This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft File: khkujXhVgfcrGGRCJL2MP6ii0Rs.mft (raw, json) Hash identifier: FAuemRcGI7is5jhLP1jiGbs1f6wH7yZt45jOsVWRduk= Subject key identifier: 63:F5:BE:EB:02:F5:B5:87:43:20:5E:8F:EC:68:6E:BB:36:28:A8:7B Authority key identifier: 92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B Certificate issuer: /CN=92192e8d785581f72b18644224bd8c3fa8a2d11b Certificate serial: 019BF53EB5ACC8F7C17F29C65F9CC8FB3540 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft Manifest number: 1233 Signing time: Sun 25 Jan 2026 13:01:26 +0000 Manifest this update: Sun 25 Jan 2026 13:01:26 +0000 Manifest next update: Mon 26 Jan 2026 13:01:26 +0000 Files and hashes: 1: TsyHYJznOMFi1E9jD0gztHEExcE.roa (hash: e/QoaG3BRXETSSHR/WO7wjf64PB2DD1L8zEt4AtY7G8=) 2: khkujXhVgfcrGGRCJL2MP6ii0Rs.crl (hash: xmLy/QHdeirJKlB3vqUw5oRgKfK9FS3UUnnjx8CEss8=) 3: vyC954Q_j9rYp0C-azzq2YV8c9o.roa (hash: IWod9LGAkMAvkPg/q48dVduXCl8c7LHbCJqM7XHDNOc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:b5:ac:c8:f7:c1:7f:29:c6:5f:9c:c8:fb:35:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92192e8d785581f72b18644224bd8c3fa8a2d11b Validity Not Before: Jan 25 13:01:26 2026 GMT Not After : Jan 26 13:01:26 2026 GMT Subject: CN=63f5beeb02f5b58743205e8fec686ebb3628a87b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d9:ad:7b:2c:42:3f:45:cb:7a:45:9b:ae:bb: de:12:58:9e:91:82:c2:e1:d4:c3:c6:f9:b1:13:4f: 7a:68:0e:75:3e:1d:ad:b3:58:b8:0d:48:47:d5:9e: b6:e9:25:0e:58:be:f3:76:68:2a:7c:10:e5:6b:65: 25:9a:a6:af:05:88:a4:e6:f0:e0:b2:a1:49:90:15: 06:10:c1:c2:2e:77:55:7f:e8:28:1f:2c:91:51:0d: 4b:48:4f:da:e7:2e:ab:5e:b1:3b:7a:74:7f:d8:33: a6:23:4c:c4:58:c2:4d:4e:56:7d:9c:08:c0:54:36: 52:2b:da:78:4d:9f:20:d9:af:72:a1:ab:0b:fd:bb: 1f:94:ca:1d:23:4b:f8:fa:c8:07:e1:80:f1:61:c7: 2d:f0:c6:0d:ff:19:ec:67:c5:d2:a1:c1:55:44:6d: ed:89:7a:01:2c:40:02:ed:b5:35:78:ee:86:23:89: e5:ea:43:a5:7f:e2:46:3b:d3:49:dc:26:36:16:a7: 2e:3c:78:d8:aa:60:67:97:09:47:fc:9c:a2:08:ac: d0:8c:76:c3:69:03:04:99:78:28:ca:01:9e:09:91: 12:ce:1e:f7:b8:68:dd:7f:1e:fd:92:f3:e4:7f:df: a6:34:8c:de:74:12:66:8d:5b:c4:d2:9e:c5:00:76: 55:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:F5:BE:EB:02:F5:B5:87:43:20:5E:8F:EC:68:6E:BB:36:28:A8:7B X509v3 Authority Key Identifier: keyid:92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:77:d9:1f:79:e8:c5:77:74:6d:c4:f6:13:02:df:58:56:92: ee:18:30:fb:a9:a4:10:d2:f2:fd:0e:a5:6b:b2:86:5a:a3:0c: 1d:b0:f4:a3:07:49:0a:86:c0:bf:3d:7b:10:9c:32:5b:30:55: ca:ff:78:da:21:21:02:77:5d:41:07:0d:62:03:83:c7:97:3c: 12:8f:3f:aa:d2:86:b2:1e:15:2e:f3:5e:1b:7e:d3:15:5d:5f: 2b:99:0f:c6:6f:12:8c:06:15:97:d4:d6:f5:f2:2a:cd:16:c4: 70:76:02:a9:8c:8f:1d:74:dc:08:60:ec:a9:89:f0:04:2b:ae: a6:50:d1:90:99:5e:ee:37:94:1f:ce:1a:e1:19:9f:01:48:f6: 9c:37:46:d9:e7:1b:d1:c0:4d:48:49:41:fc:38:a5:86:61:d5: 0e:d1:25:20:52:9e:84:ff:66:be:ae:38:34:60:95:d1:44:b8: 95:e4:82:f6:fe:1f:a3:5a:95:46:33:ed:4f:19:13:96:5b:a1: d8:e1:40:84:77:d6:36:8c:85:40:60:e1:0a:85:67:71:50:3d: e5:6a:98:70:7b:2a:e5:d3:1f:37:67:89:9e:23:f9:c1:01:cd: d9:fd:eb:b5:ab:cf:4c:6c:00:fb:ec:d4:d8:75:d3:db:24:ad: cc:9b:63:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PrWsyPfBfynGX5zI+zVAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMTkyZThkNzg1NTgxZjcyYjE4NjQ0MjI0YmQ4YzNmYThh MmQxMWIwHhcNMjYwMTI1MTMwMTI2WhcNMjYwMTI2MTMwMTI2WjAzMTEwLwYDVQQD Eyg2M2Y1YmVlYjAyZjViNTg3NDMyMDVlOGZlYzY4NmViYjM2MjhhODdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdmteyxCP0XLekWbrrveEliekYLC 4dTDxvmxE096aA51Ph2ts1i4DUhH1Z626SUOWL7zdmgqfBDla2UlmqavBYik5vDg sqFJkBUGEMHCLndVf+goHyyRUQ1LSE/a5y6rXrE7enR/2DOmI0zEWMJNTlZ9nAjA VDZSK9p4TZ8g2a9yoasL/bsflModI0v4+sgH4YDxYcct8MYN/xnsZ8XSocFVRG3t iXoBLEAC7bU1eO6GI4nl6kOlf+JGO9NJ3CY2FqcuPHjYqmBnlwlH/JyiCKzQjHbD aQMEmXgoygGeCZESzh73uGjdfx79kvPkf9+mNIzedBJmjVvE0p7FAHZV2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGP1vusC9bWHQyBej+xobrs2KKh7MB8GA1UdIwQY MBaAFJIZLo14VYH3KxhkQiS9jD+ootEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2hrdWpYaFZnZmNyR0dSQ0pMMk1QNmlpMFJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9kOWIzOTctZTEwNS00YWM5LTg1Mzct MDA4NWEzNjVhMjVmLzEva2hrdWpYaFZnZmNyR0dSQ0pMMk1QNmlpMFJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9kOWIzOTctZTEwNS00YWM5LTg1MzctMDA4NWEzNjVhMjVm LzEva2hrdWpYaFZnZmNyR0dSQ0pMMk1QNmlpMFJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKnfZH3no xXd0bcT2EwLfWFaS7hgw+6mkENLy/Q6la7KGWqMMHbD0owdJCobAvz17EJwyWzBV yv942iEhAnddQQcNYgODx5c8Eo8/qtKGsh4VLvNeG37TFV1fK5kPxm8SjAYVl9TW 9fIqzRbEcHYCqYyPHXTcCGDsqYnwBCuuplDRkJle7jeUH84a4RmfAUj2nDdG2ecb 0cBNSElB/DilhmHVDtElIFKehP9mvq44NGCV0US4leSC9v4fo1qVRjPtTxkTlluh 2OFAhHfWNoyFQGDhCoVncVA95WqYcHsq5dMfN2eJniP5wQHN2f3rtavPTGwA++zU 2HXT2yStzJtjCQ== -----END CERTIFICATE-----Generated at Sun Jan 25 20:11:39 2026 by rpki-client