This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft File: kY74I7sEHqOsfIk2x1C2AYE34s0.mft (raw, json) Hash identifier: w0eREPDf0TsDFh8uHeQdLmfT29tLNh9yModWQQ67l8I= Subject key identifier: AA:7E:09:37:03:43:FA:F0:CF:5D:F7:EA:FA:3C:2A:7B:12:6B:E8:20 Authority key identifier: 91:8E:F8:23:BB:04:1E:A3:AC:7C:89:36:C7:50:B6:01:81:37:E2:CD Certificate issuer: /CN=918ef823bb041ea3ac7c8936c750b6018137e2cd Certificate serial: 019BF83F3CCFE06B18181C2D5DACAFBA9F72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft Manifest number: 17EA Signing time: Mon 26 Jan 2026 03:00:52 +0000 Manifest this update: Mon 26 Jan 2026 03:00:52 +0000 Manifest next update: Tue 27 Jan 2026 03:00:52 +0000 Files and hashes: 1: SAktSd8Yfiv8Z7AAoq9HqjAql5s.roa (hash: LtM8gbZ0jSfixz/hSjfeNQJi14O3+yjoZzQHAO5Ggx8=) 2: V7G0PqLXvHbILX1LHpBG4YAR7P8.roa (hash: dlrYc64tSG90TWHPrXR+wF6FxKtROact/mSKSd7YezI=) 3: kY74I7sEHqOsfIk2x1C2AYE34s0.crl (hash: /L3IOcTc2e7Gd0L3tdca6yFeANpvafieCB8Q2c77brY=) 4: phk0DUtP9juLO6Rie2WITcEati8.roa (hash: e91L1Q+nTnPD/oJ6jV8Vk2fQsj6tkZNRhSrVTsD9WQs=) 5: ycEAE8U3GOcT-dI1EM9rShcAaZs.roa (hash: xuaS4IHUOmueIKBaxW7itaqT5M/7ix/11RW1ctyKbMg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.crl rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:3c:cf:e0:6b:18:18:1c:2d:5d:ac:af:ba:9f:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=918ef823bb041ea3ac7c8936c750b6018137e2cd Validity Not Before: Jan 26 03:00:52 2026 GMT Not After : Jan 27 03:00:52 2026 GMT Subject: CN=aa7e09370343faf0cf5df7eafa3c2a7b126be820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:61:f3:e3:e5:3c:b3:01:e5:01:0f:96:f9:4b: b8:19:af:43:2a:55:dc:1c:78:28:02:82:ae:c2:f1: b7:04:57:c1:6f:f2:f3:bd:2a:1a:4c:b2:ef:d2:2c: 87:7d:51:7a:d3:a0:04:e5:cd:f3:99:95:63:e3:f5: cd:db:37:3b:e7:93:b7:e3:b5:25:6e:a2:89:06:5c: 55:d3:8a:b2:50:30:e8:3a:8c:78:c3:5e:12:64:d3: a1:f2:04:a6:e1:f9:19:70:59:03:ed:1f:71:dd:b8: 42:34:bd:05:55:aa:60:2c:75:ce:66:4f:6f:b9:93: 44:fe:68:52:51:44:79:7f:23:e7:31:29:76:f1:11: 8c:b2:fd:df:63:62:6d:0c:62:f4:b7:29:b0:4b:52: f0:93:3c:1a:9f:e3:59:eb:89:aa:43:71:62:ab:a8: e7:9f:35:41:3c:a1:b5:17:50:09:65:91:5d:62:61: 54:b3:ac:6a:7c:8e:a4:98:b4:50:fc:46:3b:bc:69: 8a:c7:64:ed:11:95:3e:de:91:63:f2:cc:52:50:83: 65:29:e0:b6:3a:e0:5c:93:e9:56:d6:52:ae:c4:8f: 1e:3f:54:60:f9:45:74:b1:9a:49:1f:52:b9:99:3d: b4:0d:42:06:e2:00:c9:6c:5f:f9:12:34:d6:89:7f: 5b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:7E:09:37:03:43:FA:F0:CF:5D:F7:EA:FA:3C:2A:7B:12:6B:E8:20 X509v3 Authority Key Identifier: keyid:91:8E:F8:23:BB:04:1E:A3:AC:7C:89:36:C7:50:B6:01:81:37:E2:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:47:66:a4:ea:1c:93:45:1e:84:6a:06:a5:f9:a0:f1:79:39: 96:b8:b2:5a:3e:84:04:f2:00:91:c8:ea:c7:ef:51:85:a0:11: ab:e3:7a:2c:17:5f:e5:20:1e:d8:5f:6d:82:3c:d9:1e:f3:35: 3b:17:bb:4f:8f:eb:2c:ef:b4:35:53:57:9a:66:0b:73:3f:15: 2f:32:7b:17:27:10:4a:45:36:3d:1b:74:8c:3a:fb:ac:3c:28: c9:f1:44:40:db:a4:bc:d3:18:ba:03:ed:a5:d6:1c:22:df:20: 04:d5:0a:c9:27:a9:dc:aa:26:67:de:c3:59:b8:f1:b2:15:f0: 45:c2:03:3e:3a:d3:78:18:19:9e:93:bf:0c:ba:91:ff:b7:81: a3:ef:b8:fb:ea:ec:3a:d1:f6:3d:7f:8c:8a:14:58:d0:30:af: b8:93:f2:2e:c8:e3:a1:ca:21:8c:d1:9a:1d:e1:86:82:6b:73: 65:d7:65:df:63:37:b4:37:f2:da:f2:dc:5e:c1:cc:c7:c8:b2: c8:7f:09:fe:56:34:42:de:5c:86:44:18:dd:d5:7e:58:07:08: da:bb:c2:cd:45:33:56:ae:d6:9b:19:f3:68:23:b9:a6:9f:b6: e3:d9:16:4f:c3:9f:ee:82:17:2e:bc:7c:c1:71:fd:b6:0d:a2: 02:49:64:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4PzzP4GsYGBwtXayvup9yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxOGVmODIzYmIwNDFlYTNhYzdjODkzNmM3NTBiNjAxODEz N2UyY2QwHhcNMjYwMTI2MDMwMDUyWhcNMjYwMTI3MDMwMDUyWjAzMTEwLwYDVQQD EyhhYTdlMDkzNzAzNDNmYWYwY2Y1ZGY3ZWFmYTNjMmE3YjEyNmJlODIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmHz4+U8swHlAQ+W+Uu4Ga9DKlXc HHgoAoKuwvG3BFfBb/LzvSoaTLLv0iyHfVF606AE5c3zmZVj4/XN2zc755O347Ul bqKJBlxV04qyUDDoOox4w14SZNOh8gSm4fkZcFkD7R9x3bhCNL0FVapgLHXOZk9v uZNE/mhSUUR5fyPnMSl28RGMsv3fY2JtDGL0tymwS1Lwkzwan+NZ64mqQ3Fiq6jn nzVBPKG1F1AJZZFdYmFUs6xqfI6kmLRQ/EY7vGmKx2TtEZU+3pFj8sxSUINlKeC2 OuBck+lW1lKuxI8eP1Rg+UV0sZpJH1K5mT20DUIG4gDJbF/5EjTWiX9btwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKp+CTcDQ/rwz1336vo8KnsSa+ggMB8GA1UdIwQY MBaAFJGO+CO7BB6jrHyJNsdQtgGBN+LNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1k3NEk3c0VIcU9zZklrMngxQzJBWUUzNHMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS82NTQyMGMtZjVlMi00ZDI5LWI1MDMt NjUyOTc1MWIyYjAxLzEva1k3NEk3c0VIcU9zZklrMngxQzJBWUUzNHMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS82NTQyMGMtZjVlMi00ZDI5LWI1MDMtNjUyOTc1MWIyYjAx LzEva1k3NEk3c0VIcU9zZklrMngxQzJBWUUzNHMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnkdmpOoc k0UehGoGpfmg8Xk5lriyWj6EBPIAkcjqx+9RhaARq+N6LBdf5SAe2F9tgjzZHvM1 Oxe7T4/rLO+0NVNXmmYLcz8VLzJ7FycQSkU2PRt0jDr7rDwoyfFEQNukvNMYugPt pdYcIt8gBNUKySep3KomZ97DWbjxshXwRcIDPjrTeBgZnpO/DLqR/7eBo++4++rs OtH2PX+MihRY0DCvuJPyLsjjocohjNGaHeGGgmtzZddl32M3tDfy2vLcXsHMx8iy yH8J/lY0Qt5chkQY3dV+WAcI2rvCzUUzVq7WmxnzaCO5pp+249kWT8Of7oIXLrx8 wXH9tg2iAklkbQ== -----END CERTIFICATE-----Generated at Mon Jan 26 10:57:32 2026 by rpki-client