This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft File: KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft (raw, json) Hash identifier: Nls9ptfDcpqXWcp+3Eezg/rvFDfN83Lx3t/Ye+gqq98= Subject key identifier: 55:0D:3B:33:81:2A:5C:86:7E:44:BE:B1:8F:9F:37:A7:96:8D:4D:FC Authority key identifier: 28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87 Certificate issuer: /CN=28ab22fb2da473c5426bfcc1f880861004017087 Certificate serial: 019BF350A614B073587F6ED69A4BDDB080AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft Manifest number: 1375 Signing time: Sun 25 Jan 2026 04:01:47 +0000 Manifest this update: Sun 25 Jan 2026 04:01:47 +0000 Manifest next update: Mon 26 Jan 2026 04:01:47 +0000 Files and hashes: 1: KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl (hash: 8J1sEw309VuPWck6kDOmiGhaXcqnszvMoYwbLTJaw5Y=) 2: Y70zyG7I9pwPxufHMNaSl1DNGhY.roa (hash: 16zs+JN/QNVs6Rfpz1JbcmZNypvvn5ypzp05OdhbLxQ=) 3: q1iV5HfiWb2bDdmQsPwstYhz80U.roa (hash: BQwEoYPH+cxz0vuPMNQasnJLnY5C7gkVMF5XtFV/wE4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:50:a6:14:b0:73:58:7f:6e:d6:9a:4b:dd:b0:80:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28ab22fb2da473c5426bfcc1f880861004017087 Validity Not Before: Jan 25 04:01:47 2026 GMT Not After : Jan 26 04:01:47 2026 GMT Subject: CN=550d3b33812a5c867e44beb18f9f37a7968d4dfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:5f:72:6a:d4:ab:21:76:bb:0b:b5:48:5e:59: be:4c:e6:80:65:e2:da:2b:78:45:ae:48:97:11:9c: b4:2e:fd:e1:aa:42:71:64:46:a9:e8:5c:34:a9:47: 3d:03:dc:62:32:0d:cb:f1:e6:2c:fb:ee:91:f0:8d: b1:61:72:c7:43:92:6e:f9:76:07:d5:98:c6:f6:56: 67:6b:33:b7:f4:ec:c4:09:c9:16:17:b6:dc:eb:6b: 78:21:de:c9:b7:0e:f1:61:dd:59:53:98:f9:92:23: e1:19:b0:e0:61:a0:ae:81:94:57:84:bc:d3:21:d3: b6:80:c9:08:6e:60:a9:9d:20:5c:fd:30:07:5d:9c: 36:78:e3:9c:15:2b:9b:36:38:17:f1:f2:df:cf:f8: 63:c0:67:c6:ba:93:32:a6:58:56:f9:9b:8b:d9:b1: 38:71:1f:67:60:7d:07:c8:c5:0c:c7:13:d6:bb:6e: 33:b8:c1:9b:b2:89:51:31:f3:76:f6:d7:b2:d5:f7: 61:45:f3:d6:0a:f8:c6:6f:e0:a4:8a:24:15:e2:e7: 66:ce:35:39:08:1b:0a:f7:6c:37:0d:e5:69:b1:f5: 94:39:59:7e:04:cd:29:cf:f6:bf:7f:22:18:b8:33: dc:43:7d:a1:7b:b6:8f:b4:8b:a4:8c:5a:c9:f3:da: db:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:0D:3B:33:81:2A:5C:86:7E:44:BE:B1:8F:9F:37:A7:96:8D:4D:FC X509v3 Authority Key Identifier: keyid:28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:c9:c7:b1:06:02:31:cf:b6:de:33:29:51:28:75:d2:55:d6: f9:c1:4a:2d:1f:79:ec:16:12:cc:c2:94:98:5c:6b:63:cb:2a: 2c:c7:18:d0:e1:b8:f5:40:32:04:12:8f:ba:ea:8c:3f:2d:50: 12:06:1e:f0:a1:0a:db:e8:9d:7b:6a:59:df:5c:82:b9:d2:0e: d3:c3:06:df:f0:23:4a:22:97:a1:bd:8d:94:a5:40:77:30:e3: 60:f5:c3:b7:96:7f:ac:53:bc:90:94:a6:de:6e:61:48:fb:d2: d7:9b:0b:7b:bd:42:8c:c4:cb:19:9a:ee:35:ba:d8:80:f4:ea: a5:e2:04:75:cc:d6:22:ae:51:1a:c1:36:bb:dd:cb:93:b8:f0: 6a:b0:e1:be:70:f5:08:68:2f:44:e9:df:89:a1:44:2a:55:3f: 9a:5a:1d:d7:0a:70:84:9e:e0:27:15:ab:a1:5d:43:5b:8e:12: 13:50:86:d9:0f:5b:19:2c:e9:5b:e5:18:c8:da:b2:30:9a:ac: ea:1c:6d:28:0a:a0:42:4e:9a:ca:60:1d:ba:06:18:9c:13:04: 09:0a:1a:a5:5b:c1:79:0c:35:05:b3:8c:8f:7c:0e:5a:6c:45: 20:26:46:ac:e5:fe:01:1d:36:59:e8:e2:1c:82:fc:ef:f9:ac: a2:53:31:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzUKYUsHNYf27WmkvdsICuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4YWIyMmZiMmRhNDczYzU0MjZiZmNjMWY4ODA4NjEwMDQw MTcwODcwHhcNMjYwMTI1MDQwMTQ3WhcNMjYwMTI2MDQwMTQ3WjAzMTEwLwYDVQQD Eyg1NTBkM2IzMzgxMmE1Yzg2N2U0NGJlYjE4ZjlmMzdhNzk2OGQ0ZGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3l9yatSrIXa7C7VIXlm+TOaAZeLa K3hFrkiXEZy0Lv3hqkJxZEap6Fw0qUc9A9xiMg3L8eYs++6R8I2xYXLHQ5Ju+XYH 1ZjG9lZnazO39OzECckWF7bc62t4Id7Jtw7xYd1ZU5j5kiPhGbDgYaCugZRXhLzT IdO2gMkIbmCpnSBc/TAHXZw2eOOcFSubNjgX8fLfz/hjwGfGupMyplhW+ZuL2bE4 cR9nYH0HyMUMxxPWu24zuMGbsolRMfN29tey1fdhRfPWCvjGb+CkiiQV4udmzjU5 CBsK92w3DeVpsfWUOVl+BM0pz/a/fyIYuDPcQ32he7aPtIukjFrJ89rboQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFUNOzOBKlyGfkS+sY+fN6eWjU38MB8GA1UdIwQY MBaAFCirIvstpHPFQmv8wfiAhhAEAXCHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0tzaS15MmtjOFZDYV96Qi1JQ0dFQVFCY0ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mNTNkYTQtMDJlOC00OGY0LTgwYjMt M2ExNTk1ZmM4NmVmLzEvS0tzaS15MmtjOFZDYV96Qi1JQ0dFQVFCY0ljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9mNTNkYTQtMDJlOC00OGY0LTgwYjMtM2ExNTk1ZmM4NmVm LzEvS0tzaS15MmtjOFZDYV96Qi1JQ0dFQVFCY0ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACcnHsQYC Mc+23jMpUSh10lXW+cFKLR957BYSzMKUmFxrY8sqLMcY0OG49UAyBBKPuuqMPy1Q EgYe8KEK2+ide2pZ31yCudIO08MG3/AjSiKXob2NlKVAdzDjYPXDt5Z/rFO8kJSm 3m5hSPvS15sLe71CjMTLGZruNbrYgPTqpeIEdczWIq5RGsE2u93Lk7jwarDhvnD1 CGgvROnfiaFEKlU/mlod1wpwhJ7gJxWroV1DW44SE1CG2Q9bGSzpW+UYyNqyMJqs 6hxtKAqgQk6aymAdugYYnBMECQoapVvBeQw1BbOMj3wOWmxFICZGrOX+AR02Weji HIL87/msolMxxA== -----END CERTIFICATE-----Generated at Sun Jan 25 07:37:54 2026 by rpki-client