This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft File: KS-wn35or-lfI5ExFObApqpyb90.mft (raw, json) Hash identifier: yKza9BJ3e+ODoRNaixX+url2noCIggqw2QienrIOi2g= Subject key identifier: 0D:CF:0B:3F:A0:62:04:66:CE:72:B6:C9:E5:D4:55:23:9E:A6:22:1C Authority key identifier: 29:2F:B0:9F:7E:68:AF:E9:5F:23:91:31:14:E6:C0:A6:AA:72:6F:DD Certificate issuer: /CN=292fb09f7e68afe95f23913114e6c0a6aa726fdd Certificate serial: 019BF951D4FFEA03751FF4DF128CFFB6B18C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS-wn35or-lfI5ExFObApqpyb90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft Manifest number: 0500 Signing time: Mon 26 Jan 2026 08:00:48 +0000 Manifest this update: Mon 26 Jan 2026 08:00:48 +0000 Manifest next update: Tue 27 Jan 2026 08:00:48 +0000 Files and hashes: 1: KS-wn35or-lfI5ExFObApqpyb90.crl (hash: jB3/ZjS2jGh28T/ah++9+HpqrUqgHlVUjFkrLzOpK5k=) 2: NBei4LdBsHZ6BQheCZXzva3D_io.roa (hash: Ao2IxiAhOOXCtUZ4UAP36ctfXjHHxfB4rqAgfIlvuRg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft rsync://rpki.ripe.net/repository/DEFAULT/KS-wn35or-lfI5ExFObApqpyb90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:51:d4:ff:ea:03:75:1f:f4:df:12:8c:ff:b6:b1:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=292fb09f7e68afe95f23913114e6c0a6aa726fdd Validity Not Before: Jan 26 08:00:48 2026 GMT Not After : Jan 27 08:00:48 2026 GMT Subject: CN=0dcf0b3fa0620466ce72b6c9e5d455239ea6221c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:c1:f5:05:7b:66:08:11:e6:7f:84:43:9b:00: 9f:82:2f:e0:a7:d0:20:9b:67:3b:ac:b4:99:3e:e0: a3:b0:53:bb:d0:bd:47:79:09:66:f8:78:ce:28:40: ca:07:90:18:bf:9b:8c:b9:78:b0:6e:a5:bf:9e:fa: 6b:df:fe:59:fa:4d:69:c1:41:38:1d:bf:11:e5:b9: d5:e1:65:49:1c:9c:a6:03:8f:d0:43:5e:e8:34:f5: 08:7e:3e:87:ea:7b:96:4d:27:ef:9c:bb:39:cd:a6: aa:af:b4:c4:65:5b:1f:44:1c:66:87:99:1e:f6:62: c5:a6:1a:4a:27:58:20:66:77:cb:a5:7b:a0:2d:c8: 66:db:74:e6:71:ee:74:59:c5:58:c0:20:75:7e:2d: 08:dc:e7:e3:41:1f:7b:e1:11:2a:77:d8:c2:90:14: 6e:31:ab:ad:95:e2:1a:39:ae:8b:e2:81:ce:83:16: 78:74:0f:37:c1:06:18:4c:0b:58:2d:62:b7:48:63: 55:c9:ff:92:d5:c5:94:a1:74:aa:e0:24:a0:c1:ac: 84:b1:2f:0a:13:57:1a:a5:d7:ab:ab:db:60:17:2d: 70:13:41:ab:31:b5:82:c6:32:f9:fd:37:e5:7f:db: bb:a8:46:5a:f8:68:81:1f:07:e3:a0:3c:ee:cc:da: 34:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:CF:0B:3F:A0:62:04:66:CE:72:B6:C9:E5:D4:55:23:9E:A6:22:1C X509v3 Authority Key Identifier: keyid:29:2F:B0:9F:7E:68:AF:E9:5F:23:91:31:14:E6:C0:A6:AA:72:6F:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS-wn35or-lfI5ExFObApqpyb90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:8a:36:00:55:65:ca:2c:b8:b2:c5:bf:ae:00:1f:62:54:7a: 2a:cb:6c:f2:7e:2d:02:24:b7:c0:96:36:b5:1c:f0:c2:49:b9: 95:df:17:ff:6c:10:bd:a0:e2:0e:df:69:40:41:82:d1:f1:bd: 23:6a:44:40:9e:0c:fa:14:e4:f5:b1:3d:bc:38:71:e4:52:11: 1d:20:7a:10:69:4c:76:0a:60:79:be:7a:86:27:0b:7d:73:10: 2a:e7:47:35:7c:9d:c4:15:72:a6:59:e6:01:2d:37:72:3f:97: d5:f0:b3:ec:49:41:3f:6a:f7:9d:8d:f1:aa:3a:34:60:be:8c: 06:96:7d:2f:03:80:55:19:fa:f3:9c:11:c4:2a:30:5e:2b:33: 8a:37:28:8f:1d:a2:ca:ef:d1:6f:b9:7e:0c:3c:39:26:8b:8f: ad:ba:6d:8a:7d:37:72:21:56:63:2c:00:a5:56:07:07:2f:40: 52:ee:33:78:80:a7:c2:7f:2b:b6:db:22:ce:02:5f:36:36:d8: 10:0c:29:c1:ce:1a:7e:f8:b1:56:aa:23:c7:f2:a3:69:ef:99: 96:0e:e2:ed:e5:c9:7d:e2:ee:d8:3a:ed:cb:66:c2:cc:6c:11: a8:38:15:54:55:a1:5b:6d:4e:4f:de:5c:27:33:0c:60:3f:8d: 6b:37:db:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5UdT/6gN1H/TfEoz/trGMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MmZiMDlmN2U2OGFmZTk1ZjIzOTEzMTE0ZTZjMGE2YWE3 MjZmZGQwHhcNMjYwMTI2MDgwMDQ4WhcNMjYwMTI3MDgwMDQ4WjAzMTEwLwYDVQQD EygwZGNmMGIzZmEwNjIwNDY2Y2U3MmI2YzllNWQ0NTUyMzllYTYyMjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6MH1BXtmCBHmf4RDmwCfgi/gp9Ag m2c7rLSZPuCjsFO70L1HeQlm+HjOKEDKB5AYv5uMuXiwbqW/nvpr3/5Z+k1pwUE4 Hb8R5bnV4WVJHJymA4/QQ17oNPUIfj6H6nuWTSfvnLs5zaaqr7TEZVsfRBxmh5ke 9mLFphpKJ1ggZnfLpXugLchm23Tmce50WcVYwCB1fi0I3OfjQR974REqd9jCkBRu MautleIaOa6L4oHOgxZ4dA83wQYYTAtYLWK3SGNVyf+S1cWUoXSq4CSgwayEsS8K E1capderq9tgFy1wE0GrMbWCxjL5/Tflf9u7qEZa+GiBHwfjoDzuzNo0EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA3PCz+gYgRmznK2yeXUVSOepiIcMB8GA1UdIwQY MBaAFCkvsJ9+aK/pXyORMRTmwKaqcm/dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1Mtd24zNW9yLWxmSTVFeEZPYkFwcXB5YjkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9lMTMxMTItNTc1OC00NTUyLWIyYWQt ZWQxYjliOGU2NDcwLzEvS1Mtd24zNW9yLWxmSTVFeEZPYkFwcXB5YjkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9lMTMxMTItNTc1OC00NTUyLWIyYWQtZWQxYjliOGU2NDcw LzEvS1Mtd24zNW9yLWxmSTVFeEZPYkFwcXB5YjkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT4o2AFVl yiy4ssW/rgAfYlR6Ksts8n4tAiS3wJY2tRzwwkm5ld8X/2wQvaDiDt9pQEGC0fG9 I2pEQJ4M+hTk9bE9vDhx5FIRHSB6EGlMdgpgeb56hicLfXMQKudHNXydxBVyplnm AS03cj+X1fCz7ElBP2r3nY3xqjo0YL6MBpZ9LwOAVRn685wRxCowXiszijcojx2i yu/Rb7l+DDw5JouPrbptin03ciFWYywApVYHBy9AUu4zeICnwn8rttsizgJfNjbY EAwpwc4afvixVqojx/Kjae+Zlg7i7eXJfeLu2Drty2bCzGwRqDgVVFWhW21OT95c JzMMYD+Nazfblg== -----END CERTIFICATE-----Generated at Mon Jan 26 18:18:07 2026 by rpki-client