This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft File: Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft (raw, json) Hash identifier: 8mnWtH0DUx7HmvJbn21p3OA+F9EHmKpU3+M9smwocAg= Subject key identifier: AC:4C:BD:2B:A3:21:B9:5B:95:B5:83:77:68:93:9C:8B:C6:36:F5:74 Authority key identifier: 2B:0E:6A:7B:DB:11:C4:FF:D7:77:18:08:15:10:C9:14:31:17:8C:DB Certificate issuer: /CN=2b0e6a7bdb11c4ffd77718081510c91431178cdb Certificate serial: 019BF8E416FEBD8A6722C2303A744B1397BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft Manifest number: 17EB Signing time: Mon 26 Jan 2026 06:00:56 +0000 Manifest this update: Mon 26 Jan 2026 06:00:56 +0000 Manifest next update: Tue 27 Jan 2026 06:00:56 +0000 Files and hashes: 1: Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl (hash: SC3URdi8SkmbSSQl+4P7/wEg5fcOJIoybj3zjhnsDHc=) 2: xa8hNYnY5YtZ3lvhBoGXHaoWdZs.roa (hash: cfTBRZqteMXbej9rAKnDcge1IuDIIPwXFt2wZ9TtEP8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:e4:16:fe:bd:8a:67:22:c2:30:3a:74:4b:13:97:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b0e6a7bdb11c4ffd77718081510c91431178cdb Validity Not Before: Jan 26 06:00:56 2026 GMT Not After : Jan 27 06:00:56 2026 GMT Subject: CN=ac4cbd2ba321b95b95b5837768939c8bc636f574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:4c:b3:c0:cb:6d:e3:de:1b:ea:36:bc:5c:02: ba:f9:87:c0:c8:ae:c5:c9:d2:08:b1:58:40:67:cb: 95:7c:d7:7f:24:d2:ba:21:80:d3:2b:69:60:75:f0: 0d:5b:36:73:68:c7:71:2a:f8:1d:31:ee:d9:1e:a2: 47:cc:09:02:23:23:03:ef:3a:c3:11:63:33:3d:98: 99:50:29:bb:36:fb:06:29:c4:b1:78:e5:ce:55:bc: 8e:ee:f1:1d:d3:bc:d9:aa:20:fb:96:5f:6b:a1:2d: fd:ec:69:58:63:2a:43:fc:a2:35:10:24:21:03:8e: 91:48:85:7f:c3:a2:3c:52:e3:45:fd:50:2b:09:a5: 8c:65:a8:b8:5b:49:8e:c9:c8:b0:db:43:3a:ef:18: d4:3e:83:18:39:41:16:ae:72:3e:ae:20:a3:b2:3f: 38:52:2f:95:bf:4a:df:95:4f:76:90:5d:87:a8:1d: e8:b5:a2:3d:99:68:27:8c:61:84:15:96:b4:31:77: 27:ab:af:f1:7b:6c:de:48:f7:ff:e4:fc:a4:51:24: 52:70:91:65:09:db:a8:4a:44:b4:43:29:2e:4f:ea: 3a:e5:65:58:d9:f9:4c:61:8a:0e:38:96:18:5c:e9: 0e:4b:54:92:3f:f2:60:90:88:58:43:93:5d:33:5b: f2:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:4C:BD:2B:A3:21:B9:5B:95:B5:83:77:68:93:9C:8B:C6:36:F5:74 X509v3 Authority Key Identifier: keyid:2B:0E:6A:7B:DB:11:C4:FF:D7:77:18:08:15:10:C9:14:31:17:8C:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:ac:bb:87:aa:62:1b:21:56:f0:6e:29:7e:b0:b4:d3:e4:93: 3b:b7:93:2d:e7:3a:f0:ae:db:21:e4:99:0f:3d:da:02:be:0a: 33:8b:9b:0a:a4:86:da:f2:a2:58:9e:0a:6c:62:b7:96:bb:67: ed:86:4a:e6:63:59:69:c8:19:5a:de:92:10:8b:16:15:91:80: b8:3a:70:e7:5f:99:ee:ec:12:d6:5e:85:bc:09:cf:84:5c:62: 41:58:7e:a7:95:af:7c:d9:5b:22:c2:4e:17:e7:16:20:2c:49: 60:79:99:2c:0e:0c:2b:ca:b7:a5:b6:9a:85:a3:23:d3:60:58: d4:a5:bf:58:94:33:6b:20:8c:dc:76:ff:2c:2c:41:26:80:7c: 07:0f:be:ef:bd:e7:13:84:3e:ee:6e:46:b6:a4:59:5d:d5:a6: 45:8c:98:75:22:fd:4a:ee:00:f4:7e:f6:20:d3:a3:bb:49:14: ab:9f:42:8c:71:10:21:84:bb:ab:6f:9c:82:c2:8c:92:60:f5: 11:e3:60:ad:db:5f:87:06:a0:e5:3d:0d:ff:5c:04:57:5d:86: 50:d7:a3:72:07:e3:e8:82:47:e8:ab:89:ed:bd:99:02:a9:5e: 9e:5d:bf:84:6c:6b:f8:2f:10:70:a2:bf:84:2f:9d:0b:75:80: 26:38:e2:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv45Bb+vYpnIsIwOnRLE5e7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiMGU2YTdiZGIxMWM0ZmZkNzc3MTgwODE1MTBjOTE0MzEx NzhjZGIwHhcNMjYwMTI2MDYwMDU2WhcNMjYwMTI3MDYwMDU2WjAzMTEwLwYDVQQD EyhhYzRjYmQyYmEzMjFiOTViOTViNTgzNzc2ODkzOWM4YmM2MzZmNTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6kyzwMtt494b6ja8XAK6+YfAyK7F ydIIsVhAZ8uVfNd/JNK6IYDTK2lgdfANWzZzaMdxKvgdMe7ZHqJHzAkCIyMD7zrD EWMzPZiZUCm7NvsGKcSxeOXOVbyO7vEd07zZqiD7ll9roS397GlYYypD/KI1ECQh A46RSIV/w6I8UuNF/VArCaWMZai4W0mOyciw20M67xjUPoMYOUEWrnI+riCjsj84 Ui+Vv0rflU92kF2HqB3otaI9mWgnjGGEFZa0MXcnq6/xe2zeSPf/5PykUSRScJFl CduoSkS0QykuT+o65WVY2flMYYoOOJYYXOkOS1SSP/JgkIhYQ5NdM1vyhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKxMvSujIblblbWDd2iTnIvGNvV0MB8GA1UdIwQY MBaAFCsOanvbEcT/13cYCBUQyRQxF4zbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3c1cWU5c1J4UF9YZHhnSUZSREpGREVYak5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yZDIzOGUtYjMxYy00ZWEwLTk4Y2Mt YzRmZWJjM2Q2ZTUyLzEvS3c1cWU5c1J4UF9YZHhnSUZSREpGREVYak5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yZDIzOGUtYjMxYy00ZWEwLTk4Y2MtYzRmZWJjM2Q2ZTUy LzEvS3c1cWU5c1J4UF9YZHhnSUZSREpGREVYak5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf6y7h6pi GyFW8G4pfrC00+STO7eTLec68K7bIeSZDz3aAr4KM4ubCqSG2vKiWJ4KbGK3lrtn 7YZK5mNZacgZWt6SEIsWFZGAuDpw51+Z7uwS1l6FvAnPhFxiQVh+p5WvfNlbIsJO F+cWICxJYHmZLA4MK8q3pbaahaMj02BY1KW/WJQzayCM3Hb/LCxBJoB8Bw++773n E4Q+7m5GtqRZXdWmRYyYdSL9Su4A9H72INOju0kUq59CjHEQIYS7q2+cgsKMkmD1 EeNgrdtfhwag5T0N/1wEV12GUNejcgfj6IJH6KuJ7b2ZAqlenl2/hGxr+C8QcKK/ hC+dC3WAJjjilw== -----END CERTIFICATE-----Generated at Mon Jan 26 07:44:46 2026 by rpki-client