This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft File: KtWZlPKveVmc-z_y4-mOUY-RT7o.mft (raw, json) Hash identifier: gXT+krnQWS1nu4uX1R12jYHQUK6MPSp4beEwVqJ2gAI= Subject key identifier: FD:68:8A:6D:DA:BC:7A:E2:70:B9:DB:0D:BA:AF:7D:A7:72:FE:02:FA Authority key identifier: 2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA Certificate issuer: /CN=2ad59994f2af79599cfb3ff2e3e98e518f914fba Certificate serial: 019BF7633A77C3B5B1FEC18DF9ACCBD59C33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft Manifest number: 08E7 Signing time: Sun 25 Jan 2026 23:00:33 +0000 Manifest this update: Sun 25 Jan 2026 23:00:33 +0000 Manifest next update: Mon 26 Jan 2026 23:00:33 +0000 Files and hashes: 1: 9bNCpS-BnNsc0OV_kVUAGpMesVQ.roa (hash: SEbw3h7uQbDEC24FBGDOhfqkNO2N0ao6d2+D5+Fazds=) 2: KtWZlPKveVmc-z_y4-mOUY-RT7o.crl (hash: pk3rRq7Z+m8GN33n2Mcyc8NCBumIDnvvxdieGWwDwX0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.crl rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:3a:77:c3:b5:b1:fe:c1:8d:f9:ac:cb:d5:9c:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ad59994f2af79599cfb3ff2e3e98e518f914fba Validity Not Before: Jan 25 23:00:33 2026 GMT Not After : Jan 26 23:00:33 2026 GMT Subject: CN=fd688a6ddabc7ae270b9db0dbaaf7da772fe02fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:bc:a3:f4:73:3f:42:a9:f9:63:62:bb:b2:ea: 81:4e:66:e7:96:11:f5:81:08:88:66:d2:88:0d:cb: 40:2f:a4:c4:2d:f4:c5:c1:bd:e9:59:82:64:73:34: bb:d9:00:d7:14:f1:17:20:3d:71:78:ca:54:03:5d: e3:0c:73:6b:a7:c5:68:a3:2e:35:70:e4:d0:d2:6e: 5d:ae:42:cb:de:8f:ee:ec:c6:e5:b1:b4:51:e2:df: 06:a3:ec:a7:97:09:c2:c3:74:26:92:19:39:62:33: c6:2b:30:9a:1d:3e:1a:58:03:34:5d:3f:93:3f:1b: 70:f4:5e:d0:6d:de:ba:ba:05:6f:19:ae:7e:71:a0: a6:be:16:c6:42:10:10:26:f2:5a:d5:8b:b1:f4:39: 89:90:47:10:c1:0f:5c:3c:8f:b9:9b:fe:8f:74:7e: 7c:91:de:43:3f:ab:82:99:a3:e2:d5:77:e0:1d:b0: c9:86:94:54:c6:72:3e:0c:7f:1a:26:3e:96:b1:81: 36:b7:93:a2:1c:35:78:0e:84:b8:1a:1d:ea:76:a7: ba:fc:aa:58:27:4e:20:9a:fe:21:94:50:b5:7e:a1: a4:d9:00:40:4e:9c:27:1e:9c:14:d1:ef:1f:48:a9: 47:24:5e:73:25:68:8e:7c:e1:47:3f:8c:09:b9:76: 21:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:68:8A:6D:DA:BC:7A:E2:70:B9:DB:0D:BA:AF:7D:A7:72:FE:02:FA X509v3 Authority Key Identifier: keyid:2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:e8:26:86:08:27:eb:d8:91:24:d0:ee:03:d4:69:a9:81:d1: 9c:1e:ac:a8:f2:60:31:ce:5d:e5:24:ff:d0:e4:1a:38:4e:31: da:39:43:58:8c:36:9c:a4:b3:8b:83:91:49:f9:15:dc:28:52: ea:3b:09:ba:41:2d:42:bd:aa:4c:a4:97:be:2c:2b:5d:f6:f0: f3:55:56:2b:96:2e:12:e6:59:6a:76:62:d3:82:a5:e1:4b:52: 11:8c:1c:1d:ff:b4:9f:36:f8:5e:68:85:f3:b5:a2:76:f7:53: 8c:02:fe:f2:69:75:a3:99:fb:81:ce:40:5e:1e:40:8f:cd:b3: 0f:a2:10:ed:8f:f3:40:65:74:eb:51:34:5a:ce:fb:39:e3:07: 7f:9a:0e:4d:55:65:c9:b6:03:64:6a:03:73:54:fa:b0:31:a6: 72:ca:dd:8d:a2:ed:72:e2:05:92:ea:48:3c:80:f0:85:41:34: c1:90:83:4b:0c:d4:81:0b:33:2f:d9:02:31:f6:93:65:80:75: d5:63:45:c0:a1:08:6b:e0:a5:f5:a0:78:15:f5:4e:a2:e5:ba: 99:b3:2f:b2:62:7a:d1:07:e9:5e:be:73:8f:86:b9:8a:37:ed: 34:80:be:c0:e4:45:7a:8a:4a:4f:ca:21:08:f0:b5:e1:9a:2d: 07:66:6f:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Yzp3w7Wx/sGN+azL1ZwzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhZDU5OTk0ZjJhZjc5NTk5Y2ZiM2ZmMmUzZTk4ZTUxOGY5 MTRmYmEwHhcNMjYwMTI1MjMwMDMzWhcNMjYwMTI2MjMwMDMzWjAzMTEwLwYDVQQD EyhmZDY4OGE2ZGRhYmM3YWUyNzBiOWRiMGRiYWFmN2RhNzcyZmUwMmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27yj9HM/Qqn5Y2K7suqBTmbnlhH1 gQiIZtKIDctAL6TELfTFwb3pWYJkczS72QDXFPEXID1xeMpUA13jDHNrp8Vooy41 cOTQ0m5drkLL3o/u7MblsbRR4t8Go+ynlwnCw3Qmkhk5YjPGKzCaHT4aWAM0XT+T Pxtw9F7Qbd66ugVvGa5+caCmvhbGQhAQJvJa1Yux9DmJkEcQwQ9cPI+5m/6PdH58 kd5DP6uCmaPi1XfgHbDJhpRUxnI+DH8aJj6WsYE2t5OiHDV4DoS4Gh3qdqe6/KpY J04gmv4hlFC1fqGk2QBATpwnHpwU0e8fSKlHJF5zJWiOfOFHP4wJuXYhjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP1oim3avHricLnbDbqvfady/gL6MB8GA1UdIwQY MBaAFCrVmZTyr3lZnPs/8uPpjlGPkU+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3RXWmxQS3ZlVm1jLXpfeTQtbU9VWS1SVDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yYmNmMzEtNjI3Ny00ZTg3LWEwMDct YmJlMmM0ZDg4YzJmLzEvS3RXWmxQS3ZlVm1jLXpfeTQtbU9VWS1SVDdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8yYmNmMzEtNjI3Ny00ZTg3LWEwMDctYmJlMmM0ZDg4YzJm LzEvS3RXWmxQS3ZlVm1jLXpfeTQtbU9VWS1SVDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMOgmhggn 69iRJNDuA9RpqYHRnB6sqPJgMc5d5ST/0OQaOE4x2jlDWIw2nKSzi4ORSfkV3ChS 6jsJukEtQr2qTKSXviwrXfbw81VWK5YuEuZZanZi04Kl4UtSEYwcHf+0nzb4XmiF 87WidvdTjAL+8ml1o5n7gc5AXh5Aj82zD6IQ7Y/zQGV061E0Ws77OeMHf5oOTVVl ybYDZGoDc1T6sDGmcsrdjaLtcuIFkupIPIDwhUE0wZCDSwzUgQszL9kCMfaTZYB1 1WNFwKEIa+Cl9aB4FfVOouW6mbMvsmJ60QfpXr5zj4a5ijftNIC+wORFeopKT8oh CPC14ZotB2Zvxw== -----END CERTIFICATE-----Generated at Mon Jan 26 05:37:43 2026 by rpki-client