This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft File: KD3ro7EwXJpI03S6Rzab8fgn7gg.mft (raw, json) Hash identifier: tLrL6vkkliVKRwYBaTy//PysG4X0sWeVab0wNOrOR2M= Subject key identifier: D4:C3:3B:2A:25:37:3B:70:6C:3F:21:38:46:43:4A:12:1F:E1:BA:2A Authority key identifier: 28:3D:EB:A3:B1:30:5C:9A:48:D3:74:BA:47:36:9B:F1:F8:27:EE:08 Certificate issuer: /CN=283deba3b1305c9a48d374ba47369bf1f827ee08 Certificate serial: 019BF72D57543F94C3EC73798F9E0439E6D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KD3ro7EwXJpI03S6Rzab8fgn7gg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft Manifest number: 0B37 Signing time: Sun 25 Jan 2026 22:01:42 +0000 Manifest this update: Sun 25 Jan 2026 22:01:42 +0000 Manifest next update: Mon 26 Jan 2026 22:01:42 +0000 Files and hashes: 1: KD3ro7EwXJpI03S6Rzab8fgn7gg.crl (hash: tDfUAVkBOlhTi2CtLWoTkKTe/cwd2LZi/oEX0J0JyIM=) 2: OQ2Ehq2LNnkoW69ybvSmF7Wii1o.roa (hash: R70NXYY+s+0zLQXH0/qTZ8MSPj794apmQlMiNuT9CX0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft rsync://rpki.ripe.net/repository/DEFAULT/KD3ro7EwXJpI03S6Rzab8fgn7gg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:57:54:3f:94:c3:ec:73:79:8f:9e:04:39:e6:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=283deba3b1305c9a48d374ba47369bf1f827ee08 Validity Not Before: Jan 25 22:01:42 2026 GMT Not After : Jan 26 22:01:42 2026 GMT Subject: CN=d4c33b2a25373b706c3f213846434a121fe1ba2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1d:84:04:85:8b:8a:df:bb:ca:96:7c:59:2d: 49:75:e9:2b:61:08:d9:1d:bf:cb:66:a6:b7:1c:98: c5:ce:60:5b:ad:d9:69:19:ac:97:74:bc:74:f3:aa: 90:c1:a7:37:10:08:8b:23:2b:4e:e4:3b:63:91:55: 15:5c:97:12:51:6f:5a:4d:ba:1e:db:a6:a9:5c:24: dd:d6:78:b3:36:94:66:48:61:e5:e8:d9:8c:4b:53: 16:82:d4:ec:59:bb:1f:f8:fb:9c:6f:9c:e8:b4:d1: 22:41:b2:6e:db:ec:df:8e:22:55:f2:7d:02:e5:57: dd:27:8c:4e:e3:d8:d8:d5:91:cb:99:96:ca:ca:1c: 46:c3:ad:71:24:10:24:83:c2:41:08:c3:07:e1:4c: b3:45:76:2b:52:6b:64:4e:82:09:ab:2b:d1:58:8a: 63:45:9b:9e:3e:6f:58:3e:eb:07:ca:b8:71:b4:4b: 7e:61:b6:06:6a:12:f1:92:e1:bf:87:39:ac:bb:81: 79:8d:0f:1c:5b:82:27:e2:26:3d:9a:34:82:eb:51: e6:17:39:df:64:60:f8:09:f3:3a:4a:c5:1b:b0:65: ed:cb:53:e6:b2:06:f6:64:eb:ff:22:cf:65:e4:36: 35:82:02:93:38:18:98:71:d6:10:81:2d:ad:16:bd: f1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:C3:3B:2A:25:37:3B:70:6C:3F:21:38:46:43:4A:12:1F:E1:BA:2A X509v3 Authority Key Identifier: keyid:28:3D:EB:A3:B1:30:5C:9A:48:D3:74:BA:47:36:9B:F1:F8:27:EE:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KD3ro7EwXJpI03S6Rzab8fgn7gg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:0d:05:b3:e1:b8:45:1a:e2:92:c1:0c:92:ea:41:3c:0e:19: ee:ba:67:83:f4:02:33:3c:27:f8:b6:db:b9:c4:84:52:3d:72: a9:6a:dc:f5:0a:8f:ba:7e:6f:02:1f:38:18:a2:e4:18:84:f2: d1:55:e6:db:8a:d1:f8:08:2a:a8:28:87:a0:1d:dd:ab:31:31: cd:5f:83:d8:c0:19:19:b7:3e:c3:c2:87:74:40:e4:72:0a:87: 81:6b:15:dc:d1:15:59:bf:39:a4:b9:df:de:d3:8e:ac:c0:78: 91:2b:a8:fc:62:59:9b:6d:46:b0:86:16:e4:1e:23:7f:94:47: 1d:21:3f:da:90:a9:54:36:fc:9e:58:75:e7:26:2f:9a:2b:c9: 2e:62:1e:92:9b:a2:b5:3f:22:42:70:03:65:c7:00:a5:e7:4d: 0a:ba:ea:95:a6:16:16:38:2c:63:68:f9:e0:b9:93:87:0e:a5: ed:ab:f4:75:ae:a4:08:2c:c4:04:69:58:3a:06:b1:38:74:f5: 50:1a:5b:f7:7c:cb:74:48:fd:cf:12:21:b6:5e:5d:62:a0:8d: c4:63:07:f8:79:be:26:f0:35:3f:b8:21:ff:73:4d:14:ba:d4: ed:c5:7f:96:c2:1b:d6:ca:19:bf:24:77:27:5f:92:1a:e6:b9: 41:b2:ac:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LVdUP5TD7HN5j54EOebQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4M2RlYmEzYjEzMDVjOWE0OGQzNzRiYTQ3MzY5YmYxZjgy N2VlMDgwHhcNMjYwMTI1MjIwMTQyWhcNMjYwMTI2MjIwMTQyWjAzMTEwLwYDVQQD EyhkNGMzM2IyYTI1MzczYjcwNmMzZjIxMzg0NjQzNGExMjFmZTFiYTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArB2EBIWLit+7ypZ8WS1JdekrYQjZ Hb/LZqa3HJjFzmBbrdlpGayXdLx086qQwac3EAiLIytO5DtjkVUVXJcSUW9aTboe 26apXCTd1nizNpRmSGHl6NmMS1MWgtTsWbsf+Pucb5zotNEiQbJu2+zfjiJV8n0C 5VfdJ4xO49jY1ZHLmZbKyhxGw61xJBAkg8JBCMMH4UyzRXYrUmtkToIJqyvRWIpj RZuePm9YPusHyrhxtEt+YbYGahLxkuG/hzmsu4F5jQ8cW4In4iY9mjSC61HmFznf ZGD4CfM6SsUbsGXty1Pmsgb2ZOv/Is9l5DY1ggKTOBiYcdYQgS2tFr3x1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNTDOyolNztwbD8hOEZDShIf4boqMB8GA1UdIwQY MBaAFCg966OxMFyaSNN0ukc2m/H4J+4IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0Qzcm83RXdYSnBJMDNTNlJ6YWI4ZmduN2dnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9lNWRmYTktNTE5Ni00OGNkLTkxNzgt NWEzMWY2MjBiMDRhLzEvS0Qzcm83RXdYSnBJMDNTNlJ6YWI4ZmduN2dnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9lNWRmYTktNTE5Ni00OGNkLTkxNzgtNWEzMWY2MjBiMDRh LzEvS0Qzcm83RXdYSnBJMDNTNlJ6YWI4ZmduN2dnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhg0Fs+G4 RRriksEMkupBPA4Z7rpng/QCMzwn+LbbucSEUj1yqWrc9QqPun5vAh84GKLkGITy 0VXm24rR+AgqqCiHoB3dqzExzV+D2MAZGbc+w8KHdEDkcgqHgWsV3NEVWb85pLnf 3tOOrMB4kSuo/GJZm21GsIYW5B4jf5RHHSE/2pCpVDb8nlh15yYvmivJLmIekpui tT8iQnADZccApedNCrrqlaYWFjgsY2j54LmThw6l7av0da6kCCzEBGlYOgaxOHT1 UBpb93zLdEj9zxIhtl5dYqCNxGMH+Hm+JvA1P7gh/3NNFLrU7cV/lsIb1soZvyR3 J1+SGua5QbKsIA== -----END CERTIFICATE-----Generated at Mon Jan 26 05:08:56 2026 by rpki-client