This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft File: KcFw2YteNdfVFTdnHGBApRUYhLw.mft (raw, json) Hash identifier: 0MR+UPmVnbaJDQXe2IrtvTcguExT0+PfTY4b9zEg4Og= Subject key identifier: 67:16:C7:EC:48:B8:F7:68:98:9E:AF:FF:E4:12:59:9C:CD:AF:3D:18 Authority key identifier: 29:C1:70:D9:8B:5E:35:D7:D5:15:37:67:1C:60:40:A5:15:18:84:BC Certificate issuer: /CN=29c170d98b5e35d7d51537671c6040a5151884bc Certificate serial: 019BF5AC010B3CF6C773ECC70A003CB2D3D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcFw2YteNdfVFTdnHGBApRUYhLw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 15:00:48 +0000 Manifest this update: Sun 25 Jan 2026 15:00:48 +0000 Manifest next update: Mon 26 Jan 2026 15:00:48 +0000 Files and hashes: 1: KcFw2YteNdfVFTdnHGBApRUYhLw.crl (hash: llCEYYB/HLWs2jXvWXsP9Rs4Zbe/7oaTaDoEk54XgG0=) 2: REbjg5M_8wpI3i_HlGLahpeL73s.roa (hash: Wg9GMppGq5pv2FgNgfdIsx4UTmxfeIHOeiAi7ZSNSIA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft rsync://rpki.ripe.net/repository/DEFAULT/KcFw2YteNdfVFTdnHGBApRUYhLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:01:0b:3c:f6:c7:73:ec:c7:0a:00:3c:b2:d3:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29c170d98b5e35d7d51537671c6040a5151884bc Validity Not Before: Jan 25 15:00:48 2026 GMT Not After : Jan 26 15:00:48 2026 GMT Subject: CN=6716c7ec48b8f768989eafffe412599ccdaf3d18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ab:02:b4:30:be:25:a4:c1:5c:f8:c1:fa:8a: 69:fe:4f:9d:9d:37:38:22:7f:3d:6a:e5:78:4f:e9: f6:9f:85:31:9c:a9:b0:79:87:69:e0:39:cc:64:c1: 2e:44:24:53:95:c3:7c:7d:f2:4d:64:5d:3f:b7:ff: eb:62:6d:e7:02:4e:6b:0a:d9:c1:3e:d7:c8:13:2a: 20:06:d2:d8:73:8a:41:b8:bd:c4:0a:e9:06:e2:00: 0e:75:fd:a8:01:3c:c1:32:0f:c2:f8:46:6f:ae:74: 21:d4:9f:bb:d4:08:ba:98:39:ed:27:90:a3:22:c9: 21:8b:ab:33:8b:f6:36:33:f9:72:c4:58:ef:d3:b5: 77:7a:3b:ab:bd:5a:0e:7b:2c:a3:0a:0d:d4:76:a7: 23:e2:63:37:18:85:45:33:2d:a0:cd:37:a1:9c:ea: 77:aa:6f:e7:79:70:d9:dc:e6:c5:0c:8a:0e:2b:02: e9:46:02:a3:70:26:d9:7e:9c:ee:d9:b1:e4:96:fa: 6d:ac:a5:a4:b3:99:fb:c7:cd:42:20:6d:4a:4e:50: 4c:ae:7b:d4:3d:70:07:7f:6d:02:e4:74:63:14:10: fa:a9:65:a8:89:32:3d:c1:f0:6f:b6:53:43:91:04: 4a:4a:6f:e7:f4:29:56:ed:aa:4c:c5:14:86:f8:65: fa:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:16:C7:EC:48:B8:F7:68:98:9E:AF:FF:E4:12:59:9C:CD:AF:3D:18 X509v3 Authority Key Identifier: keyid:29:C1:70:D9:8B:5E:35:D7:D5:15:37:67:1C:60:40:A5:15:18:84:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcFw2YteNdfVFTdnHGBApRUYhLw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:50:53:e6:f2:67:02:c8:80:6b:21:c9:89:36:09:58:68:5c: cf:eb:a1:4c:f0:9c:88:9b:b2:14:ae:b8:c7:e2:1b:f3:48:67: 58:ee:aa:61:83:44:4a:8d:5d:6d:9f:75:5e:31:b6:78:b1:38: 55:8e:63:7a:05:1d:58:a7:da:45:17:34:b6:c8:92:0b:4d:9b: 3c:81:b8:9e:a6:81:ce:f4:7d:99:28:6f:c3:80:ad:9a:02:e0: ae:7f:67:ae:8b:f6:e1:4a:bd:38:fb:21:82:e5:2b:93:71:76: 7d:0d:70:da:7d:cc:c8:10:2f:b3:5b:ed:e7:bc:ae:3b:97:bb: 66:e0:cb:a2:7a:e9:ae:0b:5f:f5:df:45:3b:fa:c4:c3:46:12: db:1c:ab:b3:48:05:71:88:47:6f:87:0c:9f:39:d6:0a:a9:96: e4:58:93:52:7c:09:29:bb:4c:b6:c3:01:44:e6:67:c1:bf:ba: d5:e1:18:84:ad:07:bf:3a:a6:bc:a9:ba:4e:73:e4:5a:72:cb: 3f:98:ce:24:c2:a4:cb:dc:2f:72:ba:32:6e:dc:fa:c3:6c:e6: 57:29:d6:d6:44:9d:21:72:98:85:c2:07:d0:23:b7:8f:3b:2e: 18:4e:0c:17:bb:f5:19:e6:14:d9:1b:90:6e:96:f1:4b:ac:f4: fa:b6:e7:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rAELPPbHc+zHCgA8stPZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YzE3MGQ5OGI1ZTM1ZDdkNTE1Mzc2NzFjNjA0MGE1MTUx ODg0YmMwHhcNMjYwMTI1MTUwMDQ4WhcNMjYwMTI2MTUwMDQ4WjAzMTEwLwYDVQQD Eyg2NzE2YzdlYzQ4YjhmNzY4OTg5ZWFmZmZlNDEyNTk5Y2NkYWYzZDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKsCtDC+JaTBXPjB+opp/k+dnTc4 In89auV4T+n2n4UxnKmweYdp4DnMZMEuRCRTlcN8ffJNZF0/t//rYm3nAk5rCtnB PtfIEyogBtLYc4pBuL3ECukG4gAOdf2oATzBMg/C+EZvrnQh1J+71Ai6mDntJ5Cj Iskhi6szi/Y2M/lyxFjv07V3ejurvVoOeyyjCg3Udqcj4mM3GIVFMy2gzTehnOp3 qm/neXDZ3ObFDIoOKwLpRgKjcCbZfpzu2bHklvptrKWks5n7x81CIG1KTlBMrnvU PXAHf20C5HRjFBD6qWWoiTI9wfBvtlNDkQRKSm/n9ClW7apMxRSG+GX6WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGcWx+xIuPdomJ6v/+QSWZzNrz0YMB8GA1UdIwQY MBaAFCnBcNmLXjXX1RU3ZxxgQKUVGIS8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2NGdzJZdGVOZGZWRlRkbkhHQkFwUlVZaEx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9lMjVhM2MtZGVmNi00MjI4LWExMGIt YzQ1ZTk0OWU5Y2Q2LzEvS2NGdzJZdGVOZGZWRlRkbkhHQkFwUlVZaEx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi9lMjVhM2MtZGVmNi00MjI4LWExMGItYzQ1ZTk0OWU5Y2Q2 LzEvS2NGdzJZdGVOZGZWRlRkbkhHQkFwUlVZaEx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAklBT5vJn AsiAayHJiTYJWGhcz+uhTPCciJuyFK64x+Ib80hnWO6qYYNESo1dbZ91XjG2eLE4 VY5jegUdWKfaRRc0tsiSC02bPIG4nqaBzvR9mShvw4CtmgLgrn9nrov24Uq9OPsh guUrk3F2fQ1w2n3MyBAvs1vt57yuO5e7ZuDLonrprgtf9d9FO/rEw0YS2xyrs0gF cYhHb4cMnznWCqmW5FiTUnwJKbtMtsMBROZnwb+61eEYhK0HvzqmvKm6TnPkWnLL P5jOJMKky9wvcroybtz6w2zmVynW1kSdIXKYhcIH0CO3jzsuGE4MF7v1GeYU2RuQ bpbxS6z0+rbnVQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:34:48 2026 by rpki-client