This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft File: Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft (raw, json) Hash identifier: Slacdju+T/XgHZo/7YjKI5gQOsUo+5pOD9NeF1hij40= Subject key identifier: B1:84:CD:C9:13:D7:47:66:3F:30:B6:62:CD:D1:95:90:85:5E:41:E4 Authority key identifier: 2B:0E:6A:7B:DB:11:C4:FF:D7:77:18:08:15:10:C9:14:31:17:8C:DB Certificate issuer: /CN=2b0e6a7bdb11c4ffd77718081510c91431178cdb Certificate serial: 019BF6F58262BFEEBC8E651AD4632ABDAD12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 21:00:43 +0000 Manifest this update: Sun 25 Jan 2026 21:00:43 +0000 Manifest next update: Mon 26 Jan 2026 21:00:43 +0000 Files and hashes: 1: Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl (hash: 1flii2Mp0ndlIEvjqzTzKjVW0qlEHxrFSH8TfMZRCoQ=) 2: xa8hNYnY5YtZ3lvhBoGXHaoWdZs.roa (hash: cfTBRZqteMXbej9rAKnDcge1IuDIIPwXFt2wZ9TtEP8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:82:62:bf:ee:bc:8e:65:1a:d4:63:2a:bd:ad:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b0e6a7bdb11c4ffd77718081510c91431178cdb Validity Not Before: Jan 25 21:00:43 2026 GMT Not After : Jan 26 21:00:43 2026 GMT Subject: CN=b184cdc913d747663f30b662cdd19590855e41e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:df:7f:00:54:c7:4e:8e:ad:7f:b8:29:a2:2a: 49:e3:23:aa:9d:1c:24:a2:4e:36:56:45:c5:0e:ed: 72:6f:0a:d2:ba:08:6d:ba:e3:b9:43:4b:59:92:16: 8e:f7:9f:fb:ad:ef:6b:94:39:0d:c1:43:48:9d:17: eb:5f:bd:0e:1f:17:b0:ee:11:bb:a6:97:0d:7c:d5: e8:46:27:ab:54:13:bb:80:6d:51:1a:9e:96:62:b9: 4f:b9:63:9d:11:19:b8:99:35:cb:70:71:72:08:00: 0c:7e:ba:d6:e2:35:c0:d0:35:8b:b3:1a:d0:72:18: 15:53:01:32:0b:05:65:b0:7d:28:4e:12:e5:68:6b: af:db:8a:f2:0e:8e:fa:9c:6c:4f:87:b8:60:e7:16: a5:d7:2f:73:cd:47:07:c3:23:98:ba:02:51:81:f6: 17:6c:05:5f:0f:5d:7c:af:15:da:33:eb:ab:14:46: 5b:d5:5c:69:9e:b7:32:29:ff:97:67:8d:7d:18:88: 78:5a:86:6f:e7:89:5e:8d:1f:87:9e:25:40:33:71: 22:76:df:75:45:50:1e:cd:9f:85:75:51:1b:b5:22: a5:38:80:21:71:bc:0c:00:b0:a8:49:4b:e0:6e:9d: 52:bd:e2:b0:e8:8d:aa:71:ff:cd:5e:4d:75:06:fc: 5a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:84:CD:C9:13:D7:47:66:3F:30:B6:62:CD:D1:95:90:85:5E:41:E4 X509v3 Authority Key Identifier: keyid:2B:0E:6A:7B:DB:11:C4:FF:D7:77:18:08:15:10:C9:14:31:17:8C:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:e4:04:86:f1:a2:5a:d3:dc:ca:ec:61:f5:48:4f:c8:3c:31: 26:24:7a:f5:a7:5f:33:df:93:63:29:36:2d:d3:f7:55:87:6f: 92:b4:52:2e:3a:90:59:46:49:4f:f3:db:09:cc:57:89:55:91: f7:4b:b9:a2:e2:75:81:88:8d:af:ca:14:a0:57:71:fe:70:4b: 24:14:05:5c:7a:56:1b:2f:f6:ff:56:d7:05:26:ee:40:a0:f5: ec:f6:7b:7d:f3:47:de:b2:94:31:18:8e:1f:63:86:80:cc:59: fd:5d:d7:8a:73:fa:5e:ce:80:07:d5:39:78:7e:09:90:eb:22: 50:40:fd:16:7c:1e:71:6c:4d:c7:6f:da:48:21:b6:9e:da:91: 46:0f:35:5a:c3:48:b0:f7:2b:b7:bd:11:4a:51:f3:c3:31:12: d5:84:54:cc:b3:c0:73:70:28:06:b6:74:05:a1:98:3a:73:b4: 01:85:b2:be:4b:0c:aa:41:d8:b6:84:4b:39:33:a0:a2:70:6c: c0:e8:c3:20:14:20:b0:16:ae:ee:0d:a9:3e:ce:13:6c:5c:0a: a9:6d:37:72:b3:6f:7f:97:ec:e3:b4:4b:aa:8b:b6:22:dd:b9: 4f:1a:45:d1:52:5d:b7:28:80:ee:77:54:4f:8b:65:75:de:76: ea:48:13:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29YJiv+68jmUa1GMqva0SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiMGU2YTdiZGIxMWM0ZmZkNzc3MTgwODE1MTBjOTE0MzEx NzhjZGIwHhcNMjYwMTI1MjEwMDQzWhcNMjYwMTI2MjEwMDQzWjAzMTEwLwYDVQQD EyhiMTg0Y2RjOTEzZDc0NzY2M2YzMGI2NjJjZGQxOTU5MDg1NWU0MWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqt9/AFTHTo6tf7gpoipJ4yOqnRwk ok42VkXFDu1ybwrSughtuuO5Q0tZkhaO95/7re9rlDkNwUNInRfrX70OHxew7hG7 ppcNfNXoRierVBO7gG1RGp6WYrlPuWOdERm4mTXLcHFyCAAMfrrW4jXA0DWLsxrQ chgVUwEyCwVlsH0oThLlaGuv24ryDo76nGxPh7hg5xal1y9zzUcHwyOYugJRgfYX bAVfD118rxXaM+urFEZb1VxpnrcyKf+XZ419GIh4WoZv54lejR+HniVAM3Eidt91 RVAezZ+FdVEbtSKlOIAhcbwMALCoSUvgbp1SveKw6I2qcf/NXk11BvxaRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLGEzckT10dmPzC2Ys3RlZCFXkHkMB8GA1UdIwQY MBaAFCsOanvbEcT/13cYCBUQyRQxF4zbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3c1cWU5c1J4UF9YZHhnSUZSREpGREVYak5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yZDIzOGUtYjMxYy00ZWEwLTk4Y2Mt YzRmZWJjM2Q2ZTUyLzEvS3c1cWU5c1J4UF9YZHhnSUZSREpGREVYak5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yZDIzOGUtYjMxYy00ZWEwLTk4Y2MtYzRmZWJjM2Q2ZTUy LzEvS3c1cWU5c1J4UF9YZHhnSUZSREpGREVYak5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHuQEhvGi WtPcyuxh9UhPyDwxJiR69adfM9+TYyk2LdP3VYdvkrRSLjqQWUZJT/PbCcxXiVWR 90u5ouJ1gYiNr8oUoFdx/nBLJBQFXHpWGy/2/1bXBSbuQKD17PZ7ffNH3rKUMRiO H2OGgMxZ/V3XinP6Xs6AB9U5eH4JkOsiUED9FnwecWxNx2/aSCG2ntqRRg81WsNI sPcrt70RSlHzwzES1YRUzLPAc3AoBrZ0BaGYOnO0AYWyvksMqkHYtoRLOTOgonBs wOjDIBQgsBau7g2pPs4TbFwKqW03crNvf5fs47RLqou2It25TxpF0VJdtyiA7ndU T4tldd526kgTZQ== -----END CERTIFICATE-----Generated at Mon Jan 26 04:48:19 2026 by rpki-client