This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft File: KUoc22jxVM-VQYowjILY2lB3UQk.mft (raw, json) Hash identifier: ikADu8BhFzaEl0EQA9RPQLWDGm+3lvfUGwFj4+SIrro= Subject key identifier: 3F:AC:98:41:DB:C1:7E:5B:8E:1A:18:2B:84:23:6F:8A:28:56:FB:1D Authority key identifier: 29:4A:1C:DB:68:F1:54:CF:95:41:8A:30:8C:82:D8:DA:50:77:51:09 Certificate issuer: /CN=294a1cdb68f154cf95418a308c82d8da50775109 Certificate serial: 019BF687F28E4C931002D6183AF873188988 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft Manifest number: 147E Signing time: Sun 25 Jan 2026 19:01:03 +0000 Manifest this update: Sun 25 Jan 2026 19:01:03 +0000 Manifest next update: Mon 26 Jan 2026 19:01:03 +0000 Files and hashes: 1: B6o8w4JwncV5UpdSgcO7ItJ2vOY.roa (hash: fNh1jUU0AZ9h8EIANivzzlh97Xsidf9NN1/ISCBJySU=) 2: KUoc22jxVM-VQYowjILY2lB3UQk.crl (hash: d0hs1thR5vUjsNM+RJUJZEUVti6+K8aOsCzUcelP4AY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:f2:8e:4c:93:10:02:d6:18:3a:f8:73:18:89:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=294a1cdb68f154cf95418a308c82d8da50775109 Validity Not Before: Jan 25 19:01:03 2026 GMT Not After : Jan 26 19:01:03 2026 GMT Subject: CN=3fac9841dbc17e5b8e1a182b84236f8a2856fb1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8d:0d:70:fd:47:47:a7:f2:94:50:42:44:4c: 95:e9:e7:e8:c1:88:eb:7a:42:b4:9e:1b:66:4b:a8: 89:f8:45:da:ca:43:55:47:0a:16:cc:95:d2:60:dd: 18:34:5f:86:63:17:f8:32:36:32:07:fa:5d:ef:b5: 17:5b:7f:a0:1a:20:c3:40:2c:6b:ac:4d:09:f1:5d: 11:8b:3d:ca:aa:59:b7:01:96:8e:90:0d:30:14:04: d9:0d:26:49:7a:93:59:5b:8a:8c:a6:36:66:80:e4: 33:3e:ea:7f:8a:bd:d1:2b:40:b6:3a:7e:80:df:90: 9b:05:4b:62:2f:16:43:9f:f7:0d:c1:29:3c:37:4c: f7:af:b0:55:d6:5b:9f:20:6b:c6:7d:69:8a:f6:99: b7:4f:14:7f:24:79:34:5e:8b:c3:5d:42:92:74:dd: 23:8a:8c:e5:1e:62:b9:f8:92:86:2f:5d:4c:ea:ad: 15:74:58:79:c9:d7:56:84:3e:1a:7e:0b:57:18:91: 77:68:69:26:1f:05:14:13:b4:ce:b2:47:fb:ee:a0: 83:fd:db:89:92:fb:73:f2:45:fa:50:54:c2:e3:fe: c4:71:87:54:f4:b1:4f:43:e5:28:dc:4b:32:28:6a: 9d:56:97:d4:aa:d9:79:14:b8:cc:75:4b:f4:32:f4: 2a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:AC:98:41:DB:C1:7E:5B:8E:1A:18:2B:84:23:6F:8A:28:56:FB:1D X509v3 Authority Key Identifier: keyid:29:4A:1C:DB:68:F1:54:CF:95:41:8A:30:8C:82:D8:DA:50:77:51:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:22:3d:4c:55:4b:20:0a:f0:ab:ea:39:42:dc:a2:6f:08:0d: fe:4f:2f:60:e2:6e:ad:95:24:25:9d:f4:62:13:58:7b:ec:4e: 64:24:fe:03:5d:4c:68:63:2a:d1:0c:cc:7f:3c:c3:44:31:29: 89:bb:72:5b:4f:cb:1c:a4:b4:10:3c:9b:6b:c3:2c:5d:ea:a0: 4b:62:54:d3:a2:03:11:99:88:29:d1:fe:67:e9:b9:fb:02:5d: 81:ca:ee:fd:56:12:47:72:12:6d:4c:a0:7f:92:05:1a:e0:68: b8:6c:7f:c3:f3:8e:f3:c4:9f:4a:1d:d0:4c:8c:f5:de:4d:fa: 11:8e:24:19:1d:eb:3a:33:a8:ca:c1:a5:33:0d:1c:69:fb:6b: be:dc:d2:25:f8:7f:ca:2b:06:32:2c:86:e7:d2:f9:5e:94:3d: ce:69:03:6b:1b:b1:f8:71:ba:4b:90:f1:c0:66:0a:e4:6f:e4: 3f:3f:47:83:95:f0:45:48:a4:c2:a7:ab:c7:1a:a6:58:52:5f: 11:74:88:ad:c0:09:6f:f1:ef:be:a2:7b:58:f0:5c:da:02:a6: 49:9f:48:44:b7:54:d9:77:84:e8:97:1f:8b:9d:bb:21:a3:00: 63:18:3f:49:20:d5:aa:b5:15:4d:6e:4e:8a:68:ab:05:8d:15: db:0d:0e:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h/KOTJMQAtYYOvhzGImIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NGExY2RiNjhmMTU0Y2Y5NTQxOGEzMDhjODJkOGRhNTA3 NzUxMDkwHhcNMjYwMTI1MTkwMTAzWhcNMjYwMTI2MTkwMTAzWjAzMTEwLwYDVQQD EygzZmFjOTg0MWRiYzE3ZTViOGUxYTE4MmI4NDIzNmY4YTI4NTZmYjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqI0NcP1HR6fylFBCREyV6efowYjr ekK0nhtmS6iJ+EXaykNVRwoWzJXSYN0YNF+GYxf4MjYyB/pd77UXW3+gGiDDQCxr rE0J8V0Riz3Kqlm3AZaOkA0wFATZDSZJepNZW4qMpjZmgOQzPup/ir3RK0C2On6A 35CbBUtiLxZDn/cNwSk8N0z3r7BV1lufIGvGfWmK9pm3TxR/JHk0XovDXUKSdN0j iozlHmK5+JKGL11M6q0VdFh5yddWhD4afgtXGJF3aGkmHwUUE7TOskf77qCD/duJ kvtz8kX6UFTC4/7EcYdU9LFPQ+Uo3EsyKGqdVpfUqtl5FLjMdUv0MvQqLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD+smEHbwX5bjhoYK4Qjb4ooVvsdMB8GA1UdIwQY MBaAFClKHNto8VTPlUGKMIyC2NpQd1EJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1VvYzIyanhWTS1WUVlvd2pJTFkybEIzVVFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8wNGY0NzQtZTNiNS00NTk1LWEwNDQt NjU3ZTQxYzYzY2E5LzEvS1VvYzIyanhWTS1WUVlvd2pJTFkybEIzVVFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS8wNGY0NzQtZTNiNS00NTk1LWEwNDQtNjU3ZTQxYzYzY2E5 LzEvS1VvYzIyanhWTS1WUVlvd2pJTFkybEIzVVFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhSI9TFVL IArwq+o5QtyibwgN/k8vYOJurZUkJZ30YhNYe+xOZCT+A11MaGMq0QzMfzzDRDEp ibtyW0/LHKS0EDyba8MsXeqgS2JU06IDEZmIKdH+Z+m5+wJdgcru/VYSR3ISbUyg f5IFGuBouGx/w/OO88SfSh3QTIz13k36EY4kGR3rOjOoysGlMw0caftrvtzSJfh/ yisGMiyG59L5XpQ9zmkDaxux+HG6S5DxwGYK5G/kPz9Hg5XwRUikwqerxxqmWFJf EXSIrcAJb/HvvqJ7WPBc2gKmSZ9IRLdU2XeE6Jcfi527IaMAYxg/SSDVqrUVTW5O imirBY0V2w0O3Q== -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:56 2026 by rpki-client