This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft File: K04tNMzuRXa1znYFoITmwIUiwig.mft (raw, json) Hash identifier: cCoNFi5DlO+pxacL5PQmpsGbCv9tyInTlYlr7vHCHog= Subject key identifier: 9D:61:5B:DC:CA:EE:AD:F1:99:74:96:BF:07:E1:AB:A8:F1:AE:10:10 Authority key identifier: 2B:4E:2D:34:CC:EE:45:76:B5:CE:76:05:A0:84:E6:C0:85:22:C2:28 Certificate issuer: /CN=2b4e2d34ccee4576b5ce7605a084e6c08522c228 Certificate serial: 019BFA64CF2A38B7FD6182DAA5E6E1068692 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft Manifest number: 17EF Signing time: Mon 26 Jan 2026 13:01:09 +0000 Manifest this update: Mon 26 Jan 2026 13:01:09 +0000 Manifest next update: Tue 27 Jan 2026 13:01:09 +0000 Files and hashes: 1: CjzHtNvvrNdiRI1Dxd8cleq0jTQ.roa (hash: KOlrkN8Kg94S2lCrg1rACPuzR81sIix9VIM8TWA2Q28=) 2: K04tNMzuRXa1znYFoITmwIUiwig.crl (hash: I4LS4gsJ+OPeKbCL5hVPxn8tCR11oesJbh1SZxQa2EU=) 3: _VixDRlDHcr6PrncvZUZ-GW6afw.roa (hash: XqMR9xWk1nvAk22Z7sQHJKRu3wfO9rwjwEWrKeLB+8c=) 4: oqIJeArD_rDRIaKFE5ZCwfVtbKM.roa (hash: QLySj4PfBawBaiRwkXPwmQcC7pjl5ceIYMcgCRUpvZQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:64:cf:2a:38:b7:fd:61:82:da:a5:e6:e1:06:86:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b4e2d34ccee4576b5ce7605a084e6c08522c228 Validity Not Before: Jan 26 13:01:09 2026 GMT Not After : Jan 27 13:01:09 2026 GMT Subject: CN=9d615bdccaeeadf1997496bf07e1aba8f1ae1010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:29:a7:6f:a7:fd:05:59:29:d1:1c:76:fa:43: fc:d3:68:f9:66:47:c0:6a:2e:77:d9:34:cb:a6:ed: d0:98:0f:99:af:3f:9d:9f:62:3f:59:7b:0c:0b:5e: ab:d8:b1:b3:76:94:19:b0:40:58:09:42:8f:ac:a7: 84:8a:e0:4d:27:ce:89:2d:ce:f1:97:f5:87:87:e9: 23:1e:e5:0a:23:e7:77:25:2d:2b:56:3b:7b:96:89: 4e:76:b9:de:5c:dc:25:ca:95:a6:a4:12:38:c5:f4: 24:d5:c6:46:80:66:57:41:a6:62:08:2d:b1:52:da: a8:62:7d:3e:2b:c5:02:c3:be:65:39:ac:ae:8c:cd: 43:0c:52:c4:4f:e0:54:ca:32:7f:9a:04:5f:21:77: 1f:21:1e:fa:dd:2e:b8:d9:d9:9f:68:71:dc:b5:23: 9e:0b:7d:3a:94:5f:30:0c:f4:7f:28:6e:5a:64:f9: 36:47:6e:3b:81:de:55:4b:1f:97:6a:b7:9c:a4:7e: ad:35:ee:74:06:f0:c2:49:f1:52:dc:5a:64:d5:4b: da:d0:9a:fc:66:98:b9:03:cd:35:d8:95:ba:18:04: 4c:4e:1d:46:d5:12:58:8f:d9:4e:9e:9c:e7:71:b4: eb:26:f9:5c:fa:9a:3e:f8:b1:ee:d5:53:6b:d6:e2: 6e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:61:5B:DC:CA:EE:AD:F1:99:74:96:BF:07:E1:AB:A8:F1:AE:10:10 X509v3 Authority Key Identifier: keyid:2B:4E:2D:34:CC:EE:45:76:B5:CE:76:05:A0:84:E6:C0:85:22:C2:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:86:30:10:f2:93:23:a4:a6:61:ef:21:e9:8a:07:48:d2:a9: a3:01:a4:89:66:9c:74:bc:bb:3b:48:b5:5a:ed:81:6d:38:9b: 20:74:98:50:f3:35:9b:b6:98:68:a1:a6:46:c0:9f:4f:cd:b0: 10:07:ea:b9:e3:02:b2:38:23:9d:40:ff:4a:7e:f3:9d:d1:be: 9b:91:b0:50:91:4a:db:13:ed:b0:85:6b:96:44:cc:20:83:8a: b6:51:e3:87:9b:07:f3:3c:48:02:5e:5b:26:32:61:b0:54:bd: ea:21:82:e2:7f:d1:f2:40:1b:14:60:99:7c:c5:3d:b0:8a:91: a0:d1:e5:8e:fa:f6:7d:38:41:8d:b4:b4:c7:21:6f:2b:cf:40: d4:bc:e6:65:2d:2e:c7:e2:b8:6d:f0:2b:9e:65:b1:72:51:ae: 6d:4f:88:1f:e3:b3:e6:96:57:9d:2f:3d:49:6b:ac:da:7b:6b: f2:75:c4:80:ec:20:bf:56:a4:9a:57:0d:12:27:42:c6:08:14: f9:87:68:58:d9:e0:d5:ea:4d:c1:c6:35:45:bb:95:70:7c:b0: 01:f8:32:03:d9:8f:08:9e:93:d0:c2:19:d5:85:3b:c7:82:61: 0b:31:31:46:2f:f2:57:27:84:80:2d:07:e7:cd:f2:8b:a5:ae: d5:c3:df:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6ZM8qOLf9YYLapebhBoaSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNGUyZDM0Y2NlZTQ1NzZiNWNlNzYwNWEwODRlNmMwODUy MmMyMjgwHhcNMjYwMTI2MTMwMTA5WhcNMjYwMTI3MTMwMTA5WjAzMTEwLwYDVQQD Eyg5ZDYxNWJkY2NhZWVhZGYxOTk3NDk2YmYwN2UxYWJhOGYxYWUxMDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCmnb6f9BVkp0Rx2+kP802j5ZkfA ai532TTLpu3QmA+Zrz+dn2I/WXsMC16r2LGzdpQZsEBYCUKPrKeEiuBNJ86JLc7x l/WHh+kjHuUKI+d3JS0rVjt7lolOdrneXNwlypWmpBI4xfQk1cZGgGZXQaZiCC2x UtqoYn0+K8UCw75lOayujM1DDFLET+BUyjJ/mgRfIXcfIR763S642dmfaHHctSOe C306lF8wDPR/KG5aZPk2R247gd5VSx+XarecpH6tNe50BvDCSfFS3Fpk1Uva0Jr8 Zpi5A8012JW6GARMTh1G1RJYj9lOnpzncbTrJvlc+po++LHu1VNr1uJu9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ1hW9zK7q3xmXSWvwfhq6jxrhAQMB8GA1UdIwQY MBaAFCtOLTTM7kV2tc52BaCE5sCFIsIoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzA0dE5NenVSWGExem5ZRm9JVG13SVVpd2lnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9kODk5Y2MtNTM1Ny00NzFhLWJjMWMt MDc3YmM4YmExZTVkLzEvSzA0dE5NenVSWGExem5ZRm9JVG13SVVpd2lnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9kODk5Y2MtNTM1Ny00NzFhLWJjMWMtMDc3YmM4YmExZTVk LzEvSzA0dE5NenVSWGExem5ZRm9JVG13SVVpd2lnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPoYwEPKT I6SmYe8h6YoHSNKpowGkiWacdLy7O0i1Wu2BbTibIHSYUPM1m7aYaKGmRsCfT82w EAfqueMCsjgjnUD/Sn7zndG+m5GwUJFK2xPtsIVrlkTMIIOKtlHjh5sH8zxIAl5b JjJhsFS96iGC4n/R8kAbFGCZfMU9sIqRoNHljvr2fThBjbS0xyFvK89A1LzmZS0u x+K4bfArnmWxclGubU+IH+Oz5pZXnS89SWus2ntr8nXEgOwgv1akmlcNEidCxggU +YdoWNng1epNwcY1RbuVcHywAfgyA9mPCJ6T0MIZ1YU7x4JhCzExRi/yVyeEgC0H 583yi6Wu1cPfag== -----END CERTIFICATE-----Generated at Mon Jan 26 18:58:25 2026 by rpki-client