This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft File: KwA-WDvbJRH_V6t6MvznQTNLNDs.mft (raw, json) Hash identifier: Xh/XIniqutU5JZZE6ec/25c7K0S6xKj+SZNZLik6aBI= Subject key identifier: FC:CE:D8:49:49:F1:5F:59:DB:46:CA:83:08:55:AE:95:B2:30:30:BC Authority key identifier: 2B:00:3E:58:3B:DB:25:11:FF:57:AB:7A:32:FC:E7:41:33:4B:34:3B Certificate issuer: /CN=2b003e583bdb2511ff57ab7a32fce741334b343b Certificate serial: 019BF462891ECAEF5319F324B18BB35D3C9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwA-WDvbJRH_V6t6MvznQTNLNDs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 09:00:56 +0000 Manifest this update: Sun 25 Jan 2026 09:00:56 +0000 Manifest next update: Mon 26 Jan 2026 09:00:56 +0000 Files and hashes: 1: KZ7bDRNwTfIEQWY_jhARUR9DHxI.roa (hash: eyE+qcEsEBDUoKEFoqctNchUZLkDzCl+DcFXWEI/yFY=) 2: KwA-WDvbJRH_V6t6MvznQTNLNDs.crl (hash: 2F0utG0gmLa3B4pjYZfK6ojN4zucoWD+SQc1EaUS5z8=) 3: NzKx6KcOHXw58MEojB9ud-uaBro.roa (hash: a9iaY6BAt3IsnsebJ+05WFxE0TvGeWD+djHy5NWOc0U=) 4: WVIppZ-adXM0RCbFNu2ZaCBfuZQ.roa (hash: hwZIh3ZVsKyRI6oFuWtqGMKZtqEO+xpper2aZGmlvQM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft rsync://rpki.ripe.net/repository/DEFAULT/KwA-WDvbJRH_V6t6MvznQTNLNDs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:89:1e:ca:ef:53:19:f3:24:b1:8b:b3:5d:3c:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b003e583bdb2511ff57ab7a32fce741334b343b Validity Not Before: Jan 25 09:00:56 2026 GMT Not After : Jan 26 09:00:56 2026 GMT Subject: CN=fcced84949f15f59db46ca830855ae95b23030bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:94:6c:80:19:62:dd:6f:39:3b:87:38:58:31: 60:ef:c0:19:75:ce:c5:8b:e4:87:6e:44:e8:ea:76: d7:4a:d6:67:e6:70:02:2b:fe:5a:dc:48:b2:b0:22: de:5e:69:f7:a5:39:d6:41:c9:b1:17:5f:fe:84:96: 63:e0:ba:a1:39:37:cc:61:f2:83:c4:b8:f2:f3:fe: 9e:ea:9d:3c:5b:bc:34:7d:ad:7c:1e:c4:d4:55:4c: 70:77:2a:e4:7e:5f:bb:22:be:9f:d7:0f:5d:d7:56: 37:d7:df:78:af:3e:44:34:08:2a:ce:30:89:fe:1d: d2:d8:9e:1c:3c:44:42:6e:38:63:79:0c:93:54:ff: bf:5d:ea:cf:1d:bc:e1:91:57:70:87:64:f3:7d:26: ff:f1:2d:0c:48:8b:f5:ba:ee:16:9b:21:00:db:b0: 9a:97:24:50:01:32:41:95:06:3b:3f:e7:ba:55:f5: 9a:73:b5:26:fb:fd:09:f9:8f:cb:4a:12:15:66:59: 0b:ab:4e:16:3d:90:ac:c0:21:08:1b:a9:98:de:b5: 01:a7:c2:1e:19:de:9a:d3:eb:ba:9c:84:14:b8:07: 2f:85:f0:ec:54:23:46:cc:f3:ad:57:56:ea:21:45: 0c:c9:d4:94:eb:74:55:28:65:c2:83:cf:46:62:7d: 8a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:CE:D8:49:49:F1:5F:59:DB:46:CA:83:08:55:AE:95:B2:30:30:BC X509v3 Authority Key Identifier: keyid:2B:00:3E:58:3B:DB:25:11:FF:57:AB:7A:32:FC:E7:41:33:4B:34:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwA-WDvbJRH_V6t6MvznQTNLNDs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:5c:ea:71:0c:59:cc:91:42:e8:df:30:66:b2:03:e9:f1:13: d1:ad:0f:82:28:19:7e:4b:f1:25:63:48:5a:3c:55:fc:d3:12: e1:c5:59:12:35:f2:3f:1d:1d:ae:05:39:25:7f:be:33:39:1f: 9b:18:20:da:11:ce:9f:c9:6e:f6:e0:64:62:aa:a3:c5:c6:e0: d5:a0:72:2b:f3:82:57:99:06:83:32:8f:e4:a0:62:23:1b:eb: 3c:b3:35:b7:3d:35:98:f5:a1:52:43:db:e0:92:74:3a:e6:0d: 7e:4f:e1:33:e4:ad:2a:60:fb:01:2e:79:64:c1:ee:f5:f9:b4: d8:f7:b9:fa:49:ac:32:84:8f:a9:35:0a:7c:fb:4b:13:9e:f0: 10:8b:bc:84:a8:8f:e6:f9:6f:cd:3c:73:e4:07:7f:6c:62:9f: 5b:2f:1a:1a:c5:d3:4f:de:9a:d7:3c:e2:e2:63:03:ac:a5:d1: c5:7b:ae:2f:1b:b8:39:0a:d1:3b:d8:cd:f6:64:00:28:dd:41: 7a:5c:c3:2f:bc:e5:3e:f0:ce:c6:7a:09:32:e3:52:2a:eb:7c: 52:68:8a:3f:ee:d3:d6:80:86:92:0d:b4:ae:ed:bb:b1:3a:de: 65:90:e0:f6:53:75:0d:0f:cc:ec:37:0d:60:9d:34:3a:d7:52: fd:36:d6:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0Yokeyu9TGfMksYuzXTybMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiMDAzZTU4M2JkYjI1MTFmZjU3YWI3YTMyZmNlNzQxMzM0 YjM0M2IwHhcNMjYwMTI1MDkwMDU2WhcNMjYwMTI2MDkwMDU2WjAzMTEwLwYDVQQD EyhmY2NlZDg0OTQ5ZjE1ZjU5ZGI0NmNhODMwODU1YWU5NWIyMzAzMGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpRsgBli3W85O4c4WDFg78AZdc7F i+SHbkTo6nbXStZn5nACK/5a3EiysCLeXmn3pTnWQcmxF1/+hJZj4LqhOTfMYfKD xLjy8/6e6p08W7w0fa18HsTUVUxwdyrkfl+7Ir6f1w9d11Y31994rz5ENAgqzjCJ /h3S2J4cPERCbjhjeQyTVP+/XerPHbzhkVdwh2TzfSb/8S0MSIv1uu4WmyEA27Ca lyRQATJBlQY7P+e6VfWac7Um+/0J+Y/LShIVZlkLq04WPZCswCEIG6mY3rUBp8Ie Gd6a0+u6nIQUuAcvhfDsVCNGzPOtV1bqIUUMydSU63RVKGXCg89GYn2KGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPzO2ElJ8V9Z20bKgwhVrpWyMDC8MB8GA1UdIwQY MBaAFCsAPlg72yUR/1erejL850EzSzQ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3dBLVdEdmJKUkhfVjZ0Nk12em5RVE5MTkRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8xOTRmMjItODY4OS00ZmRiLTljNDEt MDU4YmJmOWQ1ZTI3LzEvS3dBLVdEdmJKUkhfVjZ0Nk12em5RVE5MTkRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC8xOTRmMjItODY4OS00ZmRiLTljNDEtMDU4YmJmOWQ1ZTI3 LzEvS3dBLVdEdmJKUkhfVjZ0Nk12em5RVE5MTkRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu1zqcQxZ zJFC6N8wZrID6fET0a0PgigZfkvxJWNIWjxV/NMS4cVZEjXyPx0drgU5JX++Mzkf mxgg2hHOn8lu9uBkYqqjxcbg1aByK/OCV5kGgzKP5KBiIxvrPLM1tz01mPWhUkPb 4JJ0OuYNfk/hM+StKmD7AS55ZMHu9fm02Pe5+kmsMoSPqTUKfPtLE57wEIu8hKiP 5vlvzTxz5Ad/bGKfWy8aGsXTT96a1zzi4mMDrKXRxXuuLxu4OQrRO9jN9mQAKN1B elzDL7zlPvDOxnoJMuNSKut8UmiKP+7T1oCGkg20ru27sTreZZDg9lN1DQ/M7DcN YJ00OtdS/TbWGg== -----END CERTIFICATE-----Generated at Sun Jan 25 14:08:31 2026 by rpki-client