This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft File: RK1W7mAdrD36Yd_lLL9bALe3opA.mft (raw, json) Hash identifier: QS0GEe+rmFLLij87yM1ZQr4dKxI7hTumIkKJVSR0KRc= Subject key identifier: 24:6E:10:ED:2F:67:F8:0B:B5:AB:C0:AF:BA:02:06:2D:03:83:14:2B Authority key identifier: 44:AD:56:EE:60:1D:AC:3D:FA:61:DF:E5:2C:BF:5B:00:B7:B7:A2:90 Certificate issuer: /CN=44ad56ee601dac3dfa61dfe52cbf5b00b7b7a290 Certificate serial: 019BF8AD30E1A3EBFB6EDA1090EE2EC7E4D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft Manifest number: 0BDA Signing time: Mon 26 Jan 2026 05:00:58 +0000 Manifest this update: Mon 26 Jan 2026 05:00:58 +0000 Manifest next update: Tue 27 Jan 2026 05:00:58 +0000 Files and hashes: 1: KYrFJEDEjhc9HhmYSiPT-yYtVPQ.roa (hash: /AaiErA0b5IK+9x0vkOcwB+KnCvGEkMNKJApI/jbN6I=) 2: RK1W7mAdrD36Yd_lLL9bALe3opA.crl (hash: ttolhegSHnTMLLe8laq3w/v2DIcza8rSbekyaeP2ZhE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft rsync://rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:30:e1:a3:eb:fb:6e:da:10:90:ee:2e:c7:e4:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44ad56ee601dac3dfa61dfe52cbf5b00b7b7a290 Validity Not Before: Jan 26 05:00:58 2026 GMT Not After : Jan 27 05:00:58 2026 GMT Subject: CN=246e10ed2f67f80bb5abc0afba02062d0383142b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a1:49:f0:b9:73:cc:78:48:9e:1c:b7:2d:bb: 27:21:9b:cd:94:f5:73:5b:34:41:1a:52:74:1e:80: 41:76:d8:7e:89:8b:f2:83:1e:f7:e3:7d:57:0b:e3: af:5e:bb:94:58:4f:ba:ce:33:51:46:2e:7d:de:74: c9:65:63:25:83:c1:32:ff:c3:46:5a:32:39:44:c2: 3d:92:7a:2f:d1:e6:53:80:ab:6e:bf:78:87:fd:a6: 0a:9f:65:34:ae:5b:ec:b8:37:d3:eb:34:91:e3:4f: 34:45:da:d8:76:1b:72:b0:18:1a:67:ca:d4:95:64: 8b:5f:81:11:82:b2:bc:71:7f:bb:59:57:99:80:79: a2:e9:c4:ca:4d:0b:38:da:50:d7:b2:27:b0:bd:da: 23:b9:c7:ec:ee:89:9b:1f:16:b4:6c:68:e9:7f:b9: b0:25:fd:71:5d:83:5b:54:75:2a:df:bb:a8:e2:24: e2:bf:9a:9c:aa:eb:fc:dd:01:76:50:f9:2c:da:48: c2:74:3b:0f:c3:7a:25:3e:1b:fd:aa:9d:1b:9d:23: 28:4d:30:4c:12:9d:46:38:28:7c:0c:89:b4:e7:ad: 48:61:3f:c2:fd:8e:45:1f:13:27:0e:86:01:21:f2: 0b:87:c4:35:73:08:c5:8f:54:da:cc:78:34:cb:06: 2f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:6E:10:ED:2F:67:F8:0B:B5:AB:C0:AF:BA:02:06:2D:03:83:14:2B X509v3 Authority Key Identifier: keyid:44:AD:56:EE:60:1D:AC:3D:FA:61:DF:E5:2C:BF:5B:00:B7:B7:A2:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:f7:ff:a0:d4:43:4a:ee:d0:bb:06:ce:37:15:b7:1b:f4:63: f7:21:f2:fd:a3:a2:1d:a2:2a:d8:f0:f0:7d:b8:92:94:b0:e7: 1c:40:17:59:b9:81:a4:2d:c1:26:37:82:f6:b4:82:d5:3d:95: 70:84:42:43:c0:f8:4c:29:b6:3b:a3:dc:07:1b:9f:39:1b:4a: 11:91:22:ba:d0:9f:3e:e4:7a:c2:a9:6a:29:41:45:d5:4b:d9: b9:59:91:be:e0:97:8f:f9:fe:5d:f1:c4:e6:2b:5d:68:74:48: 8a:cd:f7:d0:6d:7a:93:63:90:93:cb:b6:eb:16:81:cf:ac:45: cf:f4:64:cb:38:b1:c3:df:ce:f1:85:21:23:d9:f2:27:c6:29: 24:18:f2:0a:e0:e6:c2:5e:dc:9e:07:47:ea:e7:e9:bb:3f:ca: 24:82:e7:c6:17:86:55:e4:70:fe:40:9b:79:aa:a5:63:9f:6c: 07:0d:51:1f:bc:ae:da:e6:fb:2c:1a:54:f0:f4:3e:d0:1c:72: 7f:cc:bb:2c:dd:39:fa:a4:0d:96:7a:9e:e9:97:05:e7:36:bb: 54:15:4f:66:86:0a:c4:a9:e3:7f:95:17:19:05:5b:2d:34:77: f2:0d:b6:ff:28:29:a1:6e:bb:81:9a:98:c4:8b:4c:6f:51:cd: bf:ee:7e:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rTDho+v7btoQkO4ux+TYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0YWQ1NmVlNjAxZGFjM2RmYTYxZGZlNTJjYmY1YjAwYjdi N2EyOTAwHhcNMjYwMTI2MDUwMDU4WhcNMjYwMTI3MDUwMDU4WjAzMTEwLwYDVQQD EygyNDZlMTBlZDJmNjdmODBiYjVhYmMwYWZiYTAyMDYyZDAzODMxNDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aFJ8LlzzHhInhy3LbsnIZvNlPVz WzRBGlJ0HoBBdth+iYvygx73431XC+OvXruUWE+6zjNRRi593nTJZWMlg8Ey/8NG WjI5RMI9knov0eZTgKtuv3iH/aYKn2U0rlvsuDfT6zSR4080RdrYdhtysBgaZ8rU lWSLX4ERgrK8cX+7WVeZgHmi6cTKTQs42lDXsiewvdojucfs7ombHxa0bGjpf7mw Jf1xXYNbVHUq37uo4iTiv5qcquv83QF2UPks2kjCdDsPw3olPhv9qp0bnSMoTTBM Ep1GOCh8DIm0561IYT/C/Y5FHxMnDoYBIfILh8Q1cwjFj1TazHg0ywYv1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCRuEO0vZ/gLtavAr7oCBi0DgxQrMB8GA1UdIwQY MBaAFEStVu5gHaw9+mHf5Sy/WwC3t6KQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUksxVzdtQWRyRDM2WWRfbExMOWJBTGUzb3BBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9jZmE1YjAtNzk4OC00ZmU5LTlkZDUt ZWVkMjA0ZWQ5NzgwLzEvUksxVzdtQWRyRDM2WWRfbExMOWJBTGUzb3BBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9jZmE1YjAtNzk4OC00ZmU5LTlkZDUtZWVkMjA0ZWQ5Nzgw LzEvUksxVzdtQWRyRDM2WWRfbExMOWJBTGUzb3BBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADvf/oNRD Su7QuwbONxW3G/Rj9yHy/aOiHaIq2PDwfbiSlLDnHEAXWbmBpC3BJjeC9rSC1T2V cIRCQ8D4TCm2O6PcBxufORtKEZEiutCfPuR6wqlqKUFF1UvZuVmRvuCXj/n+XfHE 5itdaHRIis330G16k2OQk8u26xaBz6xFz/Rkyzixw9/O8YUhI9nyJ8YpJBjyCuDm wl7cngdH6ufpuz/KJILnxheGVeRw/kCbeaqlY59sBw1RH7yu2ub7LBpU8PQ+0Bxy f8y7LN05+qQNlnqe6ZcF5za7VBVPZoYKxKnjf5UXGQVbLTR38g22/ygpoW67gZqY xItMb1HNv+5+Tw== -----END CERTIFICATE-----Generated at Mon Jan 26 06:23:48 2026 by rpki-client