This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft File: KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft (raw, json) Hash identifier: kbtfgaVgiSMEuqAg1a7Wt0JWnniMygdpEUgNgo1cT6k= Subject key identifier: 20:2D:88:0C:3A:29:50:4F:65:20:C0:7B:61:08:35:D7:B4:88:EA:CF Authority key identifier: 2A:D2:FE:64:66:D0:70:94:A4:25:6D:A2:CC:84:70:83:C5:00:6B:1A Certificate issuer: /CN=2ad2fe6466d07094a4256da2cc847083c5006b1a Certificate serial: 019BF80890E4272A2240237BE94052B9D9DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtL-ZGbQcJSkJW2izIRwg8UAaxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft Manifest number: 14F3 Signing time: Mon 26 Jan 2026 02:01:09 +0000 Manifest this update: Mon 26 Jan 2026 02:01:09 +0000 Manifest next update: Tue 27 Jan 2026 02:01:09 +0000 Files and hashes: 1: KtL-ZGbQcJSkJW2izIRwg8UAaxo.crl (hash: 1XqqNhjyCzKaZiQS3MKSTsm7GNOvOPgpZnFblNvRrfs=) 2: L7FFVZjn00bwAbkg_Lv5HyPXbUw.roa (hash: DToSgYumdmGKe2TLhpTAx0H6yxJQdXcD2z0JX5cGoUQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.crl rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft rsync://rpki.ripe.net/repository/DEFAULT/KtL-ZGbQcJSkJW2izIRwg8UAaxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:90:e4:27:2a:22:40:23:7b:e9:40:52:b9:d9:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ad2fe6466d07094a4256da2cc847083c5006b1a Validity Not Before: Jan 26 02:01:09 2026 GMT Not After : Jan 27 02:01:09 2026 GMT Subject: CN=202d880c3a29504f6520c07b610835d7b488eacf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d8:cd:de:d0:a3:04:a7:1d:13:82:6d:86:de: 42:d2:cc:68:bb:eb:15:31:f8:67:ae:c1:c0:81:6f: e2:b2:cf:45:67:9f:c6:68:5b:6f:58:6c:fb:67:84: 9e:a6:3c:1a:c4:13:8f:2c:8b:3d:a4:95:f2:93:01: da:ea:aa:d0:7c:bc:39:ee:b1:49:10:eb:2a:6d:8e: 09:c8:a2:ae:5b:2e:ca:42:30:25:40:c8:15:f2:20: 3a:1c:d2:69:88:66:a9:6a:9b:a8:6f:3d:03:0e:2e: c4:12:1c:48:3b:88:e8:8b:fa:1b:c9:60:e7:bc:fc: 3e:a8:92:73:2d:3f:e3:9e:04:54:3c:b7:ca:96:92: 51:e9:9a:6e:df:20:ca:8c:32:a1:0c:eb:8d:27:ec: 3f:f8:1e:93:be:6b:fe:d8:60:17:5c:f1:87:a9:5a: ee:e8:7f:84:f2:39:fb:dc:13:aa:37:68:82:61:34: 09:a5:d8:6c:5d:70:56:74:72:16:0e:b4:c3:8c:99: cc:a3:54:40:f5:59:07:d4:65:c2:c8:b9:04:07:08: c9:17:52:d9:f0:16:01:27:48:9d:1b:c7:3c:b1:ff: 64:4d:53:3b:83:e6:41:04:2f:96:97:83:17:87:d4: 56:86:f0:c3:1f:1e:2d:97:49:e3:7d:53:58:6e:fa: f3:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:2D:88:0C:3A:29:50:4F:65:20:C0:7B:61:08:35:D7:B4:88:EA:CF X509v3 Authority Key Identifier: keyid:2A:D2:FE:64:66:D0:70:94:A4:25:6D:A2:CC:84:70:83:C5:00:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtL-ZGbQcJSkJW2izIRwg8UAaxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:8b:12:11:1c:c6:2f:46:26:c6:2f:1e:e0:19:98:38:67:aa: 9e:08:92:11:85:3d:80:df:fd:68:d5:b8:82:26:3d:7a:77:47: a4:ce:a0:68:6e:85:ad:95:39:af:3b:22:71:f1:a0:10:98:99: c0:3c:b0:73:83:3f:5a:0f:31:5e:6e:2d:09:a4:36:cb:16:f9: d2:84:0a:6d:5f:cf:c5:81:7d:7a:ea:9a:4e:98:57:f8:dc:00: 0d:f9:7f:d7:f9:54:a6:78:a8:80:8d:ae:39:19:07:f0:76:27: 81:79:ae:a0:6f:a1:13:05:a8:13:67:ff:2b:c1:be:44:26:87: 43:34:8c:a5:07:c1:a5:19:4f:33:db:d0:f7:fa:b7:66:66:8a: d2:22:2d:41:94:79:8a:2d:51:49:5f:8e:d7:69:b0:33:6e:bb: 6c:84:47:4d:7c:e1:68:f0:5c:19:93:7c:a9:c6:93:37:28:e9: 1f:2b:46:63:c4:96:b1:cb:d9:31:3e:c8:66:a1:95:44:dd:f6: dd:1d:06:bf:11:7b:84:5d:13:a7:e3:1a:da:b8:c9:c6:86:87: e3:0f:78:21:e5:09:08:4b:bb:87:34:ad:20:95:4b:f1:f7:a7: 46:af:d5:95:dc:67:3b:df:f4:bb:bc:e5:fc:c6:96:24:19:21: fd:dd:07:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CJDkJyoiQCN76UBSudndMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhZDJmZTY0NjZkMDcwOTRhNDI1NmRhMmNjODQ3MDgzYzUw MDZiMWEwHhcNMjYwMTI2MDIwMTA5WhcNMjYwMTI3MDIwMTA5WjAzMTEwLwYDVQQD EygyMDJkODgwYzNhMjk1MDRmNjUyMGMwN2I2MTA4MzVkN2I0ODhlYWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9jN3tCjBKcdE4Jtht5C0sxou+sV MfhnrsHAgW/iss9FZ5/GaFtvWGz7Z4SepjwaxBOPLIs9pJXykwHa6qrQfLw57rFJ EOsqbY4JyKKuWy7KQjAlQMgV8iA6HNJpiGapapuobz0DDi7EEhxIO4joi/obyWDn vPw+qJJzLT/jngRUPLfKlpJR6Zpu3yDKjDKhDOuNJ+w/+B6Tvmv+2GAXXPGHqVru 6H+E8jn73BOqN2iCYTQJpdhsXXBWdHIWDrTDjJnMo1RA9VkH1GXCyLkEBwjJF1LZ 8BYBJ0idG8c8sf9kTVM7g+ZBBC+Wl4MXh9RWhvDDHx4tl0njfVNYbvrzVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCAtiAw6KVBPZSDAe2EINde0iOrPMB8GA1UdIwQY MBaAFCrS/mRm0HCUpCVtosyEcIPFAGsaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3RMLVpHYlFjSlNrSlcyaXpJUndnOFVBYXhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC84YTMxZjMtN2FjZi00N2I0LWI5N2It ZmEzMWUyZGM2YWJiLzEvS3RMLVpHYlFjSlNrSlcyaXpJUndnOFVBYXhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC84YTMxZjMtN2FjZi00N2I0LWI5N2ItZmEzMWUyZGM2YWJi LzEvS3RMLVpHYlFjSlNrSlcyaXpJUndnOFVBYXhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcosSERzG L0Ymxi8e4BmYOGeqngiSEYU9gN/9aNW4giY9endHpM6gaG6FrZU5rzsicfGgEJiZ wDywc4M/Wg8xXm4tCaQ2yxb50oQKbV/PxYF9euqaTphX+NwADfl/1/lUpniogI2u ORkH8HYngXmuoG+hEwWoE2f/K8G+RCaHQzSMpQfBpRlPM9vQ9/q3ZmaK0iItQZR5 ii1RSV+O12mwM267bIRHTXzhaPBcGZN8qcaTNyjpHytGY8SWscvZMT7IZqGVRN32 3R0GvxF7hF0Tp+Ma2rjJxoaH4w94IeUJCEu7hzStIJVL8fenRq/VldxnO9/0u7zl /MaWJBkh/d0HGA== -----END CERTIFICATE-----Generated at Mon Jan 26 10:51:53 2026 by rpki-client