This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft File: ksWu7-nRJuw2Et_ywIITVLFbu6g.mft (raw, json) Hash identifier: 4QDGs64nHclnovSPyj7LvbFkoLCXQUcXyRpSyMWBy0E= Subject key identifier: AE:0D:89:8B:25:3E:15:3B:D6:81:0F:F3:DB:C2:A3:75:B3:88:0A:99 Authority key identifier: 92:C5:AE:EF:E9:D1:26:EC:36:12:DF:F2:C0:82:13:54:B1:5B:BB:A8 Certificate issuer: /CN=92c5aeefe9d126ec3612dff2c0821354b15bbba8 Certificate serial: 019BF72C8358F169D2651369C25374489935 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft Manifest number: 04BD Signing time: Sun 25 Jan 2026 22:00:48 +0000 Manifest this update: Sun 25 Jan 2026 22:00:48 +0000 Manifest next update: Mon 26 Jan 2026 22:00:48 +0000 Files and hashes: 1: 3mjwWXgkTmZynhO0MwwYYfeUgYQ.roa (hash: LoggYH1kpzYGA8Tu1WeRvVr5FGcv4gtJiNCI/Z5f+Ho=) 2: ksWu7-nRJuw2Et_ywIITVLFbu6g.crl (hash: JB9yShYx8Fpbm8HlwG+pggSvE9OUANrcsURXAjuJyRE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.crl rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:83:58:f1:69:d2:65:13:69:c2:53:74:48:99:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92c5aeefe9d126ec3612dff2c0821354b15bbba8 Validity Not Before: Jan 25 22:00:48 2026 GMT Not After : Jan 26 22:00:48 2026 GMT Subject: CN=ae0d898b253e153bd6810ff3dbc2a375b3880a99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:4a:d2:7f:a4:8a:dd:09:e9:4d:eb:0b:24:82: d5:be:6b:8c:0b:8e:4c:e3:f7:b0:2e:07:18:3e:0c: e6:8d:66:4c:05:bc:52:6e:42:8a:3d:2b:8d:12:d3: d2:60:3e:50:08:4e:88:db:1f:d4:73:1d:ea:21:de: 0a:4a:8d:18:7f:62:20:f5:70:69:9a:58:fc:ce:de: af:9a:f2:c2:28:60:f1:43:e8:5e:aa:cc:ff:84:66: 88:68:2d:4e:74:15:17:7e:1b:ad:35:76:6d:6a:d4: 80:23:f5:69:64:b0:59:15:de:cb:8f:f5:c7:39:f4: 2c:8c:c4:9d:bd:56:77:49:5f:9b:7b:e7:34:16:8b: 19:08:0c:64:5c:92:1b:ef:9e:dd:2a:37:f4:4b:db: 51:1a:bd:21:11:6d:14:df:47:5b:62:80:3a:0b:95: 96:3e:9f:da:1d:84:bf:d6:8e:e2:d1:6a:f5:4e:23: ad:cb:a4:e3:08:fc:51:68:13:fb:e6:f1:b6:22:46: 96:5c:ad:3c:8d:99:ba:84:34:05:c6:5b:dc:e9:3f: 75:c0:84:ae:95:11:9c:d1:23:56:cd:c9:d3:c0:79: 74:e2:1b:dc:7a:9d:f8:1f:94:a5:aa:c6:8f:bd:27: e8:16:30:35:94:72:f2:1b:ab:bc:8e:1c:9b:69:f2: c9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:0D:89:8B:25:3E:15:3B:D6:81:0F:F3:DB:C2:A3:75:B3:88:0A:99 X509v3 Authority Key Identifier: keyid:92:C5:AE:EF:E9:D1:26:EC:36:12:DF:F2:C0:82:13:54:B1:5B:BB:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:2f:56:20:99:ce:fa:58:8e:44:d6:34:67:0c:8e:4c:14:a0: b4:15:7c:43:56:6d:58:85:f2:63:bc:bd:dc:7a:28:f0:2a:a6: 08:87:33:e7:52:7f:d4:5c:6b:a9:59:f0:0c:e2:94:a9:4e:02: 44:b4:45:c8:f8:51:8b:dd:e1:69:c5:26:13:b4:c2:d0:7c:9f: a3:b8:b8:8a:99:0a:6b:5d:fe:24:5c:18:b5:79:92:fc:bb:cd: 69:aa:19:8a:53:b8:3e:8e:8e:dd:40:23:fd:47:c6:f1:83:5e: b5:54:1b:31:2f:f7:85:71:79:8c:82:38:19:c2:f4:a9:83:dd: 57:68:3e:76:30:bb:9f:4f:f4:e5:50:90:88:20:c1:ad:f7:9a: 22:2e:03:fd:4b:18:96:7f:45:22:69:b2:24:7f:54:e3:f2:02: a1:48:7a:47:e7:0d:e2:38:50:4e:e0:73:19:93:58:85:af:3b: c1:bf:de:72:5e:0a:1a:87:f9:6d:ae:8d:01:eb:da:08:f1:a0: 07:85:a4:dc:e1:8e:9a:1e:ae:f3:af:cb:39:24:82:ea:a5:d4: e9:39:15:c1:bf:f1:a7:26:a8:01:4b:f2:29:a9:3b:6f:c0:76: 3e:56:da:bc:61:ca:84:82:3d:ea:ed:dd:18:33:f6:7e:63:89: 52:ab:a6:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LINY8WnSZRNpwlN0SJk1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyYzVhZWVmZTlkMTI2ZWMzNjEyZGZmMmMwODIxMzU0YjE1 YmJiYTgwHhcNMjYwMTI1MjIwMDQ4WhcNMjYwMTI2MjIwMDQ4WjAzMTEwLwYDVQQD EyhhZTBkODk4YjI1M2UxNTNiZDY4MTBmZjNkYmMyYTM3NWIzODgwYTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ErSf6SK3QnpTesLJILVvmuMC45M 4/ewLgcYPgzmjWZMBbxSbkKKPSuNEtPSYD5QCE6I2x/Ucx3qId4KSo0Yf2Ig9XBp mlj8zt6vmvLCKGDxQ+heqsz/hGaIaC1OdBUXfhutNXZtatSAI/VpZLBZFd7Lj/XH OfQsjMSdvVZ3SV+be+c0FosZCAxkXJIb757dKjf0S9tRGr0hEW0U30dbYoA6C5WW Pp/aHYS/1o7i0Wr1TiOty6TjCPxRaBP75vG2IkaWXK08jZm6hDQFxlvc6T91wISu lRGc0SNWzcnTwHl04hvcep34H5SlqsaPvSfoFjA1lHLyG6u8jhybafLJ9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK4NiYslPhU71oEP89vCo3WziAqZMB8GA1UdIwQY MBaAFJLFru/p0SbsNhLf8sCCE1SxW7uoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3NXdTctblJKdXcyRXRfeXdJSVRWTEZidTZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC84YzQ5ZDEtOTAxNS00ZTNhLTg1YWMt NDlmNGY3ODkxMzViLzEva3NXdTctblJKdXcyRXRfeXdJSVRWTEZidTZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC84YzQ5ZDEtOTAxNS00ZTNhLTg1YWMtNDlmNGY3ODkxMzVi LzEva3NXdTctblJKdXcyRXRfeXdJSVRWTEZidTZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsC9WIJnO +liORNY0ZwyOTBSgtBV8Q1ZtWIXyY7y93Hoo8CqmCIcz51J/1FxrqVnwDOKUqU4C RLRFyPhRi93hacUmE7TC0Hyfo7i4ipkKa13+JFwYtXmS/LvNaaoZilO4Po6O3UAj /UfG8YNetVQbMS/3hXF5jII4GcL0qYPdV2g+djC7n0/05VCQiCDBrfeaIi4D/UsY ln9FImmyJH9U4/ICoUh6R+cN4jhQTuBzGZNYha87wb/ecl4KGof5ba6NAevaCPGg B4Wk3OGOmh6u86/LOSSC6qXU6TkVwb/xpyaoAUvyKak7b8B2PlbavGHKhII96u3d GDP2fmOJUqumAg== -----END CERTIFICATE-----Generated at Mon Jan 26 04:02:36 2026 by rpki-client