This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft File: kGlKYihmrhWO0ofSUz1AuqvqbX0.mft (raw, json) Hash identifier: bT1ukoes6X8p9Neqa04LMkJOYagPfyPqjmZEgb7KD0E= Subject key identifier: 7E:E1:39:EA:73:74:49:CE:92:FE:8F:48:76:46:34:61:5A:74:8C:32 Authority key identifier: 90:69:4A:62:28:66:AE:15:8E:D2:87:D2:53:3D:40:BA:AB:EA:6D:7D Certificate issuer: /CN=90694a622866ae158ed287d2533d40baabea6d7d Certificate serial: 019BF57576FEF01F9F5BC79845156B3AA88D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft Manifest number: 0643 Signing time: Sun 25 Jan 2026 14:01:14 +0000 Manifest this update: Sun 25 Jan 2026 14:01:14 +0000 Manifest next update: Mon 26 Jan 2026 14:01:14 +0000 Files and hashes: 1: CiBYmXE-RogiK1Rw18kHHSv6Lc0.roa (hash: tKtvxHVgjyX0+ghMhYs0J9woVAdgsT0NzRRsOsmIW4c=) 2: kGlKYihmrhWO0ofSUz1AuqvqbX0.crl (hash: /I5Pczr7OtFljr9fWuqWJhaqQdGeACtGyLExLudLq9I=) 3: qFCsaANcR70aOKdL9jcGSnp3Nd0.roa (hash: ru6fgoLPFWNbB/rS7n0ntPU242iXsQuLTOqT36UGbKY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.crl rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:76:fe:f0:1f:9f:5b:c7:98:45:15:6b:3a:a8:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90694a622866ae158ed287d2533d40baabea6d7d Validity Not Before: Jan 25 14:01:14 2026 GMT Not After : Jan 26 14:01:14 2026 GMT Subject: CN=7ee139ea737449ce92fe8f48764634615a748c32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:fa:4b:f0:29:03:d9:9a:fc:c0:82:e4:01:fa: 8c:4d:38:b3:71:20:43:6a:4d:fb:30:04:fb:36:88: c0:80:05:34:09:43:ac:4e:1b:81:1b:08:b8:89:b3: 82:d7:93:99:15:78:ef:1c:0f:20:80:39:e3:8e:93: 9d:01:ec:7d:b8:00:8d:37:4d:c4:23:00:1a:fe:6b: ee:9b:91:91:f5:c8:43:42:7c:c2:84:7b:b8:aa:4f: 4a:86:52:5e:d5:c0:8a:1d:e2:0e:33:58:39:a2:06: a1:3d:dd:d1:de:b3:99:cd:27:8f:58:13:38:46:77: 48:ec:80:c8:aa:2b:7f:7c:b6:f2:22:16:7a:07:fa: 58:bb:e1:9a:6e:80:82:3a:13:5d:d4:a8:3f:f9:0f: 1f:04:97:68:bd:11:a5:12:f3:2b:cd:56:37:85:ba: 36:31:f3:5e:4e:d2:7a:a3:b4:8e:1b:48:23:d8:6f: 37:af:be:6c:29:92:5a:cf:8e:75:fb:6f:d4:33:c2: a1:f2:f3:2c:da:29:95:75:41:43:4a:c7:71:95:5c: 2f:20:b1:f9:f2:33:01:74:0c:7d:26:28:1a:ce:08: 8b:72:b1:65:19:cb:36:ca:5c:f0:f8:70:19:2e:06: 86:f8:97:fc:60:87:30:e0:6b:20:94:4e:4c:3f:ac: 72:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:E1:39:EA:73:74:49:CE:92:FE:8F:48:76:46:34:61:5A:74:8C:32 X509v3 Authority Key Identifier: keyid:90:69:4A:62:28:66:AE:15:8E:D2:87:D2:53:3D:40:BA:AB:EA:6D:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:37:57:8d:e9:85:b0:5c:ad:c5:fa:a4:4b:88:35:ee:a5:9c: c9:ea:96:d0:ad:f3:f9:2a:c6:d5:80:59:9d:67:7a:d5:48:55: ee:d0:d3:37:e9:e3:45:2f:a5:58:01:3b:4f:7c:12:ea:ea:9b: fe:7b:51:4f:26:51:c8:12:52:35:c3:26:a6:59:c0:54:fa:42: de:f6:2d:52:96:3f:ca:6c:a8:6b:04:b0:af:ca:62:70:e0:4f: 08:95:78:19:60:b0:e3:cf:d6:c0:00:5e:37:87:70:a5:f8:f3: 4a:13:7b:4f:31:93:41:02:0d:d1:12:83:11:29:37:b1:1d:5b: 89:1d:2b:62:d9:06:89:e0:e8:64:b1:0c:67:6c:a2:8d:8d:0e: 3c:e7:3c:e4:f2:a5:70:65:11:e5:88:aa:29:b5:7d:aa:dd:38: 9f:00:60:bd:48:21:b1:7b:1e:15:71:12:dd:b3:4d:64:e3:4c: b1:b4:56:79:71:99:c6:35:35:6d:d8:d0:f7:85:24:6c:5a:3c: 90:7d:9a:be:a3:f3:71:80:4a:be:65:00:eb:82:06:d0:73:6d: fb:db:6e:40:32:8e:0a:8f:60:d4:8b:de:4f:25:46:5c:ad:7c: c7:fc:91:e3:22:26:a1:b7:32:42:23:11:81:c6:0c:ef:39:b6: 84:5c:0c:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dXb+8B+fW8eYRRVrOqiNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwNjk0YTYyMjg2NmFlMTU4ZWQyODdkMjUzM2Q0MGJhYWJl YTZkN2QwHhcNMjYwMTI1MTQwMTE0WhcNMjYwMTI2MTQwMTE0WjAzMTEwLwYDVQQD Eyg3ZWUxMzllYTczNzQ0OWNlOTJmZThmNDg3NjQ2MzQ2MTVhNzQ4YzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/pL8CkD2Zr8wILkAfqMTTizcSBD ak37MAT7NojAgAU0CUOsThuBGwi4ibOC15OZFXjvHA8ggDnjjpOdAex9uACNN03E IwAa/mvum5GR9chDQnzChHu4qk9KhlJe1cCKHeIOM1g5ogahPd3R3rOZzSePWBM4 RndI7IDIqit/fLbyIhZ6B/pYu+GaboCCOhNd1Kg/+Q8fBJdovRGlEvMrzVY3hbo2 MfNeTtJ6o7SOG0gj2G83r75sKZJaz451+2/UM8Kh8vMs2imVdUFDSsdxlVwvILH5 8jMBdAx9JigazgiLcrFlGcs2ylzw+HAZLgaG+Jf8YIcw4GsglE5MP6xyiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH7hOepzdEnOkv6PSHZGNGFadIwyMB8GA1UdIwQY MBaAFJBpSmIoZq4VjtKH0lM9QLqr6m19MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0dsS1lpaG1yaFdPMG9mU1V6MUF1cXZxYlgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iOWUyZjctMjFkYy00MmMwLTk0YjAt MTNjMGE2MzNlOWY0LzEva0dsS1lpaG1yaFdPMG9mU1V6MUF1cXZxYlgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9iOWUyZjctMjFkYy00MmMwLTk0YjAtMTNjMGE2MzNlOWY0 LzEva0dsS1lpaG1yaFdPMG9mU1V6MUF1cXZxYlgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADDdXjemF sFytxfqkS4g17qWcyeqW0K3z+SrG1YBZnWd61UhV7tDTN+njRS+lWAE7T3wS6uqb /ntRTyZRyBJSNcMmplnAVPpC3vYtUpY/ymyoawSwr8picOBPCJV4GWCw48/WwABe N4dwpfjzShN7TzGTQQIN0RKDESk3sR1biR0rYtkGieDoZLEMZ2yijY0OPOc85PKl cGUR5YiqKbV9qt04nwBgvUghsXseFXES3bNNZONMsbRWeXGZxjU1bdjQ94UkbFo8 kH2avqPzcYBKvmUA64IG0HNt+9tuQDKOCo9g1IveTyVGXK18x/yR4yImobcyQiMR gcYM7zm2hFwM8A== -----END CERTIFICATE-----Generated at Sun Jan 25 19:44:45 2026 by rpki-client