This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft File: KIUcb8brOBbhFsikqFHQ0XjJDzE.mft (raw, json) Hash identifier: X/fjKuKDT7gxhLM3kmxQS1L+tOFIeAbyx4iu723R0r8= Subject key identifier: 19:64:09:08:10:BE:D4:E4:76:EF:43:3F:1F:9B:DE:7C:90:EE:09:C0 Authority key identifier: 28:85:1C:6F:C6:EB:38:16:E1:16:C8:A4:A8:51:D0:D1:78:C9:0F:31 Certificate issuer: /CN=28851c6fc6eb3816e116c8a4a851d0d178c90f31 Certificate serial: 019BF4D0DDA7B70E9377158C98A86C2D1C94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft Manifest number: 15C6 Signing time: Sun 25 Jan 2026 11:01:27 +0000 Manifest this update: Sun 25 Jan 2026 11:01:27 +0000 Manifest next update: Mon 26 Jan 2026 11:01:27 +0000 Files and hashes: 1: AO06uJHkVshYcEPLGfhX8Uw9gpc.roa (hash: 5SvwdBIYhvyrwzSR8AKYSXgpfbX0MUkDamcTaTo4pOY=) 2: KIUcb8brOBbhFsikqFHQ0XjJDzE.crl (hash: M45e7QZIzAbgQwq2vxTes9hx64vNIasjela2aFrWg9I=) 3: WM9U0hGxJGDphWFsCWq6RtezmLM.roa (hash: cyewkrvQm5BjotgRNgGfFmYEz1ELODgyWDHv/Kj0w6U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.crl rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:dd:a7:b7:0e:93:77:15:8c:98:a8:6c:2d:1c:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28851c6fc6eb3816e116c8a4a851d0d178c90f31 Validity Not Before: Jan 25 11:01:27 2026 GMT Not After : Jan 26 11:01:27 2026 GMT Subject: CN=1964090810bed4e476ef433f1f9bde7c90ee09c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1e:6a:3d:0f:3e:fd:17:7e:49:4e:d7:11:24: 00:a6:98:a2:4b:4e:45:21:53:91:46:13:e7:10:7b: db:9c:69:9f:d9:97:a3:03:b5:80:df:a8:c5:a1:35: 7f:70:0d:a3:64:fd:fe:65:ac:6a:dd:bd:57:3c:43: e7:14:1b:62:9c:f7:5b:30:8f:54:3b:77:89:98:da: 26:dc:0b:f3:09:96:b2:7c:37:c1:70:a3:20:ec:d7: 81:eb:fe:c0:27:37:27:49:e9:bb:98:30:fc:5e:c8: d9:b5:bb:ae:50:1d:c2:e2:cf:3d:ed:1a:39:44:97: 26:c9:de:4f:ff:d5:e4:74:ec:c8:8f:b6:d6:54:69: d5:5f:6e:8f:af:bd:a2:fb:02:3e:43:4f:81:ae:89: 44:99:be:9d:f0:72:a5:3c:a8:87:66:87:0c:10:93: 8e:a6:40:19:4c:f4:97:f7:41:a2:21:83:34:b9:d7: 6e:f7:7e:eb:1b:e3:3d:5a:e7:52:26:c6:8e:2c:73: bd:81:6b:d4:9c:11:8e:6e:e2:85:e7:ba:75:1a:e6: 58:58:81:71:0a:ac:3e:e1:d9:10:9f:6e:3d:09:a5: 21:0e:89:9a:e1:b7:ee:47:91:f0:1e:e4:2c:cf:1c: da:8e:f9:bd:30:20:51:2d:b0:aa:70:ed:e0:04:1f: 27:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:64:09:08:10:BE:D4:E4:76:EF:43:3F:1F:9B:DE:7C:90:EE:09:C0 X509v3 Authority Key Identifier: keyid:28:85:1C:6F:C6:EB:38:16:E1:16:C8:A4:A8:51:D0:D1:78:C9:0F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:b3:ff:12:9e:19:51:71:4c:f1:ea:0c:12:18:4b:57:94:93: a2:b0:9f:15:d1:a0:59:af:6b:38:aa:f0:da:8a:22:27:8b:cd: f9:3c:8f:7f:81:2a:9b:0f:42:fe:a4:fe:48:e6:2f:e5:22:7b: 16:0e:b7:86:09:95:5d:fb:90:1b:cf:f7:35:28:72:e1:a6:c3: f5:36:cf:6e:5c:35:9f:d5:fe:02:ec:73:62:3a:1f:2b:55:b0: d4:87:87:3e:dd:a7:af:c2:4a:eb:f3:3f:5b:60:30:8c:75:6b: 7d:01:4f:62:05:36:dc:d9:3f:23:e0:56:0e:1f:b2:11:72:a4: 45:f9:97:54:6e:12:d7:0f:94:0c:fd:b6:43:74:e4:16:e6:c9: 9f:2c:b0:ed:a5:fb:9c:e7:87:0d:4c:a3:b6:57:d3:81:63:7d: 4e:28:e1:72:d2:46:d1:c0:e3:aa:a6:24:e8:5a:cd:2c:7e:e9: 96:6e:87:7b:ae:51:c0:7a:46:35:36:e3:2b:38:1a:49:7b:83: ce:5c:e9:a0:4e:bc:7f:47:93:4d:05:f7:cc:2b:6c:54:10:31: 9c:28:60:3d:4d:9f:e2:77:d4:cf:5e:1d:1c:ef:39:9d:0b:b9: 68:a6:f0:d3:31:5a:7a:9a:3e:84:66:0e:c0:b4:67:e6:57:f0: 4d:0b:d6:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00N2ntw6TdxWMmKhsLRyUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4ODUxYzZmYzZlYjM4MTZlMTE2YzhhNGE4NTFkMGQxNzhj OTBmMzEwHhcNMjYwMTI1MTEwMTI3WhcNMjYwMTI2MTEwMTI3WjAzMTEwLwYDVQQD EygxOTY0MDkwODEwYmVkNGU0NzZlZjQzM2YxZjliZGU3YzkwZWUwOWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2R5qPQ8+/Rd+SU7XESQAppiiS05F IVORRhPnEHvbnGmf2ZejA7WA36jFoTV/cA2jZP3+Zaxq3b1XPEPnFBtinPdbMI9U O3eJmNom3AvzCZayfDfBcKMg7NeB6/7AJzcnSem7mDD8XsjZtbuuUB3C4s897Ro5 RJcmyd5P/9XkdOzIj7bWVGnVX26Pr72i+wI+Q0+BrolEmb6d8HKlPKiHZocMEJOO pkAZTPSX90GiIYM0uddu937rG+M9WudSJsaOLHO9gWvUnBGObuKF57p1GuZYWIFx Cqw+4dkQn249CaUhDoma4bfuR5HwHuQszxzajvm9MCBRLbCqcO3gBB8nHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBlkCQgQvtTkdu9DPx+b3nyQ7gnAMB8GA1UdIwQY MBaAFCiFHG/G6zgW4RbIpKhR0NF4yQ8xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0lVY2I4YnJPQmJoRnNpa3FGSFEwWGpKRHpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9iOWU2ZGYtZGE4Zi00NDkxLThmZTQt NTI0NWIxMzUyMjFiLzEvS0lVY2I4YnJPQmJoRnNpa3FGSFEwWGpKRHpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9iOWU2ZGYtZGE4Zi00NDkxLThmZTQtNTI0NWIxMzUyMjFi LzEvS0lVY2I4YnJPQmJoRnNpa3FGSFEwWGpKRHpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEbP/Ep4Z UXFM8eoMEhhLV5STorCfFdGgWa9rOKrw2ooiJ4vN+TyPf4Eqmw9C/qT+SOYv5SJ7 Fg63hgmVXfuQG8/3NShy4abD9TbPblw1n9X+AuxzYjofK1Ww1IeHPt2nr8JK6/M/ W2AwjHVrfQFPYgU23Nk/I+BWDh+yEXKkRfmXVG4S1w+UDP22Q3TkFubJnyyw7aX7 nOeHDUyjtlfTgWN9TijhctJG0cDjqqYk6FrNLH7plm6He65RwHpGNTbjKzgaSXuD zlzpoE68f0eTTQX3zCtsVBAxnChgPU2f4nfUz14dHO85nQu5aKbw0zFaepo+hGYO wLRn5lfwTQvWoQ== -----END CERTIFICATE-----Generated at Sun Jan 25 16:19:28 2026 by rpki-client