This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft File: kdjDKnA5cqrqCToB-N7fV_lnVXU.mft (raw, json) Hash identifier: cI2GvIEwi4BBBo90OJ8GcQirvlT+QwsNbw/+7bH3KPQ= Subject key identifier: C0:BE:D5:FA:A1:BB:DE:BC:D3:53:7A:AF:06:90:76:8A:A8:98:7A:B6 Authority key identifier: 91:D8:C3:2A:70:39:72:AA:EA:09:3A:01:F8:DE:DF:57:F9:67:55:75 Certificate issuer: /CN=91d8c32a703972aaea093a01f8dedf57f9675575 Certificate serial: 019BF5ABC154DADC6FD02A0F0C5B380025C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 15:00:32 +0000 Manifest this update: Sun 25 Jan 2026 15:00:32 +0000 Manifest next update: Mon 26 Jan 2026 15:00:32 +0000 Files and hashes: 1: fqnqgR-axVnKnA0P1MNMOEPlOKQ.roa (hash: dS17jdz8caEPLRuaszV/W/bAD/gLlYgn1NNbi4+I3kM=) 2: gRgykk6dz_IwqNNOBfkFkQce2pk.roa (hash: PzJ5ETV1AGTHV0gxW4EKMy3jivHWboSvAxQ7aMFFRFY=) 3: kdjDKnA5cqrqCToB-N7fV_lnVXU.crl (hash: w5tC3qiuJEd29S/MRKllNZhNkQwYyo1GPFy87wcxK58=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ab:c1:54:da:dc:6f:d0:2a:0f:0c:5b:38:00:25:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91d8c32a703972aaea093a01f8dedf57f9675575 Validity Not Before: Jan 25 15:00:32 2026 GMT Not After : Jan 26 15:00:32 2026 GMT Subject: CN=c0bed5faa1bbdebcd3537aaf0690768aa8987ab6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6f:eb:3e:cb:8b:21:3b:91:c3:de:2a:23:e5: cf:80:09:f8:6e:19:95:ac:65:e9:ee:ff:e3:a2:4b: 63:d0:e2:87:ea:06:ce:26:ae:52:4c:7f:8c:25:7a: bb:26:e5:07:f9:78:af:25:63:2a:83:a9:3e:a2:54: 8d:a4:7c:01:24:8c:f0:fe:f4:77:a6:68:c3:da:c8: 80:e7:1e:f7:1d:24:59:7d:5f:61:d8:ba:64:63:e6: ed:7e:a1:d5:f6:e1:e8:05:bc:c8:a1:52:e3:89:a1: fd:63:75:99:00:0b:5d:ca:97:49:c0:d4:8d:28:d5: 7e:ab:9a:7d:32:fd:84:d8:c2:c2:79:63:16:01:ac: 2a:75:2e:81:4c:fa:cb:2f:13:41:9c:08:31:36:f6: 15:b1:db:1a:27:6f:0f:41:7d:e4:16:bb:e2:6f:5e: db:68:86:da:f2:a1:87:09:09:8f:9c:51:d0:de:fa: 46:37:eb:79:c5:01:30:ae:79:8d:41:24:10:e8:cd: f6:ba:b7:12:63:f7:d4:0f:8b:b2:cf:be:d1:55:a0: 6d:c8:a9:21:4a:93:05:7e:e1:e7:83:64:d9:f9:ba: b2:f8:18:cc:52:ac:b8:0b:03:d8:f7:a8:91:a6:44: 93:18:5c:de:72:ab:c3:3d:41:b8:05:b3:47:b5:c1: 8a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:BE:D5:FA:A1:BB:DE:BC:D3:53:7A:AF:06:90:76:8A:A8:98:7A:B6 X509v3 Authority Key Identifier: keyid:91:D8:C3:2A:70:39:72:AA:EA:09:3A:01:F8:DE:DF:57:F9:67:55:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:94:57:ee:35:2e:43:01:52:ff:6d:b5:f1:8d:b1:0c:8d:15: dc:0f:2d:8a:7f:6e:64:13:e3:f0:72:ca:9d:85:fc:66:89:6c: e0:2e:24:7f:3b:08:dd:b3:e3:02:bf:6f:f7:61:d9:6a:23:e2: da:a6:e1:07:f8:23:f3:4a:84:15:21:cd:2e:19:91:87:37:72: d2:30:8a:67:b6:c6:7c:fd:5b:2e:dd:d0:b9:53:11:59:a9:cc: de:58:bc:7f:96:f9:0b:52:23:96:95:d4:02:5f:4f:51:e6:1a: 5a:89:33:e5:b5:1e:2f:82:cc:ea:49:6c:41:75:75:81:af:d1: 64:2b:30:f5:0f:d7:ce:ac:76:20:13:44:7e:63:4a:0f:f2:77: ff:d6:59:38:63:0a:23:68:7a:ce:9b:98:73:fd:0f:9b:4b:55: 45:cf:1d:f0:e2:eb:73:af:b0:a9:0b:b1:17:0f:0e:d3:60:e1: 07:73:37:db:67:0e:8b:87:50:85:8d:ae:75:6b:2b:04:1d:eb: 78:6d:a3:85:5c:8d:f3:44:ea:fe:5e:8c:fb:d0:ac:d6:6f:91: 29:17:20:d1:6c:56:5e:9c:2d:08:6c:3c:a9:ed:0e:29:e5:c3: c0:73:8d:45:54:bc:5f:77:a7:4d:38:fc:5b:67:1e:92:09:a5: 18:43:24:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1q8FU2txv0CoPDFs4ACXAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxZDhjMzJhNzAzOTcyYWFlYTA5M2EwMWY4ZGVkZjU3Zjk2 NzU1NzUwHhcNMjYwMTI1MTUwMDMyWhcNMjYwMTI2MTUwMDMyWjAzMTEwLwYDVQQD EyhjMGJlZDVmYWExYmJkZWJjZDM1MzdhYWYwNjkwNzY4YWE4OTg3YWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyW/rPsuLITuRw94qI+XPgAn4bhmV rGXp7v/joktj0OKH6gbOJq5STH+MJXq7JuUH+XivJWMqg6k+olSNpHwBJIzw/vR3 pmjD2siA5x73HSRZfV9h2LpkY+btfqHV9uHoBbzIoVLjiaH9Y3WZAAtdypdJwNSN KNV+q5p9Mv2E2MLCeWMWAawqdS6BTPrLLxNBnAgxNvYVsdsaJ28PQX3kFrvib17b aIba8qGHCQmPnFHQ3vpGN+t5xQEwrnmNQSQQ6M32urcSY/fUD4uyz77RVaBtyKkh SpMFfuHng2TZ+bqy+BjMUqy4CwPY96iRpkSTGFzecqvDPUG4BbNHtcGK+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMC+1fqhu96801N6rwaQdoqomHq2MB8GA1UdIwQY MBaAFJHYwypwOXKq6gk6Afje31f5Z1V1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2RqREtuQTVjcXJxQ1RvQi1ON2ZWX2xuVlhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC80ZTgxNmQtZDhlYy00MzdjLTk4NmEt M2MxMjc4MWUyMDJkLzEva2RqREtuQTVjcXJxQ1RvQi1ON2ZWX2xuVlhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC80ZTgxNmQtZDhlYy00MzdjLTk4NmEtM2MxMjc4MWUyMDJk LzEva2RqREtuQTVjcXJxQ1RvQi1ON2ZWX2xuVlhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADJRX7jUu QwFS/2218Y2xDI0V3A8tin9uZBPj8HLKnYX8Zols4C4kfzsI3bPjAr9v92HZaiPi 2qbhB/gj80qEFSHNLhmRhzdy0jCKZ7bGfP1bLt3QuVMRWanM3li8f5b5C1IjlpXU Al9PUeYaWokz5bUeL4LM6klsQXV1ga/RZCsw9Q/Xzqx2IBNEfmNKD/J3/9ZZOGMK I2h6zpuYc/0Pm0tVRc8d8OLrc6+wqQuxFw8O02DhB3M322cOi4dQhY2udWsrBB3r eG2jhVyN80Tq/l6M+9Cs1m+RKRcg0WxWXpwtCGw8qe0OKeXDwHONRVS8X3enTTj8 W2cekgmlGEMkDw== -----END CERTIFICATE-----Generated at Sun Jan 25 21:10:35 2026 by rpki-client