This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft File: klPiFMjlpvQTRb5oL2gmVbGr6ls.mft (raw, json) Hash identifier: WnboNwgtMn+SiI5XPgAeUBN6Yrzaci5LEQP3R39e/Dw= Subject key identifier: EA:FB:1D:79:AA:02:D1:08:5E:97:7D:A6:09:9F:46:3E:8B:59:8E:DE Authority key identifier: 92:53:E2:14:C8:E5:A6:F4:13:45:BE:68:2F:68:26:55:B1:AB:EA:5B Certificate issuer: /CN=9253e214c8e5a6f41345be682f682655b1abea5b Certificate serial: 019BF65167ED481680333DB7429C497D88D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klPiFMjlpvQTRb5oL2gmVbGr6ls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft Manifest number: 07A4 Signing time: Sun 25 Jan 2026 18:01:28 +0000 Manifest this update: Sun 25 Jan 2026 18:01:28 +0000 Manifest next update: Mon 26 Jan 2026 18:01:28 +0000 Files and hashes: 1: klPiFMjlpvQTRb5oL2gmVbGr6ls.crl (hash: YH1WGF9RSu1iqXS/q+yB0jU47j+9lDPJAXgtZxlPVwY=) 2: unNG_YoDGbRd0T_CTHVKD6yqRJU.roa (hash: ragskd0QOxK4kqVbi19DaJNXhncLtJyYx2SrNnDP25U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.crl rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft rsync://rpki.ripe.net/repository/DEFAULT/klPiFMjlpvQTRb5oL2gmVbGr6ls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:67:ed:48:16:80:33:3d:b7:42:9c:49:7d:88:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9253e214c8e5a6f41345be682f682655b1abea5b Validity Not Before: Jan 25 18:01:28 2026 GMT Not After : Jan 26 18:01:28 2026 GMT Subject: CN=eafb1d79aa02d1085e977da6099f463e8b598ede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:df:11:72:70:ca:e3:26:f3:1c:2e:5c:1b:91: b2:e4:cd:88:16:1e:41:de:c7:4a:2d:ec:7a:c5:41: e4:06:cd:28:24:7b:1d:36:da:36:d1:c3:2a:e8:9c: fa:02:94:a8:fe:ec:2e:4b:93:41:92:7f:36:9c:7f: bb:74:a1:81:b3:fd:08:e4:df:0e:f6:53:6a:1e:29: 17:53:6b:e8:c8:dd:00:f9:4a:f7:c5:e2:40:df:3a: b5:39:04:1e:61:27:3a:e2:ad:16:e8:80:ef:d8:cf: b1:43:73:31:c4:c3:5e:56:b1:4a:02:f5:b5:ac:61: a4:bc:32:f1:88:a3:8a:b8:13:d6:86:e6:0d:de:1d: f1:7b:80:2a:52:d7:92:19:18:10:af:4a:45:b0:a3: 45:39:7d:c9:90:f9:b1:a0:bb:5f:35:de:14:6b:48: 90:38:9c:9d:bc:6f:bc:0a:aa:40:d9:be:1b:d6:cb: db:2b:32:3d:06:59:3c:fe:4e:41:11:c6:0a:38:34: 7c:10:6c:01:71:64:47:15:4e:b9:ad:03:f6:77:e6: 4c:9d:cb:fa:1a:ad:fb:75:0c:64:a1:c9:62:da:a1: af:40:7f:f1:21:c7:43:b1:dc:8b:ae:36:a0:c9:e3: 10:44:ab:2b:93:f4:c4:73:5f:ac:ee:ac:41:69:6f: dd:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:FB:1D:79:AA:02:D1:08:5E:97:7D:A6:09:9F:46:3E:8B:59:8E:DE X509v3 Authority Key Identifier: keyid:92:53:E2:14:C8:E5:A6:F4:13:45:BE:68:2F:68:26:55:B1:AB:EA:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klPiFMjlpvQTRb5oL2gmVbGr6ls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:9b:ec:3d:25:0b:8e:18:33:dc:59:d9:cb:06:8f:31:04:5a: 73:c6:74:f1:ea:5d:6a:05:07:59:7e:d7:2c:84:81:b9:f2:9f: 4a:23:39:ce:ad:07:29:f2:f1:f0:43:d7:08:75:c9:91:38:18: 7d:73:8e:24:f7:a5:23:57:4d:12:22:d4:00:cd:e7:12:a2:29: e9:c1:91:45:08:78:06:be:07:7d:63:a9:e4:8c:f5:e9:45:1b: 18:5a:3c:b8:63:2a:04:52:90:e3:20:ab:93:6f:08:7b:2f:87: a9:70:49:47:4b:c3:20:9e:f7:25:eb:54:7c:6e:33:31:6a:42: 5f:39:b6:6b:9e:bb:c4:cb:71:35:94:bb:24:60:6b:d5:a7:a7: 94:a3:a2:e9:c3:50:68:eb:30:97:c5:0c:5c:7f:8e:ea:40:78: c7:9a:5c:8b:f0:4f:9e:75:aa:72:90:30:c5:08:00:4e:bc:40: 45:c8:f4:71:46:93:a6:7a:00:82:e7:3d:df:36:77:67:87:dc: 94:3c:ca:b8:ab:ff:19:96:2a:de:81:57:f8:a0:e6:80:97:a2: 9e:73:75:9a:d9:c4:41:a6:ad:c1:76:0c:1a:a2:8d:9f:68:38: 52:87:57:e7:69:c0:3a:c8:df:6b:7e:2b:47:cb:f8:20:08:20: 86:b5:d4:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UWftSBaAMz23QpxJfYjWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNTNlMjE0YzhlNWE2ZjQxMzQ1YmU2ODJmNjgyNjU1YjFh YmVhNWIwHhcNMjYwMTI1MTgwMTI4WhcNMjYwMTI2MTgwMTI4WjAzMTEwLwYDVQQD EyhlYWZiMWQ3OWFhMDJkMTA4NWU5NzdkYTYwOTlmNDYzZThiNTk4ZWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA098RcnDK4ybzHC5cG5Gy5M2IFh5B 3sdKLex6xUHkBs0oJHsdNto20cMq6Jz6ApSo/uwuS5NBkn82nH+7dKGBs/0I5N8O 9lNqHikXU2voyN0A+Ur3xeJA3zq1OQQeYSc64q0W6IDv2M+xQ3MxxMNeVrFKAvW1 rGGkvDLxiKOKuBPWhuYN3h3xe4AqUteSGRgQr0pFsKNFOX3JkPmxoLtfNd4Ua0iQ OJydvG+8CqpA2b4b1svbKzI9Blk8/k5BEcYKODR8EGwBcWRHFU65rQP2d+ZMncv6 Gq37dQxkocli2qGvQH/xIcdDsdyLrjagyeMQRKsrk/TEc1+s7qxBaW/dAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOr7HXmqAtEIXpd9pgmfRj6LWY7eMB8GA1UdIwQY MBaAFJJT4hTI5ab0E0W+aC9oJlWxq+pbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2xQaUZNamxwdlFUUmI1b0wyZ21WYkdyNmxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My81MWE0YTMtNzMwNC00NjEzLThhODAt Y2EzYjFjYWM2OWM3LzEva2xQaUZNamxwdlFUUmI1b0wyZ21WYkdyNmxzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My81MWE0YTMtNzMwNC00NjEzLThhODAtY2EzYjFjYWM2OWM3 LzEva2xQaUZNamxwdlFUUmI1b0wyZ21WYkdyNmxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApJvsPSUL jhgz3FnZywaPMQRac8Z08epdagUHWX7XLISBufKfSiM5zq0HKfLx8EPXCHXJkTgY fXOOJPelI1dNEiLUAM3nEqIp6cGRRQh4Br4HfWOp5Iz16UUbGFo8uGMqBFKQ4yCr k28Iey+HqXBJR0vDIJ73JetUfG4zMWpCXzm2a567xMtxNZS7JGBr1aenlKOi6cNQ aOswl8UMXH+O6kB4x5pci/BPnnWqcpAwxQgATrxARcj0cUaTpnoAguc93zZ3Z4fc lDzKuKv/GZYq3oFX+KDmgJeinnN1mtnEQaatwXYMGqKNn2g4UodX52nAOsjfa34r R8v4IAgghrXUnA== -----END CERTIFICATE-----Generated at Mon Jan 26 04:24:44 2026 by rpki-client