This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft File: kYMWq06hPrtUVgwaZwQtR-lm2CM.mft (raw, json) Hash identifier: aNqeeNjODfKRqiF2UZ9EzHkUWpogPSN8tYBTVUtOG5o= Subject key identifier: DF:C3:F9:45:9E:E8:F2:12:D4:D6:90:FF:A2:27:E5:40:09:61:13:52 Authority key identifier: 91:83:16:AB:4E:A1:3E:BB:54:56:0C:1A:67:04:2D:47:E9:66:D8:23 Certificate issuer: /CN=918316ab4ea13ebb54560c1a67042d47e966d823 Certificate serial: 019BF462B23EC57A4303D1692F866209E10A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft Manifest number: 17EB Signing time: Sun 25 Jan 2026 09:01:07 +0000 Manifest this update: Sun 25 Jan 2026 09:01:07 +0000 Manifest next update: Mon 26 Jan 2026 09:01:07 +0000 Files and hashes: 1: SggDrxFFsWWs12xC5aQkzP-tlSU.roa (hash: 9cLRIhlE0/G5tYsZFx8+yzpMIrF34vwAUkKOhMbaUZc=) 2: kYMWq06hPrtUVgwaZwQtR-lm2CM.crl (hash: sINjj3RqkhLAfsyzlQu1QEijRN/foKrSWSBJ/KfUqiU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.crl rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:b2:3e:c5:7a:43:03:d1:69:2f:86:62:09:e1:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=918316ab4ea13ebb54560c1a67042d47e966d823 Validity Not Before: Jan 25 09:01:07 2026 GMT Not After : Jan 26 09:01:07 2026 GMT Subject: CN=dfc3f9459ee8f212d4d690ffa227e54009611352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7d:0d:e5:14:81:e4:ab:f6:10:a6:8a:9e:45: 15:77:72:54:65:1a:a3:c3:16:15:10:cb:62:71:45: 15:69:6a:ac:e7:c9:af:6c:6b:a8:01:a9:9c:fa:d0: f5:8e:22:32:c3:06:29:03:7b:90:74:79:63:c6:e2: a6:04:9f:24:d8:2a:ad:ca:14:c8:54:fc:56:9a:ea: f2:b9:94:f6:2f:d9:d1:a6:79:2a:bc:72:7c:80:28: 67:00:9e:80:cb:ca:77:67:c6:17:72:09:f2:af:cb: 0a:fd:52:f2:c8:ad:78:93:fd:96:23:69:77:32:11: e9:53:38:cc:9e:9c:32:ee:75:e5:6e:95:d1:a4:0d: 35:c0:87:73:08:f2:04:2b:71:f9:e9:1a:fb:5e:66: 83:e7:b4:d0:32:59:0b:33:6b:98:b3:a7:d1:00:11: 14:3c:6c:cd:b2:dd:12:c1:c9:a5:35:73:f0:1f:f8: ab:d4:59:ad:6d:b5:18:99:10:ac:dd:5b:3d:ec:a7: 55:02:2c:c0:ca:54:c3:15:2a:52:f1:46:ad:5f:17: 73:07:80:d5:4a:4b:2d:d3:c8:54:86:f9:cb:e7:e9: 0f:ce:73:2a:e6:e0:b5:3d:46:81:e9:82:fe:93:ac: ac:65:65:fd:0a:3d:bf:3a:c2:d2:0b:72:91:f5:94: 1f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:C3:F9:45:9E:E8:F2:12:D4:D6:90:FF:A2:27:E5:40:09:61:13:52 X509v3 Authority Key Identifier: keyid:91:83:16:AB:4E:A1:3E:BB:54:56:0C:1A:67:04:2D:47:E9:66:D8:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:4a:5a:54:63:89:e8:74:2f:06:14:20:b5:d2:d8:ef:6c:d0: f4:5e:5e:eb:a6:78:fe:d1:df:34:b5:80:e7:9c:84:3d:56:4a: 40:dc:84:94:6f:de:17:82:5f:2c:c8:df:82:d5:f6:10:59:67: 5e:00:81:a7:dc:94:7e:59:70:39:79:02:b5:cb:8c:08:37:71: 51:a3:5d:f6:1d:94:ff:89:16:f7:f7:0a:af:ad:c7:5b:9e:52: e8:5a:00:44:b5:94:8d:14:5a:a7:9b:b2:ea:34:3f:58:71:5c: 17:c7:92:97:0e:66:66:93:aa:62:da:ef:84:29:62:c6:ad:12: a3:2f:0f:bb:3d:4e:77:6b:0a:af:ba:b8:54:63:a6:1a:fb:25: dd:2a:08:36:db:17:c1:41:2e:e1:ed:79:f4:cd:9b:be:73:64: 02:1c:a6:fc:b9:87:27:cd:23:13:30:39:9e:7b:c6:f0:ef:d6: 3e:2e:86:48:9d:45:18:da:7b:7f:45:92:1a:37:e0:76:3e:17: bc:e1:bb:9a:f7:ec:04:99:a9:ad:7f:53:0f:3c:e8:72:b1:27: 23:c2:c9:d0:50:9f:d7:ac:91:70:76:32:d8:c0:8a:c2:06:8c: 63:2e:bf:a5:59:51:a5:1c:b6:e6:54:1c:85:4f:bb:23:a4:b7: de:55:f4:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YrI+xXpDA9FpL4ZiCeEKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxODMxNmFiNGVhMTNlYmI1NDU2MGMxYTY3MDQyZDQ3ZTk2 NmQ4MjMwHhcNMjYwMTI1MDkwMTA3WhcNMjYwMTI2MDkwMTA3WjAzMTEwLwYDVQQD EyhkZmMzZjk0NTllZThmMjEyZDRkNjkwZmZhMjI3ZTU0MDA5NjExMzUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxH0N5RSB5Kv2EKaKnkUVd3JUZRqj wxYVEMticUUVaWqs58mvbGuoAamc+tD1jiIywwYpA3uQdHljxuKmBJ8k2CqtyhTI VPxWmuryuZT2L9nRpnkqvHJ8gChnAJ6Ay8p3Z8YXcgnyr8sK/VLyyK14k/2WI2l3 MhHpUzjMnpwy7nXlbpXRpA01wIdzCPIEK3H56Rr7XmaD57TQMlkLM2uYs6fRABEU PGzNst0SwcmlNXPwH/ir1FmtbbUYmRCs3Vs97KdVAizAylTDFSpS8UatXxdzB4DV Skst08hUhvnL5+kPznMq5uC1PUaB6YL+k6ysZWX9Cj2/OsLSC3KR9ZQfmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN/D+UWe6PIS1NaQ/6In5UAJYRNSMB8GA1UdIwQY MBaAFJGDFqtOoT67VFYMGmcELUfpZtgjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1lNV3EwNmhQcnRVVmd3YVp3UXRSLWxtMkNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi84OWZiOTktOTA0OS00ODJmLTk1ZGMt OWUzY2QwZDlkNzdhLzEva1lNV3EwNmhQcnRVVmd3YVp3UXRSLWxtMkNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi84OWZiOTktOTA0OS00ODJmLTk1ZGMtOWUzY2QwZDlkNzdh LzEva1lNV3EwNmhQcnRVVmd3YVp3UXRSLWxtMkNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwkpaVGOJ 6HQvBhQgtdLY72zQ9F5e66Z4/tHfNLWA55yEPVZKQNyElG/eF4JfLMjfgtX2EFln XgCBp9yUfllwOXkCtcuMCDdxUaNd9h2U/4kW9/cKr63HW55S6FoARLWUjRRap5uy 6jQ/WHFcF8eSlw5mZpOqYtrvhClixq0Soy8Puz1Od2sKr7q4VGOmGvsl3SoINtsX wUEu4e159M2bvnNkAhym/LmHJ80jEzA5nnvG8O/WPi6GSJ1FGNp7f0WSGjfgdj4X vOG7mvfsBJmprX9TDzzocrEnI8LJ0FCf16yRcHYy2MCKwgaMYy6/pVlRpRy25lQc hU+7I6S33lX0cQ== -----END CERTIFICATE-----Generated at Sun Jan 25 18:35:56 2026 by rpki-client