This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft File: kTgbyWneatw9HdwOuJve6s6YBc0.mft (raw, json) Hash identifier: 6m+vPL6f0t+559d0sq9dw58YrmJmmhXt+dgW2PQUYSk= Subject key identifier: 25:06:5C:57:3F:1E:92:CD:B1:DA:3A:7E:11:78:11:71:80:E8:0E:98 Authority key identifier: 91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD Certificate issuer: /CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd Certificate serial: 019BF4D0FCA78F4098E1CE4B0A87CF1AC5CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft Manifest number: 0BDC Signing time: Sun 25 Jan 2026 11:01:35 +0000 Manifest this update: Sun 25 Jan 2026 11:01:35 +0000 Manifest next update: Mon 26 Jan 2026 11:01:35 +0000 Files and hashes: 1: AeZuHYO0mULsrI-c-YIMMNHmKvk.roa (hash: E13pkVsdNOEH/6Nn+/0O/foSnJKfkBMXITwoCcEEiuI=) 2: H180kdffd3luCWDv6OkwCGcrOfc.roa (hash: bZpdssv1zrr3XYWLcVwhDgI3iMTPHR0H5UYXdEHp1SQ=) 3: ZAsWuhaFhvmR__Q0aQXj1GfCRnk.roa (hash: DhqcuYQ4zHPXq9RixDGQKhV/M4lScQzHRE9Yz/ZYfyc=) 4: kTgbyWneatw9HdwOuJve6s6YBc0.crl (hash: doJL4RCuAsKEODGUmT8yNUQ6MCc+Pr1+xl1uXN3TMwo=) 5: o-BkPwL00PdU1t8ffwirkb7_R1g.roa (hash: suuI+jXuOojIG5lnf6toPBtgOXStJ8/ZoJx7xnWXW/s=) 6: tYmXAiohX3AcRjPUBEAHeBUsE58.roa (hash: FN7T5567tN5nhPmv6bO1Q8VmVLE2iMv0mhNHydh4B2Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.crl rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:fc:a7:8f:40:98:e1:ce:4b:0a:87:cf:1a:c5:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd Validity Not Before: Jan 25 11:01:35 2026 GMT Not After : Jan 26 11:01:35 2026 GMT Subject: CN=25065c573f1e92cdb1da3a7e1178117180e80e98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a6:3d:b9:01:32:78:1c:c7:c8:a7:44:f0:7f: 51:90:fa:b4:01:5e:f5:de:76:dc:ec:19:45:63:fc: b5:1c:8a:7e:e5:68:d4:5e:6a:40:78:eb:cc:35:b4: 92:22:ca:9e:64:6d:c4:42:e9:70:27:49:54:90:01: 59:ab:56:cc:b6:96:bd:bb:e1:6b:6a:d1:04:46:d4: 45:2a:9a:8c:24:6c:8e:1f:23:3f:f0:86:76:69:ee: 82:ea:33:17:a0:41:39:68:3b:9a:5a:df:f4:77:81: f7:cd:e5:c2:ad:52:04:87:f5:ca:ac:a7:b7:40:45: e5:ca:57:b2:8a:70:91:d4:a7:19:2b:47:f3:98:5b: e8:dc:bd:c3:c9:8d:33:db:8a:52:d1:8b:73:1d:a7: 74:e0:3b:b3:62:2a:13:03:a4:92:27:1d:83:ad:44: 74:c8:46:31:38:5c:2c:85:bc:f3:9e:82:af:cb:5b: ca:f4:14:72:cd:5a:e6:8c:44:fa:31:61:b0:c7:b7: 57:5c:27:4f:6f:8b:2e:ab:6a:42:cb:39:47:b5:53: 23:76:4a:7e:44:d8:68:f3:09:54:57:d7:61:e7:fe: e1:4f:8a:25:80:16:d6:87:7b:2b:4b:53:89:22:de: 03:5e:dc:e4:dc:0b:b9:a4:58:87:4a:5e:6f:36:e1: 26:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:06:5C:57:3F:1E:92:CD:B1:DA:3A:7E:11:78:11:71:80:E8:0E:98 X509v3 Authority Key Identifier: keyid:91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:87:55:26:9f:c8:1d:a7:c3:39:7d:9e:2f:f1:e8:03:f3:8f: 4c:86:f9:b6:ba:5d:d5:1a:8e:f0:54:b6:8d:90:b6:f2:b3:1d: c9:2f:a5:be:b0:60:d5:e6:46:df:a9:ad:ec:bc:02:a1:ba:c5: 74:df:fa:ce:af:f1:70:f4:f0:e6:dd:6e:8d:9f:c3:b3:07:30: cb:f9:0b:1b:9d:f0:82:57:a1:3d:0b:e6:86:a1:ea:ac:ef:fc: 4a:f6:e0:3b:10:a1:c2:51:16:dc:4a:fa:83:05:aa:62:5e:71: 9e:2b:44:db:5a:d9:e3:1d:f1:ed:58:82:37:5d:45:23:3d:99: 02:37:4e:48:62:18:88:0b:10:3a:fc:f5:20:ec:ec:48:12:89: 9b:29:d0:ed:58:5a:3b:9d:e7:ee:49:9a:49:73:a5:7b:b5:69: 43:09:d8:d7:db:d6:0c:34:19:47:3f:2c:a5:84:01:30:b9:58: 61:77:16:c3:89:4c:92:e8:3d:e8:3a:4b:cb:65:6d:bb:4e:0d: 23:6e:2f:a6:e4:71:d0:67:ff:83:61:78:ae:ec:07:c6:9b:b2: 94:9d:c1:06:6b:82:db:01:f8:54:1b:30:43:9d:bf:7e:e5:ab: 82:84:df:2a:b9:ef:20:16:63:fb:b9:e6:4f:92:07:e8:55:d8: f6:77:47:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00Pynj0CY4c5LCofPGsXNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxMzgxYmM5NjlkZTZhZGMzZDFkZGMwZWI4OWJkZWVhY2U5 ODA1Y2QwHhcNMjYwMTI1MTEwMTM1WhcNMjYwMTI2MTEwMTM1WjAzMTEwLwYDVQQD EygyNTA2NWM1NzNmMWU5MmNkYjFkYTNhN2UxMTc4MTE3MTgwZTgwZTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6Y9uQEyeBzHyKdE8H9RkPq0AV71 3nbc7BlFY/y1HIp+5WjUXmpAeOvMNbSSIsqeZG3EQulwJ0lUkAFZq1bMtpa9u+Fr atEERtRFKpqMJGyOHyM/8IZ2ae6C6jMXoEE5aDuaWt/0d4H3zeXCrVIEh/XKrKe3 QEXlyleyinCR1KcZK0fzmFvo3L3DyY0z24pS0YtzHad04DuzYioTA6SSJx2DrUR0 yEYxOFwshbzznoKvy1vK9BRyzVrmjET6MWGwx7dXXCdPb4suq2pCyzlHtVMjdkp+ RNho8wlUV9dh5/7hT4olgBbWh3srS1OJIt4DXtzk3Au5pFiHSl5vNuEm1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCUGXFc/HpLNsdo6fhF4EXGA6A6YMB8GA1UdIwQY MBaAFJE4G8lp3mrcPR3cDrib3urOmAXNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1RnYnlXbmVhdHc5SGR3T3VKdmU2czZZQmMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9mMzU0MDYtZDhjNC00ZjVjLTkyYWMt MjU2ZGE5NWQxMzQ1LzEva1RnYnlXbmVhdHc5SGR3T3VKdmU2czZZQmMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9mMzU0MDYtZDhjNC00ZjVjLTkyYWMtMjU2ZGE5NWQxMzQ1 LzEva1RnYnlXbmVhdHc5SGR3T3VKdmU2czZZQmMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfYdVJp/I HafDOX2eL/HoA/OPTIb5trpd1RqO8FS2jZC28rMdyS+lvrBg1eZG36mt7LwCobrF dN/6zq/xcPTw5t1ujZ/Dswcwy/kLG53wglehPQvmhqHqrO/8SvbgOxChwlEW3Er6 gwWqYl5xnitE21rZ4x3x7ViCN11FIz2ZAjdOSGIYiAsQOvz1IOzsSBKJmynQ7Vha O53n7kmaSXOle7VpQwnY19vWDDQZRz8spYQBMLlYYXcWw4lMkug96DpLy2Vtu04N I24vpuRx0Gf/g2F4ruwHxpuylJ3BBmuC2wH4VBswQ52/fuWrgoTfKrnvIBZj+7nm T5IH6FXY9ndHnQ== -----END CERTIFICATE-----Generated at Sun Jan 25 14:46:52 2026 by rpki-client