This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.mft File: K8e1Hb81qkI5q9rVX5ZpRWWUAc8.mft (raw, json) Hash identifier: hFeO86wVt+rImvDitNmqfVpei6UO66MXzlZF2JBPzT8= Subject key identifier: 48:DE:44:E0:FA:2D:AB:E3:4B:C3:C9:1C:81:E8:0A:DB:69:32:C7:AB Authority key identifier: 2B:C7:B5:1D:BF:35:AA:42:39:AB:DA:D5:5F:96:69:45:65:94:01:CF Certificate issuer: /CN=2bc7b51dbf35aa4239abdad55f966945659401cf Certificate serial: 019BF3503AF76376A1177F5FE9D8D91EB918 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.mft Manifest number: 01B7 Signing time: Sun 25 Jan 2026 04:01:19 +0000 Manifest this update: Sun 25 Jan 2026 04:01:19 +0000 Manifest next update: Mon 26 Jan 2026 04:01:19 +0000 Files and hashes: 1: 86Fyb3G7SUYyzM6ueZuWLb_1Xuo.roa (hash: FgOm/4PuINnAyRzINOUNWX0n6lD1Ih45a+4EbNgehTY=) 2: K8e1Hb81qkI5q9rVX5ZpRWWUAc8.crl (hash: t6pSsLdeUeUdIBUx1jKz7SKG0jilodHrTiVWwNZ9p8M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.crl rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.mft rsync://rpki.ripe.net/repository/DEFAULT/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:50:3a:f7:63:76:a1:17:7f:5f:e9:d8:d9:1e:b9:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc7b51dbf35aa4239abdad55f966945659401cf Validity Not Before: Jan 25 04:01:19 2026 GMT Not After : Jan 26 04:01:19 2026 GMT Subject: CN=48de44e0fa2dabe34bc3c91c81e80adb6932c7ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:81:c9:12:c3:d5:d0:8b:5e:c6:6a:8f:83:aa: ab:7f:cf:37:70:10:6f:2a:0a:0e:b0:0a:3e:ee:02: 5c:9d:08:9e:0c:36:73:88:d3:65:bd:48:40:bb:5b: cb:04:a0:ab:d6:25:21:8f:64:4e:4c:80:04:ed:23: 92:a6:59:3d:d6:82:e6:95:f5:f3:20:6a:92:95:37: db:f9:ac:85:21:12:a9:12:94:dd:7a:ac:1e:ed:8d: c9:01:1f:fe:f4:fa:c6:7d:6a:ad:85:7f:ea:b0:dd: c8:38:07:d7:41:f4:9b:1a:52:c1:fb:08:7a:15:0c: d0:9f:8d:3e:9a:18:a6:ea:77:32:8a:d8:0c:d1:a0: ff:29:a7:bb:d4:2d:e8:7d:4e:d7:f4:50:c3:e9:d7: 65:5c:b0:d8:fe:41:a2:5e:77:94:41:6d:71:70:f6: 3f:74:78:66:bf:ed:8a:b0:e4:15:99:d2:41:0d:c4: c3:6e:9d:07:dd:8e:17:17:9c:f8:70:84:25:8a:84: 3f:97:b4:82:a6:7f:82:95:b1:c9:cb:5a:45:d0:a9: 52:8f:88:48:43:06:19:b7:a4:5d:af:a6:4c:57:ec: bd:93:cd:3d:8b:3b:b4:a2:13:e0:31:0c:2d:72:ab: df:a7:f7:bf:60:a1:ae:9a:e2:68:78:fc:a4:25:b3: 1f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:DE:44:E0:FA:2D:AB:E3:4B:C3:C9:1C:81:E8:0A:DB:69:32:C7:AB X509v3 Authority Key Identifier: keyid:2B:C7:B5:1D:BF:35:AA:42:39:AB:DA:D5:5F:96:69:45:65:94:01:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:11:ba:35:3d:8a:75:c8:b8:0b:b9:5f:d8:c6:c0:b4:a5:e5: e8:7d:67:2b:56:9a:82:fa:41:67:e4:2a:3d:de:77:76:0e:4e: ba:cc:00:0a:d8:68:c0:e1:50:f8:11:75:d3:e2:b1:a1:a5:d3: 0f:a7:ee:8a:7f:3e:a7:5b:a0:b6:37:01:4e:30:7e:61:ea:6d: 8c:a1:ca:6f:db:81:1d:26:05:f8:f4:60:c7:be:77:4f:f1:b5: 9f:e6:39:11:e5:a4:ad:6d:0c:4c:74:9a:b6:00:ec:e2:83:70: ee:cd:fd:48:4a:9d:bf:b2:15:87:02:fd:83:71:b7:8e:cf:83: 38:76:a2:29:53:b2:23:19:a0:df:00:76:33:2a:c0:90:0a:63: 31:87:8e:6f:11:40:11:c3:f9:e6:13:53:fd:c3:ac:6a:92:5e: 0b:2d:48:0d:1d:36:85:07:1b:e1:d5:9b:3b:44:39:3b:0c:a8: a2:5f:ed:22:02:0a:6c:18:c5:11:90:d6:74:29:93:9c:34:88: 82:61:18:84:7d:b2:46:99:3b:69:95:5c:e7:8b:b5:a1:e0:fe: 78:e1:ac:5f:fe:1b:52:25:87:a7:97:6b:8d:fb:2c:5f:7a:50: 5f:80:4e:09:ed:06:84:96:1c:71:11:13:bc:42:f7:0f:a9:40: 14:a5:65:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzUDr3Y3ahF39f6djZHrkYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiYzdiNTFkYmYzNWFhNDIzOWFiZGFkNTVmOTY2OTQ1NjU5 NDAxY2YwHhcNMjYwMTI1MDQwMTE5WhcNMjYwMTI2MDQwMTE5WjAzMTEwLwYDVQQD Eyg0OGRlNDRlMGZhMmRhYmUzNGJjM2M5MWM4MWU4MGFkYjY5MzJjN2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloHJEsPV0ItexmqPg6qrf883cBBv KgoOsAo+7gJcnQieDDZziNNlvUhAu1vLBKCr1iUhj2ROTIAE7SOSplk91oLmlfXz IGqSlTfb+ayFIRKpEpTdeqwe7Y3JAR/+9PrGfWqthX/qsN3IOAfXQfSbGlLB+wh6 FQzQn40+mhim6ncyitgM0aD/Kae71C3ofU7X9FDD6ddlXLDY/kGiXneUQW1xcPY/ dHhmv+2KsOQVmdJBDcTDbp0H3Y4XF5z4cIQlioQ/l7SCpn+ClbHJy1pF0KlSj4hI QwYZt6Rdr6ZMV+y9k809izu0ohPgMQwtcqvfp/e/YKGumuJoePykJbMfwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEjeROD6LavjS8PJHIHoCttpMserMB8GA1UdIwQY MBaAFCvHtR2/NapCOava1V+WaUVllAHPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzhlMUhiODFxa0k1cTlyVlg1WnBSV1dVQWM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9iMWI5MWMtYjUyYi00YmRmLWJhMGQt MmEzODEyNGJhZDhjLzEvSzhlMUhiODFxa0k1cTlyVlg1WnBSV1dVQWM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9iMWI5MWMtYjUyYi00YmRmLWJhMGQtMmEzODEyNGJhZDhj LzEvSzhlMUhiODFxa0k1cTlyVlg1WnBSV1dVQWM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKRG6NT2K dci4C7lf2MbAtKXl6H1nK1aagvpBZ+QqPd53dg5OuswACthowOFQ+BF10+KxoaXT D6fuin8+p1ugtjcBTjB+YeptjKHKb9uBHSYF+PRgx753T/G1n+Y5EeWkrW0MTHSa tgDs4oNw7s39SEqdv7IVhwL9g3G3js+DOHaiKVOyIxmg3wB2MyrAkApjMYeObxFA EcP55hNT/cOsapJeCy1IDR02hQcb4dWbO0Q5Owyool/tIgIKbBjFEZDWdCmTnDSI gmEYhH2yRpk7aZVc54u1oeD+eOGsX/4bUiWHp5drjfssX3pQX4BOCe0GhJYccRET vEL3D6lAFKVleg== -----END CERTIFICATE-----Generated at Sun Jan 25 11:46:18 2026 by rpki-client