUwok718NZAYBk5UhmJUtrs2she6rFa5UlOU61zeO59t7oDQoSuEpbJ HFQjduXYcuUAEeMbwBy+SGYVSLSk2rqSYtSqQ4lAsNYGvnW9z96z7TNplQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFzTxUsmpkjVEBFHhHHfMDVqz7UhMB8GA1UdIwQY MBaAFJKA0+RnKWj4bolV22IMt2XbnXFCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva29EVDVHY3BhUGh1aVZYYllneTNaZHVkY1VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81OWRhNTAtYWVkYi00OTA2LWFmMTkt MDkwZmUzZGEyNDMzLzEva29EVDVHY3BhUGh1aVZYYllneTNaZHVkY1VJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi81OWRhNTAtYWVkYi00OTA2LWFmMTktMDkwZmUzZGEyNDMz LzEva29EVDVHY3BhUGh1aVZYYllneTNaZHVkY1VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFfS3n2SR 82lUAqWZIBopl1uHAhbkZ8JF9Rcv4jlkCLNubwESuVb8VeaZ9xnhhwh/05kJcp47 KxhAzxmuK6fxdL6s1RrfG3iU0yitHL8x6OcZ/X3MgT7MMWjCIEtqUbodL6vu9lGB QL2YAG3QGlZ/fTI68jAOqqx2LpM5Mz0jWGv0VwfzTyb2m6J+nowlwLrtN/sY4Ydu plNc8LKK+WJwrBOQUV8Fon+LaUiAzlbqYKUjXcblqgXiP9HSAjS7TIZ5WjiqHzcb u4HguGMz8ITe1nZUHAnpM/wXLKZaZy8klzC1qtKwgfIyA2s/u6CgDjzloFYOio4/ 2iCEbd4UTvufMw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:01:08 2026 by rpki-client