This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft File: kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft (raw, json) Hash identifier: Qf3uHAhdTY2ALXVVuJjBj7o9DbFPiJtXlsr5ShK+e0w= Subject key identifier: DF:8B:DB:D5:75:29:90:B2:22:B7:9F:4C:E1:17:70:B0:06:02:64:88 Authority key identifier: 90:A0:27:05:00:65:32:EF:33:A0:06:4F:87:5A:10:09:23:50:9F:D5 Certificate issuer: /CN=90a02705006532ef33a0064f875a100923509fd5 Certificate serial: 019BF5AC176462688D8F62E837E3363936C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKAnBQBlMu8zoAZPh1oQCSNQn9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft Manifest number: 11BB Signing time: Sun 25 Jan 2026 15:00:54 +0000 Manifest this update: Sun 25 Jan 2026 15:00:54 +0000 Manifest next update: Mon 26 Jan 2026 15:00:54 +0000 Files and hashes: 1: fEyQPPeKri3xxIwF-GK2DK9OO9c.roa (hash: 7YArpvgzsRn7tFDaYlxf0t+umiWwVKrDBhvgYPCrlAc=) 2: kKAnBQBlMu8zoAZPh1oQCSNQn9U.crl (hash: iW+rwRfP7G4/mr9++735Ikv8vjFTOYVoRfzgiy+3a4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.crl rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft rsync://rpki.ripe.net/repository/DEFAULT/kKAnBQBlMu8zoAZPh1oQCSNQn9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:17:64:62:68:8d:8f:62:e8:37:e3:36:39:36:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90a02705006532ef33a0064f875a100923509fd5 Validity Not Before: Jan 25 15:00:54 2026 GMT Not After : Jan 26 15:00:54 2026 GMT Subject: CN=df8bdbd5752990b222b79f4ce11770b006026488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:61:90:ff:3a:d3:f6:a3:b0:b1:de:3e:26:0a: 85:ef:76:d8:88:45:9c:be:f1:74:59:78:40:46:e7: 70:5e:26:3a:54:f2:d4:6c:4a:f0:56:33:32:79:83: 41:a5:c7:32:b1:8e:80:52:ab:bd:1e:fb:e5:2f:ea: 85:d5:ef:cd:0e:1f:66:61:49:c2:6b:02:14:a3:2c: 08:21:b5:d5:2f:da:18:40:dd:ba:24:65:1a:e4:ef: 7f:11:6d:c4:54:7f:f4:ac:72:bd:0c:da:c3:e8:23: 17:5c:20:36:a7:d6:4d:e4:c7:c0:7e:fa:2e:8a:45: f3:2c:fb:b0:42:32:cc:76:41:8d:4d:10:a7:75:19: eb:61:a8:fc:e9:21:f7:a6:ea:80:04:d3:68:41:05: ce:46:6f:a2:1e:e5:65:2f:5c:3b:78:83:20:8f:67: 82:97:68:58:31:8b:60:e5:ed:4e:b2:b3:ec:67:21: 27:90:a0:d3:f8:46:8c:15:70:1c:18:e6:76:c3:35: 6f:a1:34:eb:06:23:d2:d9:9d:b7:d9:7b:ca:49:cd: a2:0f:b2:7e:ff:39:a8:e6:c0:d9:a9:f9:b8:fc:de: d4:84:65:93:9b:d8:07:bb:8b:03:6a:c3:d2:84:bd: 2d:27:0f:c3:6c:55:ba:54:cf:7f:bf:36:f9:be:5d: 1b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:8B:DB:D5:75:29:90:B2:22:B7:9F:4C:E1:17:70:B0:06:02:64:88 X509v3 Authority Key Identifier: keyid:90:A0:27:05:00:65:32:EF:33:A0:06:4F:87:5A:10:09:23:50:9F:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKAnBQBlMu8zoAZPh1oQCSNQn9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:0f:8a:a5:be:c2:29:61:ea:df:cd:5e:1f:57:d9:46:93:34: cd:80:f0:9e:e1:b7:56:c6:ca:3a:33:37:00:ad:7b:65:66:58: 26:a2:7b:1e:3f:39:da:d0:1e:3e:4d:c5:f0:d9:67:15:2d:f7: 12:20:f7:6d:73:3e:e7:52:a8:38:3f:75:89:1b:14:04:a6:a1: d0:a6:ae:fd:8a:fa:65:d6:a7:e9:a2:02:6b:de:a2:d3:bc:23: e7:e5:65:0c:c7:3b:57:94:ef:33:1b:1e:2a:9a:5f:84:f2:50: b9:37:69:41:a7:10:a1:02:ab:1f:63:f2:96:b0:c1:9c:04:8f: e2:69:b0:a2:d4:f8:fb:b8:9d:0f:03:a1:30:43:9d:7f:b5:c7: 16:d2:11:0f:d1:3e:a9:97:b4:ec:ff:4d:b1:47:01:17:19:a1: 69:a9:12:04:fd:ee:3d:1c:3a:9e:3e:b5:af:75:bf:32:13:d4: 28:c5:28:fb:73:2c:fc:ed:95:19:4f:56:69:07:81:4a:89:bb: e5:aa:67:ec:c1:c5:08:ae:ca:ed:97:fc:6e:e2:82:1d:b3:5a: d1:61:db:74:28:17:ae:4d:66:28:f9:e5:a4:fb:72:71:e6:6d: 27:7a:cd:30:15:67:82:7d:aa:6f:7b:b6:e8:70:29:18:ca:91: 26:fd:8d:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rBdkYmiNj2LoN+M2OTbGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwYTAyNzA1MDA2NTMyZWYzM2EwMDY0Zjg3NWExMDA5MjM1 MDlmZDUwHhcNMjYwMTI1MTUwMDU0WhcNMjYwMTI2MTUwMDU0WjAzMTEwLwYDVQQD EyhkZjhiZGJkNTc1Mjk5MGIyMjJiNzlmNGNlMTE3NzBiMDA2MDI2NDg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWGQ/zrT9qOwsd4+JgqF73bYiEWc vvF0WXhARudwXiY6VPLUbErwVjMyeYNBpccysY6AUqu9HvvlL+qF1e/NDh9mYUnC awIUoywIIbXVL9oYQN26JGUa5O9/EW3EVH/0rHK9DNrD6CMXXCA2p9ZN5MfAfvou ikXzLPuwQjLMdkGNTRCndRnrYaj86SH3puqABNNoQQXORm+iHuVlL1w7eIMgj2eC l2hYMYtg5e1OsrPsZyEnkKDT+EaMFXAcGOZ2wzVvoTTrBiPS2Z232XvKSc2iD7J+ /zmo5sDZqfm4/N7UhGWTm9gHu4sDasPShL0tJw/DbFW6VM9/vzb5vl0bzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN+L29V1KZCyIrefTOEXcLAGAmSIMB8GA1UdIwQY MBaAFJCgJwUAZTLvM6AGT4daEAkjUJ/VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0tBbkJRQmxNdTh6b0FaUGgxb1FDU05RbjlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9kOWY0ODItMTM1ZS00N2Y2LTkzMTct Njc4NWFkYTUyN2MxLzEva0tBbkJRQmxNdTh6b0FaUGgxb1FDU05RbjlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9kOWY0ODItMTM1ZS00N2Y2LTkzMTctNjc4NWFkYTUyN2Mx LzEva0tBbkJRQmxNdTh6b0FaUGgxb1FDU05RbjlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJg+Kpb7C KWHq381eH1fZRpM0zYDwnuG3VsbKOjM3AK17ZWZYJqJ7Hj852tAePk3F8NlnFS33 EiD3bXM+51KoOD91iRsUBKah0Kau/Yr6Zdan6aICa96i07wj5+VlDMc7V5TvMxse KppfhPJQuTdpQacQoQKrH2PylrDBnASP4mmwotT4+7idDwOhMEOdf7XHFtIRD9E+ qZe07P9NsUcBFxmhaakSBP3uPRw6nj61r3W/MhPUKMUo+3Ms/O2VGU9WaQeBSom7 5apn7MHFCK7K7Zf8buKCHbNa0WHbdCgXrk1mKPnlpPtyceZtJ3rNMBVngn2qb3u2 6HApGMqRJv2NHQ== -----END CERTIFICATE-----Generated at Sun Jan 25 21:10:03 2026 by rpki-client