This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft File: kR2gx6mUBcRrqthMudk-g0WZyOE.mft (raw, json) Hash identifier: TxqGTw7LOYiFow5NiwX6rpGOML1HwjM3MhaR5tL/JYE= Subject key identifier: 03:E9:85:E8:F8:86:05:B5:30:39:3C:E2:9E:C6:8D:30:3A:BB:99:BC Authority key identifier: 91:1D:A0:C7:A9:94:05:C4:6B:AA:D8:4C:B9:D9:3E:83:45:99:C8:E1 Certificate issuer: /CN=911da0c7a99405c46baad84cb9d93e834599c8e1 Certificate serial: 019BF6882DBE14688F337D20B160B98CA5CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 19:01:18 +0000 Manifest this update: Sun 25 Jan 2026 19:01:18 +0000 Manifest next update: Mon 26 Jan 2026 19:01:18 +0000 Files and hashes: 1: 0kE9whcbqDZPFxCT664hh63BKUs.roa (hash: 5C4ga/+QHi4o11rdDpXGfOfWtVfwE8VOC9vvm4vn/b4=) 2: kR2gx6mUBcRrqthMudk-g0WZyOE.crl (hash: CVY8SwH1AIeFm1EpAQRtgQKAc4mdOHUaTBX4HMOUvPI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:88:2d:be:14:68:8f:33:7d:20:b1:60:b9:8c:a5:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=911da0c7a99405c46baad84cb9d93e834599c8e1 Validity Not Before: Jan 25 19:01:18 2026 GMT Not After : Jan 26 19:01:18 2026 GMT Subject: CN=03e985e8f88605b530393ce29ec68d303abb99bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5a:8a:0e:08:f6:ba:62:c9:96:f8:f9:c2:23: 6a:fb:1f:b4:fb:e5:92:25:42:4f:57:0d:36:35:a6: ec:da:d2:19:96:1c:44:aa:67:1c:aa:40:09:32:f2: d7:1b:ae:16:71:d9:b7:3e:8b:a6:28:59:e8:8d:99: da:a0:75:ed:cd:b8:88:36:47:9d:36:90:b4:c6:8b: a9:b0:08:b5:4c:8b:16:3b:74:ac:2a:91:ed:87:8d: 82:54:63:67:3f:72:c2:37:a6:c9:8a:96:80:3e:3a: c3:7b:10:18:64:11:ca:44:05:7a:e9:dd:34:8e:11: f1:e7:53:ff:98:ca:e2:8d:ee:6b:ac:36:e6:08:84: 12:06:01:97:da:61:ad:5c:25:87:35:ef:fe:e8:74: 4e:da:d5:4d:ad:e0:80:0b:35:2f:95:7d:30:76:4d: f1:ee:72:21:01:65:3b:e5:b4:a1:b2:30:5f:82:59: 95:0b:53:c3:6b:94:9b:6e:71:ee:cd:6f:21:cf:f9: 9a:df:ae:cd:2f:ab:eb:da:1a:b0:d1:5e:3b:7d:71: 99:93:26:7f:5e:7d:2d:60:7b:9b:0d:8b:9b:ce:a2: 65:7d:80:31:58:7d:c1:d0:87:f6:d3:34:69:82:aa: ec:0e:04:b2:20:c2:9a:ae:df:6c:b3:31:08:2d:d4: e2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:E9:85:E8:F8:86:05:B5:30:39:3C:E2:9E:C6:8D:30:3A:BB:99:BC X509v3 Authority Key Identifier: keyid:91:1D:A0:C7:A9:94:05:C4:6B:AA:D8:4C:B9:D9:3E:83:45:99:C8:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:a1:bf:0a:fe:4e:75:f1:47:e1:7d:84:f5:0f:bc:ce:7f:55: 32:49:c0:c2:61:57:ad:30:94:f5:73:f3:7c:f0:75:c7:40:1e: df:8c:85:49:2d:af:68:15:e0:57:70:a7:43:3a:75:28:ac:7f: 08:b3:83:7a:27:8b:fa:8b:fa:5f:c9:8b:b5:22:ed:2f:bf:8e: 0b:55:50:95:5b:05:c4:44:71:40:03:d6:5c:13:bf:d4:d0:f4: bc:f4:d2:13:dc:ac:9a:12:d6:53:d1:d7:4b:a4:89:f4:4c:d7: b0:52:89:87:92:7a:1f:58:58:56:ff:72:b0:9e:3b:1e:6d:a6: 43:5f:2c:56:e5:e0:11:ac:a0:d1:1c:1d:c9:26:fd:35:f7:02: 9d:3c:93:e5:f1:06:29:d8:17:b1:61:99:c9:84:79:b6:2c:dc: 42:09:2c:bd:5c:03:9f:ee:88:0b:e9:72:09:d7:9f:bb:2c:c7: f0:6c:1e:6a:dd:40:5e:66:1b:df:ad:89:16:eb:4b:f7:a7:52: de:14:23:73:dd:c7:ad:86:7a:d3:4a:84:a3:4f:a5:13:fb:4f: d7:1c:6d:1e:29:67:0a:db:81:33:fe:a4:af:00:3a:29:f8:b7: ee:e8:b1:ae:82:cf:80:d2:2c:0c:fc:7a:4f:6b:b7:93:ad:44: ac:20:b3:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2iC2+FGiPM30gsWC5jKXKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxMWRhMGM3YTk5NDA1YzQ2YmFhZDg0Y2I5ZDkzZTgzNDU5 OWM4ZTEwHhcNMjYwMTI1MTkwMTE4WhcNMjYwMTI2MTkwMTE4WjAzMTEwLwYDVQQD EygwM2U5ODVlOGY4ODYwNWI1MzAzOTNjZTI5ZWM2OGQzMDNhYmI5OWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1qKDgj2umLJlvj5wiNq+x+0++WS JUJPVw02Nabs2tIZlhxEqmccqkAJMvLXG64Wcdm3PoumKFnojZnaoHXtzbiINked NpC0xoupsAi1TIsWO3SsKpHth42CVGNnP3LCN6bJipaAPjrDexAYZBHKRAV66d00 jhHx51P/mMrije5rrDbmCIQSBgGX2mGtXCWHNe/+6HRO2tVNreCACzUvlX0wdk3x 7nIhAWU75bShsjBfglmVC1PDa5SbbnHuzW8hz/ma367NL6vr2hqw0V47fXGZkyZ/ Xn0tYHubDYubzqJlfYAxWH3B0If20zRpgqrsDgSyIMKart9sszEILdTi4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAPphej4hgW1MDk84p7GjTA6u5m8MB8GA1UdIwQY MBaAFJEdoMeplAXEa6rYTLnZPoNFmcjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1IyZ3g2bVVCY1JycXRoTXVkay1nMFdaeU9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8yYzdhYzMtZWVkZi00NTViLTllOTQt NDcyZjAyNDUwZWMzLzEva1IyZ3g2bVVCY1JycXRoTXVkay1nMFdaeU9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi8yYzdhYzMtZWVkZi00NTViLTllOTQtNDcyZjAyNDUwZWMz LzEva1IyZ3g2bVVCY1JycXRoTXVkay1nMFdaeU9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgKG/Cv5O dfFH4X2E9Q+8zn9VMknAwmFXrTCU9XPzfPB1x0Ae34yFSS2vaBXgV3CnQzp1KKx/ CLODeieL+ov6X8mLtSLtL7+OC1VQlVsFxERxQAPWXBO/1ND0vPTSE9ysmhLWU9HX S6SJ9EzXsFKJh5J6H1hYVv9ysJ47Hm2mQ18sVuXgEayg0RwdySb9NfcCnTyT5fEG KdgXsWGZyYR5tizcQgksvVwDn+6IC+lyCdefuyzH8Gweat1AXmYb362JFutL96dS 3hQjc93HrYZ600qEo0+lE/tP1xxtHilnCtuBM/6krwA6Kfi37uixroLPgNIsDPx6 T2u3k61ErCCzuQ== -----END CERTIFICATE-----Generated at Mon Jan 26 04:24:15 2026 by rpki-client