This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft File: kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft (raw, json) Hash identifier: yIQM+9pKxqbA4ueHWxlHcpwi1RAebqLdfSwpENCwX7E= Subject key identifier: A5:3C:3B:B3:41:5E:1C:87:D6:C9:C5:2B:EB:A0:3B:39:2B:48:02:50 Authority key identifier: 91:C2:C2:91:2E:10:58:15:87:05:2A:5C:A7:70:91:0B:26:17:4F:14 Certificate issuer: /CN=91c2c2912e10581587052a5ca770910b26174f14 Certificate serial: 019BF5AC8BD3FFBB27B567F20982D1AFD480 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 15:01:24 +0000 Manifest this update: Sun 25 Jan 2026 15:01:24 +0000 Manifest next update: Mon 26 Jan 2026 15:01:24 +0000 Files and hashes: 1: 56kT45t-qSFh3hK2wMAHEPe_l3g.roa (hash: B1kcQ0n3V1oBn5LuFRtNw52bw6GFBqtOJ6KnuvJCSJ8=) 2: Emuj5k89JyREiy7IdcOgO90JxIk.roa (hash: iTdUaaQCRTcj3yyScv/Hj+qSgG3Y32ohh6EPvVp7v0U=) 3: dY7A4EadxR4Leo0RbN6ul5bgqMo.roa (hash: GFcXlnvExOtDmX5nvATDpdkuw0bc/vixgXHk7cM+5Yw=) 4: kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl (hash: CcyWdwwFChcSjfxrtyXrCo+jvrgf4WWeyWPuizNxDxg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:8b:d3:ff:bb:27:b5:67:f2:09:82:d1:af:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91c2c2912e10581587052a5ca770910b26174f14 Validity Not Before: Jan 25 15:01:24 2026 GMT Not After : Jan 26 15:01:24 2026 GMT Subject: CN=a53c3bb3415e1c87d6c9c52beba03b392b480250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:3d:dc:2b:20:a0:06:50:20:42:2d:7f:f1:cc: 29:9e:01:4a:d5:bd:d8:6b:f8:91:46:f2:29:ac:af: b2:b3:44:23:34:e7:0f:03:a3:57:43:36:29:a0:b0: 4d:8e:43:8a:6a:90:06:4e:9c:56:a4:72:cb:2b:98: fc:da:26:46:de:47:ad:1d:cd:39:fa:5d:e3:d7:66: fd:83:f7:30:fa:cf:ac:46:2d:8e:49:03:5f:d3:95: fc:86:2a:d3:57:d2:27:fd:5b:5e:cf:23:e9:94:64: 1b:0f:70:4b:01:79:e6:60:e8:ef:37:55:c7:25:5b: f7:4d:8a:f2:25:74:5f:13:77:8a:3d:88:01:82:50: 72:5d:b6:c7:7c:97:92:79:31:55:24:e7:d6:45:8e: 55:5c:35:e8:9d:6f:77:45:3a:27:13:88:4b:2d:29: 08:fe:46:2d:01:b5:31:53:b3:29:b9:cd:08:f5:fb: 73:e9:90:da:a1:e0:81:c6:ca:b2:08:c2:d3:f5:2b: 31:0e:6c:86:52:48:11:17:6a:f9:e2:ec:7f:54:10: f8:31:ab:c3:ad:44:93:10:77:21:c4:ce:9b:ef:43: 74:f1:5b:e6:1b:95:d1:f1:6c:90:c1:29:c6:79:d7: b2:ba:99:9d:25:04:fd:b4:49:88:ad:58:15:54:a5: 9c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:3C:3B:B3:41:5E:1C:87:D6:C9:C5:2B:EB:A0:3B:39:2B:48:02:50 X509v3 Authority Key Identifier: keyid:91:C2:C2:91:2E:10:58:15:87:05:2A:5C:A7:70:91:0B:26:17:4F:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:3c:10:2c:4c:2b:d8:08:18:40:5c:34:9b:1f:b9:5f:52:22: 5d:38:95:9d:2f:c6:a6:e5:08:c4:36:1e:47:be:a5:b9:d8:46: 76:1d:e7:b7:c1:fe:87:aa:81:39:be:c7:4b:32:1e:f4:a4:41: 3c:b3:42:9a:3b:bb:77:42:f9:3b:d3:1c:a0:a5:e9:f6:70:fd: a5:2c:ab:d9:a1:91:c6:f8:18:a2:b5:b8:90:9c:2e:76:81:3c: c6:ea:1f:15:f9:d4:3b:8f:0d:48:68:23:c6:36:fd:3d:3a:42: 95:ad:b6:69:99:b3:ee:8e:33:63:8b:6d:78:7f:f2:46:5b:56: d3:d0:3d:8f:f2:4b:c1:ba:72:b9:e4:0a:39:6c:71:53:1e:59: 18:b0:c3:68:25:a5:53:29:4f:9b:16:4b:c4:ab:ad:a5:dc:1c: 2e:74:ac:18:61:ad:3e:e7:c0:fe:1e:bb:bb:39:6e:86:44:58: 2b:88:9b:fe:ea:0c:8f:07:2b:54:88:b9:66:67:0e:8a:e8:ec: df:e5:e2:f3:97:18:d2:18:4a:75:a2:1d:2a:06:2c:4e:9c:f9: 82:c4:46:f9:12:0e:21:bc:1b:2d:27:a3:33:2c:66:0f:36:71: 36:8b:c8:04:08:b7:0c:1e:9e:9e:4a:9b:bd:5c:a3:0d:02:1c: 7d:35:b5:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rIvT/7sntWfyCYLRr9SAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxYzJjMjkxMmUxMDU4MTU4NzA1MmE1Y2E3NzA5MTBiMjYx NzRmMTQwHhcNMjYwMTI1MTUwMTI0WhcNMjYwMTI2MTUwMTI0WjAzMTEwLwYDVQQD EyhhNTNjM2JiMzQxNWUxYzg3ZDZjOWM1MmJlYmEwM2IzOTJiNDgwMjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4T3cKyCgBlAgQi1/8cwpngFK1b3Y a/iRRvIprK+ys0QjNOcPA6NXQzYpoLBNjkOKapAGTpxWpHLLK5j82iZG3ketHc05 +l3j12b9g/cw+s+sRi2OSQNf05X8hirTV9In/VtezyPplGQbD3BLAXnmYOjvN1XH JVv3TYryJXRfE3eKPYgBglByXbbHfJeSeTFVJOfWRY5VXDXonW93RTonE4hLLSkI /kYtAbUxU7Mpuc0I9ftz6ZDaoeCBxsqyCMLT9SsxDmyGUkgRF2r54ux/VBD4MavD rUSTEHchxM6b70N08VvmG5XR8WyQwSnGedeyupmdJQT9tEmIrVgVVKWcTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKU8O7NBXhyH1snFK+ugOzkrSAJQMB8GA1UdIwQY MBaAFJHCwpEuEFgVhwUqXKdwkQsmF08UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2NMQ2tTNFFXQldIQlNwY3AzQ1JDeVlYVHhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9iMzBiNTctZTdlOS00YjJmLTk5YjYt OTBmOTdmNzQ2Njc2LzEva2NMQ2tTNFFXQldIQlNwY3AzQ1JDeVlYVHhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9iMzBiNTctZTdlOS00YjJmLTk5YjYtOTBmOTdmNzQ2Njc2 LzEva2NMQ2tTNFFXQldIQlNwY3AzQ1JDeVlYVHhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApTwQLEwr 2AgYQFw0mx+5X1IiXTiVnS/GpuUIxDYeR76ludhGdh3nt8H+h6qBOb7HSzIe9KRB PLNCmju7d0L5O9McoKXp9nD9pSyr2aGRxvgYorW4kJwudoE8xuofFfnUO48NSGgj xjb9PTpCla22aZmz7o4zY4tteH/yRltW09A9j/JLwbpyueQKOWxxUx5ZGLDDaCWl UylPmxZLxKutpdwcLnSsGGGtPufA/h67uzluhkRYK4ib/uoMjwcrVIi5ZmcOiujs 3+Xi85cY0hhKdaIdKgYsTpz5gsRG+RIOIbwbLSejMyxmDzZxNovIBAi3DB6enkqb vVyjDQIcfTW1+A== -----END CERTIFICATE-----Generated at Sun Jan 25 19:23:00 2026 by rpki-client