This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft File: kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft (raw, json) Hash identifier: oYtLsYPLQvxXAg94GQ4eyiymeXpoKbFGi0QVLWI3Sp4= Subject key identifier: 2D:FA:D8:62:0B:27:4E:87:FA:17:DA:24:32:88:BB:21:12:CB:97:21 Authority key identifier: 92:6B:93:36:FC:AF:36:57:CE:DE:BA:53:C4:7E:94:80:10:87:7E:20 Certificate issuer: /CN=926b9336fcaf3657cedeba53c47e948010877e20 Certificate serial: 019BF5E3D6FB9BAC280394D7F5D8D4B18A4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 16:01:48 +0000 Manifest this update: Sun 25 Jan 2026 16:01:48 +0000 Manifest next update: Mon 26 Jan 2026 16:01:48 +0000 Files and hashes: 1: 2NDM2UnGAd2KPMu3UUA1fO528tk.roa (hash: WD6GmcclgmWq2djvqA2C1xAumTZt22gmy95ALSn/gmc=) 2: kmuTNvyvNlfO3rpTxH6UgBCHfiA.crl (hash: MhW7c7lXiKWjm5osuuzwmynTk0kiqNl+pkH41ZQ2KJg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft rsync://rpki.ripe.net/repository/DEFAULT/kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:d6:fb:9b:ac:28:03:94:d7:f5:d8:d4:b1:8a:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=926b9336fcaf3657cedeba53c47e948010877e20 Validity Not Before: Jan 25 16:01:48 2026 GMT Not After : Jan 26 16:01:48 2026 GMT Subject: CN=2dfad8620b274e87fa17da243288bb2112cb9721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:25:60:63:ea:00:70:aa:a1:9a:fd:95:f2:45: b7:31:d9:4b:5a:31:e7:80:02:64:73:1d:ba:d3:71: dc:86:15:3c:fa:26:4e:47:73:39:83:8c:3e:98:05: 50:e9:b2:df:25:c7:c3:0c:d6:7a:e1:21:71:10:b1: 55:57:cb:b7:f5:e6:7e:c3:0b:fb:31:62:75:67:8d: 86:e7:b7:58:8a:a0:ca:84:bd:e6:97:6d:5a:72:b9: 39:de:22:08:4c:b0:f7:ff:26:38:2f:ae:01:71:54: 61:0c:5b:05:82:f6:7b:7c:3b:44:da:de:a2:27:9e: 6a:84:4a:9f:ce:3c:4e:82:f6:0d:a1:0c:86:58:15: 6d:fc:08:e5:fd:81:8a:95:66:d9:85:84:14:35:53: 5c:24:70:fa:15:6c:9d:be:00:cf:ff:f0:58:6f:a7: b8:5f:54:58:c7:1e:98:a7:f1:09:87:62:47:03:e1: ef:df:7c:61:9b:27:ef:c5:bd:2c:3f:2f:24:5c:67: 69:1d:f2:17:d2:79:9d:66:86:a5:aa:9e:90:bb:1f: 51:ce:23:b8:87:3b:e7:d8:47:9b:b2:ea:e7:74:16: fa:a6:8a:d2:75:3f:33:70:0b:b9:6b:1b:53:d1:09: d9:77:fd:96:66:cc:ed:6a:ae:2d:dc:56:34:9e:2e: 2b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:FA:D8:62:0B:27:4E:87:FA:17:DA:24:32:88:BB:21:12:CB:97:21 X509v3 Authority Key Identifier: keyid:92:6B:93:36:FC:AF:36:57:CE:DE:BA:53:C4:7E:94:80:10:87:7E:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:04:b3:0e:f7:2c:d5:09:c8:8f:8a:a7:71:e4:84:ba:df:d2: 26:7e:07:4c:5b:2e:a5:4c:f1:7d:8d:f4:17:36:3f:47:dc:29: e0:de:89:4a:27:99:9c:1b:35:21:61:0a:db:a5:d6:e0:88:8c: 23:ae:09:47:26:b0:1a:d5:62:43:45:94:4c:61:42:a2:35:16: 64:bf:d4:c9:ac:4d:d2:44:f7:9e:9a:fe:30:87:41:2d:c7:46: 29:39:66:57:7e:ca:bf:df:6e:7b:7c:ba:64:e3:f6:d0:30:7e: df:ac:03:c8:42:da:51:2b:75:4c:65:4e:2e:33:d2:64:d5:ee: 2a:e9:40:a7:d0:7d:84:fa:ee:72:be:45:65:9d:20:75:15:db: 0f:88:e6:27:b2:6d:78:04:17:b8:a6:2a:0d:16:62:73:85:bf: 0c:25:f1:ff:8b:d2:5b:9a:00:97:7f:7d:31:6e:09:d3:72:c9: f2:25:66:51:84:4f:fe:a9:cc:2c:85:8d:24:80:55:e2:02:52: 00:fb:87:31:95:48:00:0b:34:72:27:a1:8b:ab:6b:78:70:06: ff:10:13:45:d8:7c:bd:77:c3:a5:8e:e9:a8:a3:a4:d6:23:4f: e2:1a:e7:55:8b:8d:ac:f0:d5:d4:3c:80:38:64:09:bf:ef:3a: f3:d8:38:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv149b7m6woA5TX9djUsYpPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNmI5MzM2ZmNhZjM2NTdjZWRlYmE1M2M0N2U5NDgwMTA4 NzdlMjAwHhcNMjYwMTI1MTYwMTQ4WhcNMjYwMTI2MTYwMTQ4WjAzMTEwLwYDVQQD EygyZGZhZDg2MjBiMjc0ZTg3ZmExN2RhMjQzMjg4YmIyMTEyY2I5NzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SVgY+oAcKqhmv2V8kW3MdlLWjHn gAJkcx2603HchhU8+iZOR3M5g4w+mAVQ6bLfJcfDDNZ64SFxELFVV8u39eZ+wwv7 MWJ1Z42G57dYiqDKhL3ml21acrk53iIITLD3/yY4L64BcVRhDFsFgvZ7fDtE2t6i J55qhEqfzjxOgvYNoQyGWBVt/Ajl/YGKlWbZhYQUNVNcJHD6FWydvgDP//BYb6e4 X1RYxx6Yp/EJh2JHA+Hv33xhmyfvxb0sPy8kXGdpHfIX0nmdZoalqp6Qux9RziO4 hzvn2EebsurndBb6porSdT8zcAu5axtT0QnZd/2WZsztaq4t3FY0ni4rIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC362GILJ06H+hfaJDKIuyESy5chMB8GA1UdIwQY MBaAFJJrkzb8rzZXzt66U8R+lIAQh34gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva211VE52eXZObGZPM3JwVHhINlVnQkNIZmlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9lZmJiZjAtZTRmYS00NDMxLWIxZTct MDZhMjRmYTc0NjY3LzEva211VE52eXZObGZPM3JwVHhINlVnQkNIZmlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi9lZmJiZjAtZTRmYS00NDMxLWIxZTctMDZhMjRmYTc0NjY3 LzEva211VE52eXZObGZPM3JwVHhINlVnQkNIZmlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjQSzDvcs 1QnIj4qnceSEut/SJn4HTFsupUzxfY30FzY/R9wp4N6JSieZnBs1IWEK26XW4IiM I64JRyawGtViQ0WUTGFCojUWZL/UyaxN0kT3npr+MIdBLcdGKTlmV37Kv99ue3y6 ZOP20DB+36wDyELaUSt1TGVOLjPSZNXuKulAp9B9hPrucr5FZZ0gdRXbD4jmJ7Jt eAQXuKYqDRZic4W/DCXx/4vSW5oAl399MW4J03LJ8iVmUYRP/qnMLIWNJIBV4gJS APuHMZVIAAs0ciehi6treHAG/xATRdh8vXfDpY7pqKOk1iNP4hrnVYuNrPDV1DyA OGQJv+8689g48A== -----END CERTIFICATE-----Generated at Sun Jan 25 23:09:25 2026 by rpki-client