This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft File: KKye3SQL_EUgzgvJskWWPSTiv-I.mft (raw, json) Hash identifier: kNNiZT1yqtbpXiAbclS/iR2RlMJmcAThFZK1++X93f0= Subject key identifier: 76:E3:E7:EB:38:BC:C1:D5:AD:44:CE:29:4A:2D:87:3E:A3:FD:B3:17 Authority key identifier: 28:AC:9E:DD:24:0B:FC:45:20:CE:0B:C9:B2:45:96:3D:24:E2:BF:E2 Certificate issuer: /CN=28ac9edd240bfc4520ce0bc9b245963d24e2bfe2 Certificate serial: 019BF386CD1F680E7DB4B8FE76EB4F65CCF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft Manifest number: 153A Signing time: Sun 25 Jan 2026 05:00:56 +0000 Manifest this update: Sun 25 Jan 2026 05:00:56 +0000 Manifest next update: Mon 26 Jan 2026 05:00:56 +0000 Files and hashes: 1: KKye3SQL_EUgzgvJskWWPSTiv-I.crl (hash: tiGLW2nIbulabN4KojgHpcMiwly7A1GCrvEiNzNu0ew=) 2: qWRFNxO39FmZwXVOfW9a3qdDZ_M.roa (hash: rirbnyAccpPKWOcuInuVk5mCK3dHmlXm6puqdnxTn/s=) 3: vG177J2dohuE08wHX2-c78lEhcw.roa (hash: 3JSqj0nOnGoEw7PHeM+wBIAwqea4bnBMwwfIgvqc52Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.crl rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:86:cd:1f:68:0e:7d:b4:b8:fe:76:eb:4f:65:cc:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28ac9edd240bfc4520ce0bc9b245963d24e2bfe2 Validity Not Before: Jan 25 05:00:56 2026 GMT Not After : Jan 26 05:00:56 2026 GMT Subject: CN=76e3e7eb38bcc1d5ad44ce294a2d873ea3fdb317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:54:5e:f7:0d:93:ce:d4:b3:10:ba:00:49:00: 86:7c:77:97:88:74:1f:ff:3e:e5:a8:f9:4e:ad:e6: 28:98:c2:33:53:dc:cc:46:5b:1e:09:99:c4:35:67: 22:9c:1e:fb:25:8b:05:5e:2a:88:4b:b8:e1:27:61: 38:a6:7d:5f:56:f7:25:c4:d0:8a:04:10:36:20:5e: 8e:e9:d6:a0:95:b1:80:a4:83:87:56:06:0d:d2:33: 52:3e:3b:fb:20:7e:a8:28:bf:be:40:55:61:27:d4: 27:9a:4c:ec:61:34:b8:98:fa:87:f8:55:e5:af:c5: d6:61:42:f2:a1:c7:8e:e9:13:69:f3:39:d8:a6:91: d6:23:f9:a1:14:13:f2:47:91:c1:bb:e9:f2:23:26: 35:49:97:b7:6a:6a:a2:fc:e9:c4:d5:4b:ca:3a:34: 05:73:64:54:fd:b2:91:01:f8:7a:71:84:c6:02:94: b9:30:e2:e6:d5:bf:cf:8a:3f:a5:9f:91:40:d0:2c: d1:b5:fb:24:51:00:40:44:4f:25:3f:77:c6:cc:de: 1a:d7:1a:14:09:4b:14:cb:f4:50:a2:18:03:e3:4a: b8:81:8e:d5:95:c3:eb:35:55:90:7a:13:a8:54:2a: 96:2b:06:50:8c:d9:4f:b8:94:5d:c9:02:55:0a:b8: ec:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:E3:E7:EB:38:BC:C1:D5:AD:44:CE:29:4A:2D:87:3E:A3:FD:B3:17 X509v3 Authority Key Identifier: keyid:28:AC:9E:DD:24:0B:FC:45:20:CE:0B:C9:B2:45:96:3D:24:E2:BF:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:15:0c:d2:bb:93:d6:6c:c0:ef:5a:67:01:f2:a5:69:ce:2a: b8:97:86:19:58:76:79:cb:27:a6:59:ca:b1:39:d5:09:e3:c9: 2b:f5:aa:fd:03:18:8d:9d:51:57:59:f9:c6:98:43:39:30:c5: d5:fc:80:21:23:d2:ea:ee:7a:fa:a5:29:ab:3e:e0:1e:98:47: 71:93:04:f2:2e:a9:ca:47:83:2b:87:38:2d:f3:eb:b0:09:63: ee:fb:1b:c7:8d:2e:8b:4d:c4:21:1d:c2:87:71:6c:1b:80:2c: 46:57:d2:2a:73:8f:b2:e0:3c:a7:77:c2:81:40:4e:b4:9d:be: e2:fe:d9:4d:18:55:4c:e7:d6:70:70:aa:e3:b1:32:37:24:22: 76:eb:bb:a7:b1:ea:4a:f2:d7:8b:2b:5f:1d:24:73:62:c8:db: 1e:dd:29:51:0b:51:ed:4f:bb:9e:5e:5d:5c:aa:39:e5:f0:c9: c6:76:1f:e3:5e:b0:02:5a:bf:52:21:83:55:9f:34:84:f5:00: 77:11:78:05:22:c2:c1:3f:84:80:f9:57:93:20:97:5f:eb:44: 5f:ab:7a:c5:18:d5:f1:ee:78:cd:d9:50:05:ce:e6:1c:a7:0b: 7a:6d:68:97:f0:69:5a:7d:4a:9a:59:d4:44:ea:65:5b:99:7d: f3:c4:c3:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzhs0faA59tLj+dutPZcz3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4YWM5ZWRkMjQwYmZjNDUyMGNlMGJjOWIyNDU5NjNkMjRl MmJmZTIwHhcNMjYwMTI1MDUwMDU2WhcNMjYwMTI2MDUwMDU2WjAzMTEwLwYDVQQD Eyg3NmUzZTdlYjM4YmNjMWQ1YWQ0NGNlMjk0YTJkODczZWEzZmRiMzE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7VRe9w2TztSzELoASQCGfHeXiHQf /z7lqPlOreYomMIzU9zMRlseCZnENWcinB77JYsFXiqIS7jhJ2E4pn1fVvclxNCK BBA2IF6O6daglbGApIOHVgYN0jNSPjv7IH6oKL++QFVhJ9QnmkzsYTS4mPqH+FXl r8XWYULyoceO6RNp8znYppHWI/mhFBPyR5HBu+nyIyY1SZe3amqi/OnE1UvKOjQF c2RU/bKRAfh6cYTGApS5MOLm1b/Pij+ln5FA0CzRtfskUQBARE8lP3fGzN4a1xoU CUsUy/RQohgD40q4gY7VlcPrNVWQehOoVCqWKwZQjNlPuJRdyQJVCrjs6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHbj5+s4vMHVrUTOKUothz6j/bMXMB8GA1UdIwQY MBaAFCisnt0kC/xFIM4LybJFlj0k4r/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0t5ZTNTUUxfRVVnemd2SnNrV1dQU1Rpdi1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zNjBiMTctN2UxNy00NTFiLWFiZDUt ODVhNTM0ZjE4MGZkLzEvS0t5ZTNTUUxfRVVnemd2SnNrV1dQU1Rpdi1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8zNjBiMTctN2UxNy00NTFiLWFiZDUtODVhNTM0ZjE4MGZk LzEvS0t5ZTNTUUxfRVVnemd2SnNrV1dQU1Rpdi1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYhUM0ruT 1mzA71pnAfKlac4quJeGGVh2ecsnplnKsTnVCePJK/Wq/QMYjZ1RV1n5xphDOTDF 1fyAISPS6u56+qUpqz7gHphHcZME8i6pykeDK4c4LfPrsAlj7vsbx40ui03EIR3C h3FsG4AsRlfSKnOPsuA8p3fCgUBOtJ2+4v7ZTRhVTOfWcHCq47EyNyQiduu7p7Hq SvLXiytfHSRzYsjbHt0pUQtR7U+7nl5dXKo55fDJxnYf416wAlq/UiGDVZ80hPUA dxF4BSLCwT+EgPlXkyCXX+tEX6t6xRjV8e54zdlQBc7mHKcLem1ol/BpWn1KmlnU ROplW5l988TD0g== -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:35 2026 by rpki-client