This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft File: Ka2L_getXSzLQ7DR26axkstR2-o.mft (raw, json) Hash identifier: 36Tkmy42BiIdYacD4OA8mMihVQ7zMYKuqX505mQAKHc= Subject key identifier: DD:DB:6E:B4:15:AD:A1:A4:8E:32:73:F3:B2:2A:95:43:F5:DA:70:8D Authority key identifier: 29:AD:8B:FE:07:AD:5D:2C:CB:43:B0:D1:DB:A6:B1:92:CB:51:DB:EA Certificate issuer: /CN=29ad8bfe07ad5d2ccb43b0d1dba6b192cb51dbea Certificate serial: 019BF687FD55C2E83E8270A1041F9B56E3D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft Manifest number: 17EF Signing time: Sun 25 Jan 2026 19:01:05 +0000 Manifest this update: Sun 25 Jan 2026 19:01:05 +0000 Manifest next update: Mon 26 Jan 2026 19:01:05 +0000 Files and hashes: 1: EeZP-5SHSEawYdE6cDHYPsGpsC4.roa (hash: AP7Fyhfq5/WIxTZ9Gig6bft8IGMBLH4JkZ4O2XoWirA=) 2: FiH_Dv9KRA9mEtdQJUxihReFF1c.roa (hash: LloMKXL1qJtQXFFrKg1pWHguOKrDmgj1zA46ZODHmzI=) 3: Ka2L_getXSzLQ7DR26axkstR2-o.crl (hash: k/qmO1uefyGHMzRYQwu/KSN1NKNhGpQgmTBa7wg6NhM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.crl rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:fd:55:c2:e8:3e:82:70:a1:04:1f:9b:56:e3:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29ad8bfe07ad5d2ccb43b0d1dba6b192cb51dbea Validity Not Before: Jan 25 19:01:05 2026 GMT Not After : Jan 26 19:01:05 2026 GMT Subject: CN=dddb6eb415ada1a48e3273f3b22a9543f5da708d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:cd:e6:93:e2:c0:aa:08:9d:4f:1f:9d:e3:8a: ca:9e:45:f9:71:3e:fc:23:1c:6d:6b:17:08:07:a7: 11:a0:34:bc:1d:b8:da:81:3b:0e:f3:ef:dd:72:87: b1:83:ba:d5:59:c7:56:81:d4:cd:69:48:e3:24:fc: 53:0a:e7:38:46:3e:5f:63:32:8e:95:53:08:87:6a: 61:7f:c1:42:0f:48:76:f6:01:7b:b3:70:cb:5e:48: 0a:63:b7:fe:58:b4:0d:4a:71:c7:f8:a5:22:2c:2b: d1:00:78:2b:d2:cf:dc:ed:30:da:b0:3c:16:58:e2: 28:1d:84:9b:2d:29:39:ef:46:17:0d:6c:8a:ec:ed: 48:fc:a6:8e:e8:9d:47:7a:50:03:3e:2f:7c:96:02: 0e:13:c1:b4:0a:55:fb:14:81:33:e0:f0:b8:35:87: 32:52:65:dc:fa:c1:03:d8:ae:18:8b:d1:4a:0c:06: 5e:b2:d0:8e:49:60:7a:c7:1f:62:78:cd:e1:1c:f7: d0:aa:e4:34:ab:b6:a0:cd:b0:97:08:05:51:a1:19: 0f:3e:4f:90:4b:10:86:02:75:8b:52:be:ee:c5:15: 9f:41:81:70:b3:61:c4:15:5e:ce:a7:45:32:05:40: 7d:f3:a2:2b:2e:41:69:9b:2f:bc:08:91:9e:e6:37: 6b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:DB:6E:B4:15:AD:A1:A4:8E:32:73:F3:B2:2A:95:43:F5:DA:70:8D X509v3 Authority Key Identifier: keyid:29:AD:8B:FE:07:AD:5D:2C:CB:43:B0:D1:DB:A6:B1:92:CB:51:DB:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:30:ce:3d:5c:55:76:88:c9:2e:1c:a1:84:1a:c7:88:f9:e1: 1c:55:b7:49:f0:46:34:fc:32:b8:45:f9:a8:b3:dd:80:1f:da: 98:5f:b2:fa:01:0d:f0:87:47:87:06:a0:e6:c2:ed:70:a1:31: 96:15:fd:45:d6:8d:86:a1:7f:1f:c5:42:b8:26:dc:b2:7f:c8: b3:fb:9b:bd:bc:9a:b3:20:3f:3f:89:d2:0f:2e:e7:24:16:7b: 03:3b:5b:35:8e:1c:87:21:b0:14:16:67:76:57:4a:57:ed:7d: 49:b4:e4:c0:08:79:e5:37:b2:08:41:f7:04:2f:0c:75:bb:ac: b5:21:2c:97:29:af:a2:e7:ba:f0:35:61:cc:30:b3:f1:8f:1b: b8:17:4b:69:9f:4c:2c:8e:15:27:3e:15:7a:19:40:a3:16:47: c2:2a:ab:a7:d0:b4:15:e7:35:1b:47:4d:fe:ef:69:6a:8a:aa: 86:03:90:20:ea:6c:e7:9b:c7:08:fd:9d:e5:e0:62:a9:1f:dd: a0:e0:52:33:07:41:ee:33:11:41:e5:f7:4f:04:10:a7:cc:38: 6a:13:35:a8:71:77:e5:19:ca:82:95:9c:d4:ac:31:7d:b6:cc: a6:48:5d:24:c3:18:f7:3c:98:fa:af:31:4d:43:87:36:fb:ee: bf:c1:2f:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h/1Vwug+gnChBB+bVuPXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YWQ4YmZlMDdhZDVkMmNjYjQzYjBkMWRiYTZiMTkyY2I1 MWRiZWEwHhcNMjYwMTI1MTkwMTA1WhcNMjYwMTI2MTkwMTA1WjAzMTEwLwYDVQQD EyhkZGRiNmViNDE1YWRhMWE0OGUzMjczZjNiMjJhOTU0M2Y1ZGE3MDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnM3mk+LAqgidTx+d44rKnkX5cT78 IxxtaxcIB6cRoDS8HbjagTsO8+/dcoexg7rVWcdWgdTNaUjjJPxTCuc4Rj5fYzKO lVMIh2phf8FCD0h29gF7s3DLXkgKY7f+WLQNSnHH+KUiLCvRAHgr0s/c7TDasDwW WOIoHYSbLSk570YXDWyK7O1I/KaO6J1HelADPi98lgIOE8G0ClX7FIEz4PC4NYcy UmXc+sED2K4Yi9FKDAZestCOSWB6xx9ieM3hHPfQquQ0q7agzbCXCAVRoRkPPk+Q SxCGAnWLUr7uxRWfQYFws2HEFV7Op0UyBUB986IrLkFpmy+8CJGe5jdrpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN3bbrQVraGkjjJz87IqlUP12nCNMB8GA1UdIwQY MBaAFCmti/4HrV0sy0Ow0dumsZLLUdvqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2EyTF9nZXRYU3pMUTdEUjI2YXhrc3RSMi1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8yMzVkMjYtNzA5NC00ZmViLTljYTkt Mzc4NDk5Mzk4ZjE4LzEvS2EyTF9nZXRYU3pMUTdEUjI2YXhrc3RSMi1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My8yMzVkMjYtNzA5NC00ZmViLTljYTktMzc4NDk5Mzk4ZjE4 LzEvS2EyTF9nZXRYU3pMUTdEUjI2YXhrc3RSMi1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdzDOPVxV dojJLhyhhBrHiPnhHFW3SfBGNPwyuEX5qLPdgB/amF+y+gEN8IdHhwag5sLtcKEx lhX9RdaNhqF/H8VCuCbcsn/Is/ubvbyasyA/P4nSDy7nJBZ7AztbNY4chyGwFBZn dldKV+19SbTkwAh55TeyCEH3BC8MdbustSEslymvoue68DVhzDCz8Y8buBdLaZ9M LI4VJz4VehlAoxZHwiqrp9C0Fec1G0dN/u9paoqqhgOQIOps55vHCP2d5eBiqR/d oOBSMwdB7jMRQeX3TwQQp8w4ahM1qHF35RnKgpWc1KwxfbbMpkhdJMMY9zyY+q8x TUOHNvvuv8Ev4w== -----END CERTIFICATE-----Generated at Sun Jan 25 21:09:42 2026 by rpki-client