This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft File: 2KqsBZlqW0YUxu7a_-f49fmivGc.mft (raw, json) Hash identifier: GMu4B+mYlRIlsKlnFOs8/MzEw3YSGlvkofCF8N17o7w= Subject key identifier: 7B:2A:E3:45:06:D6:EE:CF:26:14:B1:F0:CB:CB:68:26:F7:F8:44:88 Authority key identifier: D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67 Certificate issuer: /CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67 Certificate serial: 019BF79A41178F89C41D2C72D440A868A936 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft Manifest number: 17ED Signing time: Mon 26 Jan 2026 00:00:40 +0000 Manifest this update: Mon 26 Jan 2026 00:00:40 +0000 Manifest next update: Tue 27 Jan 2026 00:00:40 +0000 Files and hashes: 1: 2KqsBZlqW0YUxu7a_-f49fmivGc.crl (hash: ELMTfF4NER45UGLsWI1xARvGmFQ+LsIl+xxFzRCqXpA=) 2: vM4pcQR4cpfxqBvoAa4ezpfAooA.roa (hash: q37j9EaxOdTgZgbNR9N/Sjv4ip1H9vll46kAjU29riM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:41:17:8f:89:c4:1d:2c:72:d4:40:a8:68:a9:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67 Validity Not Before: Jan 26 00:00:40 2026 GMT Not After : Jan 27 00:00:40 2026 GMT Subject: CN=7b2ae34506d6eecf2614b1f0cbcb6826f7f84488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:22:a9:47:ca:dd:3f:f2:26:91:44:47:17:06: 6d:84:6b:19:3d:b2:31:6d:8d:ba:6a:1b:67:b3:0a: 1b:1d:d2:33:fd:8e:c8:d0:c3:3e:68:59:00:64:02: a0:d4:90:91:0a:64:ca:af:5f:af:88:8d:8b:75:19: 4a:f5:df:68:c2:4c:b3:10:1c:6f:7a:e0:25:55:b2: a4:f9:89:d2:ae:ff:c2:13:5c:d6:29:d4:b5:7a:53: f9:2c:68:48:41:1c:0e:63:61:d8:77:a2:fb:1c:1d: 91:fb:28:5c:ec:ae:71:52:56:70:c7:54:82:7d:c8: 3a:a7:f5:2e:8b:7d:b5:d1:64:43:66:3d:20:34:81: 34:69:b3:02:ae:ac:8a:a7:01:65:4c:bc:2f:dd:ab: 33:86:1c:87:1b:c6:02:05:5d:82:00:b4:54:63:a7: b1:92:69:74:eb:aa:c1:97:11:d3:22:4b:20:a1:e7: 21:f2:c5:c9:52:f2:48:3f:d9:b4:26:12:89:d1:1b: 83:64:cf:32:8b:93:8b:fe:b1:04:e4:c9:22:6d:a0: 78:81:d0:4c:55:00:c7:4f:8f:4c:d3:6d:c3:c8:2a: d2:0a:a0:11:82:a7:7d:f8:b9:3d:4d:a0:79:1b:bb: 98:b6:b0:3f:b2:76:72:f5:fa:10:89:9d:c3:fc:b5: 92:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:2A:E3:45:06:D6:EE:CF:26:14:B1:F0:CB:CB:68:26:F7:F8:44:88 X509v3 Authority Key Identifier: keyid:D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:c9:19:80:28:41:ad:e1:55:83:a5:fa:29:d1:83:4e:ad:01: 4a:50:75:b4:b3:ba:6f:cc:6b:a5:7d:56:6a:b3:ad:6b:f2:1d: f9:cd:d0:fb:63:63:3e:bf:ac:90:d4:d6:6e:2f:12:f5:cd:ef: d0:8e:a2:7e:89:f3:1a:6e:06:4c:0a:4a:5d:6b:39:ff:37:5c: 58:2b:1f:aa:c4:d5:6f:f2:5b:f1:25:ec:de:8d:dd:ea:2c:9c: da:ab:a6:fd:0f:42:80:09:af:51:c7:43:93:58:75:5d:58:02: 2e:13:41:cc:fa:00:d1:18:19:e1:0d:e4:b3:b4:8c:f3:e7:04: 2b:1e:50:e4:23:06:80:65:7a:67:70:ff:50:00:04:3b:43:b1: 93:b9:98:a1:ac:e9:fa:22:a6:7e:b7:67:e1:8c:fb:40:0b:28: 18:fa:53:a0:ec:98:cd:fd:30:1a:62:e1:1c:02:63:86:68:f7: 63:45:4d:c8:5a:72:70:dc:4c:99:95:ec:23:ac:9f:66:e6:a7: 6d:c5:66:7a:9f:e4:84:0e:6f:67:54:b5:6d:4f:03:34:8d:75: 1b:5a:8b:43:9a:83:ce:d4:8a:d9:50:f0:90:87:70:07:3c:8b: d1:ee:8b:db:e8:67:b6:31:f3:d5:d1:c4:b8:e0:40:d4:55:07: 17:44:77:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mkEXj4nEHSxy1ECoaKk2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4YWFhYzA1OTk2YTViNDYxNGM2ZWVkYWZmZTdmOGY1Zjlh MmJjNjcwHhcNMjYwMTI2MDAwMDQwWhcNMjYwMTI3MDAwMDQwWjAzMTEwLwYDVQQD Eyg3YjJhZTM0NTA2ZDZlZWNmMjYxNGIxZjBjYmNiNjgyNmY3Zjg0NDg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiKpR8rdP/ImkURHFwZthGsZPbIx bY26ahtnswobHdIz/Y7I0MM+aFkAZAKg1JCRCmTKr1+viI2LdRlK9d9owkyzEBxv euAlVbKk+YnSrv/CE1zWKdS1elP5LGhIQRwOY2HYd6L7HB2R+yhc7K5xUlZwx1SC fcg6p/Uui3210WRDZj0gNIE0abMCrqyKpwFlTLwv3aszhhyHG8YCBV2CALRUY6ex kml066rBlxHTIksgoech8sXJUvJIP9m0JhKJ0RuDZM8yi5OL/rEE5MkibaB4gdBM VQDHT49M023DyCrSCqARgqd9+Lk9TaB5G7uYtrA/snZy9foQiZ3D/LWS6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHsq40UG1u7PJhSx8MvLaCb3+ESIMB8GA1UdIwQY MBaAFNiqrAWZaltGFMbu2v/n+PX5orxnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMktxc0JabHFXMFlVeHU3YV8tZjQ5Zm1pdkdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy85Mzg0MzAtMDdiNC00NWIzLTk0OTYt ZjUzZWUzMmVkODE2LzEvMktxc0JabHFXMFlVeHU3YV8tZjQ5Zm1pdkdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy85Mzg0MzAtMDdiNC00NWIzLTk0OTYtZjUzZWUzMmVkODE2 LzEvMktxc0JabHFXMFlVeHU3YV8tZjQ5Zm1pdkdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ8kZgChB reFVg6X6KdGDTq0BSlB1tLO6b8xrpX1WarOta/Id+c3Q+2NjPr+skNTWbi8S9c3v 0I6ifonzGm4GTApKXWs5/zdcWCsfqsTVb/Jb8SXs3o3d6iyc2qum/Q9CgAmvUcdD k1h1XVgCLhNBzPoA0RgZ4Q3ks7SM8+cEKx5Q5CMGgGV6Z3D/UAAEO0Oxk7mYoazp +iKmfrdn4Yz7QAsoGPpToOyYzf0wGmLhHAJjhmj3Y0VNyFpycNxMmZXsI6yfZuan bcVmep/khA5vZ1S1bU8DNI11G1qLQ5qDztSK2VDwkIdwBzyL0e6L2+hntjHz1dHE uOBA1FUHF0R3Og== -----END CERTIFICATE-----Generated at Mon Jan 26 06:24:07 2026 by rpki-client