This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft File: KbeTgP5AdDnMLs0_rBgVfbNs92g.mft (raw, json) Hash identifier: xKROkljONQljelARx0/vFHKRNkroHSb5fvsrG/SPWOA= Subject key identifier: A1:35:C1:2F:E4:44:A4:2B:86:BD:1A:68:13:ED:95:50:AA:09:A0:5C Authority key identifier: 29:B7:93:80:FE:40:74:39:CC:2E:CD:3F:AC:18:15:7D:B3:6C:F7:68 Certificate issuer: /CN=29b79380fe407439cc2ecd3fac18157db36cf768 Certificate serial: 019BF5AC1D82FF1554278167F68CBACDDCDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft Manifest number: 1367 Signing time: Sun 25 Jan 2026 15:00:56 +0000 Manifest this update: Sun 25 Jan 2026 15:00:56 +0000 Manifest next update: Mon 26 Jan 2026 15:00:56 +0000 Files and hashes: 1: EDNpAts-6JeGE5wjiUM5BMSnB9k.roa (hash: URMxngJbXriRE2iOut0YpTm56ViTEGhL3sKLZKHuyJ0=) 2: KbeTgP5AdDnMLs0_rBgVfbNs92g.crl (hash: koaq9uMuz6t0r+ghCmgdosiItWBYQYUKPrhsiw87/6A=) 3: Mz1Pckz4GFpvQcLGeGjvkgHgEUc.roa (hash: DDYkbbLPOZouFDJgBa+WHylISlZR4ujlVO/1zXw9mng=) 4: UBjaQjSsvCaMWIObSymTDrfellU.roa (hash: FakZBVr4LoPzsh/Z6oDhedet2QWrNOrHB6+ZNqqvw9I=) 5: g0O8o9hRTm8S4xVKsUK0pxNFTIk.roa (hash: YP1AJ0q+zSM445DjhCgE/dmdRBL7ryjwtDbdKhvu3Rg=) 6: sAk06Tsd-_YR9NQduC3T-piAvWk.roa (hash: xw7/19cXkRCZDOVeEPf+Eoup5YiNyQhWAOUhvYY+IJo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:1d:82:ff:15:54:27:81:67:f6:8c:ba:cd:dc:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29b79380fe407439cc2ecd3fac18157db36cf768 Validity Not Before: Jan 25 15:00:56 2026 GMT Not After : Jan 26 15:00:56 2026 GMT Subject: CN=a135c12fe444a42b86bd1a6813ed9550aa09a05c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a0:67:57:6d:b1:00:90:3e:86:30:19:e0:ad: aa:94:b6:24:c6:01:3c:0c:dc:34:57:c6:8a:00:a5: 38:e2:ec:78:41:ad:ba:a4:a3:6e:14:2a:73:be:d1: 10:ec:6d:48:62:21:3b:3a:a7:6d:5c:d9:33:f2:05: 0b:7d:1b:96:18:27:e8:ad:82:0c:06:67:44:19:d4: e9:5f:13:fb:1c:42:1c:d2:50:39:ed:df:4a:cc:c6: 64:57:0b:39:e4:f9:45:47:49:8b:c1:3b:ec:38:b2: b4:89:2e:bc:ea:57:5f:53:80:7c:16:48:6e:88:7a: 1a:7a:d2:99:fb:11:35:0c:96:e1:8f:f4:db:06:d9: 05:88:c6:50:f6:94:58:be:8b:ec:8c:ce:26:34:5e: 7b:dc:19:3a:ce:42:f9:ca:d0:0e:c8:2e:34:6a:1f: 3d:f6:3e:84:2d:78:cf:1c:46:f2:51:fd:74:98:c5: 5f:c3:23:58:2a:43:1d:27:d4:11:54:0f:58:7e:19: 62:69:da:b2:6f:39:23:7d:d0:8c:60:6b:0d:23:15: 0e:74:73:b0:56:2c:24:53:4c:a1:96:be:ba:d9:1c: 2f:5b:1d:f4:de:7c:72:d1:3c:99:b5:4c:c9:14:72: 03:9d:a0:cb:8b:f8:0f:a2:96:3c:ce:e2:5e:5f:be: fa:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:35:C1:2F:E4:44:A4:2B:86:BD:1A:68:13:ED:95:50:AA:09:A0:5C X509v3 Authority Key Identifier: keyid:29:B7:93:80:FE:40:74:39:CC:2E:CD:3F:AC:18:15:7D:B3:6C:F7:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:58:90:71:3a:4c:e3:78:d2:6a:b6:0c:fd:a4:75:fa:21:b9: 16:44:4c:25:b4:4f:9f:59:2b:56:95:14:d2:02:b8:6d:5f:b0: f9:19:a7:bd:45:6b:34:df:c8:b1:81:52:a1:6f:e5:2f:d3:f9: b9:73:5f:6e:dd:7f:b3:fb:26:d1:f7:b9:2c:ac:44:86:32:ad: d8:30:40:8b:60:28:a7:2c:49:4a:6c:2e:9e:fe:f8:89:e6:50: d1:1a:fd:b5:f1:76:8b:10:97:c8:96:32:65:49:3b:b9:5f:2a: 93:3d:70:b2:af:6c:dd:44:e2:4b:75:fe:3b:e3:af:2f:84:ff: e2:da:97:51:b9:10:bb:d8:09:bf:23:bd:74:27:07:cc:31:f4: c4:f4:56:15:1e:0e:3f:19:ab:0c:10:59:bf:e0:6c:91:c3:08: 03:ed:f0:8e:e2:b0:7f:28:bf:7a:2a:3a:d5:25:a6:21:7a:c0: d0:f6:23:df:f4:45:d3:a7:75:c1:d6:2a:b8:0d:19:6a:1f:a2: d9:ba:9d:29:da:b6:0c:35:a0:ef:48:7e:a9:4f:6f:f3:69:b6: 5e:5f:48:d7:69:05:c6:85:00:6a:bf:51:19:20:a0:2f:13:4b: 06:7d:d5:03:fc:d2:d1:c3:51:2e:1b:95:37:ee:c8:54:32:11: e0:f9:56:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rB2C/xVUJ4Fn9oy6zdzcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5Yjc5MzgwZmU0MDc0MzljYzJlY2QzZmFjMTgxNTdkYjM2 Y2Y3NjgwHhcNMjYwMTI1MTUwMDU2WhcNMjYwMTI2MTUwMDU2WjAzMTEwLwYDVQQD EyhhMTM1YzEyZmU0NDRhNDJiODZiZDFhNjgxM2VkOTU1MGFhMDlhMDVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6BnV22xAJA+hjAZ4K2qlLYkxgE8 DNw0V8aKAKU44ux4Qa26pKNuFCpzvtEQ7G1IYiE7OqdtXNkz8gULfRuWGCforYIM BmdEGdTpXxP7HEIc0lA57d9KzMZkVws55PlFR0mLwTvsOLK0iS686ldfU4B8Fkhu iHoaetKZ+xE1DJbhj/TbBtkFiMZQ9pRYvovsjM4mNF573Bk6zkL5ytAOyC40ah89 9j6ELXjPHEbyUf10mMVfwyNYKkMdJ9QRVA9YfhliadqybzkjfdCMYGsNIxUOdHOw ViwkU0yhlr662RwvWx303nxy0TyZtUzJFHIDnaDLi/gPopY8zuJeX776rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKE1wS/kRKQrhr0aaBPtlVCqCaBcMB8GA1UdIwQY MBaAFCm3k4D+QHQ5zC7NP6wYFX2zbPdoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2JlVGdQNUFkRG5NTHMwX3JCZ1ZmYk5zOTJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zOTM4NDItZTdlZi00ODkzLTljMWIt MWU4NDIxMThkYjZmLzEvS2JlVGdQNUFkRG5NTHMwX3JCZ1ZmYk5zOTJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi8zOTM4NDItZTdlZi00ODkzLTljMWItMWU4NDIxMThkYjZm LzEvS2JlVGdQNUFkRG5NTHMwX3JCZ1ZmYk5zOTJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcFiQcTpM 43jSarYM/aR1+iG5FkRMJbRPn1krVpUU0gK4bV+w+RmnvUVrNN/IsYFSoW/lL9P5 uXNfbt1/s/sm0fe5LKxEhjKt2DBAi2AopyxJSmwunv74ieZQ0Rr9tfF2ixCXyJYy ZUk7uV8qkz1wsq9s3UTiS3X+O+OvL4T/4tqXUbkQu9gJvyO9dCcHzDH0xPRWFR4O PxmrDBBZv+BskcMIA+3wjuKwfyi/eio61SWmIXrA0PYj3/RF06d1wdYquA0Zah+i 2bqdKdq2DDWg70h+qU9v82m2Xl9I12kFxoUAar9RGSCgLxNLBn3VA/zS0cNRLhuV N+7IVDIR4PlWMg== -----END CERTIFICATE-----Generated at Sun Jan 25 22:52:50 2026 by rpki-client