This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft File: kJrEshegjDSPstyft0IuHekY9Rc.mft (raw, json) Hash identifier: reR7iw5k48eCm+myybVhYmgXgjH9KdKT2AAO0mA62V8= Subject key identifier: 29:8A:AB:A5:26:B8:44:08:1E:3A:DE:12:19:DC:BF:78:D2:97:FC:DC Authority key identifier: 90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17 Certificate issuer: /CN=909ac4b217a08c348fb2dc9fb7422e1de918f517 Certificate serial: 019BF7D149BC459B337FED30BD6A24A7A723 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft Manifest number: 0ADF Signing time: Mon 26 Jan 2026 01:00:46 +0000 Manifest this update: Mon 26 Jan 2026 01:00:46 +0000 Manifest next update: Tue 27 Jan 2026 01:00:46 +0000 Files and hashes: 1: Ru4RlUs3xLqI4i2LlHQz9-A7VwY.roa (hash: DVQde1db5OGzpAw+ZFDgqxFZ7/Y4TU4NFBnhQeqaz0U=) 2: cU4TCCYXoajhZCXIIJ5tcUDsnnM.roa (hash: wT8Ut68PEmHJguLhza++gxsB8fpnhz3P88irlMghl78=) 3: kJrEshegjDSPstyft0IuHekY9Rc.crl (hash: RVoz/dqXMyMQncdkUwD80En4ro7IZHNKb40vLuImAlU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d1:49:bc:45:9b:33:7f:ed:30:bd:6a:24:a7:a7:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=909ac4b217a08c348fb2dc9fb7422e1de918f517 Validity Not Before: Jan 26 01:00:46 2026 GMT Not After : Jan 27 01:00:46 2026 GMT Subject: CN=298aaba526b844081e3ade1219dcbf78d297fcdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:03:14:a2:9e:58:94:d1:27:fa:da:de:c1:92: 7e:1b:3c:c1:1f:d6:18:5d:ba:88:84:19:1b:11:3a: 40:ea:d7:4c:f7:87:79:31:29:a9:2f:af:24:99:f1: 84:c1:aa:7b:3e:af:d6:70:d6:2d:c1:85:b1:42:c1: ca:3f:d3:67:7c:c5:85:92:6f:2e:b5:09:84:c0:e3: 19:77:d9:3e:c6:5b:ae:3f:09:bf:65:ce:ca:8e:7f: dc:41:d4:26:29:e1:49:84:00:d5:61:fa:39:02:7d: e9:e5:cf:50:4b:b9:9f:67:31:8c:67:a4:9f:8d:e9: c6:98:f9:9f:14:2e:96:c0:4e:ae:52:1f:f9:65:88: 93:38:f0:b6:49:16:d2:fc:89:1d:99:28:90:f1:04: 75:b0:3e:2c:1c:34:89:b8:74:09:75:9d:45:9e:6c: 83:ee:83:66:65:e9:52:88:2a:10:06:15:11:d2:a9: ab:bc:06:ec:fd:1c:32:1e:4d:55:eb:25:e5:d0:3f: 96:bd:7e:58:fe:2b:89:a9:bb:c6:69:ca:b3:fe:30: 8f:95:80:95:07:69:22:55:ec:ca:05:de:02:45:61: 70:12:8c:ec:2b:d8:6c:ff:aa:90:fe:f3:3b:25:7f: 01:53:02:ba:22:5c:ce:6c:ba:e2:e4:b2:62:87:06: 0e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:8A:AB:A5:26:B8:44:08:1E:3A:DE:12:19:DC:BF:78:D2:97:FC:DC X509v3 Authority Key Identifier: keyid:90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:91:66:b3:8b:83:a4:14:07:4f:d3:c4:b9:22:a2:04:f6:53: d2:16:ed:e6:65:01:6a:07:5f:d5:b6:59:b8:f0:eb:2f:5a:ca: 21:42:ff:90:4a:29:53:14:22:27:15:2a:47:96:6f:90:fc:d7: f6:3e:45:a9:34:80:b3:51:c1:59:01:3b:73:35:67:55:f4:d3: 84:d0:ff:f5:c2:b0:75:46:c0:dc:c2:10:a3:7a:dd:a0:8b:3d: 92:28:1d:0a:87:03:a3:c4:4e:f0:3a:e8:fe:a1:c9:ad:90:3e: 9b:e3:f7:0e:b7:54:42:f5:7f:5a:5f:18:68:bc:52:d3:4b:7b: e9:72:3c:65:d7:18:71:04:24:21:39:d5:42:f8:db:15:f6:ad: 5e:51:05:a4:6e:5b:84:57:84:84:a9:1f:d1:ab:6f:e0:b3:4b: 4a:c4:2a:ae:97:a0:e3:2a:d0:f9:78:81:73:88:5a:27:c9:86: c2:21:7c:f8:b0:78:86:40:28:4b:1f:97:5b:0f:6c:97:a6:26: 92:db:6e:8b:01:87:20:c2:6b:7e:59:3e:5f:ca:22:80:f8:f2: fb:3b:ee:88:50:9e:64:0b:f2:10:9f:a3:ca:09:14:c2:7c:7e: 6f:16:5b:f8:ae:a6:f3:55:53:52:48:d9:30:a5:2d:65:08:0a: 38:ad:0a:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30Um8RZszf+0wvWokp6cjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwOWFjNGIyMTdhMDhjMzQ4ZmIyZGM5ZmI3NDIyZTFkZTkx OGY1MTcwHhcNMjYwMTI2MDEwMDQ2WhcNMjYwMTI3MDEwMDQ2WjAzMTEwLwYDVQQD EygyOThhYWJhNTI2Yjg0NDA4MWUzYWRlMTIxOWRjYmY3OGQyOTdmY2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwMUop5YlNEn+trewZJ+GzzBH9YY XbqIhBkbETpA6tdM94d5MSmpL68kmfGEwap7Pq/WcNYtwYWxQsHKP9NnfMWFkm8u tQmEwOMZd9k+xluuPwm/Zc7Kjn/cQdQmKeFJhADVYfo5An3p5c9QS7mfZzGMZ6Sf jenGmPmfFC6WwE6uUh/5ZYiTOPC2SRbS/IkdmSiQ8QR1sD4sHDSJuHQJdZ1FnmyD 7oNmZelSiCoQBhUR0qmrvAbs/RwyHk1V6yXl0D+WvX5Y/iuJqbvGacqz/jCPlYCV B2kiVezKBd4CRWFwEozsK9hs/6qQ/vM7JX8BUwK6IlzObLri5LJihwYOFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCmKq6UmuEQIHjreEhncv3jSl/zcMB8GA1UdIwQY MBaAFJCaxLIXoIw0j7Lcn7dCLh3pGPUXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0pyRXNoZWdqRFNQc3R5ZnQwSXVIZWtZOVJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xNzQzZGYtMDQ2Mi00Y2FjLTgyNTAt ZGVkYzUyYTJlZDhmLzEva0pyRXNoZWdqRFNQc3R5ZnQwSXVIZWtZOVJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS8xNzQzZGYtMDQ2Mi00Y2FjLTgyNTAtZGVkYzUyYTJlZDhm LzEva0pyRXNoZWdqRFNQc3R5ZnQwSXVIZWtZOVJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo5Fms4uD pBQHT9PEuSKiBPZT0hbt5mUBagdf1bZZuPDrL1rKIUL/kEopUxQiJxUqR5ZvkPzX 9j5FqTSAs1HBWQE7czVnVfTThND/9cKwdUbA3MIQo3rdoIs9kigdCocDo8RO8Dro /qHJrZA+m+P3DrdUQvV/Wl8YaLxS00t76XI8ZdcYcQQkITnVQvjbFfatXlEFpG5b hFeEhKkf0atv4LNLSsQqrpeg4yrQ+XiBc4haJ8mGwiF8+LB4hkAoSx+XWw9sl6Ym kttuiwGHIMJrflk+X8oigPjy+zvuiFCeZAvyEJ+jygkUwnx+bxZb+K6m81VTUkjZ MKUtZQgKOK0Kaw== -----END CERTIFICATE-----Generated at Mon Jan 26 04:25:08 2026 by rpki-client