This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft File: KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft (raw, json) Hash identifier: 5f1O1EVPTC+nXJBBQ33+fgqFd83EU2KkV0tsdMrSj10= Subject key identifier: 72:85:C1:38:19:1B:4A:F9:39:DA:66:13:3B:D9:D3:AB:95:97:B5:D2 Authority key identifier: 2A:A1:7E:D4:07:43:2C:41:8B:1C:9E:AF:61:FD:1C:A1:CB:FF:6A:74 Certificate issuer: /CN=2aa17ed407432c418b1c9eaf61fd1ca1cbff6a74 Certificate serial: 019BF91B95397490F1742D9723956909C22B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft Manifest number: 0BD4 Signing time: Mon 26 Jan 2026 07:01:32 +0000 Manifest this update: Mon 26 Jan 2026 07:01:32 +0000 Manifest next update: Tue 27 Jan 2026 07:01:32 +0000 Files and hashes: 1: KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl (hash: i9QOkujNBBodKN4ma4quigY6z4XI/hyn0e2De896/QY=) 2: SaYypv9VAJ84xKAeNkRLodoblMc.roa (hash: GtKZWyv3+glT6p+I3huIJVfHLB6xoMQ/NbzSHVIURY4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1b:95:39:74:90:f1:74:2d:97:23:95:69:09:c2:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa17ed407432c418b1c9eaf61fd1ca1cbff6a74 Validity Not Before: Jan 26 07:01:32 2026 GMT Not After : Jan 27 07:01:32 2026 GMT Subject: CN=7285c138191b4af939da66133bd9d3ab9597b5d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:dc:a2:35:df:b9:e0:b4:66:bc:b1:b2:4d:5d: 39:b4:85:3a:b3:ab:05:ea:bc:5e:e0:ec:58:50:22: 9b:de:01:10:e9:ff:b7:fc:2f:12:5f:0d:0b:99:91: 88:9a:29:34:e7:13:a7:51:eb:ee:c0:1b:e1:28:48: 2b:78:a4:e2:83:e9:3c:a7:91:47:07:ff:d7:e8:22: 62:fa:b9:64:07:12:0e:31:89:ef:df:9d:c5:3f:94: 02:a6:b5:9b:a5:0c:04:01:db:4a:47:df:7c:09:eb: 38:ef:7a:6a:b7:fa:02:ba:ea:88:16:77:23:63:bf: 56:3b:84:e0:20:5a:e7:46:53:c2:c6:29:c6:72:f9: bd:01:55:db:6d:c7:fa:89:89:f5:1c:7b:c5:86:ba: 7f:f6:8e:fc:d7:9c:c5:02:11:24:bb:26:26:f3:5a: 69:48:22:75:bd:dc:49:00:54:50:73:0f:77:1f:75: 79:48:c7:11:77:2d:d1:f7:fa:52:7e:dc:29:26:ab: e2:84:16:d8:a7:02:f8:88:e1:98:01:db:4c:a6:ef: b1:63:7f:ad:19:46:6f:3f:34:79:02:a5:36:59:58: e7:b3:b1:fe:b1:31:48:34:7b:79:2f:27:fe:64:1f: e8:04:58:85:c0:12:b1:e8:ee:ba:b1:6d:08:8c:5a: a8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:85:C1:38:19:1B:4A:F9:39:DA:66:13:3B:D9:D3:AB:95:97:B5:D2 X509v3 Authority Key Identifier: keyid:2A:A1:7E:D4:07:43:2C:41:8B:1C:9E:AF:61:FD:1C:A1:CB:FF:6A:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:9e:15:d5:e2:7c:b0:9e:08:f3:9f:dc:3c:97:f2:a6:30:ba: 34:d0:ec:5e:1b:db:00:ae:d9:8d:d5:e8:a9:06:b2:5f:b8:05: f7:e5:f1:c8:35:8a:aa:3f:36:98:25:a5:dd:1f:db:ac:ab:d5: 30:ef:fd:c1:a8:32:42:7b:09:37:53:3d:c1:93:22:87:0b:4f: 78:a2:8f:45:5b:2f:03:ec:8c:4a:bd:c6:3b:ba:5d:cf:59:3f: e8:40:4a:8d:f7:9b:be:32:c4:5e:40:3f:43:f6:81:35:48:ca: c0:22:04:6b:44:06:67:df:93:49:9e:51:38:df:a6:94:15:dd: 88:ba:e1:f7:6c:10:23:12:48:32:94:a4:c7:0f:0f:00:1c:96: 8f:3a:90:ba:33:4c:63:29:b3:a9:3a:f2:41:59:41:8e:25:89: 43:5d:a3:db:14:ed:dd:fc:19:ae:f3:d7:10:36:23:de:69:56: 6b:2e:46:75:1e:ef:c4:4a:ed:91:4e:14:2d:f1:55:4a:79:01: 7b:65:c2:36:21:f6:56:52:7b:ae:37:98:d2:4e:b0:20:27:8a: 8f:ad:89:e7:5f:3b:b8:94:26:d0:b6:1e:68:6b:dc:10:16:ec: ef:55:a8:e6:31:98:0b:8e:c8:a1:21:5b:05:65:5c:cd:5c:b6: 61:d6:1a:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5G5U5dJDxdC2XI5VpCcIrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYTE3ZWQ0MDc0MzJjNDE4YjFjOWVhZjYxZmQxY2ExY2Jm ZjZhNzQwHhcNMjYwMTI2MDcwMTMyWhcNMjYwMTI3MDcwMTMyWjAzMTEwLwYDVQQD Eyg3Mjg1YzEzODE5MWI0YWY5MzlkYTY2MTMzYmQ5ZDNhYjk1OTdiNWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9yiNd+54LRmvLGyTV05tIU6s6sF 6rxe4OxYUCKb3gEQ6f+3/C8SXw0LmZGImik05xOnUevuwBvhKEgreKTig+k8p5FH B//X6CJi+rlkBxIOMYnv353FP5QCprWbpQwEAdtKR998Ces473pqt/oCuuqIFncj Y79WO4TgIFrnRlPCxinGcvm9AVXbbcf6iYn1HHvFhrp/9o7815zFAhEkuyYm81pp SCJ1vdxJAFRQcw93H3V5SMcRdy3R9/pSftwpJqvihBbYpwL4iOGYAdtMpu+xY3+t GUZvPzR5AqU2WVjns7H+sTFINHt5Lyf+ZB/oBFiFwBKx6O66sW0IjFqoSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHKFwTgZG0r5OdpmEzvZ06uVl7XSMB8GA1UdIwQY MBaAFCqhftQHQyxBixyer2H9HKHL/2p0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3FGLTFBZERMRUdMSEo2dllmMGNvY3ZfYW5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni81NGQ0MzctYTI3Ny00MWJkLTk4OGYt OTUwZjBhMDEwMWE5LzEvS3FGLTFBZERMRUdMSEo2dllmMGNvY3ZfYW5RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni81NGQ0MzctYTI3Ny00MWJkLTk4OGYtOTUwZjBhMDEwMWE5 LzEvS3FGLTFBZERMRUdMSEo2dllmMGNvY3ZfYW5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZZ4V1eJ8 sJ4I85/cPJfypjC6NNDsXhvbAK7ZjdXoqQayX7gF9+XxyDWKqj82mCWl3R/brKvV MO/9wagyQnsJN1M9wZMihwtPeKKPRVsvA+yMSr3GO7pdz1k/6EBKjfebvjLEXkA/ Q/aBNUjKwCIEa0QGZ9+TSZ5RON+mlBXdiLrh92wQIxJIMpSkxw8PAByWjzqQujNM YymzqTryQVlBjiWJQ12j2xTt3fwZrvPXEDYj3mlWay5GdR7vxErtkU4ULfFVSnkB e2XCNiH2VlJ7rjeY0k6wICeKj62J5187uJQm0LYeaGvcEBbs71Wo5jGYC47IoSFb BWVczVy2YdYa3g== -----END CERTIFICATE-----Generated at Mon Jan 26 09:28:45 2026 by rpki-client