This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft File: KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft (raw, json) Hash identifier: lhJmr1bNCxjoCIe9KgwYdd30LEULYTESjI7La4fCQzg= Subject key identifier: D3:3C:C7:F8:A4:01:59:C6:41:42:26:A1:D4:A0:85:97:82:15:73:DE Authority key identifier: 28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE Certificate issuer: /CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae Certificate serial: 019BF4624650AC3333C34A182918F851F8F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft Manifest number: 0C4D Signing time: Sun 25 Jan 2026 09:00:39 +0000 Manifest this update: Sun 25 Jan 2026 09:00:39 +0000 Manifest next update: Mon 26 Jan 2026 09:00:39 +0000 Files and hashes: 1: 6qGh1CWEL5urT7KqlTeQZmDgafw.roa (hash: OCUd2zNoXwmHcdVRlj45FZmejRsmzHfWho56l2ASAPc=) 2: 8xs8XCRJdNPyL9gpjmSYqUlvaDU.roa (hash: 5NXvRg6jd6XpCSNvlKufUP5Iq4iqGRVh+6EUgzg+7Wo=) 3: H8ur06ZzMoUo1Gt7mOEKMDQJafY.roa (hash: zkR8SvftOg6UL5t5sXessXOzxmjo2b7nS9dxJ1c+yR4=) 4: KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl (hash: 7iS2wnNJjLDOsyuPw0eqrEIRQ/XZQLc84WwVz10Ndc4=) 5: YGGcoMwgnXgQhZlFiELK4BMadGs.roa (hash: YXm7yk6lZ9RL1Uc7MqGLkZ8Gibptwurwo1w5xqii1FU=) 6: dpXdts3AfZLIoFXIbwsOROmN3kw.roa (hash: uqPS9mBkXJrgKSVn6k1BG32CndZwaIOx9TRcsPuY0+4=) 7: sreC2wgD7tfWbcxeKGmM8jbVMK0.roa (hash: 3TdsfIYOJaGfNZoP9ydUNXZCTzbuK4Zf2Wc7FFSRaFU=) 8: upFBJ1-blKi1hPEsB5UUCJux19I.roa (hash: lAsTTr8C/PJQgbSJ4pgl6HP1xqpS4XO7lEwlziU+2A8=) 9: yjjbe9KP85kt8Ob2oDHDR9MXIMg.roa (hash: wJzFwpkYh/4OlhPxLRY+Af3Zi8uNHB0MPLWQeMahMl4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:46:50:ac:33:33:c3:4a:18:29:18:f8:51:f8:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae Validity Not Before: Jan 25 09:00:39 2026 GMT Not After : Jan 26 09:00:39 2026 GMT Subject: CN=d33cc7f8a40159c6414226a1d4a08597821573de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0a:85:f9:e7:29:8d:3b:e5:bf:6d:54:98:51: 9f:53:6b:50:88:54:6a:f3:6c:39:18:2e:b0:41:cc: 2c:08:aa:26:de:27:9f:58:bb:34:5d:cf:8a:ea:d5: da:4b:d4:0b:38:e2:54:5a:df:80:1c:e1:2a:ab:30: 64:9b:b3:46:57:7f:53:f0:58:19:d1:a9:06:37:2a: 6e:28:37:ea:56:95:ce:dd:fe:97:93:31:c1:3c:ef: 62:6d:9c:a8:57:e7:b7:13:26:eb:b1:47:a5:d6:88: 05:c6:40:d2:df:e6:be:7f:ec:3f:20:53:40:a9:1c: 97:46:29:01:df:da:33:ee:78:18:64:95:27:73:f2: db:10:27:a3:8f:0f:de:c1:91:a6:e2:c1:a2:12:16: e2:21:9a:4f:d4:35:bc:6c:d7:02:5e:90:d3:57:c4: 4f:b2:c6:70:9d:18:94:87:62:9e:8f:5b:57:6e:c7: 44:7d:12:a1:bf:2e:af:d0:96:8b:b2:94:d9:9f:e2: e7:e7:20:cf:4c:e2:d4:ac:15:7c:bc:28:62:5a:2f: ff:c8:fc:fd:bd:27:d5:c9:11:99:fd:f1:cd:d2:7f: 08:15:02:81:54:01:e6:23:12:9e:5d:78:8e:d8:41: f1:5f:46:c1:a1:d2:b1:7d:bb:49:02:2e:14:ac:81: 42:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:3C:C7:F8:A4:01:59:C6:41:42:26:A1:D4:A0:85:97:82:15:73:DE X509v3 Authority Key Identifier: keyid:28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:06:46:d0:44:49:7f:63:bd:db:c9:88:64:f2:2c:7e:b6:48: b5:6f:99:cc:9f:0c:45:b0:a9:63:ff:64:c8:90:9d:c1:88:d4: b3:71:63:1d:9c:25:dc:1f:11:37:23:af:b4:81:49:71:db:ee: fe:c9:aa:27:fc:17:ba:21:dd:2c:bf:a7:bf:ac:96:b5:af:8e: 0f:6c:a7:6c:a4:f3:1f:78:33:ed:79:a3:a1:dc:09:be:51:c3: 2e:1d:0c:16:23:8b:75:2c:b8:8b:cb:19:35:d7:de:b6:0e:d5: 95:84:89:a9:99:8a:70:a3:1f:43:34:63:83:40:b2:6e:75:ec: 32:48:1e:20:4d:31:3d:23:bd:e1:18:e8:6e:a6:e2:84:ef:c2: 9f:62:e1:61:3e:10:c2:88:fa:e0:ce:08:26:5a:dd:3c:00:39: c8:0e:a4:eb:b1:c8:99:84:2c:41:7a:25:de:4b:82:a7:da:12: 58:eb:4a:fe:ca:67:27:fa:25:c9:df:22:95:c9:e9:21:91:b9: c5:12:73:92:c4:97:84:86:cd:45:3a:27:4b:f1:22:0a:ee:a9: 10:64:77:fa:dd:07:e2:8c:de:1a:22:3a:44:54:c5:b6:1a:5e: d3:f9:09:35:9b:c7:8b:dd:a8:28:ca:57:e4:52:4e:9f:4b:07: 2f:01:b1:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YkZQrDMzw0oYKRj4Ufj2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4ZmQ2NmU0M2ExMDQ2MzNiMjdiYWM1MzliOThiZGY4ZWJm YWM5YWUwHhcNMjYwMTI1MDkwMDM5WhcNMjYwMTI2MDkwMDM5WjAzMTEwLwYDVQQD EyhkMzNjYzdmOGE0MDE1OWM2NDE0MjI2YTFkNGEwODU5NzgyMTU3M2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAqF+ecpjTvlv21UmFGfU2tQiFRq 82w5GC6wQcwsCKom3iefWLs0Xc+K6tXaS9QLOOJUWt+AHOEqqzBkm7NGV39T8FgZ 0akGNypuKDfqVpXO3f6XkzHBPO9ibZyoV+e3EybrsUel1ogFxkDS3+a+f+w/IFNA qRyXRikB39oz7ngYZJUnc/LbECejjw/ewZGm4sGiEhbiIZpP1DW8bNcCXpDTV8RP ssZwnRiUh2Kej1tXbsdEfRKhvy6v0JaLspTZn+Ln5yDPTOLUrBV8vChiWi//yPz9 vSfVyRGZ/fHN0n8IFQKBVAHmIxKeXXiO2EHxX0bBodKxfbtJAi4UrIFC5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNM8x/ikAVnGQUImodSghZeCFXPeMB8GA1UdIwQY MBaAFCj9ZuQ6EEYzsnusU5uYvfjr+smuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1AxbTVEb1FSak95ZTZ4VG01aTktT3Y2eWE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi84ZWQzYjctYmIyZC00ZjRkLTlkYjYt MjY3NjY5ZjM1NjQ4LzEvS1AxbTVEb1FSak95ZTZ4VG01aTktT3Y2eWE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi84ZWQzYjctYmIyZC00ZjRkLTlkYjYtMjY3NjY5ZjM1NjQ4 LzEvS1AxbTVEb1FSak95ZTZ4VG01aTktT3Y2eWE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAQZG0ERJ f2O928mIZPIsfrZItW+ZzJ8MRbCpY/9kyJCdwYjUs3FjHZwl3B8RNyOvtIFJcdvu /smqJ/wXuiHdLL+nv6yWta+OD2ynbKTzH3gz7XmjodwJvlHDLh0MFiOLdSy4i8sZ Ndfetg7VlYSJqZmKcKMfQzRjg0CybnXsMkgeIE0xPSO94RjobqbihO/Cn2LhYT4Q woj64M4IJlrdPAA5yA6k67HImYQsQXol3kuCp9oSWOtK/spnJ/olyd8ilcnpIZG5 xRJzksSXhIbNRTonS/EiCu6pEGR3+t0H4ozeGiI6RFTFthpe0/kJNZvHi92oKMpX 5FJOn0sHLwGxfQ== -----END CERTIFICATE-----Generated at Sun Jan 25 17:37:44 2026 by rpki-client