This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft File: KAabTsBHxsLYCkmS5CKLMXzIsgw.mft (raw, json) Hash identifier: /JawRkUoLZ5YHwMhqfDC1ZxsRDoqhyGPTv38uVSIm/c= Subject key identifier: 9C:75:3E:08:05:06:03:60:8C:E4:22:5D:D3:B1:3A:28:D3:4B:91:73 Authority key identifier: 28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C Certificate issuer: /CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c Certificate serial: 019BF875F7A5FC123B90E05ACB2BAD5154BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft Manifest number: 10F8 Signing time: Mon 26 Jan 2026 04:00:39 +0000 Manifest this update: Mon 26 Jan 2026 04:00:39 +0000 Manifest next update: Tue 27 Jan 2026 04:00:39 +0000 Files and hashes: 1: KAabTsBHxsLYCkmS5CKLMXzIsgw.crl (hash: 7mO34Y1bez7agyEH0eVYtIUevPjPb25f5C8lgUAd8m8=) 2: Rmp_9MM7V4RosyhvB1k5klKEX-U.roa (hash: WJrFVR/skZVXQabPx1ss/hhLdnIXcPvdR9wwm+o94z8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:75:f7:a5:fc:12:3b:90:e0:5a:cb:2b:ad:51:54:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c Validity Not Before: Jan 26 04:00:39 2026 GMT Not After : Jan 27 04:00:39 2026 GMT Subject: CN=9c753e08050603608ce4225dd3b13a28d34b9173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2d:e8:8f:42:61:ed:bc:90:d9:c9:4a:a8:06: f7:8e:d9:4d:aa:9f:f1:b1:a9:38:2c:ad:f5:09:f9: cd:0c:53:93:65:22:47:2f:71:db:17:d8:79:91:c9: 09:b2:f6:d2:6a:99:d6:93:0d:6d:a3:4a:57:7f:2a: ff:2c:88:3c:ab:67:b7:87:d9:c6:38:f6:db:2d:19: 92:db:c2:fe:c8:87:81:08:f3:5c:b3:90:28:1e:91: fd:e9:19:9a:d4:f8:7e:2d:5c:c0:90:f4:fe:83:1c: 44:08:98:7f:6b:a9:be:e5:a2:a0:38:27:2f:4a:67: f1:49:f2:e1:f5:2c:f7:04:82:33:ba:60:b5:5e:3e: b0:45:78:d8:cb:57:10:ac:bd:fa:2f:be:b2:12:eb: 76:49:6c:62:dd:64:83:0a:b8:89:1d:b9:df:db:69: 9e:d4:9a:b3:ec:ce:5f:cb:3c:80:a7:a6:ad:97:06: 13:73:e8:b9:56:02:d4:e8:09:fc:06:de:ea:24:96: 85:0b:46:d7:2d:71:1f:c5:ce:29:85:a3:3f:1f:ee: 70:37:b6:d5:25:4c:d4:8b:e5:1e:26:34:f8:18:9f: f6:1b:23:33:00:c2:20:b4:fb:fe:5a:ac:e4:56:8d: 9b:b1:b1:0d:ec:b6:bd:82:33:8c:f1:19:f0:d0:7c: f0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:75:3E:08:05:06:03:60:8C:E4:22:5D:D3:B1:3A:28:D3:4B:91:73 X509v3 Authority Key Identifier: keyid:28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:11:26:88:7d:a4:81:7a:51:68:b7:a6:7c:02:74:5a:9a:9e: dc:11:ab:64:4b:fb:73:48:16:f9:a6:cb:ab:c5:4b:d0:fe:71: 59:ba:34:18:bb:a5:44:de:6a:46:28:22:09:08:24:53:c5:6d: 27:d9:91:d1:7e:00:1f:b2:81:2a:31:49:68:17:31:63:6b:f6: a1:7f:de:b0:44:df:b1:1a:97:9f:3b:bb:df:84:6e:35:14:96: 6b:b7:be:c4:dc:44:39:37:8a:29:b4:40:17:e2:e1:f6:fa:9e: e6:4d:3f:a9:9b:26:2e:e8:3e:10:66:86:a0:5e:63:d7:00:7f: 54:8b:3d:52:7b:8c:7e:e7:62:ec:6d:20:df:2d:df:54:9f:08: b2:87:f6:94:fa:f4:a8:f9:0c:79:72:bb:5c:a4:be:af:fa:77: 84:92:6d:d0:cb:77:ee:8e:77:bb:0d:79:9b:4a:9a:34:22:5d: 62:07:e9:1b:0c:1b:e5:73:22:83:fd:d4:53:e9:5c:cf:84:f0: d3:63:ad:6e:9f:22:60:ac:86:b3:cc:65:33:9c:84:b8:67:9d: c0:10:4e:d9:1d:db:65:9f:c5:15:26:35:28:f5:f9:e5:a7:b8: 02:82:d1:92:06:82:26:3a:78:e5:d1:b7:ea:d1:b2:d8:24:03: 37:86:9f:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4dfel/BI7kOBayyutUVS+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4MDY5YjRlYzA0N2M2YzJkODBhNDk5MmU0MjI4YjMxN2Nj OGIyMGMwHhcNMjYwMTI2MDQwMDM5WhcNMjYwMTI3MDQwMDM5WjAzMTEwLwYDVQQD Eyg5Yzc1M2UwODA1MDYwMzYwOGNlNDIyNWRkM2IxM2EyOGQzNGI5MTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApi3oj0Jh7byQ2clKqAb3jtlNqp/x sak4LK31CfnNDFOTZSJHL3HbF9h5kckJsvbSapnWkw1to0pXfyr/LIg8q2e3h9nG OPbbLRmS28L+yIeBCPNcs5AoHpH96Rma1Ph+LVzAkPT+gxxECJh/a6m+5aKgOCcv SmfxSfLh9Sz3BIIzumC1Xj6wRXjYy1cQrL36L76yEut2SWxi3WSDCriJHbnf22me 1Jqz7M5fyzyAp6atlwYTc+i5VgLU6An8Bt7qJJaFC0bXLXEfxc4phaM/H+5wN7bV JUzUi+UeJjT4GJ/2GyMzAMIgtPv+WqzkVo2bsbEN7La9gjOM8Rnw0HzwvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJx1PggFBgNgjOQiXdOxOijTS5FzMB8GA1UdIwQY MBaAFCgGm07AR8bC2ApJkuQiizF8yLIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0FhYlRzQkh4c0xZQ2ttUzVDS0xNWHpJc2d3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8wMjQ1NTQtN2FhNi00YzlmLWE0ODct ZGY3YjQ1YmU0NmM3LzEvS0FhYlRzQkh4c0xZQ2ttUzVDS0xNWHpJc2d3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8wMjQ1NTQtN2FhNi00YzlmLWE0ODctZGY3YjQ1YmU0NmM3 LzEvS0FhYlRzQkh4c0xZQ2ttUzVDS0xNWHpJc2d3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaBEmiH2k gXpRaLemfAJ0Wpqe3BGrZEv7c0gW+abLq8VL0P5xWbo0GLulRN5qRigiCQgkU8Vt J9mR0X4AH7KBKjFJaBcxY2v2oX/esETfsRqXnzu734RuNRSWa7e+xNxEOTeKKbRA F+Lh9vqe5k0/qZsmLug+EGaGoF5j1wB/VIs9UnuMfudi7G0g3y3fVJ8Isof2lPr0 qPkMeXK7XKS+r/p3hJJt0Mt37o53uw15m0qaNCJdYgfpGwwb5XMig/3UU+lcz4Tw 02Otbp8iYKyGs8xlM5yEuGedwBBO2R3bZZ/FFSY1KPX55ae4AoLRkgaCJjp45dG3 6tGy2CQDN4afmA== -----END CERTIFICATE-----Generated at Mon Jan 26 07:45:23 2026 by rpki-client