This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.mft File: KT0QRM1I1hcW11ngIN29qoFNXNU.mft (raw, json) Hash identifier: fwAaItPG4Pz9faG/sL8ob4DG7zDutwJLpVZaLxob7YA= Subject key identifier: 4D:F3:C0:EF:11:8D:66:92:99:5F:C8:9C:C7:E2:FC:6E:05:71:53:62 Authority key identifier: 29:3D:10:44:CD:48:D6:17:16:D7:59:E0:20:DD:BD:AA:81:4D:5C:D5 Certificate issuer: /CN=293d1044cd48d61716d759e020ddbdaa814d5cd5 Certificate serial: 019BF57567F15A59CFE3ED03263DBB1734E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KT0QRM1I1hcW11ngIN29qoFNXNU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.mft Manifest number: 0FEF Signing time: Sun 25 Jan 2026 14:01:10 +0000 Manifest this update: Sun 25 Jan 2026 14:01:10 +0000 Manifest next update: Mon 26 Jan 2026 14:01:10 +0000 Files and hashes: 1: G8Xjmm3bP-hXRGstLE8Fpo1sPVM.roa (hash: fWJBQMog1YWkp2bEy9v1fjvr2kKDsca319UpenUU6lI=) 2: KT0QRM1I1hcW11ngIN29qoFNXNU.crl (hash: QP2sr39Dpu1ANXfgK1QFhVd+3je95AokA0fHDmQS7nQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.mft rsync://rpki.ripe.net/repository/DEFAULT/KT0QRM1I1hcW11ngIN29qoFNXNU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:67:f1:5a:59:cf:e3:ed:03:26:3d:bb:17:34:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=293d1044cd48d61716d759e020ddbdaa814d5cd5 Validity Not Before: Jan 25 14:01:10 2026 GMT Not After : Jan 26 14:01:10 2026 GMT Subject: CN=4df3c0ef118d6692995fc89cc7e2fc6e05715362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d6:35:43:24:53:65:9f:ef:12:b0:72:6d:e1: 4b:52:30:b6:1c:ea:f7:f1:45:ec:31:de:53:3f:85: 64:bc:b2:41:d4:62:1c:b8:cc:64:f8:e0:1a:92:e0: 3e:f7:57:13:59:dd:c3:13:c0:19:50:9a:1c:96:95: 49:f2:0f:2d:ba:1d:bd:20:79:8b:de:85:78:47:ce: fc:62:04:5f:c2:83:38:65:7e:6a:fb:f8:8f:2e:1c: 5d:5e:54:4f:39:f9:9e:2f:35:0a:58:74:fb:9a:48: 54:6b:93:f7:87:24:ab:81:1b:bb:f8:2a:04:50:1f: f5:af:8c:9d:e1:e3:ef:34:59:aa:db:1d:dd:72:63: 9a:b7:0d:c7:25:be:5c:70:1e:4b:1e:f2:84:f0:5e: f1:3b:69:d0:b8:51:61:72:22:7f:58:c9:c9:cf:d3: 01:1c:4b:9c:0b:6a:3e:6e:95:ab:d9:d9:46:b5:f2: 86:f1:30:b3:f1:7b:84:e8:cd:de:6b:a6:33:59:59: 20:11:f8:c8:18:ad:7e:0c:62:58:16:ff:8f:ed:2e: 0f:fd:78:4e:25:2d:51:02:d2:39:c1:be:08:15:97: c2:4b:cd:79:cd:91:87:2b:a7:f6:46:1b:fa:92:ce: 49:d6:3a:33:a9:69:5c:e9:36:78:01:37:87:b3:d9: e4:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:F3:C0:EF:11:8D:66:92:99:5F:C8:9C:C7:E2:FC:6E:05:71:53:62 X509v3 Authority Key Identifier: keyid:29:3D:10:44:CD:48:D6:17:16:D7:59:E0:20:DD:BD:AA:81:4D:5C:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT0QRM1I1hcW11ngIN29qoFNXNU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:91:39:0c:ac:18:d8:a0:21:56:88:0f:31:d0:a4:a7:62:c2: 40:73:51:15:a1:7a:4d:e4:f4:cf:d0:76:8a:19:df:a8:61:a8: 66:46:48:5a:33:81:a2:29:96:16:bc:84:5c:30:52:13:ed:f5: 7f:2d:71:cd:f2:d1:3c:0f:eb:e4:e1:73:d9:6e:5b:d2:43:46: af:6e:61:20:95:fa:e3:34:9c:d2:34:99:6b:d3:e5:58:0c:87: 4d:d3:d1:3d:74:82:50:19:fa:1d:f1:fa:7c:0d:46:5c:da:cf: 1f:c3:da:01:e6:0c:fe:bd:2f:75:a2:95:1d:8a:46:1a:f7:13: 6d:44:37:39:5f:1f:37:03:72:e7:b1:38:42:7f:21:7d:ac:cc: e2:43:6d:c4:b3:01:eb:57:09:cc:45:bc:03:3e:e0:96:95:50: 2c:a8:30:a8:55:70:82:e7:89:19:ad:d1:1c:03:e9:4e:61:fb: 6a:29:cf:d4:a7:11:54:79:07:09:67:04:ad:3d:9f:1f:ce:bb: 9a:c6:5f:45:f2:0b:8b:ad:9e:c4:89:f3:2b:2a:ad:1e:46:53: 45:33:99:4f:da:41:b0:07:f1:3b:0e:cb:ec:ab:c3:2b:39:31: e3:2f:9b:84:60:4b:47:75:38:34:53:54:f9:2d:f8:61:40:1f: 45:2a:c1:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dWfxWlnP4+0DJj27FzToMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5M2QxMDQ0Y2Q0OGQ2MTcxNmQ3NTllMDIwZGRiZGFhODE0 ZDVjZDUwHhcNMjYwMTI1MTQwMTEwWhcNMjYwMTI2MTQwMTEwWjAzMTEwLwYDVQQD Eyg0ZGYzYzBlZjExOGQ2NjkyOTk1ZmM4OWNjN2UyZmM2ZTA1NzE1MzYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNY1QyRTZZ/vErBybeFLUjC2HOr3 8UXsMd5TP4VkvLJB1GIcuMxk+OAakuA+91cTWd3DE8AZUJoclpVJ8g8tuh29IHmL 3oV4R878YgRfwoM4ZX5q+/iPLhxdXlRPOfmeLzUKWHT7mkhUa5P3hySrgRu7+CoE UB/1r4yd4ePvNFmq2x3dcmOatw3HJb5ccB5LHvKE8F7xO2nQuFFhciJ/WMnJz9MB HEucC2o+bpWr2dlGtfKG8TCz8XuE6M3ea6YzWVkgEfjIGK1+DGJYFv+P7S4P/XhO JS1RAtI5wb4IFZfCS815zZGHK6f2Rhv6ks5J1jozqWlc6TZ4ATeHs9nk3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE3zwO8RjWaSmV/InMfi/G4FcVNiMB8GA1UdIwQY MBaAFCk9EETNSNYXFtdZ4CDdvaqBTVzVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1QwUVJNMUkxaGNXMTFuZ0lOMjlxb0ZOWE5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9kZWYwOTUtMDU2Yi00ZGQzLWJmMWUt ZTcxYmVkYTFmMjk5LzEvS1QwUVJNMUkxaGNXMTFuZ0lOMjlxb0ZOWE5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9kZWYwOTUtMDU2Yi00ZGQzLWJmMWUtZTcxYmVkYTFmMjk5 LzEvS1QwUVJNMUkxaGNXMTFuZ0lOMjlxb0ZOWE5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIZE5DKwY 2KAhVogPMdCkp2LCQHNRFaF6TeT0z9B2ihnfqGGoZkZIWjOBoimWFryEXDBSE+31 fy1xzfLRPA/r5OFz2W5b0kNGr25hIJX64zSc0jSZa9PlWAyHTdPRPXSCUBn6HfH6 fA1GXNrPH8PaAeYM/r0vdaKVHYpGGvcTbUQ3OV8fNwNy57E4Qn8hfazM4kNtxLMB 61cJzEW8Az7glpVQLKgwqFVwgueJGa3RHAPpTmH7ainP1KcRVHkHCWcErT2fH867 msZfRfILi62exInzKyqtHkZTRTOZT9pBsAfxOw7L7KvDKzkx4y+bhGBLR3U4NFNU +S34YUAfRSrBOA== -----END CERTIFICATE-----Generated at Sun Jan 25 21:10:24 2026 by rpki-client