This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft File: K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft (raw, json) Hash identifier: QHjXvgmtrh1Uo2NBRJbnGoutG7FlKAXe3J85rTtgWxk= Subject key identifier: AD:56:33:A0:21:49:0A:22:E5:38:9C:6B:4C:94:74:F7:0C:5F:C9:5D Authority key identifier: 2B:F7:EF:33:DD:19:69:0D:94:94:1C:92:FB:31:47:95:50:A9:17:B3 Certificate issuer: /CN=2bf7ef33dd19690d94941c92fb31479550a917b3 Certificate serial: 019BF79ABFFD831B7213E4B6B113BB574F36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_fvM90ZaQ2UlByS-zFHlVCpF7M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft Manifest number: 0597 Signing time: Mon 26 Jan 2026 00:01:12 +0000 Manifest this update: Mon 26 Jan 2026 00:01:12 +0000 Manifest next update: Tue 27 Jan 2026 00:01:12 +0000 Files and hashes: 1: Fz37EzbKmOLuj47DZyVy-jxm8-Q.roa (hash: A6w0ljzejsJu2FbOvEwlydaqHScmNkC+q2dwLDsAXsw=) 2: K_fvM90ZaQ2UlByS-zFHlVCpF7M.crl (hash: bo4AZsWHPCL80b0wX37Luk5mS/u/zRvjhgwV8GwG8yg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft rsync://rpki.ripe.net/repository/DEFAULT/K_fvM90ZaQ2UlByS-zFHlVCpF7M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:bf:fd:83:1b:72:13:e4:b6:b1:13:bb:57:4f:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bf7ef33dd19690d94941c92fb31479550a917b3 Validity Not Before: Jan 26 00:01:12 2026 GMT Not After : Jan 27 00:01:12 2026 GMT Subject: CN=ad5633a021490a22e5389c6b4c9474f70c5fc95d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:95:9f:89:da:60:43:ab:46:17:c5:0c:8d:b0: fe:57:7a:39:4e:dd:be:59:24:b2:9b:6a:f6:98:1e: 3f:f1:39:f6:a3:30:e9:1c:9e:76:4c:11:16:bc:c4: 43:0c:73:04:22:b2:76:85:58:fa:20:10:4e:23:c7: 93:33:5f:81:3f:a1:b3:9f:93:87:d8:47:09:87:5b: 11:80:23:4c:98:94:9d:0c:23:a4:f6:75:f5:fb:27: 33:29:00:ca:53:b1:38:80:94:06:e4:ac:56:67:14: 88:cc:f7:0f:78:62:05:83:d4:2e:d5:ba:5d:5e:43: b9:94:21:75:c0:ec:89:ab:d7:65:bb:5a:cc:b5:de: 03:ca:72:b3:e9:79:5d:f4:d2:92:a5:00:40:a9:d4: 71:dd:b8:ae:21:0a:58:51:5d:9c:2c:40:be:84:d8: 0f:4a:bd:3b:78:e4:4b:22:91:89:17:fa:27:e1:09: 76:66:8f:c8:4a:a9:c2:01:a6:40:7b:d9:cd:b0:3a: 99:de:c8:f2:f5:85:df:1f:84:49:f5:60:62:0c:5f: ae:5d:ab:e5:c3:d8:f0:84:27:7c:46:e4:b7:89:50: dd:4c:04:18:94:e6:b6:30:cd:0f:32:c3:57:24:ca: cf:04:e9:62:de:2e:5b:d9:90:9b:59:0d:fa:5d:9b: 7f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:56:33:A0:21:49:0A:22:E5:38:9C:6B:4C:94:74:F7:0C:5F:C9:5D X509v3 Authority Key Identifier: keyid:2B:F7:EF:33:DD:19:69:0D:94:94:1C:92:FB:31:47:95:50:A9:17:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_fvM90ZaQ2UlByS-zFHlVCpF7M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:ff:d5:ba:e9:fb:13:13:37:1d:8c:4c:3c:4c:66:d6:f3:66: d8:36:9e:14:da:6c:2d:83:b8:32:a5:68:83:fc:88:12:a6:d6: 5a:f8:88:80:e6:47:90:8a:fd:1a:68:b0:b1:c2:67:86:bb:d7: e8:de:a0:6e:93:13:ee:91:89:cb:37:fe:89:6a:0e:17:07:1c: 0d:97:c0:b2:6a:2e:7d:e7:15:c2:55:33:c7:04:a4:b2:3b:02: d8:b5:ef:11:f5:7f:34:31:55:3d:de:4c:10:06:3e:20:93:d3: 0f:c5:b3:f5:5f:bc:89:83:b3:ac:ea:ba:45:38:79:5b:b5:62: 26:49:96:e7:98:0b:91:8f:87:28:24:88:69:27:1f:fd:a2:e0: 6a:0e:53:74:e7:7f:00:29:8c:40:fb:ab:e9:0b:c1:28:54:75: 76:62:aa:88:c0:73:c9:b5:61:fc:2a:e0:95:fc:ce:7c:42:71: 3f:66:a4:0a:17:58:16:9f:6a:40:7f:d7:b7:f7:0c:c8:55:30: b0:bb:26:25:db:d9:26:2e:0e:11:f4:c2:8d:d2:dd:e7:6b:20: 70:b9:1d:3e:71:7c:7d:d4:5d:c3:43:28:dc:b0:86:75:05:c5: 6e:25:41:3e:0d:ce:28:f9:7e:a3:d5:91:04:4c:bb:c7:6d:08: de:c6:73:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mr/9gxtyE+S2sRO7V082MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiZjdlZjMzZGQxOTY5MGQ5NDk0MWM5MmZiMzE0Nzk1NTBh OTE3YjMwHhcNMjYwMTI2MDAwMTEyWhcNMjYwMTI3MDAwMTEyWjAzMTEwLwYDVQQD EyhhZDU2MzNhMDIxNDkwYTIyZTUzODljNmI0Yzk0NzRmNzBjNWZjOTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZWfidpgQ6tGF8UMjbD+V3o5Tt2+ WSSym2r2mB4/8Tn2ozDpHJ52TBEWvMRDDHMEIrJ2hVj6IBBOI8eTM1+BP6Gzn5OH 2EcJh1sRgCNMmJSdDCOk9nX1+yczKQDKU7E4gJQG5KxWZxSIzPcPeGIFg9Qu1bpd XkO5lCF1wOyJq9dlu1rMtd4DynKz6Xld9NKSpQBAqdRx3biuIQpYUV2cLEC+hNgP Sr07eORLIpGJF/on4Ql2Zo/ISqnCAaZAe9nNsDqZ3sjy9YXfH4RJ9WBiDF+uXavl w9jwhCd8RuS3iVDdTAQYlOa2MM0PMsNXJMrPBOli3i5b2ZCbWQ36XZt/PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK1WM6AhSQoi5Tica0yUdPcMX8ldMB8GA1UdIwQY MBaAFCv37zPdGWkNlJQckvsxR5VQqRezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS19mdk05MFphUTJVbEJ5Uy16RkhsVkNwRjdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83Yzg2YWYtZjJlNC00MGNlLWEzMDAt MTdiOTRhYzU4Mzc1LzEvS19mdk05MFphUTJVbEJ5Uy16RkhsVkNwRjdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83Yzg2YWYtZjJlNC00MGNlLWEzMDAtMTdiOTRhYzU4Mzc1 LzEvS19mdk05MFphUTJVbEJ5Uy16RkhsVkNwRjdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsv/Vuun7 ExM3HYxMPExm1vNm2DaeFNpsLYO4MqVog/yIEqbWWviIgOZHkIr9GmiwscJnhrvX 6N6gbpMT7pGJyzf+iWoOFwccDZfAsmoufecVwlUzxwSksjsC2LXvEfV/NDFVPd5M EAY+IJPTD8Wz9V+8iYOzrOq6RTh5W7ViJkmW55gLkY+HKCSIaScf/aLgag5TdOd/ ACmMQPur6QvBKFR1dmKqiMBzybVh/CrglfzOfEJxP2akChdYFp9qQH/Xt/cMyFUw sLsmJdvZJi4OEfTCjdLd52sgcLkdPnF8fdRdw0Mo3LCGdQXFbiVBPg3OKPl+o9WR BEy7x20I3sZziQ== -----END CERTIFICATE-----Generated at Mon Jan 26 09:46:00 2026 by rpki-client