This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft File: kwpXLBbQxE93Zlh9kth4ujBUHR4.mft (raw, json) Hash identifier: 6qNQXSLzdJowq2EL3/f9dNLPVOLhi4JqYVXVLwN5JYE= Subject key identifier: 56:27:D0:A6:75:6C:28:4C:95:39:30:68:1D:D4:27:25:A6:14:80:E8 Authority key identifier: 93:0A:57:2C:16:D0:C4:4F:77:66:58:7D:92:D8:78:BA:30:54:1D:1E Certificate issuer: /CN=930a572c16d0c44f7766587d92d878ba30541d1e Certificate serial: 019BF79A74AA8A2220FD5406D23D76002E31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft Manifest number: 09BF Signing time: Mon 26 Jan 2026 00:00:53 +0000 Manifest this update: Mon 26 Jan 2026 00:00:53 +0000 Manifest next update: Tue 27 Jan 2026 00:00:53 +0000 Files and hashes: 1: HmYrDKd2yjYmZLmWzYz7se6Li1c.roa (hash: 2E+4PcgEvP7v29a2K/Pql8IKPHh2ZcXb/x/xhB+Fnbs=) 2: kwpXLBbQxE93Zlh9kth4ujBUHR4.crl (hash: Wl1u5RwVK6z0OamTNDWma9fdQot4tCdtx+e2Owl4w6U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:74:aa:8a:22:20:fd:54:06:d2:3d:76:00:2e:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=930a572c16d0c44f7766587d92d878ba30541d1e Validity Not Before: Jan 26 00:00:53 2026 GMT Not After : Jan 27 00:00:53 2026 GMT Subject: CN=5627d0a6756c284c953930681dd42725a61480e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:46:a6:2c:64:2e:72:fc:19:b9:a8:96:c1:20: 7f:3e:12:f7:15:1e:d5:63:2f:dc:4d:59:d4:58:a0: 62:c4:a2:e8:69:4d:70:1b:9b:75:55:ef:ba:b2:4e: 16:f8:85:27:c7:87:3f:ba:e2:2b:45:b1:53:b2:31: bc:79:c0:f8:cb:bd:05:11:7e:b9:23:76:8b:ea:c1: 6e:18:14:14:5f:44:1d:2b:0d:34:94:d3:d8:1a:b2: 2e:71:31:3d:28:ee:1d:97:60:c7:4b:0c:db:64:fe: 71:6a:3c:d8:f1:de:82:7a:d8:b0:e1:ff:16:e8:f6: 2e:6e:fd:fd:e4:a7:84:88:e5:fc:9e:f0:6b:58:64: d1:01:50:48:f9:20:a7:7b:89:50:ab:61:ce:ec:43: 7d:31:b1:49:0a:e3:26:40:0c:0f:e6:3d:d5:42:df: ce:e2:fa:ac:5a:88:f2:f6:1a:79:25:ff:66:57:aa: 6f:fd:f9:ee:ed:f4:46:21:b3:a1:80:7f:c1:11:33: 26:34:cc:80:4d:1d:9c:ad:9a:c4:a8:2b:50:33:02: f0:90:4d:39:a9:e2:d2:da:3d:30:e6:5a:50:d2:2a: 09:27:02:1d:f4:ad:c2:95:f4:af:24:59:64:98:d7: eb:b5:64:e1:ab:14:da:18:51:9d:c9:4c:11:35:af: af:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:27:D0:A6:75:6C:28:4C:95:39:30:68:1D:D4:27:25:A6:14:80:E8 X509v3 Authority Key Identifier: keyid:93:0A:57:2C:16:D0:C4:4F:77:66:58:7D:92:D8:78:BA:30:54:1D:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:cc:ac:6d:8f:81:64:43:ac:4e:df:d5:88:1e:56:a2:3b:94: ee:43:af:4c:10:16:f1:28:88:9b:de:cb:2e:78:ec:da:80:9f: 93:fb:d5:7f:4e:ae:f4:2c:2b:27:3a:7a:20:a7:a3:22:f7:2f: 52:b0:05:60:01:a7:9c:5a:cf:72:60:ea:1d:7f:d2:b0:1e:13: 8f:32:d1:3d:8a:39:b0:be:9b:2d:00:6a:ed:dc:04:f6:40:ff: 55:d5:37:1f:23:b1:4a:23:94:d5:85:c6:13:4d:86:f2:4c:0f: 62:26:01:28:c6:41:3c:fd:57:4f:ad:71:05:6b:ab:88:35:23: 28:5f:3a:c8:10:67:b6:d0:db:63:65:33:31:8a:e0:3c:f6:c4: ce:fa:93:48:c9:60:59:45:e0:fb:cf:2f:5c:08:aa:51:4a:cc: 69:18:47:1a:95:d5:10:31:56:84:10:87:87:a3:24:68:d6:1f: dc:e4:10:7e:90:89:9b:65:42:1e:e4:fe:cc:b7:49:36:87:0f: 0b:f6:84:0e:59:a3:bd:b9:07:1e:f4:61:d5:63:10:fb:83:76: 15:f5:17:62:72:13:79:a5:23:4c:db:3f:f0:d2:62:aa:a4:df: b8:76:df:4a:f4:3c:57:c0:4d:50:01:0d:77:23:ff:e6:d8:d2: bb:99:ed:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mnSqiiIg/VQG0j12AC4xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMGE1NzJjMTZkMGM0NGY3NzY2NTg3ZDkyZDg3OGJhMzA1 NDFkMWUwHhcNMjYwMTI2MDAwMDUzWhcNMjYwMTI3MDAwMDUzWjAzMTEwLwYDVQQD Eyg1NjI3ZDBhNjc1NmMyODRjOTUzOTMwNjgxZGQ0MjcyNWE2MTQ4MGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EamLGQucvwZuaiWwSB/PhL3FR7V Yy/cTVnUWKBixKLoaU1wG5t1Ve+6sk4W+IUnx4c/uuIrRbFTsjG8ecD4y70FEX65 I3aL6sFuGBQUX0QdKw00lNPYGrIucTE9KO4dl2DHSwzbZP5xajzY8d6Cetiw4f8W 6PYubv395KeEiOX8nvBrWGTRAVBI+SCne4lQq2HO7EN9MbFJCuMmQAwP5j3VQt/O 4vqsWojy9hp5Jf9mV6pv/fnu7fRGIbOhgH/BETMmNMyATR2crZrEqCtQMwLwkE05 qeLS2j0w5lpQ0ioJJwId9K3ClfSvJFlkmNfrtWThqxTaGFGdyUwRNa+vpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFYn0KZ1bChMlTkwaB3UJyWmFIDoMB8GA1UdIwQY MBaAFJMKVywW0MRPd2ZYfZLYeLowVB0eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3dwWExCYlF4RTkzWmxoOWt0aDR1akJVSFI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9hYTU1YTItZTMzZS00ZGMwLTlkODct OGNjNjU3OTQxNWRhLzEva3dwWExCYlF4RTkzWmxoOWt0aDR1akJVSFI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9hYTU1YTItZTMzZS00ZGMwLTlkODctOGNjNjU3OTQxNWRh LzEva3dwWExCYlF4RTkzWmxoOWt0aDR1akJVSFI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1MysbY+B ZEOsTt/ViB5WojuU7kOvTBAW8SiIm97LLnjs2oCfk/vVf06u9CwrJzp6IKejIvcv UrAFYAGnnFrPcmDqHX/SsB4TjzLRPYo5sL6bLQBq7dwE9kD/VdU3HyOxSiOU1YXG E02G8kwPYiYBKMZBPP1XT61xBWuriDUjKF86yBBnttDbY2UzMYrgPPbEzvqTSMlg WUXg+88vXAiqUUrMaRhHGpXVEDFWhBCHh6MkaNYf3OQQfpCJm2VCHuT+zLdJNocP C/aEDlmjvbkHHvRh1WMQ+4N2FfUXYnITeaUjTNs/8NJiqqTfuHbfSvQ8V8BNUAEN dyP/5tjSu5ntHg== -----END CERTIFICATE-----Generated at Mon Jan 26 07:17:13 2026 by rpki-client