This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft File: KXnMQ8JGn_pc-LesY5sB86dorFU.mft (raw, json) Hash identifier: LWhPu87zI0FWEnillN+OwnBM1kYDfBvTh6wKo0k3BcY= Subject key identifier: DB:B1:F2:5D:B0:86:2B:67:FD:BB:41:60:94:B6:41:4C:70:AB:E8:18 Authority key identifier: 29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55 Certificate issuer: /CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55 Certificate serial: 019BF5077AA08BC65B09FE75DEBDDD3D3199 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft Manifest number: 0988 Signing time: Sun 25 Jan 2026 12:01:06 +0000 Manifest this update: Sun 25 Jan 2026 12:01:06 +0000 Manifest next update: Mon 26 Jan 2026 12:01:06 +0000 Files and hashes: 1: 1-3-DY60yPSCu-gGKysRC3swXx_8.roa (hash: UlzeFAwkz1/eAC6acg1mI44oqAC1xGW8wLlCXELgn1c=) 2: FfR87_mXj0CIVmHYTnyUObXrTyI.roa (hash: p3ixpnoniD5wmyp+DsfoQYYTf3OUtsn8VxkoKytvyOM=) 3: KXnMQ8JGn_pc-LesY5sB86dorFU.crl (hash: OFecYALH9ZvvIzbBmF/Lzl0cTa2T6K32WjoYaLyROe0=) 4: RSPqJer2GxHPRRgn7mg4dhkHOBw.roa (hash: 7i2L3D7sVlNeXVt8GqQE+rm6gyBVSmDTLbXKjTKH2nY=) 5: SYlj0A7ENxSNVjYsMjznaXGLRb0.roa (hash: gSHMxEMobAWDQd7qISttpazhHFBCMdL/2XU1+z3hHPw=) 6: cc4XWIaKUX4G7Q_GjtBRl5l9JZE.roa (hash: EeYAGmv4ft4PsUT0/IzIQT/a4vqcFcE3Yy8BWdbkgXk=) 7: fEfL45_nElxBXhUCYxx1XsHuo5c.roa (hash: 4sHhygZisXsBQlSu9JyHHESLzAOFL7W3RM1k1ywaXgU=) 8: v_rtQKnxRRcDJjO2DbHhjK4pGwI.roa (hash: dNVSKhl9/MJthY4QH+PbCcLHkp0+SHaGKi4AwlYRixQ=) 9: vzN3nV9iPcz_PFptK8Xgm9B69kU.roa (hash: ePugewva4SdPAswHM9Dz4qq6ORFFWmGGZvhBBAVOF6c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:7a:a0:8b:c6:5b:09:fe:75:de:bd:dd:3d:31:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55 Validity Not Before: Jan 25 12:01:06 2026 GMT Not After : Jan 26 12:01:06 2026 GMT Subject: CN=dbb1f25db0862b67fdbb416094b6414c70abe818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fa:d4:8c:ec:b6:1e:8c:59:85:82:16:61:64: f9:0f:43:06:60:11:39:98:09:59:ee:07:d1:7a:bc: b3:34:80:3f:51:ac:e0:97:35:68:c7:89:0d:09:79: fc:f1:73:ef:9a:a1:23:88:8c:62:d6:3e:52:b2:a7: 5b:2b:ee:9a:0e:42:fa:19:58:e4:5f:97:13:34:78: 23:7c:b3:56:7e:5a:62:17:45:c5:3c:77:42:08:a4: df:65:c4:07:59:a8:26:94:d3:ef:58:a5:b2:9a:e4: 57:b5:6f:c3:32:d4:ec:83:61:da:99:30:4b:e2:44: 26:4c:c8:1d:51:9f:10:9c:09:0f:e3:a4:f9:de:eb: 39:1f:46:c0:ce:dc:53:ee:ed:74:9d:f2:1e:1f:03: af:4c:de:d7:b8:6a:2c:a8:52:8b:27:71:92:ca:03: a3:0a:81:f2:b0:04:68:56:02:6d:c2:b4:c3:2c:7f: 89:01:7e:d7:84:d4:02:7a:b0:ac:e7:b4:cf:60:2a: 4a:2d:26:18:f7:78:b7:2c:b3:54:06:7c:60:d4:27: 82:33:86:02:2e:2c:b4:c4:7d:f2:5e:b5:7e:60:c3: 5a:db:cb:2c:35:48:0e:76:dd:71:42:0d:c5:90:6c: b8:07:10:37:28:c7:02:62:9d:71:97:90:f9:84:5f: b9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:B1:F2:5D:B0:86:2B:67:FD:BB:41:60:94:B6:41:4C:70:AB:E8:18 X509v3 Authority Key Identifier: keyid:29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:b2:3b:3e:8d:e3:8c:b0:86:c3:4f:c6:17:29:a8:95:c4:ee: 3f:80:63:0b:5a:89:7a:f4:59:60:cb:cf:9a:08:cd:d7:5f:b6: bc:b6:bd:3b:4d:01:53:5d:1d:43:38:6b:ec:6d:ae:c9:ae:bd: 42:15:70:63:7d:3b:23:d2:07:ee:1d:e9:bc:3b:a8:c7:46:b0: b8:02:31:c7:85:c5:67:e8:63:d7:bd:dc:db:f3:a9:db:57:02: 82:2b:57:d3:c3:c8:c6:b2:a2:2a:5f:f4:68:91:6f:0e:2a:65: 17:8b:d0:ab:36:67:82:d8:e6:6b:2f:91:fa:48:6f:2b:01:45: bc:e2:06:ec:a1:41:73:3b:aa:de:2a:e7:5d:d9:ce:ba:d2:22: 0d:6d:cc:e6:6e:f7:6b:6d:b5:fd:80:10:0a:c2:e9:17:b7:c9: ef:fe:8f:bc:cf:9b:3e:3f:c4:bd:51:13:83:60:02:2a:c9:59: 9e:a1:66:53:10:74:35:72:75:21:84:ee:32:48:9a:77:73:46: ac:8e:e3:7c:d1:a2:36:cd:10:2a:13:93:d4:cb:87:9a:f4:25: 1a:0d:e3:9e:d7:b7:dc:41:27:eb:f2:67:36:aa:72:aa:ba:e0: 47:f8:d9:66:84:14:df:49:96:35:77:11:93:1d:e1:9e:63:d4: 2b:14:68:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B3qgi8ZbCf513r3dPTGZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NzljYzQzYzI0NjlmZmE1Y2Y4YjdhYzYzOWIwMWYzYTc2 OGFjNTUwHhcNMjYwMTI1MTIwMTA2WhcNMjYwMTI2MTIwMTA2WjAzMTEwLwYDVQQD EyhkYmIxZjI1ZGIwODYyYjY3ZmRiYjQxNjA5NGI2NDE0YzcwYWJlODE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPrUjOy2HoxZhYIWYWT5D0MGYBE5 mAlZ7gfReryzNIA/UazglzVox4kNCXn88XPvmqEjiIxi1j5SsqdbK+6aDkL6GVjk X5cTNHgjfLNWflpiF0XFPHdCCKTfZcQHWagmlNPvWKWymuRXtW/DMtTsg2HamTBL 4kQmTMgdUZ8QnAkP46T53us5H0bAztxT7u10nfIeHwOvTN7XuGosqFKLJ3GSygOj CoHysARoVgJtwrTDLH+JAX7XhNQCerCs57TPYCpKLSYY93i3LLNUBnxg1CeCM4YC Liy0xH3yXrV+YMNa28ssNUgOdt1xQg3FkGy4BxA3KMcCYp1xl5D5hF+5vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNux8l2whitn/btBYJS2QUxwq+gYMB8GA1UdIwQY MBaAFCl5zEPCRp/6XPi3rGObAfOnaKxVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1huTVE4SkduX3BjLUxlc1k1c0I4NmRvckZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9lNDBmOWQtMDBmNC00MGQ5LThiOGQt NDBlYWViYzFjNDdlLzEvS1huTVE4SkduX3BjLUxlc1k1c0I4NmRvckZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9lNDBmOWQtMDBmNC00MGQ5LThiOGQtNDBlYWViYzFjNDdl LzEvS1huTVE4SkduX3BjLUxlc1k1c0I4NmRvckZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACbI7Po3j jLCGw0/GFymolcTuP4BjC1qJevRZYMvPmgjN11+2vLa9O00BU10dQzhr7G2uya69 QhVwY307I9IH7h3pvDuox0awuAIxx4XFZ+hj173c2/Op21cCgitX08PIxrKiKl/0 aJFvDiplF4vQqzZngtjmay+R+khvKwFFvOIG7KFBczuq3irnXdnOutIiDW3M5m73 a221/YAQCsLpF7fJ7/6PvM+bPj/EvVETg2ACKslZnqFmUxB0NXJ1IYTuMkiad3NG rI7jfNGiNs0QKhOT1MuHmvQlGg3jnte33EEn6/JnNqpyqrrgR/jZZoQU30mWNXcR kx3hnmPUKxRoIQ== -----END CERTIFICATE-----Generated at Sun Jan 25 21:11:02 2026 by rpki-client