This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft File: KTdcnACxUp1VHufijGBwq0Oi_nY.mft (raw, json) Hash identifier: ZRzYTgZ/yZYav6EFmcMNoK/+U9zIwZcTJA4FmPVMwIw= Subject key identifier: 85:F0:7F:4C:47:D1:3C:9B:35:10:B9:2C:6A:3C:8B:F0:2F:B5:ED:29 Authority key identifier: 29:37:5C:9C:00:B1:52:9D:55:1E:E7:E2:8C:60:70:AB:43:A2:FE:76 Certificate issuer: /CN=29375c9c00b1529d551ee7e28c6070ab43a2fe76 Certificate serial: 019BF61A47A73546E1537CE5B7EE4D02EF0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft Manifest number: 0FAF Signing time: Sun 25 Jan 2026 17:01:15 +0000 Manifest this update: Sun 25 Jan 2026 17:01:15 +0000 Manifest next update: Mon 26 Jan 2026 17:01:15 +0000 Files and hashes: 1: KTdcnACxUp1VHufijGBwq0Oi_nY.crl (hash: 2wtYFxwaW9sNQBNtJQQKeJAeX48fc0+eR/LrZL5OxbQ=) 2: _RQ9AgpzbtjvCvSTOEXzCFEJtR8.roa (hash: aJfuUxa/NB5W0qWEQXL6FUBdUFdykGIx4w5mKdTX4Co=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:1a:47:a7:35:46:e1:53:7c:e5:b7:ee:4d:02:ef:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29375c9c00b1529d551ee7e28c6070ab43a2fe76 Validity Not Before: Jan 25 17:01:15 2026 GMT Not After : Jan 26 17:01:15 2026 GMT Subject: CN=85f07f4c47d13c9b3510b92c6a3c8bf02fb5ed29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8c:f2:fe:6c:cd:70:7c:a0:a2:91:f7:e2:3f: 2d:92:3f:8b:48:30:bb:d8:ae:84:95:e6:4e:1e:19: 55:01:8a:f6:a2:8a:53:2e:db:b1:14:ac:bb:28:75: 9a:5c:17:44:29:de:4b:97:9e:92:0c:df:72:39:11: 5f:18:bb:e4:f5:c1:e3:5b:03:57:7d:87:dd:56:20: 85:90:d4:e4:b5:50:ca:40:69:15:55:01:2f:7a:50: 35:72:d4:bc:f1:2b:d8:9a:19:7b:83:5b:82:36:89: e9:79:d0:cb:d7:a0:5d:92:97:9c:da:10:2d:26:23: 54:d5:3a:2c:ad:37:f2:fc:8b:30:ce:7e:f0:72:f3: c7:ee:6b:8e:a7:f6:c6:75:4c:b5:d7:2b:ec:c6:34: 63:dd:5e:85:3c:89:66:f3:51:59:53:41:50:24:ca: 3a:da:7e:0f:c7:09:15:e4:3a:f2:5c:bf:33:21:e1: 78:7d:12:0e:6a:15:a6:fd:12:f3:c4:c0:36:ae:1a: 61:ab:5f:5d:d2:99:f6:7c:22:f0:9e:28:95:e9:0f: b5:42:96:44:64:73:fe:4e:e7:7c:9d:73:5c:fc:0d: 18:ac:c9:75:ec:ac:a4:cc:08:d5:0d:d7:11:ce:25: c9:69:d9:6a:47:55:e7:e9:89:a8:7a:f4:3d:43:17: b8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:F0:7F:4C:47:D1:3C:9B:35:10:B9:2C:6A:3C:8B:F0:2F:B5:ED:29 X509v3 Authority Key Identifier: keyid:29:37:5C:9C:00:B1:52:9D:55:1E:E7:E2:8C:60:70:AB:43:A2:FE:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:8e:3e:6c:e3:d7:c4:0b:3f:3c:49:ba:cd:a6:ae:ff:90:c1: eb:d4:42:e0:e1:4e:56:b2:5e:cc:d4:d0:fd:4a:dc:7c:4b:46: c4:f0:41:79:39:ac:33:fe:c6:5a:29:c3:b0:09:47:5d:b3:0c: d6:06:6a:f0:f5:b1:12:ce:67:8c:7d:75:eb:00:ea:8c:71:7a: 81:46:dc:78:e7:3a:c7:b7:43:0b:05:37:db:f0:25:d9:18:7d: b0:d4:08:ba:61:7c:49:83:0f:58:9c:79:72:9a:79:5f:f1:d1: 3c:74:46:4e:54:a6:fd:f9:74:c6:f6:30:5f:0a:8f:4b:a9:eb: 29:86:17:7f:7d:73:78:fb:db:4d:90:97:d7:f5:85:0f:5d:90: 1f:ac:84:53:12:df:b0:dd:68:54:3f:ce:29:21:a3:ca:3f:d9: 44:de:56:2e:23:26:85:ec:bd:1f:c2:c9:be:7f:5f:18:ff:95: fc:95:7b:14:45:73:34:e2:9a:bd:9e:7b:05:d8:13:f9:3d:0d: 4b:64:db:74:91:c0:c3:7c:05:8f:e4:0c:91:06:21:3e:52:b9: b0:2e:63:92:3a:de:23:70:5b:67:db:13:d0:96:76:97:d0:1b: d0:f8:93:97:58:38:f4:1a:87:50:f6:94:f9:2f:2f:46:69:61: 58:be:81:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GkenNUbhU3zlt+5NAu8KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5Mzc1YzljMDBiMTUyOWQ1NTFlZTdlMjhjNjA3MGFiNDNh MmZlNzYwHhcNMjYwMTI1MTcwMTE1WhcNMjYwMTI2MTcwMTE1WjAzMTEwLwYDVQQD Eyg4NWYwN2Y0YzQ3ZDEzYzliMzUxMGI5MmM2YTNjOGJmMDJmYjVlZDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIzy/mzNcHygopH34j8tkj+LSDC7 2K6EleZOHhlVAYr2oopTLtuxFKy7KHWaXBdEKd5Ll56SDN9yORFfGLvk9cHjWwNX fYfdViCFkNTktVDKQGkVVQEvelA1ctS88SvYmhl7g1uCNonpedDL16Bdkpec2hAt JiNU1TosrTfy/Iswzn7wcvPH7muOp/bGdUy11yvsxjRj3V6FPIlm81FZU0FQJMo6 2n4PxwkV5DryXL8zIeF4fRIOahWm/RLzxMA2rhphq19d0pn2fCLwniiV6Q+1QpZE ZHP+Tud8nXNc/A0YrMl17KykzAjVDdcRziXJadlqR1Xn6YmoevQ9Qxe4RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIXwf0xH0TybNRC5LGo8i/Avte0pMB8GA1UdIwQY MBaAFCk3XJwAsVKdVR7n4oxgcKtDov52MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1RkY25BQ3hVcDFWSHVmaWpHQndxME9pX25ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy83N2Y5NzctMDE1Yi00Y2FmLTg5M2Yt MDUwNGUxMTFhM2I4LzEvS1RkY25BQ3hVcDFWSHVmaWpHQndxME9pX25ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy83N2Y5NzctMDE1Yi00Y2FmLTg5M2YtMDUwNGUxMTFhM2I4 LzEvS1RkY25BQ3hVcDFWSHVmaWpHQndxME9pX25ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN44+bOPX xAs/PEm6zaau/5DB69RC4OFOVrJezNTQ/UrcfEtGxPBBeTmsM/7GWinDsAlHXbMM 1gZq8PWxEs5njH116wDqjHF6gUbceOc6x7dDCwU32/Al2Rh9sNQIumF8SYMPWJx5 cpp5X/HRPHRGTlSm/fl0xvYwXwqPS6nrKYYXf31zePvbTZCX1/WFD12QH6yEUxLf sN1oVD/OKSGjyj/ZRN5WLiMmhey9H8LJvn9fGP+V/JV7FEVzNOKavZ57BdgT+T0N S2TbdJHAw3wFj+QMkQYhPlK5sC5jkjreI3BbZ9sT0JZ2l9Ab0PiTl1g49BqHUPaU +S8vRmlhWL6Bog== -----END CERTIFICATE-----Generated at Sun Jan 25 20:54:41 2026 by rpki-client