This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft File: KLD_eZjKiFTOfEdaly7R1SpcYM0.mft (raw, json) Hash identifier: yH0XfAfii1BGpr5Z4WmNrQ6oBO45IRqr+PDbQfOvtoI= Subject key identifier: 0D:4C:86:60:45:5D:33:93:61:C1:53:61:F5:12:4A:E1:FD:3F:64:03 Authority key identifier: 28:B0:FF:79:98:CA:88:54:CE:7C:47:5A:97:2E:D1:D5:2A:5C:60:CD Certificate issuer: /CN=28b0ff7998ca8854ce7c475a972ed1d52a5c60cd Certificate serial: 019BF350AB4FEF56C00C4EED9AD800C2804F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft Manifest number: 14F2 Signing time: Sun 25 Jan 2026 04:01:48 +0000 Manifest this update: Sun 25 Jan 2026 04:01:48 +0000 Manifest next update: Mon 26 Jan 2026 04:01:48 +0000 Files and hashes: 1: E5pify1OXDiAsSHZ575A3rO94ME.roa (hash: j8qs/DidOZTlSj0X8OZwnqxIOGwaKtwZi2fTCHavq7Y=) 2: KLD_eZjKiFTOfEdaly7R1SpcYM0.crl (hash: vnYxOvJS0jWwPeERGD7CMNxyc1kwXX0v5DBHE6mZ+gU=) 3: K_L02ygxWP1iEq4feCmKwUc-f_I.roa (hash: 7BqwctA7sfIPSXcYea3BP+4rzmnGuO4NUJM5EyZPoUY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:50:ab:4f:ef:56:c0:0c:4e:ed:9a:d8:00:c2:80:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28b0ff7998ca8854ce7c475a972ed1d52a5c60cd Validity Not Before: Jan 25 04:01:48 2026 GMT Not After : Jan 26 04:01:48 2026 GMT Subject: CN=0d4c8660455d339361c15361f5124ae1fd3f6403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f7:95:96:29:f0:e8:ee:89:50:6d:b9:41:76: 8c:03:6d:3b:34:6a:b0:22:88:9a:36:f4:d8:e9:82: 0d:7b:e1:fe:34:45:e8:e1:d0:ea:52:e8:a8:21:5b: 9f:3d:04:cd:25:4b:19:63:d9:01:14:89:48:cb:15: 32:35:86:b9:45:3a:f6:67:ea:e3:59:3f:59:c7:04: b8:ad:c5:ae:fd:95:e8:2e:64:a9:75:5c:cc:5d:47: 01:43:61:77:ff:be:37:cd:dc:bc:2a:36:37:27:51: c5:dd:a7:a2:2d:4c:a3:d5:66:bc:f3:d5:3d:41:60: 91:b0:05:6b:79:39:82:62:05:44:8d:b0:fa:e1:e6: 60:27:26:02:f3:59:29:20:5e:58:78:ad:29:df:74: c2:16:84:fb:ca:64:b9:c5:2c:87:c4:45:34:be:8d: 2f:8e:84:a7:14:87:af:e9:49:02:35:d5:d6:fd:5c: 56:eb:0f:cc:30:9b:dd:d5:0e:6d:8d:a6:09:72:2b: 15:20:63:1a:02:b9:89:87:b8:aa:a7:69:aa:06:ac: 54:d7:e4:57:99:95:87:e3:04:fd:01:3f:6d:4e:03: c6:e0:79:86:bd:6e:6b:2e:a2:5c:70:fe:38:51:d3: 23:b3:b3:2a:96:11:73:bb:52:54:6d:c1:50:e0:fc: eb:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:4C:86:60:45:5D:33:93:61:C1:53:61:F5:12:4A:E1:FD:3F:64:03 X509v3 Authority Key Identifier: keyid:28:B0:FF:79:98:CA:88:54:CE:7C:47:5A:97:2E:D1:D5:2A:5C:60:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:f9:2c:ec:e6:fe:23:ab:24:09:2a:ef:b2:92:9b:7a:12:5b: 70:4d:ab:2b:7d:aa:89:19:00:15:b2:7a:e6:f0:e9:ff:2d:fb: 7e:51:cd:67:ea:19:ed:f8:04:db:17:ea:27:19:d3:15:8f:f8: b7:e0:ee:4f:43:2e:9d:e7:24:33:3f:c3:04:02:7a:53:b2:fa: 0b:53:c3:fe:e4:08:1c:4b:9f:d3:9a:6e:ec:0d:6f:db:64:3d: a1:5e:cf:74:fe:b7:de:47:17:0b:44:8c:ff:ef:3a:93:4f:39: d3:fd:63:e5:59:24:7b:a0:6e:c0:95:e2:21:a2:fd:6e:e7:97: e3:4e:e8:1e:b6:a0:02:f2:a6:1b:33:ce:58:ca:ac:31:1a:20: 61:f7:56:ed:19:8b:47:d5:ec:07:3a:75:b5:7e:08:41:dc:dc: a2:f7:3c:c6:c6:67:0d:ef:7c:8e:56:a3:75:23:73:9f:d3:4a: bd:7c:07:8a:bd:50:85:ee:97:2d:29:2c:16:35:4c:91:c9:5c: 38:ff:91:f1:ec:62:22:2d:3b:90:80:2d:74:61:e3:8d:40:ff: d9:45:f6:26:a5:ed:f0:b8:d5:9b:df:78:84:1f:c0:e2:4f:a4: 13:85:2d:e9:75:fc:d8:3c:74:45:e0:1e:1d:b7:67:c0:9f:ff: 53:28:5f:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzUKtP71bADE7tmtgAwoBPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4YjBmZjc5OThjYTg4NTRjZTdjNDc1YTk3MmVkMWQ1MmE1 YzYwY2QwHhcNMjYwMTI1MDQwMTQ4WhcNMjYwMTI2MDQwMTQ4WjAzMTEwLwYDVQQD EygwZDRjODY2MDQ1NWQzMzkzNjFjMTUzNjFmNTEyNGFlMWZkM2Y2NDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofeVlinw6O6JUG25QXaMA207NGqw IoiaNvTY6YINe+H+NEXo4dDqUuioIVufPQTNJUsZY9kBFIlIyxUyNYa5RTr2Z+rj WT9ZxwS4rcWu/ZXoLmSpdVzMXUcBQ2F3/743zdy8KjY3J1HF3aeiLUyj1Wa889U9 QWCRsAVreTmCYgVEjbD64eZgJyYC81kpIF5YeK0p33TCFoT7ymS5xSyHxEU0vo0v joSnFIev6UkCNdXW/VxW6w/MMJvd1Q5tjaYJcisVIGMaArmJh7iqp2mqBqxU1+RX mZWH4wT9AT9tTgPG4HmGvW5rLqJccP44UdMjs7MqlhFzu1JUbcFQ4PzrjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA1MhmBFXTOTYcFTYfUSSuH9P2QDMB8GA1UdIwQY MBaAFCiw/3mYyohUznxHWpcu0dUqXGDNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0xEX2VaaktpRlRPZkVkYWx5N1IxU3BjWU0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9hMGQ2NzQtODdiNi00MzE4LWJlZDIt MjY3NTQ3ZWExZTM1LzEvS0xEX2VaaktpRlRPZkVkYWx5N1IxU3BjWU0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9hMGQ2NzQtODdiNi00MzE4LWJlZDItMjY3NTQ3ZWExZTM1 LzEvS0xEX2VaaktpRlRPZkVkYWx5N1IxU3BjWU0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV/ks7Ob+ I6skCSrvspKbehJbcE2rK32qiRkAFbJ65vDp/y37flHNZ+oZ7fgE2xfqJxnTFY/4 t+DuT0MuneckMz/DBAJ6U7L6C1PD/uQIHEuf05pu7A1v22Q9oV7PdP633kcXC0SM /+86k0850/1j5Vkke6BuwJXiIaL9bueX407oHragAvKmGzPOWMqsMRogYfdW7RmL R9XsBzp1tX4IQdzcovc8xsZnDe98jlajdSNzn9NKvXwHir1Qhe6XLSksFjVMkclc OP+R8exiIi07kIAtdGHjjUD/2UX2JqXt8LjVm994hB/A4k+kE4Ut6XX82Dx0ReAe HbdnwJ//UyhfaA== -----END CERTIFICATE-----Generated at Sun Jan 25 11:46:33 2026 by rpki-client