This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft File: KJVkfZ_RahaU-AJuvod2DLUx6w4.mft (raw, json) Hash identifier: u1YHNSOGdMnspZ9qtGiNikrGo/kBsfJeLfBOO2wSNJ4= Subject key identifier: FF:A1:56:1D:5B:C2:E2:B2:42:31:69:FF:21:E0:F7:4A:14:DE:A0:85 Authority key identifier: 28:95:64:7D:9F:D1:6A:16:94:F8:02:6E:BE:87:76:0C:B5:31:EB:0E Certificate issuer: /CN=2895647d9fd16a1694f8026ebe87760cb531eb0e Certificate serial: 019BF6BEFB79FB7EE0A28002DAB8F7D20E86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 20:01:09 +0000 Manifest this update: Sun 25 Jan 2026 20:01:09 +0000 Manifest next update: Mon 26 Jan 2026 20:01:09 +0000 Files and hashes: 1: KJVkfZ_RahaU-AJuvod2DLUx6w4.crl (hash: QVxOSZseNToMQum+8IgrSg2mB6+bZzjVtn6dnrBsUjk=) 2: SO-Fb5_RWNG-vJxWilHy0Ub7D3c.roa (hash: VzvW0l4p4/QU6FVquXlxf/LHE0LvlRpqoxeKSXp+Yqo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:fb:79:fb:7e:e0:a2:80:02:da:b8:f7:d2:0e:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2895647d9fd16a1694f8026ebe87760cb531eb0e Validity Not Before: Jan 25 20:01:09 2026 GMT Not After : Jan 26 20:01:09 2026 GMT Subject: CN=ffa1561d5bc2e2b2423169ff21e0f74a14dea085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a2:d6:72:32:7e:87:78:1d:15:9f:b5:08:1d: 63:b0:55:8f:e6:2a:49:63:f1:b4:ff:39:64:58:66: 24:1b:cd:92:b3:7a:79:4b:9f:3c:35:7c:f8:0f:d9: 64:15:d0:ce:90:09:2c:ae:8f:c6:12:69:0d:69:71: 09:c2:f4:06:2d:56:02:01:5f:4e:5e:64:04:5c:5d: 52:94:05:b3:a9:32:d9:fe:c2:12:a1:55:16:a5:43: 46:e9:9f:04:91:5a:91:c8:0e:d3:c1:ec:a7:b1:df: 31:fb:ee:42:b0:d2:7f:7d:67:4c:f6:0c:a5:7a:fd: 93:74:df:4d:21:94:3f:d7:7e:ee:fe:fb:06:85:6b: 75:6a:36:d6:a8:75:b1:2b:2f:13:f3:f8:a5:80:91: 02:3c:5c:95:31:ec:87:71:4b:d5:6d:2b:ca:b0:67: f8:c0:0b:ba:54:dc:57:be:09:4b:0b:53:10:88:da: 58:fd:40:0f:01:15:6e:52:38:7b:d7:8a:3b:25:2c: 8c:90:06:58:31:87:3f:fe:36:69:64:18:8e:70:89: 25:93:5c:ca:5d:0c:43:0f:97:b8:cf:8d:6c:65:d9: 36:6a:4b:06:25:3f:1c:20:54:d2:0a:f4:74:e1:2e: 08:2c:d4:d3:0d:ae:11:34:46:71:82:09:bc:c1:1a: bd:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A1:56:1D:5B:C2:E2:B2:42:31:69:FF:21:E0:F7:4A:14:DE:A0:85 X509v3 Authority Key Identifier: keyid:28:95:64:7D:9F:D1:6A:16:94:F8:02:6E:BE:87:76:0C:B5:31:EB:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:d7:f6:b4:4a:64:6c:7c:89:22:9b:38:54:18:07:d2:96:74: ce:83:d5:6f:99:7d:96:d3:45:a3:89:62:77:6c:2d:47:7c:13: aa:fc:eb:3a:b2:03:69:bb:f0:8a:50:41:21:16:09:f7:34:83: 12:db:c4:3c:2a:af:cf:06:d4:00:9f:7a:46:6c:76:6f:98:59: 73:46:93:c1:20:25:df:57:47:61:6d:de:ce:c2:5c:be:88:ab: a1:32:25:d7:89:f6:96:e9:46:80:83:13:66:d7:de:82:25:75: 5c:2b:82:9e:32:05:c4:73:68:78:d9:53:b1:1a:26:0d:e8:e3: fe:82:3d:1a:7a:45:17:9d:54:30:0e:89:23:b6:4e:75:90:cc: b2:e2:e5:0a:c4:3a:ba:2c:99:68:fb:32:14:b1:84:e6:66:45: c0:94:65:a2:69:6d:c2:bb:01:1d:72:f6:13:e6:94:a7:2b:38: 55:93:e8:ba:cc:f9:fb:b2:95:14:4f:07:66:c3:4e:64:49:35: b5:17:f2:9b:36:c2:87:86:4c:79:07:00:2e:61:47:3a:b2:d0: a1:dc:21:9b:87:c1:83:1c:6d:18:5b:af:b6:76:46:24:94:66: 71:2d:ae:5d:55:77:e5:b2:d5:ce:7e:67:39:59:37:62:a2:ca: cb:23:1c:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vvt5+37gooAC2rj30g6GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4OTU2NDdkOWZkMTZhMTY5NGY4MDI2ZWJlODc3NjBjYjUz MWViMGUwHhcNMjYwMTI1MjAwMTA5WhcNMjYwMTI2MjAwMTA5WjAzMTEwLwYDVQQD EyhmZmExNTYxZDViYzJlMmIyNDIzMTY5ZmYyMWUwZjc0YTE0ZGVhMDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6LWcjJ+h3gdFZ+1CB1jsFWP5ipJ Y/G0/zlkWGYkG82Ss3p5S588NXz4D9lkFdDOkAksro/GEmkNaXEJwvQGLVYCAV9O XmQEXF1SlAWzqTLZ/sISoVUWpUNG6Z8EkVqRyA7Tweynsd8x++5CsNJ/fWdM9gyl ev2TdN9NIZQ/137u/vsGhWt1ajbWqHWxKy8T8/ilgJECPFyVMeyHcUvVbSvKsGf4 wAu6VNxXvglLC1MQiNpY/UAPARVuUjh714o7JSyMkAZYMYc//jZpZBiOcIklk1zK XQxDD5e4z41sZdk2aksGJT8cIFTSCvR04S4ILNTTDa4RNEZxggm8wRq9kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+hVh1bwuKyQjFp/yHg90oU3qCFMB8GA1UdIwQY MBaAFCiVZH2f0WoWlPgCbr6Hdgy1MesOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0pWa2ZaX1JhaGFVLUFKdXZvZDJETFV4Nnc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy80ODk1NzYtNGRmYi00YTAzLWIwYTMt ZWNjZGMwY2U3ZDE0LzEvS0pWa2ZaX1JhaGFVLUFKdXZvZDJETFV4Nnc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy80ODk1NzYtNGRmYi00YTAzLWIwYTMtZWNjZGMwY2U3ZDE0 LzEvS0pWa2ZaX1JhaGFVLUFKdXZvZDJETFV4Nnc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt9f2tEpk bHyJIps4VBgH0pZ0zoPVb5l9ltNFo4lid2wtR3wTqvzrOrIDabvwilBBIRYJ9zSD EtvEPCqvzwbUAJ96Rmx2b5hZc0aTwSAl31dHYW3ezsJcvoiroTIl14n2lulGgIMT ZtfegiV1XCuCnjIFxHNoeNlTsRomDejj/oI9GnpFF51UMA6JI7ZOdZDMsuLlCsQ6 uiyZaPsyFLGE5mZFwJRlomltwrsBHXL2E+aUpys4VZPousz5+7KVFE8HZsNOZEk1 tRfymzbCh4ZMeQcALmFHOrLQodwhm4fBgxxtGFuvtnZGJJRmcS2uXVV35bLVzn5n OVk3YqLKyyMc7Q== -----END CERTIFICATE-----Generated at Mon Jan 26 04:54:08 2026 by rpki-client