This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft File: kY9WbI_5USpXSMwUifCTXCXYxKs.mft (raw, json) Hash identifier: L5FNBU7yQMZGJk8iBm+hARnn0TT9tNXk59LOINc1mug= Subject key identifier: 62:DB:94:18:7C:B8:60:F4:51:BA:7F:A0:5C:3F:9B:54:37:44:EA:3A Authority key identifier: 91:8F:56:6C:8F:F9:51:2A:57:48:CC:14:89:F0:93:5C:25:D8:C4:AB Certificate issuer: /CN=918f566c8ff9512a5748cc1489f0935c25d8c4ab Certificate serial: 019BF72CFCB0F405FD45F2ACC9411A24A419 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kY9WbI_5USpXSMwUifCTXCXYxKs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft Manifest number: 0278 Signing time: Sun 25 Jan 2026 22:01:18 +0000 Manifest this update: Sun 25 Jan 2026 22:01:18 +0000 Manifest next update: Mon 26 Jan 2026 22:01:18 +0000 Files and hashes: 1: 2gUkVkvBn7Q1vmsW6vZYesIru3E.roa (hash: 3mugJDdnEmraVaKho4WrwncKKVb68YhcTwc6RXDfj/k=) 2: kY9WbI_5USpXSMwUifCTXCXYxKs.crl (hash: NjytLqbyr68851ioJGiQnC/ZGe629Rwsvmw2cHlmHo8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.crl rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft rsync://rpki.ripe.net/repository/DEFAULT/kY9WbI_5USpXSMwUifCTXCXYxKs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:fc:b0:f4:05:fd:45:f2:ac:c9:41:1a:24:a4:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=918f566c8ff9512a5748cc1489f0935c25d8c4ab Validity Not Before: Jan 25 22:01:18 2026 GMT Not After : Jan 26 22:01:18 2026 GMT Subject: CN=62db94187cb860f451ba7fa05c3f9b543744ea3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7c:6a:35:54:4e:7d:e2:fd:6a:7b:a4:e1:0c: 2e:cf:2c:83:75:56:0a:81:38:96:50:46:1d:5a:ff: e3:50:b0:d5:08:a6:84:3a:46:38:1b:a8:90:dc:22: d7:2c:3b:43:6f:33:1c:fb:db:00:2d:b9:de:cc:1f: da:e8:57:7e:d9:76:36:ea:4e:05:ac:19:87:f5:60: 0e:d1:9c:05:89:b7:b0:4b:8b:6e:78:94:d4:1c:c2: 68:26:8f:72:d0:ba:11:ae:06:1a:4c:ef:41:88:28: b2:a1:f2:4b:43:3f:9a:f2:6c:6a:3e:fe:8b:26:88: 33:37:60:ca:f7:f2:b1:c6:9b:0a:3b:81:15:4e:56: 75:3d:76:de:b1:23:57:c5:21:93:d1:34:fc:dd:32: a9:f3:c5:ec:59:7f:04:cd:b7:e9:a7:30:37:d0:a5: e5:bd:c2:c2:69:31:04:87:f3:fa:db:87:76:03:7e: 37:fc:72:02:7e:c6:24:52:c3:da:1b:bf:ad:67:7b: 56:d1:3e:b5:87:02:a6:9e:8c:1b:22:7f:19:60:ee: af:0a:f8:1c:4b:e5:90:c7:4f:e8:95:98:14:38:cc: 16:ba:d0:79:fa:a0:c7:1e:ed:5b:66:94:b6:61:52: 27:3f:fe:99:32:4f:94:e4:9f:c6:d7:34:89:c3:15: 30:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:DB:94:18:7C:B8:60:F4:51:BA:7F:A0:5C:3F:9B:54:37:44:EA:3A X509v3 Authority Key Identifier: keyid:91:8F:56:6C:8F:F9:51:2A:57:48:CC:14:89:F0:93:5C:25:D8:C4:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kY9WbI_5USpXSMwUifCTXCXYxKs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:c8:c9:5c:ad:37:40:80:20:cb:27:dc:c9:f8:a3:28:f5:74: d6:68:3a:9c:72:17:3c:09:e1:5f:73:30:3f:37:00:d4:a6:77: 66:59:32:7d:23:28:d8:50:d5:18:36:59:1b:23:f6:3e:14:c0: 1d:94:2a:4f:e1:00:4a:fd:e5:d6:88:56:7b:80:0d:fe:c5:54: 69:f2:bb:04:93:77:33:f6:98:1a:7b:72:66:04:39:ef:e1:d9: d5:0f:84:72:59:f8:04:1b:c4:36:45:03:7a:7d:d0:5a:77:28: 7c:c3:fd:23:36:95:95:c1:f2:60:c4:10:05:ce:5f:46:c0:ca: 2f:ab:a5:9c:44:47:8a:9c:07:bf:22:2c:48:6b:be:82:61:d0: 50:b3:2d:ad:25:e0:21:f8:48:8b:46:13:64:e2:59:95:54:c5: f5:00:36:6e:88:9b:80:65:bd:68:48:5d:bb:7d:a0:05:80:59: be:66:00:5d:a0:8e:7e:f8:ff:6c:e0:9a:57:b3:dd:18:51:82: 0f:af:72:dd:f1:04:e4:c7:98:1d:3e:33:b4:76:5e:1b:5c:b5: 0a:60:68:c4:7b:a4:d7:36:f6:39:26:ea:59:ae:86:b1:8c:e4: 01:e5:48:55:30:3f:41:c9:bb:41:a7:56:5b:65:f2:e3:3e:1f: 20:91:47:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LPyw9AX9RfKsyUEaJKQZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxOGY1NjZjOGZmOTUxMmE1NzQ4Y2MxNDg5ZjA5MzVjMjVk OGM0YWIwHhcNMjYwMTI1MjIwMTE4WhcNMjYwMTI2MjIwMTE4WjAzMTEwLwYDVQQD Eyg2MmRiOTQxODdjYjg2MGY0NTFiYTdmYTA1YzNmOWI1NDM3NDRlYTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXxqNVROfeL9anuk4QwuzyyDdVYK gTiWUEYdWv/jULDVCKaEOkY4G6iQ3CLXLDtDbzMc+9sALbnezB/a6Fd+2XY26k4F rBmH9WAO0ZwFibewS4tueJTUHMJoJo9y0LoRrgYaTO9BiCiyofJLQz+a8mxqPv6L JogzN2DK9/KxxpsKO4EVTlZ1PXbesSNXxSGT0TT83TKp88XsWX8EzbfppzA30KXl vcLCaTEEh/P624d2A343/HICfsYkUsPaG7+tZ3tW0T61hwKmnowbIn8ZYO6vCvgc S+WQx0/olZgUOMwWutB5+qDHHu1bZpS2YVInP/6ZMk+U5J/G1zSJwxUwNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGLblBh8uGD0Ubp/oFw/m1Q3ROo6MB8GA1UdIwQY MBaAFJGPVmyP+VEqV0jMFInwk1wl2MSrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1k5V2JJXzVVU3BYU013VWlmQ1RYQ1hZeEtzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81YTU4Y2MtZjlmZS00OWU2LWJiOGEt YTVmMTFiYzM1ZjMxLzEva1k5V2JJXzVVU3BYU013VWlmQ1RYQ1hZeEtzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81YTU4Y2MtZjlmZS00OWU2LWJiOGEtYTVmMTFiYzM1ZjMx LzEva1k5V2JJXzVVU3BYU013VWlmQ1RYQ1hZeEtzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS8jJXK03 QIAgyyfcyfijKPV01mg6nHIXPAnhX3MwPzcA1KZ3ZlkyfSMo2FDVGDZZGyP2PhTA HZQqT+EASv3l1ohWe4AN/sVUafK7BJN3M/aYGntyZgQ57+HZ1Q+Ecln4BBvENkUD en3QWncofMP9IzaVlcHyYMQQBc5fRsDKL6ulnERHipwHvyIsSGu+gmHQULMtrSXg IfhIi0YTZOJZlVTF9QA2boibgGW9aEhdu32gBYBZvmYAXaCOfvj/bOCaV7PdGFGC D69y3fEE5MeYHT4ztHZeG1y1CmBoxHuk1zb2OSbqWa6GsYzkAeVIVTA/Qcm7QadW W2Xy4z4fIJFHkA== -----END CERTIFICATE-----Generated at Mon Jan 26 03:59:55 2026 by rpki-client