This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft File: kucgRlxc0NqcahO0T6DYb2SeUFU.mft (raw, json) Hash identifier: NGCn0zdjdM3ujsS8SnyESxgh0xwIL4rA5q3BBSPuqcc= Subject key identifier: DC:4F:31:B1:C0:8C:11:B4:AB:E0:52:B7:12:05:93:AE:AE:B3:CC:0D Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055 Certificate serial: 019BF3BE3C395D8C1F9000B438F39CD433CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft Manifest number: 1811 Signing time: Sun 25 Jan 2026 06:01:29 +0000 Manifest this update: Sun 25 Jan 2026 06:01:29 +0000 Manifest next update: Mon 26 Jan 2026 06:01:29 +0000 Files and hashes: 1: 1-QrkJ1ReezcgF73EgGbqmxSp9iE.roa (hash: RSa2cTQxNZP76zXoi1N6FVpNx/a7WiCBFEO8rdHSaGo=) 2: GadZnqwNNL6vcO0uNGOaOFXO-5w.roa (hash: WPx0ZxFduASzoEDiUK1PVK0AV5w4NdVYDhxmnMrQPaw=) 3: Kt7Bb9a8NYPt2hdNoCtrivgec60.roa (hash: hZLmp4pyqAJx5mRvIALIF4vmWmI8U/uE03XVLg5S0aE=) 4: QGMHAWeIiva_ANIU0MC7CU9-6f8.roa (hash: 4G0dmujJfspfIapxR+knOukRFXWULsWgi/aWj5BdVi4=) 5: XiIbEnKjYE8MkI8g3bZKNddtCfQ.roa (hash: 969ogNKjx9JV6jK/y8xnBqcJ9Cd0T2enS1wUqhtbhGY=) 6: dGOsV8rB3n2kiiSorQ7C_OLvWso.roa (hash: CfnCuNHVj64xX3Nr1KaQqkMmG3m7OTprs4PyzRWTuhc=) 7: gsGfrYs1utK7SrtoyVPXL783bwM.roa (hash: 1zqi9F+7GRzsZKDlqyActNmPOf78TLbsfJ6f9t5J09A=) 8: kucgRlxc0NqcahO0T6DYb2SeUFU.crl (hash: uhEo28cJwLbyv7Nb+JvW3GA14uf/9UbiAtDm8ivd5d0=) 9: l-WUCYIzfrmbOY4lSlHo4EHYa-0.roa (hash: wRHoNrFNfoLupFB4h8pnue6IATQIBeN3aGRRjbWhTLE=) 10: quXPd4m3roGOFCgsU-cq5zkXqMM.roa (hash: cygguz3JRfVDe2shlN+tdvmvE/mxwD8qbYQvNiz7ASQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:be:3c:39:5d:8c:1f:90:00:b4:38:f3:9c:d4:33:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055 Validity Not Before: Jan 25 06:01:29 2026 GMT Not After : Jan 26 06:01:29 2026 GMT Subject: CN=dc4f31b1c08c11b4abe052b7120593aeaeb3cc0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:40:04:2a:e2:d8:76:8b:b8:a0:8b:96:79:d8: 9b:24:30:0d:f6:c6:29:53:80:65:fa:ed:71:66:cd: 2d:1c:04:19:7c:4b:51:1b:a1:9e:a5:21:27:ce:e1: a2:c9:56:27:ab:5e:bf:e3:de:3b:28:ff:4f:1c:fd: ed:1c:01:6f:7c:e1:d3:3f:bc:07:0e:7c:94:f6:b9: 50:64:24:28:e1:fc:c6:74:18:c8:88:f8:73:72:3d: 72:61:66:5b:5c:80:e9:d0:de:9d:8c:f3:b8:3c:d4: 7a:4f:66:b8:f9:97:c3:23:69:50:eb:6e:17:0b:db: 29:13:58:40:e4:d3:e9:d0:85:a7:60:bf:3e:ec:03: d3:f6:6e:3f:5c:e0:61:77:d8:27:e6:4f:3c:d3:a0: ea:c7:b5:c5:50:d5:73:7e:13:d8:a2:14:82:2b:42: 40:52:ee:10:b0:9a:f9:ff:e5:02:19:4b:d6:1b:bb: 14:17:ef:3f:95:9c:2a:49:28:a5:8e:fc:7d:bf:c6: b4:3b:24:aa:ea:0f:45:c0:ea:e9:9a:17:2b:81:fa: f3:5f:11:61:fa:3e:8d:52:5f:e8:67:6a:18:d1:3e: 7c:1e:73:22:1b:63:1b:26:fa:82:8e:c3:ac:52:51: ae:a8:ba:60:3d:98:12:ae:19:10:0e:35:f2:82:63: 56:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:4F:31:B1:C0:8C:11:B4:AB:E0:52:B7:12:05:93:AE:AE:B3:CC:0D X509v3 Authority Key Identifier: keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:e7:29:c9:73:71:d4:b1:22:00:55:a4:32:96:a8:84:8d:bf: dc:08:ff:19:b7:38:2b:63:38:07:c7:51:57:3a:3a:5a:0f:ea: ae:31:85:15:10:d8:b0:7e:db:0b:ea:cc:f3:c2:1b:c6:fb:9d: d7:98:a4:39:50:2f:96:31:e3:35:c7:2a:5c:fc:72:32:f7:fa: 6a:78:e4:ad:c4:6b:56:10:e0:08:97:28:5b:66:08:6b:b1:41: 5e:6f:b5:03:f5:1d:19:3d:e9:f6:48:9c:29:b5:c9:00:cc:2a: cd:3b:b5:5e:e4:a4:cc:33:4e:a6:63:96:53:d1:e2:10:ed:65: 70:d4:36:c6:25:b6:35:04:4f:5f:dd:11:f4:4d:e1:85:e8:ce: 21:ff:0d:09:d8:cd:4b:68:31:b3:51:f3:05:f6:12:8c:48:3b: 63:70:8e:1a:21:48:8b:c0:e9:59:44:96:dc:c4:ed:97:e4:73: 14:65:60:30:f6:08:97:b3:f0:4c:80:ac:6b:5a:ad:11:09:e9: 08:0d:d5:0c:bb:4a:40:8d:46:c7:d5:44:ec:30:f2:0e:c1:6a: 98:25:e7:af:b8:df:33:2d:58:e7:fb:a5:18:b1:ce:d8:3e:1c: 5e:81:7f:6e:b7:4d:cc:4d:0e:09:e7:b9:2a:4b:fa:3f:56:93: 25:7b:2a:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzvjw5XYwfkAC0OPOc1DPOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZTcyMDQ2NWM1Y2QwZGE5YzZhMTNiNDRmYTBkODZmNjQ5 ZTUwNTUwHhcNMjYwMTI1MDYwMTI5WhcNMjYwMTI2MDYwMTI5WjAzMTEwLwYDVQQD EyhkYzRmMzFiMWMwOGMxMWI0YWJlMDUyYjcxMjA1OTNhZWFlYjNjYzBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUAEKuLYdou4oIuWedibJDAN9sYp U4Bl+u1xZs0tHAQZfEtRG6GepSEnzuGiyVYnq16/4947KP9PHP3tHAFvfOHTP7wH DnyU9rlQZCQo4fzGdBjIiPhzcj1yYWZbXIDp0N6djPO4PNR6T2a4+ZfDI2lQ624X C9spE1hA5NPp0IWnYL8+7APT9m4/XOBhd9gn5k8806Dqx7XFUNVzfhPYohSCK0JA Uu4QsJr5/+UCGUvWG7sUF+8/lZwqSSiljvx9v8a0OySq6g9FwOrpmhcrgfrzXxFh +j6NUl/oZ2oY0T58HnMiG2MbJvqCjsOsUlGuqLpgPZgSrhkQDjXygmNWvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNxPMbHAjBG0q+BStxIFk66us8wNMB8GA1UdIwQY MBaAFJLnIEZcXNDanGoTtE+g2G9knlBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDkt OTA5NmUxNjc0ZTIyLzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDktOTA5NmUxNjc0ZTIy LzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ+cpyXNx 1LEiAFWkMpaohI2/3Aj/Gbc4K2M4B8dRVzo6Wg/qrjGFFRDYsH7bC+rM88Ibxvud 15ikOVAvljHjNccqXPxyMvf6anjkrcRrVhDgCJcoW2YIa7FBXm+1A/UdGT3p9kic KbXJAMwqzTu1XuSkzDNOpmOWU9HiEO1lcNQ2xiW2NQRPX90R9E3hhejOIf8NCdjN S2gxs1HzBfYSjEg7Y3COGiFIi8DpWUSW3MTtl+RzFGVgMPYIl7PwTICsa1qtEQnp CA3VDLtKQI1Gx9VE7DDyDsFqmCXnr7jfMy1Y5/ulGLHO2D4cXoF/brdNzE0OCee5 Kkv6P1aTJXsq2g== -----END CERTIFICATE-----Generated at Sun Jan 25 11:45:40 2026 by rpki-client