This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft File: kJgVO94ONFhLrJH6GGjX7yTWi88.mft (raw, json) Hash identifier: iXsSO/BSKUaL9jrmNBzxKMy3EjN92dazItCLatgkrh0= Subject key identifier: 07:6B:53:B8:47:3C:35:EC:69:64:E5:B9:60:C5:25:54:AF:E3:83:FF Authority key identifier: 90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF Certificate issuer: /CN=9098153bde0e34584bac91fa1868d7ef24d68bcf Certificate serial: 019BF53EC6FCFCDB79CDDDA5A3B987DD0C8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft Manifest number: 14E0 Signing time: Sun 25 Jan 2026 13:01:30 +0000 Manifest this update: Sun 25 Jan 2026 13:01:30 +0000 Manifest next update: Mon 26 Jan 2026 13:01:30 +0000 Files and hashes: 1: Iria4wIw1fU8cA4sqt1elN464-4.roa (hash: ISbIWO425ImSYvAJvg4vsV9/XdUj9FmYfNuddwC0P7Y=) 2: kJgVO94ONFhLrJH6GGjX7yTWi88.crl (hash: +fdlQK6qUPzZWBjdjKKi35k0dVxmvsGlVF2XMX36j1A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:c6:fc:fc:db:79:cd:dd:a5:a3:b9:87:dd:0c:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9098153bde0e34584bac91fa1868d7ef24d68bcf Validity Not Before: Jan 25 13:01:30 2026 GMT Not After : Jan 26 13:01:30 2026 GMT Subject: CN=076b53b8473c35ec6964e5b960c52554afe383ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:84:41:de:49:ea:4f:84:e4:a1:50:8f:5d:c1: be:ce:fe:bd:f6:6b:dd:27:41:9e:d8:22:aa:ae:17: 2f:a2:f6:d5:0c:b0:62:60:46:63:44:69:85:91:52: b4:c4:ec:90:67:62:8a:24:f5:6b:90:3e:f9:eb:e1: e9:b1:eb:89:21:00:bb:d5:7d:8c:0b:da:2b:f8:e8: 7c:c6:bd:aa:b1:9e:8d:f6:43:39:f8:db:86:bd:84: 34:9a:74:97:32:89:41:13:3b:bc:8e:33:83:a1:8d: 65:17:cd:51:06:49:59:90:06:5b:7f:3c:a3:e0:34: dd:4f:f3:d6:9e:ea:46:62:5b:4b:c7:67:f3:9c:16: 8a:1f:7a:6a:b0:12:eb:99:3c:de:51:a6:9f:74:df: b3:d9:36:c0:b8:8e:01:31:e1:23:77:bd:bd:dd:3c: 1b:9e:fc:a9:c4:36:a3:a4:c3:3d:0a:e5:a1:95:46: e0:56:64:35:5f:47:fb:c3:74:8e:de:77:0e:54:b0: 76:cd:e7:9e:e4:1a:99:c2:d9:8e:0a:91:db:ab:2e: ca:b6:fb:a4:85:b0:44:a4:92:8d:37:7f:9c:40:e2: 60:38:b0:13:1b:8d:2f:60:da:1a:4c:2e:f9:50:6c: c9:5f:ba:09:17:6c:6b:a1:ee:ec:c1:4f:86:28:97: dc:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:6B:53:B8:47:3C:35:EC:69:64:E5:B9:60:C5:25:54:AF:E3:83:FF X509v3 Authority Key Identifier: keyid:90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:ab:2f:d9:0a:da:35:fe:cd:e5:b6:92:87:c3:3a:80:d7:5c: 1f:b8:16:bc:aa:26:d7:54:6c:cc:da:32:1a:99:bd:bf:1c:75: 5d:3a:6f:8e:1c:c1:20:f4:f6:2a:29:de:47:1b:69:50:98:ff: 04:86:d1:83:e4:7b:17:55:0d:1f:a0:a9:f6:69:26:40:6f:fa: c9:4f:06:bb:5c:9e:1a:5e:c9:5a:c7:95:8a:27:d0:cf:2a:21: ee:97:91:84:80:2b:ad:51:bb:81:c7:6c:95:4b:68:f1:a0:fb: c7:0f:07:68:93:ac:12:1d:80:b2:0d:6c:ed:a9:7d:a6:7b:c8: 0a:41:b5:f0:78:fb:3c:71:3f:a0:41:93:9f:51:c5:a8:b6:49: 2d:6e:fc:eb:30:77:ba:36:90:13:55:83:90:3f:c4:28:05:82: 6c:8b:9e:99:fa:16:1d:2b:20:91:57:b6:66:c9:cb:f3:3c:e8: fd:c2:95:fc:4d:42:f2:c0:af:51:b7:46:60:23:34:b7:22:0b: ab:ca:34:14:0d:4a:f6:97:1d:eb:8f:7e:9e:7e:de:fd:db:54: 5d:48:38:13:93:68:e1:f3:7d:ec:33:ec:d5:eb:b7:60:5f:ee: 60:4c:be:a4:be:57:60:2d:cf:c7:07:a3:33:4b:84:f2:38:8f: 0f:fb:ea:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1Psb8/Nt5zd2lo7mH3QyOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwOTgxNTNiZGUwZTM0NTg0YmFjOTFmYTE4NjhkN2VmMjRk NjhiY2YwHhcNMjYwMTI1MTMwMTMwWhcNMjYwMTI2MTMwMTMwWjAzMTEwLwYDVQQD EygwNzZiNTNiODQ3M2MzNWVjNjk2NGU1Yjk2MGM1MjU1NGFmZTM4M2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYRB3knqT4TkoVCPXcG+zv699mvd J0Ge2CKqrhcvovbVDLBiYEZjRGmFkVK0xOyQZ2KKJPVrkD756+HpseuJIQC71X2M C9or+Oh8xr2qsZ6N9kM5+NuGvYQ0mnSXMolBEzu8jjODoY1lF81RBklZkAZbfzyj 4DTdT/PWnupGYltLx2fznBaKH3pqsBLrmTzeUaafdN+z2TbAuI4BMeEjd7293Twb nvypxDajpMM9CuWhlUbgVmQ1X0f7w3SO3ncOVLB2zeee5BqZwtmOCpHbqy7Ktvuk hbBEpJKNN3+cQOJgOLATG40vYNoaTC75UGzJX7oJF2xroe7swU+GKJfcgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAdrU7hHPDXsaWTluWDFJVSv44P/MB8GA1UdIwQY MBaAFJCYFTveDjRYS6yR+hho1+8k1ovPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0pnVk85NE9ORmhMckpINkdHalg3eVRXaTg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9iYTkwMDMtZDQzMy00MDk1LTg0Yjct MmY5MzNkOTg5NmUwLzEva0pnVk85NE9ORmhMckpINkdHalg3eVRXaTg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9iYTkwMDMtZDQzMy00MDk1LTg0YjctMmY5MzNkOTg5NmUw LzEva0pnVk85NE9ORmhMckpINkdHalg3eVRXaTg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdqsv2Qra Nf7N5baSh8M6gNdcH7gWvKom11RszNoyGpm9vxx1XTpvjhzBIPT2KineRxtpUJj/ BIbRg+R7F1UNH6Cp9mkmQG/6yU8Gu1yeGl7JWseViifQzyoh7peRhIArrVG7gcds lUto8aD7xw8HaJOsEh2Asg1s7al9pnvICkG18Hj7PHE/oEGTn1HFqLZJLW786zB3 ujaQE1WDkD/EKAWCbIuemfoWHSsgkVe2ZsnL8zzo/cKV/E1C8sCvUbdGYCM0tyIL q8o0FA1K9pcd649+nn7e/dtUXUg4E5No4fN97DPs1eu3YF/uYEy+pL5XYC3Pxwej M0uE8jiPD/vq9g== -----END CERTIFICATE-----Generated at Sun Jan 25 20:32:45 2026 by rpki-client