This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft File: KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft (raw, json) Hash identifier: Hx7+wBUuNOnf1aBAlSHFqw/Lx2F68RRoUqhjTnWb06A= Subject key identifier: D6:9F:B3:A3:C3:B2:BC:0F:57:2B:1E:23:7B:69:98:1A:3C:75:21:F7 Authority key identifier: 29:2D:6B:80:5E:11:EC:38:03:4F:07:78:9D:CD:25:D1:C1:7F:A0:1E Certificate issuer: /CN=292d6b805e11ec38034f07789dcd25d1c17fa01e Certificate serial: 019BF5E3AD2852ACFDEFF72EF35BD91AAAC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft Manifest number: 0894 Signing time: Sun 25 Jan 2026 16:01:37 +0000 Manifest this update: Sun 25 Jan 2026 16:01:37 +0000 Manifest next update: Mon 26 Jan 2026 16:01:37 +0000 Files and hashes: 1: KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl (hash: 6c8fQe6qcCFt1G/8lkMu9MpEbR/ic9tyfXJ+fIBqjss=) 2: lfbAYKVXMdZ42U9_T9C8OZdlAFo.roa (hash: v7lM7R+6ILWW0k1iy98P/XQH6IMSFCizQ4V8D9n6X0E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:ad:28:52:ac:fd:ef:f7:2e:f3:5b:d9:1a:aa:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=292d6b805e11ec38034f07789dcd25d1c17fa01e Validity Not Before: Jan 25 16:01:37 2026 GMT Not After : Jan 26 16:01:37 2026 GMT Subject: CN=d69fb3a3c3b2bc0f572b1e237b69981a3c7521f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:97:d9:9e:ac:29:14:b8:17:8c:bc:21:9a:8d: bb:de:49:9c:c7:c5:c6:56:2f:7e:65:42:b8:83:86: 3b:b8:47:69:3e:d1:5d:ce:9f:d7:6d:21:90:3a:b9: 81:e9:ff:45:92:9a:4c:14:43:48:4a:17:0d:a9:94: a7:67:f5:c2:82:a0:a8:60:c9:89:8f:34:ca:0c:ac: b1:28:fc:1f:a6:9e:8c:93:4b:c2:63:b7:86:19:fe: ee:4c:c4:e3:5e:0e:0d:e2:16:e6:9a:25:54:b7:37: 53:9f:4b:ec:03:dd:db:7d:23:03:7c:4a:a1:94:a8: 0d:ce:66:b9:7d:46:dd:f9:01:62:9f:9b:f9:9f:a5: 7a:1a:b4:47:01:1a:54:4d:c6:80:4b:1c:56:46:c0: 80:1a:d6:e1:01:1c:c5:1b:46:20:08:c1:77:dd:e2: a5:59:cd:e9:d5:39:5e:8d:17:ab:67:06:04:61:71: 03:38:ec:fa:c6:1a:b6:b3:4c:9e:bd:8f:19:fa:3c: bf:c8:aa:91:ff:80:b0:d9:e0:f9:ee:82:77:d0:56: 3f:22:2d:ba:c5:54:27:9b:28:4b:51:26:bd:ca:d5: 98:b2:da:db:44:30:18:24:e8:c9:3a:a4:09:dd:18: 57:63:67:8b:7c:c0:33:cc:cf:74:54:6b:0d:2f:de: 9b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:9F:B3:A3:C3:B2:BC:0F:57:2B:1E:23:7B:69:98:1A:3C:75:21:F7 X509v3 Authority Key Identifier: keyid:29:2D:6B:80:5E:11:EC:38:03:4F:07:78:9D:CD:25:D1:C1:7F:A0:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:40:fc:77:9d:ea:60:75:2d:e7:70:19:c9:8c:00:e4:d8:da: 74:d0:f2:1f:18:34:12:20:ac:a5:ce:69:46:3f:ac:44:27:e6: 55:d9:3c:73:90:3a:bc:32:39:22:3a:6c:da:65:9f:0a:9c:4b: 92:ff:06:c5:01:bd:b0:ba:4d:2d:73:b3:3e:9d:4a:f3:7e:32: f2:64:fd:41:16:57:1c:ae:70:f9:84:06:5d:87:3c:bd:30:00: b3:7a:11:fe:29:71:8c:e9:dd:94:86:f8:2a:b5:47:88:ec:a2: c3:36:36:3c:98:9c:2a:c9:bb:aa:75:09:c2:ea:76:8a:90:1a: bb:f6:c6:c0:9b:05:ff:93:33:4e:d4:f1:84:e4:ee:e6:c2:3a: c6:09:f9:71:dc:14:58:a7:29:3f:3e:0e:c8:56:31:7f:71:4f: 6b:49:0b:3e:a0:a2:2c:13:03:c3:4e:05:3d:e9:51:ff:8f:27: e7:ed:10:e8:71:a6:30:23:41:f7:2c:34:72:23:da:7d:6a:39: 9a:f1:65:29:c0:83:af:90:ef:72:34:aa:46:c6:d0:12:ac:75: 13:b5:ce:1d:19:ad:d4:e2:00:fe:37:a3:50:ed:e3:c4:0c:de: 9d:19:e7:c5:36:9c:01:71:97:72:cc:4f:1b:a2:41:b7:d9:dd: a4:e8:21:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1460oUqz97/cu81vZGqrHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MmQ2YjgwNWUxMWVjMzgwMzRmMDc3ODlkY2QyNWQxYzE3 ZmEwMWUwHhcNMjYwMTI1MTYwMTM3WhcNMjYwMTI2MTYwMTM3WjAzMTEwLwYDVQQD EyhkNjlmYjNhM2MzYjJiYzBmNTcyYjFlMjM3YjY5OTgxYTNjNzUyMWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppfZnqwpFLgXjLwhmo273kmcx8XG Vi9+ZUK4g4Y7uEdpPtFdzp/XbSGQOrmB6f9FkppMFENIShcNqZSnZ/XCgqCoYMmJ jzTKDKyxKPwfpp6Mk0vCY7eGGf7uTMTjXg4N4hbmmiVUtzdTn0vsA93bfSMDfEqh lKgNzma5fUbd+QFin5v5n6V6GrRHARpUTcaASxxWRsCAGtbhARzFG0YgCMF33eKl Wc3p1TlejRerZwYEYXEDOOz6xhq2s0yevY8Z+jy/yKqR/4Cw2eD57oJ30FY/Ii26 xVQnmyhLUSa9ytWYstrbRDAYJOjJOqQJ3RhXY2eLfMAzzM90VGsNL96bxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNafs6PDsrwPVyseI3tpmBo8dSH3MB8GA1UdIwQY MBaAFCkta4BeEew4A08HeJ3NJdHBf6AeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1MxcmdGNFI3RGdEVHdkNG5jMGwwY0Zfb0I0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC84YjMzNDEtZjg1Yi00YzE1LWE5ODkt NTEwY2YyNmJjYTY1LzEvS1MxcmdGNFI3RGdEVHdkNG5jMGwwY0Zfb0I0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC84YjMzNDEtZjg1Yi00YzE1LWE5ODktNTEwY2YyNmJjYTY1 LzEvS1MxcmdGNFI3RGdEVHdkNG5jMGwwY0Zfb0I0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgkD8d53q YHUt53AZyYwA5NjadNDyHxg0EiCspc5pRj+sRCfmVdk8c5A6vDI5Ijps2mWfCpxL kv8GxQG9sLpNLXOzPp1K834y8mT9QRZXHK5w+YQGXYc8vTAAs3oR/ilxjOndlIb4 KrVHiOyiwzY2PJicKsm7qnUJwup2ipAau/bGwJsF/5MzTtTxhOTu5sI6xgn5cdwU WKcpPz4OyFYxf3FPa0kLPqCiLBMDw04FPelR/48n5+0Q6HGmMCNB9yw0ciPafWo5 mvFlKcCDr5DvcjSqRsbQEqx1E7XOHRmt1OIA/jejUO3jxAzenRnnxTacAXGXcsxP G6JBt9ndpOghDw== -----END CERTIFICATE-----Generated at Mon Jan 26 02:29:47 2026 by rpki-client