This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft File: K-1ik1-0ivbkTLoZQm76tR8cVBA.mft (raw, json) Hash identifier: jMx4j2MWB//HnMHl/uaj+zK3vvIrvc2JvSToNBvq3pY= Subject key identifier: D6:F2:A1:0D:74:42:FF:06:E7:8F:68:B9:A9:4B:4F:6A:6D:80:F0:C5 Authority key identifier: 2B:ED:62:93:5F:B4:8A:F6:E4:4C:BA:19:42:6E:FA:B5:1F:1C:54:10 Certificate issuer: /CN=2bed62935fb48af6e44cba19426efab51f1c5410 Certificate serial: 019BF5077F5BAF63BA77A7F8ABB047086356 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft Manifest number: 0ECE Signing time: Sun 25 Jan 2026 12:01:07 +0000 Manifest this update: Sun 25 Jan 2026 12:01:07 +0000 Manifest next update: Mon 26 Jan 2026 12:01:07 +0000 Files and hashes: 1: K-1ik1-0ivbkTLoZQm76tR8cVBA.crl (hash: 8Y75HRX2REAgeL+Vpyz4/FGbIIco86z6IBnKcP7VNxI=) 2: j9BouMciNW9kiR4MYbw5nEI18Lk.roa (hash: 0POuwWC/mY+BSIA395HwTOeczjcetqnwxmUcBFaUV1o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.crl rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:7f:5b:af:63:ba:77:a7:f8:ab:b0:47:08:63:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bed62935fb48af6e44cba19426efab51f1c5410 Validity Not Before: Jan 25 12:01:07 2026 GMT Not After : Jan 26 12:01:07 2026 GMT Subject: CN=d6f2a10d7442ff06e78f68b9a94b4f6a6d80f0c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7b:73:fe:88:52:67:5f:b5:da:64:d1:35:1c: b8:b5:3a:7b:03:1d:0f:15:e5:ed:58:bd:33:70:ff: 13:ef:97:a9:0f:b7:88:60:00:40:8f:b7:97:0a:4b: 4a:87:b5:54:f0:6d:c7:b9:0b:f8:b5:e5:3b:b0:b5: 7d:55:4c:7c:bf:7b:ef:16:f1:63:f8:9d:a3:a6:45: 63:b6:95:c6:aa:82:64:9a:b4:85:9a:bf:6f:fc:89: ce:d2:5e:a3:14:0f:58:5c:fd:53:3c:33:d6:05:3a: 24:4d:7e:d9:b1:2f:f6:9e:76:e8:00:f2:f1:f1:e9: 29:78:12:25:b8:52:ca:26:0a:2e:b2:5a:1e:c4:7d: d4:a5:0d:e1:60:24:08:9a:74:62:b7:6e:25:ef:3b: 5c:6b:48:bc:d8:5f:ad:f2:31:d4:37:d7:b0:43:79: 07:91:cf:73:29:6f:b9:ba:05:6d:9b:54:b2:be:2e: 84:65:6e:ea:48:33:02:4c:12:4e:0d:68:43:5f:5d: 2a:35:1d:bd:84:68:96:6f:a5:65:1d:88:a3:0b:a5: 1d:aa:6b:c4:2a:b5:79:49:83:bc:fe:37:a2:7e:3c: 66:e3:cb:95:97:39:48:f6:db:84:a5:eb:51:9a:08: ee:88:c3:f9:7f:0c:88:de:bb:00:00:3a:8d:74:ac: 83:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:F2:A1:0D:74:42:FF:06:E7:8F:68:B9:A9:4B:4F:6A:6D:80:F0:C5 X509v3 Authority Key Identifier: keyid:2B:ED:62:93:5F:B4:8A:F6:E4:4C:BA:19:42:6E:FA:B5:1F:1C:54:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:9d:da:c7:71:69:b9:5e:65:f9:10:19:2e:a1:ae:8d:98:cb: 2a:b5:d7:b2:6f:f9:2f:09:0b:1b:32:9b:0d:e2:89:2d:e6:b2: 2e:93:aa:0d:84:a9:44:04:04:6d:94:d3:36:f5:75:85:da:10: a3:65:b7:50:cc:29:8f:07:b6:b5:9b:c9:ad:26:05:24:cf:9a: 0d:16:b3:f3:ae:e4:84:5a:78:e4:99:1c:2c:4a:79:c2:d1:f7: f4:18:20:21:3e:0e:0e:9f:03:b6:b8:66:39:c3:7c:ea:67:5c: 68:1b:55:f2:ea:d7:25:7c:38:b7:7b:b1:2c:ee:92:42:e9:92: c5:09:d5:e3:56:88:0b:d5:cb:d3:0c:92:3a:75:4d:f1:59:c9: 9e:9c:ab:45:f3:87:bd:ca:41:62:47:8b:a5:e9:53:3d:cf:16: ed:0f:9b:3e:6e:25:6b:1c:66:67:0f:3c:7e:8a:a7:80:21:80: 29:91:37:fe:d3:90:87:16:dd:54:e7:85:c3:5b:68:c2:f2:6c: cc:84:5a:9b:7a:75:fc:3c:95:db:33:5e:95:b7:8c:46:33:6b: 27:f3:3a:b6:f6:94:b9:7f:10:9e:c7:ad:aa:f1:a1:11:d9:6f: 52:af:09:ab:9a:b6:a6:6c:3a:1a:01:10:5b:ce:71:41:44:0c: 14:b7:0b:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B39br2O6d6f4q7BHCGNWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiZWQ2MjkzNWZiNDhhZjZlNDRjYmExOTQyNmVmYWI1MWYx YzU0MTAwHhcNMjYwMTI1MTIwMTA3WhcNMjYwMTI2MTIwMTA3WjAzMTEwLwYDVQQD EyhkNmYyYTEwZDc0NDJmZjA2ZTc4ZjY4YjlhOTRiNGY2YTZkODBmMGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXtz/ohSZ1+12mTRNRy4tTp7Ax0P FeXtWL0zcP8T75epD7eIYABAj7eXCktKh7VU8G3HuQv4teU7sLV9VUx8v3vvFvFj +J2jpkVjtpXGqoJkmrSFmr9v/InO0l6jFA9YXP1TPDPWBTokTX7ZsS/2nnboAPLx 8ekpeBIluFLKJgousloexH3UpQ3hYCQImnRit24l7ztca0i82F+t8jHUN9ewQ3kH kc9zKW+5ugVtm1Syvi6EZW7qSDMCTBJODWhDX10qNR29hGiWb6VlHYijC6UdqmvE KrV5SYO8/jeifjxm48uVlzlI9tuEpetRmgjuiMP5fwyI3rsAADqNdKyDxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNbyoQ10Qv8G549oualLT2ptgPDFMB8GA1UdIwQY MBaAFCvtYpNftIr25Ey6GUJu+rUfHFQQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSy0xaWsxLTBpdmJrVExvWlFtNzZ0UjhjVkJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS85YjgxYzgtNzMyYy00M2YyLWI2YWIt NDg0MDE0YTRkOTRlLzEvSy0xaWsxLTBpdmJrVExvWlFtNzZ0UjhjVkJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS85YjgxYzgtNzMyYy00M2YyLWI2YWItNDg0MDE0YTRkOTRl LzEvSy0xaWsxLTBpdmJrVExvWlFtNzZ0UjhjVkJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApZ3ax3Fp uV5l+RAZLqGujZjLKrXXsm/5LwkLGzKbDeKJLeayLpOqDYSpRAQEbZTTNvV1hdoQ o2W3UMwpjwe2tZvJrSYFJM+aDRaz867khFp45JkcLEp5wtH39BggIT4ODp8Dtrhm OcN86mdcaBtV8urXJXw4t3uxLO6SQumSxQnV41aIC9XL0wySOnVN8VnJnpyrRfOH vcpBYkeLpelTPc8W7Q+bPm4laxxmZw88foqngCGAKZE3/tOQhxbdVOeFw1towvJs zIRam3p1/DyV2zNelbeMRjNrJ/M6tvaUuX8QnsetqvGhEdlvUq8Jq5q2pmw6GgEQ W85xQUQMFLcLdA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:34:26 2026 by rpki-client