This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft File: KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft (raw, json) Hash identifier: s4asbgtw8tsu65K91nhBL/zAoALsSw43L3j50d2ObTs= Subject key identifier: FA:B4:58:31:31:B9:4B:25:2C:1E:6D:20:92:DE:0B:62:CE:4E:DA:54 Authority key identifier: 29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0 Certificate issuer: /CN=29390ec0adca5f0743d181145c7899f991fb65e0 Certificate serial: 019BF83FE3AF5775644E61F2BB5FAF404F71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft Manifest number: 17F5 Signing time: Mon 26 Jan 2026 03:01:35 +0000 Manifest this update: Mon 26 Jan 2026 03:01:35 +0000 Manifest next update: Tue 27 Jan 2026 03:01:35 +0000 Files and hashes: 1: 0d5BfvygLk34C_gchAEDYvaKyoI.roa (hash: ygjywojERDWbCJmFLV0kw9pKS4Kd8NZi84D8KTjckEg=) 2: 95mfR-kPi6F-VSV1WGBH1SxOzBs.roa (hash: ljihoTtKsYT2OJrjhM4mdxIcg0inNE/KPMT8FAxX4/Q=) 3: E7BW_8fVLRmphh5TsZba9Rvd3kU.roa (hash: aLR4qOWHBBoXqv3Yx8BoWKYJaEGNBYKmGm00kiTbgcM=) 4: KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl (hash: An6nuTDBGEm1fnNEcDo0wvXxaD3sY7uMBak7g+xKBcw=) 5: N3EXayc-3o5FUNZyM0wptzdcK9o.roa (hash: 54xklyduj+4FndB5iy5VSOkzcc7nc+vpbvnlB27yVx4=) 6: PhyesmBVcW6OXHhhntDd26_eDJc.roa (hash: WqkBKUFXh2zVC16Y0B/vbmMcgw+hs4Rin4XGqRQlr64=) 7: YYkvi7iY5yBqNjG-94WUWFCEEoU.roa (hash: HgvhtGLtWSEuAUdli7GqTihRO3hye/C71rDsERDYV8A=) 8: uhyFSL1UPDs4_nfLAbM-v4irdMY.roa (hash: ZO01BMp7TpnMAsZpqdmKDRBdOPJexIHg8AYIpzq+2b0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:e3:af:57:75:64:4e:61:f2:bb:5f:af:40:4f:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29390ec0adca5f0743d181145c7899f991fb65e0 Validity Not Before: Jan 26 03:01:35 2026 GMT Not After : Jan 27 03:01:35 2026 GMT Subject: CN=fab4583131b94b252c1e6d2092de0b62ce4eda54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a8:98:f5:12:6b:27:55:38:d7:79:6b:84:16: 7d:3f:07:75:06:96:ac:b6:e5:97:30:0b:5d:ab:87: c9:e1:03:29:89:85:a6:c5:67:f0:b9:25:17:53:df: bb:af:29:5f:ef:4a:f9:88:91:c3:2d:c5:b6:f0:7b: 32:06:15:85:49:a9:79:62:49:f2:64:03:8c:c1:c7: b2:ba:d9:44:fb:dc:8d:e9:fc:bf:60:5a:4d:58:b9: 5c:fe:56:f2:11:54:e8:9b:dd:4a:c5:d6:ba:cf:45: d2:da:a7:6a:ab:8c:5c:09:fb:9c:f7:fa:62:01:f2: 5b:84:be:f6:ad:e0:ea:97:44:e6:80:5e:6f:e8:09: 3d:12:6f:59:19:cd:80:c2:20:d9:c2:e5:ef:1d:3f: 37:c9:2b:d5:63:8c:4a:63:fa:e2:d8:15:cf:79:a4: a1:45:b4:25:33:80:7f:15:46:93:4a:85:8a:7e:f5: 7c:56:72:e8:a9:ce:66:72:ae:e4:4d:50:21:43:cb: 3d:0b:d9:53:06:7f:e5:1f:98:40:9e:9d:80:82:2e: 55:05:ec:65:24:7f:63:a2:f7:17:a9:cb:68:6b:16: f7:0d:5a:42:9a:ce:a1:e6:25:aa:d4:33:d5:b7:20: 45:3c:d1:00:61:e6:3b:13:12:8d:78:94:3d:18:06: 39:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:B4:58:31:31:B9:4B:25:2C:1E:6D:20:92:DE:0B:62:CE:4E:DA:54 X509v3 Authority Key Identifier: keyid:29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:2d:96:c2:27:16:d1:d0:c9:02:6a:da:88:a0:85:ac:83:c8: 1a:0a:a5:de:da:c8:85:26:c6:29:36:90:fe:83:45:da:91:31: ea:e7:e8:0d:19:67:e3:81:93:4a:1a:f0:28:d4:83:c1:db:24: 75:6a:ed:b9:22:a5:c7:de:55:fe:99:05:81:d9:76:5f:19:29: da:7a:ed:92:d4:29:e9:d9:ea:c9:79:63:4c:e3:0c:e7:7f:71: 74:79:da:bb:46:70:58:d2:a4:f5:fb:28:cd:39:70:6f:d2:2a: d1:20:b3:30:c5:bd:0b:ce:f6:61:20:63:c6:cf:84:2a:6c:2c: 3c:e7:6c:e3:d2:66:67:ab:ed:00:51:10:a6:f1:eb:90:ef:85: 98:08:41:d7:ca:84:e7:2e:b3:66:41:f5:83:a8:f4:96:02:e1: 73:bf:8f:61:e3:d6:48:bc:56:e8:5d:54:eb:0f:7e:ea:90:2f: ca:47:4e:b5:2d:c9:5f:b6:ae:d6:b9:81:e6:0d:9c:53:06:a8: b0:96:60:6e:6a:4a:05:ce:a3:56:ee:65:a3:8c:58:6c:45:75: 92:7a:30:9f:36:18:e0:8e:0a:83:77:60:97:c5:73:3c:4f:7b: f2:f9:a4:99:96:75:96:5c:08:34:f0:19:8c:02:1d:0b:a5:c6: fc:d4:0c:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P+OvV3VkTmHyu1+vQE9xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MzkwZWMwYWRjYTVmMDc0M2QxODExNDVjNzg5OWY5OTFm YjY1ZTAwHhcNMjYwMTI2MDMwMTM1WhcNMjYwMTI3MDMwMTM1WjAzMTEwLwYDVQQD EyhmYWI0NTgzMTMxYjk0YjI1MmMxZTZkMjA5MmRlMGI2MmNlNGVkYTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqiY9RJrJ1U413lrhBZ9Pwd1Bpas tuWXMAtdq4fJ4QMpiYWmxWfwuSUXU9+7rylf70r5iJHDLcW28HsyBhWFSal5Ykny ZAOMwceyutlE+9yN6fy/YFpNWLlc/lbyEVTom91Kxda6z0XS2qdqq4xcCfuc9/pi AfJbhL72reDql0TmgF5v6Ak9Em9ZGc2AwiDZwuXvHT83ySvVY4xKY/ri2BXPeaSh RbQlM4B/FUaTSoWKfvV8VnLoqc5mcq7kTVAhQ8s9C9lTBn/lH5hAnp2Agi5VBexl JH9jovcXqctoaxb3DVpCms6h5iWq1DPVtyBFPNEAYeY7ExKNeJQ9GAY5RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPq0WDExuUslLB5tIJLeC2LOTtpUMB8GA1UdIwQY MBaAFCk5DsCtyl8HQ9GBFFx4mfmR+2XgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1RrT3dLM0tYd2REMFlFVVhIaVotWkg3WmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9iMzEzOTItMmQxYy00OTM0LWE1OWUt ZWQ0MzNhYWM3ODI4LzEvS1RrT3dLM0tYd2REMFlFVVhIaVotWkg3WmVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9iMzEzOTItMmQxYy00OTM0LWE1OWUtZWQ0MzNhYWM3ODI4 LzEvS1RrT3dLM0tYd2REMFlFVVhIaVotWkg3WmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOC2WwicW 0dDJAmraiKCFrIPIGgql3trIhSbGKTaQ/oNF2pEx6ufoDRln44GTShrwKNSDwdsk dWrtuSKlx95V/pkFgdl2Xxkp2nrtktQp6dnqyXljTOMM539xdHnau0ZwWNKk9fso zTlwb9Iq0SCzMMW9C872YSBjxs+EKmwsPOds49JmZ6vtAFEQpvHrkO+FmAhB18qE 5y6zZkH1g6j0lgLhc7+PYePWSLxW6F1U6w9+6pAvykdOtS3JX7au1rmB5g2cUwao sJZgbmpKBc6jVu5lo4xYbEV1knownzYY4I4Kg3dgl8VzPE978vmkmZZ1llwINPAZ jAIdC6XG/NQMVg== -----END CERTIFICATE-----Generated at Mon Jan 26 05:08:56 2026 by rpki-client