This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft File: KhLvrumX6adjtGCrWS3dpnoN63A.mft (raw, json) Hash identifier: XOdq/btac6ThuVXJGAQxzQIrh0ywKpzuqO29wjo/+b8= Subject key identifier: 74:EA:32:AB:CD:DE:C1:73:CD:BE:22:B2:AB:CD:C8:29:08:D1:A0:4C Authority key identifier: 2A:12:EF:AE:E9:97:E9:A7:63:B4:60:AB:59:2D:DD:A6:7A:0D:EB:70 Certificate issuer: /CN=2a12efaee997e9a763b460ab592ddda67a0deb70 Certificate serial: 019BF619A3DC18CADCFE8DF4C049760775FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft Manifest number: 03CD Signing time: Sun 25 Jan 2026 17:00:33 +0000 Manifest this update: Sun 25 Jan 2026 17:00:33 +0000 Manifest next update: Mon 26 Jan 2026 17:00:33 +0000 Files and hashes: 1: KhLvrumX6adjtGCrWS3dpnoN63A.crl (hash: piFlRyewJ4C8WNwiTPN/8jVcLjWhCEJajBhlKqczmsI=) 2: PKYdzI7_btncrfJybcR9dUE0ZSE.roa (hash: y3/sm0eAAEkLjKvdsBgjXRt+wfnk4CjHq0q5eayWO8s=) 3: cjNP386iRKDTnC28czcFASn_pV4.roa (hash: k8OfexAF7HdlRTBIiy1T3t+Od61q1BgsK4zC2zyS4Pg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.crl rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:a3:dc:18:ca:dc:fe:8d:f4:c0:49:76:07:75:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a12efaee997e9a763b460ab592ddda67a0deb70 Validity Not Before: Jan 25 17:00:33 2026 GMT Not After : Jan 26 17:00:33 2026 GMT Subject: CN=74ea32abcddec173cdbe22b2abcdc82908d1a04c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c6:ce:3f:48:85:a6:c7:42:f5:32:82:4a:03: 4d:22:79:62:53:db:73:20:8d:83:58:a2:fe:6f:54: ec:19:43:ec:b7:ec:71:47:c0:01:44:61:42:36:39: 2f:c3:04:6f:a6:4f:71:ed:1b:5e:e7:6f:af:75:2d: f0:d7:de:a4:ba:60:80:f5:df:60:10:4d:e0:e9:1a: 2a:75:54:67:5d:bc:e3:78:88:49:6e:49:b5:b6:b1: 20:b6:b2:10:5b:e8:fc:d8:9f:45:ae:09:ab:14:a2: 0e:e4:17:56:59:4b:61:e2:8d:b1:fb:c7:eb:9e:4e: 2f:a2:97:ec:86:44:4c:d6:6e:c2:4d:a1:02:dc:7c: 04:88:2b:73:80:7d:71:44:ba:2d:89:a3:0b:b8:25: 72:dc:87:3a:5c:3f:10:da:d3:99:68:12:f0:04:1e: 45:57:83:e1:56:ea:ba:70:41:98:7a:8a:82:27:00: 3c:6b:68:1b:06:8d:10:98:65:8f:34:a1:0a:e6:e1: 16:58:2f:49:81:1d:ae:a8:62:86:de:42:7e:bc:32: d1:e2:75:5f:f7:7d:6d:6d:da:b9:e8:d5:f8:55:78: cf:24:0e:60:e0:56:cc:4a:78:c0:ce:e0:4a:52:94: c2:2a:17:6a:2a:e6:be:b7:e1:19:ce:91:9b:c6:14: bb:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:EA:32:AB:CD:DE:C1:73:CD:BE:22:B2:AB:CD:C8:29:08:D1:A0:4C X509v3 Authority Key Identifier: keyid:2A:12:EF:AE:E9:97:E9:A7:63:B4:60:AB:59:2D:DD:A6:7A:0D:EB:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:fc:be:46:0a:96:b7:d5:18:5c:35:0b:8f:9f:02:c2:b3:c7: fb:64:c5:dd:7a:0a:82:f7:99:92:02:76:4f:e9:32:0e:2c:01: 1f:7a:71:c6:59:41:34:c1:3b:30:bb:fb:7e:56:ff:ad:37:02: 4a:8e:53:4e:56:8a:e6:39:2b:27:0c:36:6d:3c:a8:d8:43:85: c4:bc:f4:6f:ae:82:3f:0b:19:7d:d4:54:7b:3e:9a:b8:5a:c8: 18:10:02:93:62:84:4f:f4:71:62:30:a8:47:68:cf:b0:18:68: ab:fb:6c:fc:83:44:c3:db:4d:b2:88:48:ef:36:cb:29:11:17: d2:95:29:d0:5a:c3:85:16:40:ad:d6:a4:ae:06:21:f7:9e:62: 41:05:00:7b:59:c6:fc:5b:b3:7a:dd:30:5f:27:26:b8:31:88: b8:77:f8:56:23:fc:f5:a9:8d:74:fa:e2:60:f0:93:88:25:f9: 8e:e6:6f:28:ca:42:ad:24:d6:69:eb:5e:db:6c:b1:8a:97:af: ae:a3:33:01:45:35:e7:36:25:c6:85:1d:f7:77:ca:9d:c1:2e: 48:43:c3:d5:3a:f7:20:df:6a:5e:ca:7c:18:19:b4:cc:a4:4b: bb:2c:db:31:b4:9b:05:c0:01:78:59:c3:0e:98:2a:ad:a1:1b: 87:3e:b0:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GaPcGMrc/o30wEl2B3X8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhMTJlZmFlZTk5N2U5YTc2M2I0NjBhYjU5MmRkZGE2N2Ew ZGViNzAwHhcNMjYwMTI1MTcwMDMzWhcNMjYwMTI2MTcwMDMzWjAzMTEwLwYDVQQD Eyg3NGVhMzJhYmNkZGVjMTczY2RiZTIyYjJhYmNkYzgyOTA4ZDFhMDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8bOP0iFpsdC9TKCSgNNInliU9tz II2DWKL+b1TsGUPst+xxR8ABRGFCNjkvwwRvpk9x7Rte52+vdS3w196kumCA9d9g EE3g6RoqdVRnXbzjeIhJbkm1trEgtrIQW+j82J9FrgmrFKIO5BdWWUth4o2x+8fr nk4vopfshkRM1m7CTaEC3HwEiCtzgH1xRLotiaMLuCVy3Ic6XD8Q2tOZaBLwBB5F V4PhVuq6cEGYeoqCJwA8a2gbBo0QmGWPNKEK5uEWWC9JgR2uqGKG3kJ+vDLR4nVf 931tbdq56NX4VXjPJA5g4FbMSnjAzuBKUpTCKhdqKua+t+EZzpGbxhS7ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHTqMqvN3sFzzb4isqvNyCkI0aBMMB8GA1UdIwQY MBaAFCoS767pl+mnY7Rgq1kt3aZ6DetwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2hMdnJ1bVg2YWRqdEdDcldTM2Rwbm9ONjNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny82ZmY0M2ItMjdhYi00MDY0LWFmMWQt MDllZDc4MDBmZGZiLzEvS2hMdnJ1bVg2YWRqdEdDcldTM2Rwbm9ONjNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny82ZmY0M2ItMjdhYi00MDY0LWFmMWQtMDllZDc4MDBmZGZi LzEvS2hMdnJ1bVg2YWRqdEdDcldTM2Rwbm9ONjNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAovy+RgqW t9UYXDULj58CwrPH+2TF3XoKgveZkgJ2T+kyDiwBH3pxxllBNME7MLv7flb/rTcC So5TTlaK5jkrJww2bTyo2EOFxLz0b66CPwsZfdRUez6auFrIGBACk2KET/RxYjCo R2jPsBhoq/ts/INEw9tNsohI7zbLKREX0pUp0FrDhRZArdakrgYh955iQQUAe1nG /Fuzet0wXycmuDGIuHf4ViP89amNdPriYPCTiCX5juZvKMpCrSTWaete22yxipev rqMzAUU15zYlxoUd93fKncEuSEPD1Tr3IN9qXsp8GBm0zKRLuyzbMbSbBcABeFnD DpgqraEbhz6wtg== -----END CERTIFICATE-----Generated at Mon Jan 26 02:25:52 2026 by rpki-client