This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft File: kwy6S0MwS1HEvd-9QzF4KtkRAso.mft (raw, json) Hash identifier: hfi9gzMmobaMU9R9I95ZbrJP7gU8KoSPgdVpSFYYYQ4= Subject key identifier: 68:47:43:90:98:5E:B5:FC:E6:E5:1B:F7:F4:A6:F8:10:60:20:9D:11 Authority key identifier: 93:0C:BA:4B:43:30:4B:51:C4:BD:DF:BD:43:31:78:2A:D9:11:02:CA Certificate issuer: /CN=930cba4b43304b51c4bddfbd4331782ad91102ca Certificate serial: 019BF5E3301C59D3B0A50CEA2FFA8EC4DB44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft Manifest number: 0501 Signing time: Sun 25 Jan 2026 16:01:05 +0000 Manifest this update: Sun 25 Jan 2026 16:01:05 +0000 Manifest next update: Mon 26 Jan 2026 16:01:05 +0000 Files and hashes: 1: kwy6S0MwS1HEvd-9QzF4KtkRAso.crl (hash: Idq4BZMGHzv8N5gpcDoY4AgL2UsLbf9Yf9LY1QrherI=) 2: oL9_-G_BE3Ib7OwngyyeN305t6g.roa (hash: bC+XZTw3+M3qUxRZBZ3OzKSTrnOKvMY+D1VuNWxrnR8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:30:1c:59:d3:b0:a5:0c:ea:2f:fa:8e:c4:db:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=930cba4b43304b51c4bddfbd4331782ad91102ca Validity Not Before: Jan 25 16:01:05 2026 GMT Not After : Jan 26 16:01:05 2026 GMT Subject: CN=68474390985eb5fce6e51bf7f4a6f81060209d11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c0:0f:d8:81:b9:9f:97:b5:4c:24:33:88:6f: fc:70:78:ff:81:a1:fb:49:2a:d7:09:9e:82:32:05: f0:94:9b:d7:1b:86:b9:45:45:1d:55:ab:68:1a:d4: 86:d2:6b:ad:18:28:26:8f:14:db:d9:48:03:23:d6: d1:cf:de:4b:62:6a:d3:31:c4:2f:8f:c9:00:04:56: 26:16:61:bf:18:6b:88:3d:8a:e3:93:34:6d:8e:14: 05:69:69:ac:64:3d:c0:0a:a1:db:e1:2c:b5:0a:13: 1f:0c:be:5a:1e:c6:e9:31:52:b9:9e:d0:b6:46:32: 52:31:5a:f5:6a:05:b5:c8:54:4f:49:b3:b1:59:14: 1f:b7:e4:d3:bf:b3:78:1d:48:55:95:5c:9b:c3:9a: ee:84:6e:f3:1c:0f:99:21:46:ea:c3:37:20:d1:91: d9:15:7f:3d:47:b1:fa:78:d8:df:ec:86:23:c5:bd: 26:ba:c4:a5:c8:80:d5:12:65:b9:ff:a2:43:84:1a: cd:20:39:7d:9b:55:94:ca:93:ab:66:38:25:24:48: 85:16:ac:88:35:5f:6e:b5:84:98:be:69:d2:7d:09: e0:85:39:8e:7b:aa:87:54:05:e7:0e:cd:ab:68:01: 3d:30:c9:4f:ca:25:7c:7e:84:33:44:cb:a9:bb:34: d7:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:47:43:90:98:5E:B5:FC:E6:E5:1B:F7:F4:A6:F8:10:60:20:9D:11 X509v3 Authority Key Identifier: keyid:93:0C:BA:4B:43:30:4B:51:C4:BD:DF:BD:43:31:78:2A:D9:11:02:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:69:42:c9:07:2c:92:fb:54:b1:03:49:12:1b:b3:09:7a:66: 5e:67:f6:f3:7d:e3:53:a4:5a:70:fe:fa:9b:ba:b5:a9:8d:c3: 07:03:67:ae:6c:c6:df:ef:a2:45:64:aa:37:70:21:32:ef:7a: c0:fc:af:72:03:af:b6:00:fa:d8:33:7c:0b:eb:09:5b:14:c2: fb:4c:26:f1:e9:09:c8:5e:a3:75:cc:29:20:44:e5:64:82:05: 37:20:69:7f:26:58:4a:7c:6c:43:96:e3:ca:8e:9d:5c:a5:24: 63:7e:ad:db:91:23:02:b2:5a:57:f0:9f:5e:5e:d8:fb:46:1b: 0a:a6:f7:b0:7e:ae:d2:ba:a0:c9:2a:97:f1:a2:b2:c6:de:f9: 00:ec:75:4c:46:55:a6:4c:ba:5a:cb:6f:f2:83:10:50:57:71: 2e:fb:a8:01:6e:ac:f7:37:bf:73:44:95:db:de:7f:bd:11:02: 5c:9b:f9:eb:c3:29:7c:d5:27:ed:f6:1c:44:f4:9f:94:3d:be: 26:08:e0:77:e9:95:02:6d:be:a0:b3:df:11:56:b6:0b:77:77: 91:21:6f:35:2e:b4:90:98:5c:e6:5d:30:84:eb:56:26:f1:dc: e1:43:c2:78:94:26:22:98:e2:47:31:56:e0:24:a9:2d:26:9a: 58:e3:3f:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv14zAcWdOwpQzqL/qOxNtEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMGNiYTRiNDMzMDRiNTFjNGJkZGZiZDQzMzE3ODJhZDkx MTAyY2EwHhcNMjYwMTI1MTYwMTA1WhcNMjYwMTI2MTYwMTA1WjAzMTEwLwYDVQQD Eyg2ODQ3NDM5MDk4NWViNWZjZTZlNTFiZjdmNGE2ZjgxMDYwMjA5ZDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8AP2IG5n5e1TCQziG/8cHj/gaH7 SSrXCZ6CMgXwlJvXG4a5RUUdVatoGtSG0mutGCgmjxTb2UgDI9bRz95LYmrTMcQv j8kABFYmFmG/GGuIPYrjkzRtjhQFaWmsZD3ACqHb4Sy1ChMfDL5aHsbpMVK5ntC2 RjJSMVr1agW1yFRPSbOxWRQft+TTv7N4HUhVlVybw5ruhG7zHA+ZIUbqwzcg0ZHZ FX89R7H6eNjf7IYjxb0musSlyIDVEmW5/6JDhBrNIDl9m1WUypOrZjglJEiFFqyI NV9utYSYvmnSfQnghTmOe6qHVAXnDs2raAE9MMlPyiV8foQzRMupuzTXkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGhHQ5CYXrX85uUb9/Sm+BBgIJ0RMB8GA1UdIwQY MBaAFJMMuktDMEtRxL3fvUMxeCrZEQLKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3d5NlMwTXdTMUhFdmQtOVF6RjRLdGtSQXNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80ZWNhM2YtNGY0MS00NTk4LWFhMWIt ZWVkYjE2OThjMjFhLzEva3d5NlMwTXdTMUhFdmQtOVF6RjRLdGtSQXNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80ZWNhM2YtNGY0MS00NTk4LWFhMWItZWVkYjE2OThjMjFh LzEva3d5NlMwTXdTMUhFdmQtOVF6RjRLdGtSQXNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADGlCyQcs kvtUsQNJEhuzCXpmXmf2833jU6RacP76m7q1qY3DBwNnrmzG3++iRWSqN3AhMu96 wPyvcgOvtgD62DN8C+sJWxTC+0wm8ekJyF6jdcwpIETlZIIFNyBpfyZYSnxsQ5bj yo6dXKUkY36t25EjArJaV/CfXl7Y+0YbCqb3sH6u0rqgySqX8aKyxt75AOx1TEZV pky6Wstv8oMQUFdxLvuoAW6s9ze/c0SV295/vRECXJv568MpfNUn7fYcRPSflD2+ Jgjgd+mVAm2+oLPfEVa2C3d3kSFvNS60kJhc5l0whOtWJvHc4UPCeJQmIpjiRzFW 4CSpLSaaWOM/og== -----END CERTIFICATE-----Generated at Mon Jan 26 01:52:04 2026 by rpki-client