This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft File: KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft (raw, json) Hash identifier: bbP2xshFu5DTqAvRTHz0Iun4g2hFqyq6a3yta0TDlbQ= Subject key identifier: B8:E0:67:74:CD:49:9A:65:5B:E2:27:40:3A:9E:87:4B:AE:EA:E4:7A Authority key identifier: 29:76:6D:1A:E6:EB:21:84:9B:C3:A3:B2:D1:8E:86:3D:27:3D:24:04 Certificate issuer: /CN=29766d1ae6eb21849bc3a3b2d18e863d273d2404 Certificate serial: 019BF5AC60FF4E458EC6D609B9B64F24E8A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft Manifest number: 01F3 Signing time: Sun 25 Jan 2026 15:01:13 +0000 Manifest this update: Sun 25 Jan 2026 15:01:13 +0000 Manifest next update: Mon 26 Jan 2026 15:01:13 +0000 Files and hashes: 1: KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.crl (hash: m95tRYFiMoMwdWlNbKRI6BhXOI2gvq0H3mkRd3ARWqg=) 2: hdtIncm8R6KfHurvC5li4aR-6S0.roa (hash: FRUMsOvUTZ3EPeiG9JMTCcXVM1bub5CGqnhEOTi3ITU=) 3: rp8RFd_7NSj5NkxaEW9D_SJM9Qc.roa (hash: tJew+9eXhgg/ITt6Y+hO2WqhJxjVaXWqK+7nSn1BD6o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:60:ff:4e:45:8e:c6:d6:09:b9:b6:4f:24:e8:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29766d1ae6eb21849bc3a3b2d18e863d273d2404 Validity Not Before: Jan 25 15:01:13 2026 GMT Not After : Jan 26 15:01:13 2026 GMT Subject: CN=b8e06774cd499a655be227403a9e874baeeae47a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e9:6b:69:47:1d:71:3e:ab:7c:24:18:5e:90: f3:02:e1:a1:d5:ed:80:19:46:71:2e:48:ee:dc:82: 3a:3e:93:78:49:69:17:1f:ac:6b:7d:fb:cb:53:e1: 12:0c:6f:5f:80:48:9b:01:84:76:b2:6c:15:80:a8: d3:7d:08:14:91:15:66:a2:bb:04:49:bc:b0:06:5a: f6:8a:bd:ee:f2:30:13:cf:e6:2b:91:36:8a:ec:cb: 14:31:19:16:f4:2e:67:10:28:17:78:98:cc:98:20: e8:37:c6:ad:d0:5c:41:14:58:ff:24:49:18:a0:a2: ad:a8:53:f2:b5:36:18:ec:9b:0e:aa:b3:6e:fc:95: bd:59:de:d8:a3:27:91:c6:68:32:e2:d2:89:9a:f2: 33:b6:ba:7d:72:a1:de:2f:2b:79:b5:3e:6d:2b:17: 12:68:4e:64:44:18:17:2d:20:b8:71:84:9a:ad:9c: c3:27:f3:41:55:be:57:02:9c:49:26:bd:4b:2a:46: 67:31:ae:48:02:30:62:df:3f:b3:0a:9d:7c:35:30: 55:76:2f:8c:dc:70:07:d9:ff:ff:a8:52:91:76:a1: d6:70:16:f7:59:cf:d3:b5:ae:8e:0d:b5:9b:31:c2: 95:5a:ba:4c:72:21:c7:4d:0b:d5:da:f6:e1:5b:f5: ec:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E0:67:74:CD:49:9A:65:5B:E2:27:40:3A:9E:87:4B:AE:EA:E4:7A X509v3 Authority Key Identifier: keyid:29:76:6D:1A:E6:EB:21:84:9B:C3:A3:B2:D1:8E:86:3D:27:3D:24:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:37:71:22:6a:d5:75:42:09:2e:f7:92:6a:f9:6b:3a:ca:fa: b7:42:45:c4:07:b6:d9:c2:bb:f3:6e:8f:b2:8a:5c:d9:a7:fe: 28:3d:7a:ec:dd:c3:2f:ee:ca:e8:e0:c8:99:ce:c2:2d:ce:b7: 31:69:cc:65:bb:cf:e5:37:a9:35:d1:8f:64:54:3c:82:e4:bd: 66:3a:4f:02:be:14:f4:40:04:3b:1d:8b:f2:a7:51:c2:8a:47: 4c:76:1c:29:e4:1b:1c:71:84:3f:f7:0e:0c:0d:d7:e8:5f:f9: 4e:17:cf:eb:56:83:91:83:35:a3:b0:90:f5:31:92:5d:9a:db: 18:2b:f6:ca:e3:e9:dd:e7:4c:d7:15:7d:89:c8:c9:ec:0b:56: 1c:18:c8:79:64:97:c4:1e:9c:00:12:95:5d:5f:2e:aa:4c:ae: f2:75:3c:99:d5:20:83:bb:6a:f7:48:e2:3f:60:ab:a4:40:d5: 65:ad:1d:b5:44:94:40:e4:4b:17:44:82:de:9d:f3:3e:15:13: 25:3a:c1:74:81:3c:58:4f:0f:08:3b:7c:b7:8b:39:e7:54:10: a5:51:ae:dd:a3:82:49:33:3a:e3:1e:9c:56:84:4e:32:8d:9e: 49:22:52:d8:96:f4:26:02:78:60:bc:68:ad:7d:d5:09:22:69: 51:73:35:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rGD/TkWOxtYJubZPJOinMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NzY2ZDFhZTZlYjIxODQ5YmMzYTNiMmQxOGU4NjNkMjcz ZDI0MDQwHhcNMjYwMTI1MTUwMTEzWhcNMjYwMTI2MTUwMTEzWjAzMTEwLwYDVQQD EyhiOGUwNjc3NGNkNDk5YTY1NWJlMjI3NDAzYTllODc0YmFlZWFlNDdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOlraUcdcT6rfCQYXpDzAuGh1e2A GUZxLkju3II6PpN4SWkXH6xrffvLU+ESDG9fgEibAYR2smwVgKjTfQgUkRVmorsE SbywBlr2ir3u8jATz+YrkTaK7MsUMRkW9C5nECgXeJjMmCDoN8at0FxBFFj/JEkY oKKtqFPytTYY7JsOqrNu/JW9Wd7YoyeRxmgy4tKJmvIztrp9cqHeLyt5tT5tKxcS aE5kRBgXLSC4cYSarZzDJ/NBVb5XApxJJr1LKkZnMa5IAjBi3z+zCp18NTBVdi+M 3HAH2f//qFKRdqHWcBb3Wc/Tta6ODbWbMcKVWrpMciHHTQvV2vbhW/XsKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLjgZ3TNSZplW+InQDqeh0uu6uR6MB8GA1UdIwQY MBaAFCl2bRrm6yGEm8OjstGOhj0nPSQEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1hadEd1YnJJWVNidzZPeTBZNkdQU2M5SkFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9iNzExZmItZTU4NC00ZjM1LWEwZWMt MTE1ZDY4ZDliODFiLzEvS1hadEd1YnJJWVNidzZPeTBZNkdQU2M5SkFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9iNzExZmItZTU4NC00ZjM1LWEwZWMtMTE1ZDY4ZDliODFi LzEvS1hadEd1YnJJWVNidzZPeTBZNkdQU2M5SkFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbzdxImrV dUIJLveSavlrOsr6t0JFxAe22cK7826Psopc2af+KD167N3DL+7K6ODImc7CLc63 MWnMZbvP5TepNdGPZFQ8guS9ZjpPAr4U9EAEOx2L8qdRwopHTHYcKeQbHHGEP/cO DA3X6F/5ThfP61aDkYM1o7CQ9TGSXZrbGCv2yuPp3edM1xV9icjJ7AtWHBjIeWSX xB6cABKVXV8uqkyu8nU8mdUgg7tq90jiP2CrpEDVZa0dtUSUQORLF0SC3p3zPhUT JTrBdIE8WE8PCDt8t4s551QQpVGu3aOCSTM64x6cVoROMo2eSSJS2Jb0JgJ4YLxo rX3VCSJpUXM1dw== -----END CERTIFICATE-----Generated at Sun Jan 25 21:46:28 2026 by rpki-client