This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft File: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft (raw, json) Hash identifier: sFP9A9zzt3n9mIKA+N3svNAhz3KcqOVFwTmLdvtQmDs= Subject key identifier: E1:7A:BC:21:CD:9C:32:ED:00:2A:EB:DE:47:82:EC:83:75:1A:8F:19 Authority key identifier: 92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A Certificate issuer: /CN=92d8b76b21647696c9f4d6382b525d83a0580f4a Certificate serial: 019BF7D1CC80DD52B86C08F9BF7F695345BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft Manifest number: 16C2 Signing time: Mon 26 Jan 2026 01:01:20 +0000 Manifest this update: Mon 26 Jan 2026 01:01:20 +0000 Manifest next update: Tue 27 Jan 2026 01:01:20 +0000 Files and hashes: 1: 7zz3mufMehUd0c38xX7JTdPEQ7Y.roa (hash: iEmZwp8Gqr2F/CkXFP09kX00HiNuER7AVuZF/jjY/fM=) 2: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl (hash: /7piZMhgFVCU57TJQJDMdwR9mgeghmuJM3GRyyQnxeE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d1:cc:80:dd:52:b8:6c:08:f9:bf:7f:69:53:45:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d8b76b21647696c9f4d6382b525d83a0580f4a Validity Not Before: Jan 26 01:01:20 2026 GMT Not After : Jan 27 01:01:20 2026 GMT Subject: CN=e17abc21cd9c32ed002aebde4782ec83751a8f19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:77:ac:83:8a:a2:2a:31:2b:d5:34:da:98:1f: 54:5e:ab:e5:3a:e4:73:2e:2d:ee:24:24:39:fc:83: 0f:26:70:15:98:17:56:63:50:08:ae:48:d5:d5:92: d4:2c:69:2e:bd:78:82:b0:85:b2:58:06:77:99:8e: 68:de:05:ac:de:34:3f:f2:1b:9a:64:93:2f:72:a5: b8:86:4f:04:2e:df:f9:54:64:29:cd:c0:39:22:09: ab:11:4f:42:e8:ce:9b:66:4a:c3:67:17:03:50:40: 5d:ef:f5:1c:ba:ba:6d:17:c8:df:3d:7c:30:d0:8b: e3:11:8e:45:86:e8:15:c5:da:19:4b:80:e0:45:17: c6:22:dd:95:5c:17:e4:ce:59:60:ac:d6:9c:ed:20: 34:f7:7b:76:77:23:0f:ef:3e:7d:76:f0:b7:3e:f5: f8:52:22:d7:f9:b9:00:a6:a9:59:cb:65:32:f2:f2: ea:f2:ef:8f:09:94:ec:5f:e4:19:27:41:83:af:5d: c1:df:e5:c5:4b:cc:77:19:08:81:33:d2:e2:d2:4e: 9d:13:77:ec:2a:f0:ef:80:6c:99:f3:d5:6b:c2:90: ac:35:54:fb:33:9a:d2:e9:fb:5d:eb:a6:2f:1f:56: 18:e5:6a:f6:eb:94:23:0d:3d:93:77:3c:8b:f6:6b: 8d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:7A:BC:21:CD:9C:32:ED:00:2A:EB:DE:47:82:EC:83:75:1A:8F:19 X509v3 Authority Key Identifier: keyid:92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:41:49:38:e3:55:16:d5:95:3f:49:60:e5:26:dd:47:3d:59: 36:5c:6f:4f:28:03:41:3e:1b:62:91:c5:85:d3:5d:be:36:49: 18:4b:97:dd:d2:7f:0b:c1:cc:1d:f3:0b:9b:ad:23:a1:ea:29: 5c:1f:06:ce:30:8b:e1:b2:16:62:59:5e:8a:9c:3b:56:90:3b: 91:80:8c:ff:4a:3a:50:10:e4:cb:56:6a:20:0e:8d:66:20:57: 29:08:25:10:6c:d0:f7:80:4c:f9:1b:c6:fc:b1:a7:23:9a:ed: 1d:b6:dc:2b:bc:59:02:11:26:af:da:4d:d6:7b:3a:d6:54:ff: a4:e9:48:33:a1:c0:ed:52:0a:70:2c:72:52:c8:c7:e2:97:6a: 19:9c:cc:79:0e:b9:4c:19:e8:e2:e1:f5:d7:05:dc:65:d0:62: dc:ca:c9:e4:71:4f:d4:fb:53:0c:67:2b:68:10:bb:c4:39:c6: 90:21:4c:2c:12:36:65:3e:76:b8:ea:97:ed:58:14:ef:03:cc: bf:1e:0c:62:04:bf:de:e3:db:0e:ac:3d:6a:2a:76:55:ef:45: 7d:5c:7e:b2:38:82:09:41:6f:76:c8:31:ee:b0:45:84:ed:03: 1a:56:d5:6a:a4:52:7d:d6:95:47:77:87:e0:bd:5e:f7:fd:09: 8a:6c:98:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30cyA3VK4bAj5v39pU0W6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDhiNzZiMjE2NDc2OTZjOWY0ZDYzODJiNTI1ZDgzYTA1 ODBmNGEwHhcNMjYwMTI2MDEwMTIwWhcNMjYwMTI3MDEwMTIwWjAzMTEwLwYDVQQD EyhlMTdhYmMyMWNkOWMzMmVkMDAyYWViZGU0NzgyZWM4Mzc1MWE4ZjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnesg4qiKjEr1TTamB9UXqvlOuRz Li3uJCQ5/IMPJnAVmBdWY1AIrkjV1ZLULGkuvXiCsIWyWAZ3mY5o3gWs3jQ/8hua ZJMvcqW4hk8ELt/5VGQpzcA5IgmrEU9C6M6bZkrDZxcDUEBd7/UcurptF8jfPXww 0IvjEY5FhugVxdoZS4DgRRfGIt2VXBfkzllgrNac7SA093t2dyMP7z59dvC3PvX4 UiLX+bkApqlZy2Uy8vLq8u+PCZTsX+QZJ0GDr13B3+XFS8x3GQiBM9Li0k6dE3fs KvDvgGyZ89VrwpCsNVT7M5rS6ftd66YvH1YY5Wr265QjDT2TdzyL9muN4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOF6vCHNnDLtACrr3keC7IN1Go8ZMB8GA1UdIwQY MBaAFJLYt2shZHaWyfTWOCtSXYOgWA9KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RpM2F5RmtkcGJKOU5ZNEsxSmRnNkJZRDBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi82ZjFmMmQtOTliYi00NGUwLWFkYzUt OGRmZDViMTUyZjc5LzEva3RpM2F5RmtkcGJKOU5ZNEsxSmRnNkJZRDBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi82ZjFmMmQtOTliYi00NGUwLWFkYzUtOGRmZDViMTUyZjc5 LzEva3RpM2F5RmtkcGJKOU5ZNEsxSmRnNkJZRDBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACUFJOONV FtWVP0lg5SbdRz1ZNlxvTygDQT4bYpHFhdNdvjZJGEuX3dJ/C8HMHfMLm60joeop XB8GzjCL4bIWYlleipw7VpA7kYCM/0o6UBDky1ZqIA6NZiBXKQglEGzQ94BM+RvG /LGnI5rtHbbcK7xZAhEmr9pN1ns61lT/pOlIM6HA7VIKcCxyUsjH4pdqGZzMeQ65 TBno4uH11wXcZdBi3MrJ5HFP1PtTDGcraBC7xDnGkCFMLBI2ZT52uOqX7VgU7wPM vx4MYgS/3uPbDqw9aip2Ve9FfVx+sjiCCUFvdsgx7rBFhO0DGlbVaqRSfdaVR3eH 4L1e9/0JimyYug== -----END CERTIFICATE-----Generated at Mon Jan 26 04:54:05 2026 by rpki-client