This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft File: KkRyM2ydAqSIzdd1NNZfsUZewJo.mft (raw, json) Hash identifier: TT6EACTRucynD3f4FZiKiEZ8VCnaVamVipNCs4+jCQM= Subject key identifier: 22:DB:53:2F:E8:DC:4C:54:78:5A:B8:36:6C:8C:26:67:89:E2:7C:C7 Authority key identifier: 2A:44:72:33:6C:9D:02:A4:88:CD:D7:75:34:D6:5F:B1:46:5E:C0:9A Certificate issuer: /CN=2a4472336c9d02a488cdd77534d65fb1465ec09a Certificate serial: 019BF5AC2344BAB58B66C4FE80120B5F4199 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 15:00:57 +0000 Manifest this update: Sun 25 Jan 2026 15:00:57 +0000 Manifest next update: Mon 26 Jan 2026 15:00:57 +0000 Files and hashes: 1: AJpV8hpcC9NXykoo9-dL6aH0A9g.roa (hash: k7moU7Gr/UvmzLxveWCv2AfmeEfD1dJ7zogQAYvX1ZU=) 2: KkRyM2ydAqSIzdd1NNZfsUZewJo.crl (hash: fzp3TkhnTEalRhYlAOYN+P+sr1iSIb0BmVwllDS+2sY=) 3: weNArfvB6aIBhliGWgRmku9NM4k.roa (hash: 5cqXzpfVcXD0jTHKSY2NMKnFRtchriM7ulhLtiSinGQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:23:44:ba:b5:8b:66:c4:fe:80:12:0b:5f:41:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a4472336c9d02a488cdd77534d65fb1465ec09a Validity Not Before: Jan 25 15:00:57 2026 GMT Not After : Jan 26 15:00:57 2026 GMT Subject: CN=22db532fe8dc4c54785ab8366c8c266789e27cc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7f:c0:2a:82:8f:a3:53:a3:e0:f1:0e:77:f8: 51:81:3f:67:75:07:79:b2:79:f6:c8:9f:91:79:95: a0:69:12:79:83:62:7a:81:8f:48:3c:fa:3d:37:85: 65:e5:fc:04:35:b9:d0:42:26:9e:f8:43:9f:44:93: 8b:51:3e:1f:81:72:fd:d9:b5:6b:b1:01:29:6d:b7: 7b:aa:c0:3f:e1:d1:a5:52:88:b8:31:a9:ac:46:0b: d9:ac:6e:64:53:d1:d1:2c:2c:6e:ef:04:ad:d6:7b: ca:53:94:39:a7:f5:3d:3b:44:f1:a3:14:f1:c9:95: e9:cd:fa:70:db:04:5f:90:e6:cb:9b:17:96:2d:9f: fb:97:7c:3a:b5:36:5d:09:d5:9e:c6:63:66:d7:4c: a9:df:1c:c7:fb:c3:60:2e:22:58:6f:8d:19:bd:e1: 5e:f9:38:c1:57:c4:99:6f:91:c5:7c:6e:7d:5a:1c: 30:74:5a:14:9c:21:ff:18:93:f0:dd:0f:58:cd:cd: fe:20:d9:93:2f:2d:45:7a:1a:eb:b2:77:42:95:32: 97:b7:e1:51:75:09:1d:a0:38:34:81:0f:3b:f5:d4: d7:2f:0a:42:07:26:62:7e:da:e3:6b:f9:c6:c4:1e: ab:45:c5:07:ce:b7:95:a7:c7:de:40:df:55:f5:98: 06:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:DB:53:2F:E8:DC:4C:54:78:5A:B8:36:6C:8C:26:67:89:E2:7C:C7 X509v3 Authority Key Identifier: keyid:2A:44:72:33:6C:9D:02:A4:88:CD:D7:75:34:D6:5F:B1:46:5E:C0:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:13:3e:3f:a3:f8:33:90:9c:e7:b5:0c:8c:1c:5a:14:30:b6: 51:a9:d1:60:27:77:77:2b:99:e1:be:76:c6:83:fb:af:44:df: bf:50:8a:3b:55:cd:c1:e9:29:68:7f:13:7c:b7:b6:88:d8:2d: 60:cb:20:40:76:0c:af:e6:06:7a:84:ae:73:71:d4:96:58:92: fc:44:89:59:63:10:d7:6e:8d:5c:81:c8:85:65:57:13:8e:db: 50:9c:7d:d2:37:a6:2e:d4:fa:7c:af:40:ca:18:62:c6:b0:ce: 28:f4:eb:91:61:3d:21:d1:40:d3:cf:3e:a9:06:ea:40:5f:94: f1:bb:50:c9:67:6a:e1:ac:5c:14:0a:81:56:2c:b0:09:3e:dc: 37:f4:38:89:d5:86:44:39:86:28:1a:1b:e3:b2:46:93:87:5b: 82:aa:64:58:3e:8b:a8:bc:54:c6:16:72:52:24:19:f5:d2:e7: 92:fc:65:f0:63:d6:41:98:43:c5:9b:a1:ff:41:23:31:02:2d: d6:0b:d1:d1:d0:fc:11:92:65:87:1c:fc:8b:24:b6:cb:cd:1f: 2e:d2:83:9e:7f:5f:b9:11:55:98:5c:6d:ff:a0:21:45:89:06: a3:3e:7a:e3:2d:38:09:5b:63:a0:9e:3e:11:80:e7:0e:ce:27: b4:54:b8:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rCNEurWLZsT+gBILX0GZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhNDQ3MjMzNmM5ZDAyYTQ4OGNkZDc3NTM0ZDY1ZmIxNDY1 ZWMwOWEwHhcNMjYwMTI1MTUwMDU3WhcNMjYwMTI2MTUwMDU3WjAzMTEwLwYDVQQD EygyMmRiNTMyZmU4ZGM0YzU0Nzg1YWI4MzY2YzhjMjY2Nzg5ZTI3Y2M3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyH/AKoKPo1Oj4PEOd/hRgT9ndQd5 snn2yJ+ReZWgaRJ5g2J6gY9IPPo9N4Vl5fwENbnQQiae+EOfRJOLUT4fgXL92bVr sQEpbbd7qsA/4dGlUoi4MamsRgvZrG5kU9HRLCxu7wSt1nvKU5Q5p/U9O0TxoxTx yZXpzfpw2wRfkObLmxeWLZ/7l3w6tTZdCdWexmNm10yp3xzH+8NgLiJYb40ZveFe +TjBV8SZb5HFfG59WhwwdFoUnCH/GJPw3Q9Yzc3+INmTLy1FehrrsndClTKXt+FR dQkdoDg0gQ879dTXLwpCByZiftrja/nGxB6rRcUHzreVp8feQN9V9ZgGMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCLbUy/o3ExUeFq4NmyMJmeJ4nzHMB8GA1UdIwQY MBaAFCpEcjNsnQKkiM3XdTTWX7FGXsCaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2tSeU0yeWRBcVNJemRkMU5OWmZzVVpld0pvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8wMWRiODItNDE3Mi00NDA1LWFiNTUt MDA4NmQwMjM4NWQ2LzEvS2tSeU0yeWRBcVNJemRkMU5OWmZzVVpld0pvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8wMWRiODItNDE3Mi00NDA1LWFiNTUtMDA4NmQwMjM4NWQ2 LzEvS2tSeU0yeWRBcVNJemRkMU5OWmZzVVpld0pvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVhM+P6P4 M5Cc57UMjBxaFDC2UanRYCd3dyuZ4b52xoP7r0Tfv1CKO1XNwekpaH8TfLe2iNgt YMsgQHYMr+YGeoSuc3HUlliS/ESJWWMQ126NXIHIhWVXE47bUJx90jemLtT6fK9A yhhixrDOKPTrkWE9IdFA088+qQbqQF+U8btQyWdq4axcFAqBViywCT7cN/Q4idWG RDmGKBob47JGk4dbgqpkWD6LqLxUxhZyUiQZ9dLnkvxl8GPWQZhDxZuh/0EjMQIt 1gvR0dD8EZJlhxz8iyS2y80fLtKDnn9fuRFVmFxt/6AhRYkGoz564y04CVtjoJ4+ EYDnDs4ntFS4RA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:22:51 2026 by rpki-client