This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft File: kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft (raw, json) Hash identifier: SzO78ZiC1uK/PLuzElNKmvP7FQ4HKLntT6dfMh2AVO8= Subject key identifier: 8B:32:76:5E:CD:04:D7:6C:6C:4A:10:B8:5F:C7:BA:2F:23:70:5B:A2 Authority key identifier: 92:65:87:A7:C4:2C:26:1F:A2:54:B0:B8:2E:7B:C0:71:9C:C6:48:12 Certificate issuer: /CN=926587a7c42c261fa254b0b82e7bc0719cc64812 Certificate serial: 019BF687B8C7C4AE8F74DB66C4E12AFC38C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft Manifest number: 06E1 Signing time: Sun 25 Jan 2026 19:00:48 +0000 Manifest this update: Sun 25 Jan 2026 19:00:48 +0000 Manifest next update: Mon 26 Jan 2026 19:00:48 +0000 Files and hashes: 1: kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl (hash: VsCZO9wsFGpF+2JB1DKSaEpM3DZf5Z425HA1XJYzWTE=) 2: qnaI3dSUo6JkKXowYAsIMeMpnOc.roa (hash: dUT0p+f2BUwnddx9s697e9AmQEvx5OAEb+TGVaVGOZI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:b8:c7:c4:ae:8f:74:db:66:c4:e1:2a:fc:38:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=926587a7c42c261fa254b0b82e7bc0719cc64812 Validity Not Before: Jan 25 19:00:48 2026 GMT Not After : Jan 26 19:00:48 2026 GMT Subject: CN=8b32765ecd04d76c6c4a10b85fc7ba2f23705ba2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f5:dc:43:57:b8:40:32:9d:b1:8d:11:ac:4b: f6:2e:d2:e6:4e:38:e4:42:4f:b6:ed:05:5b:dc:c4: 06:85:03:41:b5:2e:76:34:95:4d:2c:ea:a8:67:4b: 55:7c:e6:f5:66:5e:8e:01:6d:3e:62:2a:07:58:e2: d1:af:dc:c2:90:53:d3:87:d5:94:d3:c0:04:99:ae: 9d:60:13:da:3e:81:94:f6:aa:54:bc:e8:26:e8:d5: 51:c6:e7:52:1c:71:0e:f1:ad:ea:05:1a:c8:19:2a: c9:d8:fb:c3:52:0e:5d:f4:7c:35:60:ea:c5:63:8f: fc:98:5f:38:a5:68:f5:11:18:99:b8:9a:4e:2a:37: 01:46:11:f2:b4:f4:85:e6:8c:3a:a5:f0:0a:0f:b9: b3:78:ff:33:ed:07:d2:75:c7:58:33:db:37:9c:67: b4:31:78:2f:fe:7d:23:94:4b:bc:29:0c:8f:85:bb: 59:f1:fc:b0:77:83:00:95:7a:5e:bc:cd:a5:13:55: 05:68:f3:35:1f:85:67:38:fe:b3:09:8c:14:2a:5e: 36:52:8d:5a:76:04:e3:6a:3e:55:de:c4:22:77:9f: 83:70:5b:12:77:1f:a1:91:4d:9a:34:c2:d9:ce:3b: 8d:23:a1:6b:d7:fc:a7:84:39:5f:22:2f:ff:50:db: 8e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:32:76:5E:CD:04:D7:6C:6C:4A:10:B8:5F:C7:BA:2F:23:70:5B:A2 X509v3 Authority Key Identifier: keyid:92:65:87:A7:C4:2C:26:1F:A2:54:B0:B8:2E:7B:C0:71:9C:C6:48:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:44:11:a0:4a:0a:89:16:e7:c5:95:ba:8c:61:8b:ee:27:cc: 03:77:51:09:a2:67:d2:7d:8b:cf:f8:9c:e7:ab:41:7f:df:10: d6:9b:41:d3:73:d7:14:89:d2:04:ca:04:5d:a3:9e:9e:5e:af: 3b:36:f4:5c:b1:35:50:a5:c8:9a:06:60:f6:d0:96:7b:0e:5d: 25:15:d2:19:e1:72:c6:0f:a9:fc:af:62:47:34:a2:cc:53:cd: 7f:bc:26:f5:8f:24:59:76:dd:cf:95:06:42:a9:02:f6:ef:f2: 46:35:14:98:ff:92:11:3d:e5:60:e3:29:b7:57:08:ae:32:b5: 59:dd:1c:1a:bc:48:ce:89:70:47:a3:3c:8d:d5:df:3c:56:bf: 7e:51:c7:73:6d:1a:99:09:af:a0:57:59:dc:c7:a7:73:c1:81: 20:fa:f8:30:8b:09:2d:da:f4:07:d5:6a:e3:0e:6f:82:37:8b: 1b:a6:69:77:35:59:0e:0e:bb:6a:29:ba:94:5d:43:a6:36:f5: 62:b8:43:d7:5c:8c:04:33:44:51:5f:5c:42:5b:a9:c4:27:1a: 05:ac:87:5e:04:0d:f3:18:b2:9c:15:c4:c8:9f:02:6b:04:01: 31:5b:c2:ac:67:4d:c9:a5:2a:00:3a:88:25:2e:bb:15:ab:56: 67:79:68:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h7jHxK6PdNtmxOEq/DjBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNjU4N2E3YzQyYzI2MWZhMjU0YjBiODJlN2JjMDcxOWNj NjQ4MTIwHhcNMjYwMTI1MTkwMDQ4WhcNMjYwMTI2MTkwMDQ4WjAzMTEwLwYDVQQD Eyg4YjMyNzY1ZWNkMDRkNzZjNmM0YTEwYjg1ZmM3YmEyZjIzNzA1YmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vXcQ1e4QDKdsY0RrEv2LtLmTjjk Qk+27QVb3MQGhQNBtS52NJVNLOqoZ0tVfOb1Zl6OAW0+YioHWOLRr9zCkFPTh9WU 08AEma6dYBPaPoGU9qpUvOgm6NVRxudSHHEO8a3qBRrIGSrJ2PvDUg5d9Hw1YOrF Y4/8mF84pWj1ERiZuJpOKjcBRhHytPSF5ow6pfAKD7mzeP8z7QfSdcdYM9s3nGe0 MXgv/n0jlEu8KQyPhbtZ8fywd4MAlXpevM2lE1UFaPM1H4VnOP6zCYwUKl42Uo1a dgTjaj5V3sQid5+DcFsSdx+hkU2aNMLZzjuNI6Fr1/ynhDlfIi//UNuOGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIsydl7NBNdsbEoQuF/Hui8jcFuiMB8GA1UdIwQY MBaAFJJlh6fELCYfolSwuC57wHGcxkgSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva21XSHA4UXNKaC1pVkxDNExudkFjWnpHU0JJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9iZDIwMDUtZmI3Yi00MDUyLWIzZjIt ODhmYTNiNmViMDA2LzEva21XSHA4UXNKaC1pVkxDNExudkFjWnpHU0JJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9iZDIwMDUtZmI3Yi00MDUyLWIzZjItODhmYTNiNmViMDA2 LzEva21XSHA4UXNKaC1pVkxDNExudkFjWnpHU0JJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJEQRoEoK iRbnxZW6jGGL7ifMA3dRCaJn0n2Lz/ic56tBf98Q1ptB03PXFInSBMoEXaOenl6v Ozb0XLE1UKXImgZg9tCWew5dJRXSGeFyxg+p/K9iRzSizFPNf7wm9Y8kWXbdz5UG QqkC9u/yRjUUmP+SET3lYOMpt1cIrjK1Wd0cGrxIzolwR6M8jdXfPFa/flHHc20a mQmvoFdZ3Menc8GBIPr4MIsJLdr0B9Vq4w5vgjeLG6ZpdzVZDg67aim6lF1Dpjb1 YrhD11yMBDNEUV9cQlupxCcaBayHXgQN8xiynBXEyJ8CawQBMVvCrGdNyaUqADqI JS67FatWZ3loag== -----END CERTIFICATE-----Generated at Mon Jan 26 02:15:24 2026 by rpki-client