This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft File: K2nm32CJ1NhhNocX6mbnthbHkMk.mft (raw, json) Hash identifier: cEKpHVe0+/4427D2fp9vD2HMOi68Y366I3iZd5pMtR4= Subject key identifier: E7:5C:65:DB:36:40:E3:41:74:14:F2:98:C4:35:04:8C:74:5D:2B:B2 Authority key identifier: 2B:69:E6:DF:60:89:D4:D8:61:36:87:17:EA:66:E7:B6:16:C7:90:C9 Certificate issuer: /CN=2b69e6df6089d4d861368717ea66e7b616c790c9 Certificate serial: 019BF763709330705F4993E9FF404791D578 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft Manifest number: 03B9 Signing time: Sun 25 Jan 2026 23:00:47 +0000 Manifest this update: Sun 25 Jan 2026 23:00:47 +0000 Manifest next update: Mon 26 Jan 2026 23:00:47 +0000 Files and hashes: 1: K2nm32CJ1NhhNocX6mbnthbHkMk.crl (hash: Fc3dGeTbDLwKMc4uaaW8hmNRKElnxFhHEdCpjRg50Dc=) 2: OpkXHZIicfHCPvft3PttWRGy66g.roa (hash: EVSEcIRV/V3W58OZOul/52nTZj0iMwsLv/i2q2ZyFTQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:70:93:30:70:5f:49:93:e9:ff:40:47:91:d5:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b69e6df6089d4d861368717ea66e7b616c790c9 Validity Not Before: Jan 25 23:00:47 2026 GMT Not After : Jan 26 23:00:47 2026 GMT Subject: CN=e75c65db3640e3417414f298c435048c745d2bb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e8:ac:1b:c2:25:18:c6:d6:fe:9f:9d:af:41: ab:9c:b3:32:b8:e3:37:27:ac:86:61:08:9d:85:68: 8c:ec:8c:d4:b4:f8:3a:3b:c1:46:00:0e:75:f5:05: 9d:6d:29:5c:84:a4:3b:17:96:31:99:ef:a8:ec:4a: ec:3d:9d:64:bf:ac:db:36:c3:58:7f:99:18:fd:30: ec:a9:e6:03:10:98:ee:b4:d0:b5:88:75:79:e0:f7: 5e:45:57:2b:bf:d3:31:30:be:30:0a:cc:5b:18:3d: 8e:81:b4:42:e9:ff:be:e4:8a:44:8b:ac:13:c7:81: c5:29:95:07:77:d9:da:d9:be:2b:01:17:88:63:d8: ac:47:4b:e5:92:81:28:fc:c3:4c:61:90:c8:4b:30: 4c:ce:c7:6e:ca:1b:21:44:64:c6:dd:5f:61:a8:2a: a1:f6:0e:c6:dd:4a:e7:57:c0:3a:a8:17:52:3a:1d: 22:d4:c7:3b:8a:2b:9a:26:11:96:b3:bb:e5:e1:0b: 70:79:db:79:ca:33:d7:95:9c:96:33:ba:15:c8:2c: 29:5a:32:02:64:47:a3:80:c4:67:ee:23:50:12:bc: b3:fc:1b:6f:a3:40:0f:d1:f1:05:6a:94:b5:2c:a1: 61:24:09:e9:13:84:bb:dd:66:f3:a7:e2:a8:9e:d8: ca:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:5C:65:DB:36:40:E3:41:74:14:F2:98:C4:35:04:8C:74:5D:2B:B2 X509v3 Authority Key Identifier: keyid:2B:69:E6:DF:60:89:D4:D8:61:36:87:17:EA:66:E7:B6:16:C7:90:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:3f:49:a9:a6:5d:73:7c:93:d1:98:0f:51:e6:cf:ed:a9:81: f6:e7:be:ca:10:98:ce:b9:9c:6f:cf:20:fd:b8:fd:cb:48:8d: 0e:e3:49:17:d9:a1:3f:89:59:a6:df:b7:49:12:54:96:f6:87: 08:1f:5b:ca:db:4b:91:e6:2b:be:3a:41:5f:ba:4a:86:3f:cb: 47:53:06:32:7a:64:65:11:ac:60:3c:7e:55:45:3f:0d:f4:a4: d9:35:2a:e9:25:a8:71:1b:b4:1c:06:20:48:d8:55:2b:28:a6: ec:df:ad:07:10:24:ad:3e:05:16:93:83:cd:5a:0b:df:79:e2: 24:b3:12:44:27:31:ee:4e:ba:30:3e:47:12:fa:d3:b6:18:6d: 40:14:87:38:52:ae:7f:12:0b:63:1c:b3:12:d0:b3:c1:72:d7: 42:00:23:cd:65:06:af:79:ba:d1:df:f8:20:56:7f:76:91:49: 4e:c9:92:58:c0:31:f1:02:c8:ca:1a:1d:16:8c:78:c1:79:8d: 59:19:8c:10:d6:6d:14:ad:b7:97:fb:c5:67:e3:27:08:cc:4a: 4d:e7:d9:72:cf:96:de:78:90:79:e6:17:d8:96:82:5b:50:c4: 95:e8:19:bd:a5:5c:00:46:be:2d:74:c3:4a:db:2c:95:94:c4: 85:99:3b:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y3CTMHBfSZPp/0BHkdV4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNjllNmRmNjA4OWQ0ZDg2MTM2ODcxN2VhNjZlN2I2MTZj NzkwYzkwHhcNMjYwMTI1MjMwMDQ3WhcNMjYwMTI2MjMwMDQ3WjAzMTEwLwYDVQQD EyhlNzVjNjVkYjM2NDBlMzQxNzQxNGYyOThjNDM1MDQ4Yzc0NWQyYmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuisG8IlGMbW/p+dr0GrnLMyuOM3 J6yGYQidhWiM7IzUtPg6O8FGAA519QWdbSlchKQ7F5Yxme+o7ErsPZ1kv6zbNsNY f5kY/TDsqeYDEJjutNC1iHV54PdeRVcrv9MxML4wCsxbGD2OgbRC6f++5IpEi6wT x4HFKZUHd9na2b4rAReIY9isR0vlkoEo/MNMYZDISzBMzsduyhshRGTG3V9hqCqh 9g7G3UrnV8A6qBdSOh0i1Mc7iiuaJhGWs7vl4Qtwedt5yjPXlZyWM7oVyCwpWjIC ZEejgMRn7iNQEryz/Btvo0AP0fEFapS1LKFhJAnpE4S73Wbzp+KontjKkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOdcZds2QONBdBTymMQ1BIx0XSuyMB8GA1UdIwQY MBaAFCtp5t9gidTYYTaHF+pm57YWx5DJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzJubTMyQ0oxTmhoTm9jWDZtYm50aGJIa01rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9jOGRhZGMtOGUyNy00YmJlLWFlZTUt MDViM2U0MzFjMWVhLzEvSzJubTMyQ0oxTmhoTm9jWDZtYm50aGJIa01rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9jOGRhZGMtOGUyNy00YmJlLWFlZTUtMDViM2U0MzFjMWVh LzEvSzJubTMyQ0oxTmhoTm9jWDZtYm50aGJIa01rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAID9JqaZd c3yT0ZgPUebP7amB9ue+yhCYzrmcb88g/bj9y0iNDuNJF9mhP4lZpt+3SRJUlvaH CB9byttLkeYrvjpBX7pKhj/LR1MGMnpkZRGsYDx+VUU/DfSk2TUq6SWocRu0HAYg SNhVKyim7N+tBxAkrT4FFpODzVoL33niJLMSRCcx7k66MD5HEvrTthhtQBSHOFKu fxILYxyzEtCzwXLXQgAjzWUGr3m60d/4IFZ/dpFJTsmSWMAx8QLIyhodFox4wXmN WRmMENZtFK23l/vFZ+MnCMxKTefZcs+W3niQeeYX2JaCW1DElegZvaVcAEa+LXTD StsslZTEhZk76A== -----END CERTIFICATE-----Generated at Mon Jan 26 04:54:11 2026 by rpki-client