This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft File: KJVkfZ_RahaU-AJuvod2DLUx6w4.mft (raw, json) Hash identifier: oioDZPTkBlzIYC1P9ThngI8Wj5MEjzWncgiY6PHns4Q= Subject key identifier: 5E:09:50:F2:60:23:DC:D8:4B:9A:38:46:4C:F1:17:90:C9:45:74:A9 Authority key identifier: 28:95:64:7D:9F:D1:6A:16:94:F8:02:6E:BE:87:76:0C:B5:31:EB:0E Certificate issuer: /CN=2895647d9fd16a1694f8026ebe87760cb531eb0e Certificate serial: 019BF8AD6003E9AD0DD6DE4DC522B09B0DDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft Manifest number: 17E9 Signing time: Mon 26 Jan 2026 05:01:10 +0000 Manifest this update: Mon 26 Jan 2026 05:01:10 +0000 Manifest next update: Tue 27 Jan 2026 05:01:10 +0000 Files and hashes: 1: KJVkfZ_RahaU-AJuvod2DLUx6w4.crl (hash: 3tdO/N3Tatqi+NA3tnZA53cXd5HYdUfB0XE2KWbdoLk=) 2: SO-Fb5_RWNG-vJxWilHy0Ub7D3c.roa (hash: VzvW0l4p4/QU6FVquXlxf/LHE0LvlRpqoxeKSXp+Yqo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:60:03:e9:ad:0d:d6:de:4d:c5:22:b0:9b:0d:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2895647d9fd16a1694f8026ebe87760cb531eb0e Validity Not Before: Jan 26 05:01:10 2026 GMT Not After : Jan 27 05:01:10 2026 GMT Subject: CN=5e0950f26023dcd84b9a38464cf11790c94574a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:52:3d:0a:2e:f7:92:0f:57:e4:ab:e4:db:9f: b1:7a:ad:a0:00:7e:45:5e:45:f2:68:d5:d0:a2:e9: 98:1e:5e:f8:c5:7e:ee:c8:a0:bb:67:d7:5a:47:78: 75:02:5c:4c:c8:18:e8:73:77:f2:03:11:99:85:04: 9f:01:e4:55:a1:48:c8:0a:b5:4a:84:90:5b:a7:14: 9d:58:94:6d:d0:ba:12:16:51:61:d2:20:06:3c:63: 5d:d2:58:fc:37:c0:29:80:4b:37:13:b5:03:f4:fe: ad:d4:e9:19:47:41:ca:8d:cc:83:75:b1:39:bf:14: 63:16:fa:91:2f:58:49:95:c8:57:c6:9f:3b:1f:50: c8:8b:16:9a:eb:c5:0a:27:bc:cf:88:56:b2:a8:1f: 6d:36:6a:d8:f7:65:1c:2f:be:08:ac:66:35:59:d5: 89:53:62:4e:ae:e7:2f:20:22:8a:f3:c5:c2:97:76: 04:07:f2:ac:85:f9:41:7d:b2:c5:d5:14:19:fb:c2: 92:3b:10:06:82:76:8d:a6:30:0e:fe:db:b5:35:cc: da:bd:8e:49:52:b2:69:c8:38:4a:ef:5f:b7:e6:42: 71:9d:93:fa:9b:82:2a:c2:17:f1:27:4a:f3:1e:5c: 09:4c:f9:10:10:d6:a7:f7:16:6d:b7:00:64:e4:70: f5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:09:50:F2:60:23:DC:D8:4B:9A:38:46:4C:F1:17:90:C9:45:74:A9 X509v3 Authority Key Identifier: keyid:28:95:64:7D:9F:D1:6A:16:94:F8:02:6E:BE:87:76:0C:B5:31:EB:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:d1:f1:1b:06:b2:8b:0e:77:f8:d6:a6:bc:b8:46:69:52:8d: 30:bf:30:19:f2:ea:40:98:b9:ea:57:17:02:4d:7b:5d:b3:5e: 38:16:7a:4d:81:09:d6:58:e8:5b:c0:4d:5b:8f:52:56:89:2b: 19:2d:4b:52:0c:9d:57:af:80:82:ea:dc:7f:fd:af:f0:f9:6b: 1e:b9:e7:ab:ef:77:46:99:36:c0:5b:e2:de:de:d5:8f:4e:88: 97:22:9c:f7:9a:1a:3d:fd:c0:58:d2:a0:28:50:d6:0e:7e:bb: e2:56:58:a0:03:91:83:31:4e:ca:a8:0a:0b:4d:83:47:2d:72: 96:46:2c:f4:9f:7c:fe:2a:64:70:ef:1c:78:d9:64:58:8d:74: 86:1c:91:5c:85:57:4f:bf:e3:ee:d1:33:9b:d3:b3:b7:57:1d: ef:60:63:85:31:ff:22:d0:03:d3:02:4e:55:79:e2:fb:09:c2: 65:5e:58:f2:ce:ce:ee:79:79:91:6d:84:ab:f9:0e:4b:9d:07: 85:0e:1f:60:36:55:2a:31:4d:0f:d5:e0:ba:b0:e1:3c:b8:67: 29:ea:ec:a6:43:3a:92:3b:a5:6a:2f:bb:79:45:5b:d8:fc:29: c6:37:90:e4:60:91:a8:25:58:a4:5f:9c:6d:3d:50:72:39:0f: 6c:d9:61:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rWAD6a0N1t5NxSKwmw3eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4OTU2NDdkOWZkMTZhMTY5NGY4MDI2ZWJlODc3NjBjYjUz MWViMGUwHhcNMjYwMTI2MDUwMTEwWhcNMjYwMTI3MDUwMTEwWjAzMTEwLwYDVQQD Eyg1ZTA5NTBmMjYwMjNkY2Q4NGI5YTM4NDY0Y2YxMTc5MGM5NDU3NGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFI9Ci73kg9X5Kvk25+xeq2gAH5F XkXyaNXQoumYHl74xX7uyKC7Z9daR3h1AlxMyBjoc3fyAxGZhQSfAeRVoUjICrVK hJBbpxSdWJRt0LoSFlFh0iAGPGNd0lj8N8ApgEs3E7UD9P6t1OkZR0HKjcyDdbE5 vxRjFvqRL1hJlchXxp87H1DIixaa68UKJ7zPiFayqB9tNmrY92UcL74IrGY1WdWJ U2JOrucvICKK88XCl3YEB/KshflBfbLF1RQZ+8KSOxAGgnaNpjAO/tu1NczavY5J UrJpyDhK71+35kJxnZP6m4IqwhfxJ0rzHlwJTPkQENan9xZttwBk5HD1+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF4JUPJgI9zYS5o4RkzxF5DJRXSpMB8GA1UdIwQY MBaAFCiVZH2f0WoWlPgCbr6Hdgy1MesOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0pWa2ZaX1JhaGFVLUFKdXZvZDJETFV4Nnc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy80ODk1NzYtNGRmYi00YTAzLWIwYTMt ZWNjZGMwY2U3ZDE0LzEvS0pWa2ZaX1JhaGFVLUFKdXZvZDJETFV4Nnc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy80ODk1NzYtNGRmYi00YTAzLWIwYTMtZWNjZGMwY2U3ZDE0 LzEvS0pWa2ZaX1JhaGFVLUFKdXZvZDJETFV4Nnc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK9HxGway iw53+NamvLhGaVKNML8wGfLqQJi56lcXAk17XbNeOBZ6TYEJ1ljoW8BNW49SVokr GS1LUgydV6+Agurcf/2v8PlrHrnnq+93Rpk2wFvi3t7Vj06IlyKc95oaPf3AWNKg KFDWDn674lZYoAORgzFOyqgKC02DRy1ylkYs9J98/ipkcO8ceNlkWI10hhyRXIVX T7/j7tEzm9Ozt1cd72BjhTH/ItAD0wJOVXni+wnCZV5Y8s7O7nl5kW2Eq/kOS50H hQ4fYDZVKjFND9XgurDhPLhnKerspkM6kjulai+7eUVb2PwpxjeQ5GCRqCVYpF+c bT1QcjkPbNlhNw== -----END CERTIFICATE-----Generated at Mon Jan 26 06:37:40 2026 by rpki-client