This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft File: kyAhKZaVds41f64mycfPmKglDqY.mft (raw, json) Hash identifier: ksuTF9qkw+/1AxKFoHBGL0KAiDGkSAOkxUO8cOU2tg0= Subject key identifier: 9E:D3:5C:A1:97:DB:16:18:37:92:69:66:8B:D7:B5:F2:F0:EF:F9:E7 Authority key identifier: 93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6 Certificate issuer: /CN=93202129969576ce357fae26c9c7cf98a8250ea6 Certificate serial: 019BF42BFE968AF6DD9EBD26FC31443900EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft Manifest number: 0B01 Signing time: Sun 25 Jan 2026 08:01:22 +0000 Manifest this update: Sun 25 Jan 2026 08:01:22 +0000 Manifest next update: Mon 26 Jan 2026 08:01:22 +0000 Files and hashes: 1: 1Kvv6sx0rZVONCzJAQ9yJJI0fuY.roa (hash: 7/TdPMTJa+xAQgIxwuTawOuvVxvCTpJMqykow3dXsmk=) 2: 46w3PoQLQ6mKd5nBzIN9e_n7Gf4.roa (hash: TEWQBxn6HUz85rJ+5632FC4cCm6zZFAnkvJsy3J7nrU=) 3: kyAhKZaVds41f64mycfPmKglDqY.crl (hash: LPQv7+MLQiagg5th07uf/vNhncGxl18yHePksu5ssYk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:2b:fe:96:8a:f6:dd:9e:bd:26:fc:31:44:39:00:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93202129969576ce357fae26c9c7cf98a8250ea6 Validity Not Before: Jan 25 08:01:22 2026 GMT Not After : Jan 26 08:01:22 2026 GMT Subject: CN=9ed35ca197db1618379269668bd7b5f2f0eff9e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:16:23:ee:b1:0d:c8:85:a4:69:e9:0c:bb:da: e5:f5:0b:80:cb:e3:3e:bb:bb:ca:b7:f0:05:8b:8d: 45:07:42:af:e8:f4:0b:4d:8b:ca:66:2f:59:53:33: 6e:51:f4:55:96:f5:fc:d0:18:04:bf:f8:ea:31:3b: 46:42:a3:87:10:16:d5:39:5e:60:b5:16:27:5a:c8: cd:55:b8:16:5f:da:e5:f1:27:91:95:b2:22:16:92: 90:d9:90:04:c6:8a:65:70:78:d1:21:bc:be:9d:b5: 65:b7:88:bc:50:bd:5a:3b:11:a3:83:be:47:83:17: d4:82:dc:83:bc:87:26:38:c4:58:3b:24:bf:83:4d: 90:bf:3c:e0:4c:0a:a7:95:56:4d:c1:92:fd:13:ef: 5b:68:77:f2:3e:e1:99:98:4e:b1:d8:33:ab:fd:d3: af:91:c4:7a:43:9d:99:d7:75:7d:54:44:d5:c6:02: 68:97:d8:9a:c4:5a:07:a6:1e:38:eb:4f:bb:59:0b: 06:7c:b6:8e:8b:70:08:c2:ad:a3:4e:0b:f2:f4:2a: 65:0d:49:9d:0c:40:fb:1d:73:f7:b0:01:8d:43:bd: 49:96:c0:46:27:ea:65:c6:11:84:db:d5:95:87:81: dc:a9:3b:61:54:3d:8e:bf:66:9a:e5:8a:f4:90:b8: 1b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:D3:5C:A1:97:DB:16:18:37:92:69:66:8B:D7:B5:F2:F0:EF:F9:E7 X509v3 Authority Key Identifier: keyid:93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:96:a2:1c:98:ea:01:49:8d:eb:63:46:4d:0d:04:a9:f4:ab: 51:3c:9b:ef:46:80:f4:71:d1:60:08:fc:8a:09:66:35:41:c6: 76:33:98:bc:a3:90:0f:4b:e4:4e:07:18:36:18:cc:77:89:a0: 41:15:28:bc:21:08:e2:d3:74:dd:5b:6f:88:69:95:f5:99:df: ac:b8:5c:84:84:3e:5d:e3:a7:ca:90:98:f0:7d:f2:5f:24:60: 5b:25:2c:24:25:f9:6a:1b:44:97:08:74:6b:f6:42:be:79:7b: 95:bc:51:04:23:17:6f:ef:49:70:22:ae:51:76:53:ad:84:02: f0:1a:4a:d4:19:4f:23:ae:08:36:be:ad:bc:26:c7:8d:f7:d5: c2:aa:51:9a:ca:6e:1a:65:2e:a4:49:c2:05:1b:66:a2:31:d3: a3:45:dd:fa:76:73:1a:35:ae:db:36:c5:69:6e:6c:b0:56:84: 21:f2:92:67:ca:07:b6:70:50:e9:7d:4b:10:a7:da:08:55:3a: 89:a3:0b:f0:cd:70:11:b6:37:ed:88:ad:f9:70:c3:27:6e:b3: 3a:6d:64:cb:07:2d:f5:f7:df:3e:d2:7c:cb:82:66:28:18:8d: 2c:ea:86:bc:4d:59:1f:44:06:8e:ac:3b:55:df:48:1a:be:35: 44:81:17:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0K/6Wivbdnr0m/DFEOQDqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMjAyMTI5OTY5NTc2Y2UzNTdmYWUyNmM5YzdjZjk4YTgy NTBlYTYwHhcNMjYwMTI1MDgwMTIyWhcNMjYwMTI2MDgwMTIyWjAzMTEwLwYDVQQD Eyg5ZWQzNWNhMTk3ZGIxNjE4Mzc5MjY5NjY4YmQ3YjVmMmYwZWZmOWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxYj7rENyIWkaekMu9rl9QuAy+M+ u7vKt/AFi41FB0Kv6PQLTYvKZi9ZUzNuUfRVlvX80BgEv/jqMTtGQqOHEBbVOV5g tRYnWsjNVbgWX9rl8SeRlbIiFpKQ2ZAExoplcHjRIby+nbVlt4i8UL1aOxGjg75H gxfUgtyDvIcmOMRYOyS/g02QvzzgTAqnlVZNwZL9E+9baHfyPuGZmE6x2DOr/dOv kcR6Q52Z13V9VETVxgJol9iaxFoHph4460+7WQsGfLaOi3AIwq2jTgvy9CplDUmd DED7HXP3sAGNQ71JlsBGJ+plxhGE29WVh4HcqTthVD2Ov2aa5Yr0kLgb5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ7TXKGX2xYYN5JpZovXtfLw7/nnMB8GA1UdIwQY MBaAFJMgISmWlXbONX+uJsnHz5ioJQ6mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3lBaEtaYVZkczQxZjY0bXljZlBtS2dsRHFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9kNmU3OTYtMGUxNC00NWIxLTljZjMt NWFkNThhYmZiYjFmLzEva3lBaEtaYVZkczQxZjY0bXljZlBtS2dsRHFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9kNmU3OTYtMGUxNC00NWIxLTljZjMtNWFkNThhYmZiYjFm LzEva3lBaEtaYVZkczQxZjY0bXljZlBtS2dsRHFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmpaiHJjq AUmN62NGTQ0EqfSrUTyb70aA9HHRYAj8iglmNUHGdjOYvKOQD0vkTgcYNhjMd4mg QRUovCEI4tN03VtviGmV9ZnfrLhchIQ+XeOnypCY8H3yXyRgWyUsJCX5ahtElwh0 a/ZCvnl7lbxRBCMXb+9JcCKuUXZTrYQC8BpK1BlPI64INr6tvCbHjffVwqpRmspu GmUupEnCBRtmojHTo0Xd+nZzGjWu2zbFaW5ssFaEIfKSZ8oHtnBQ6X1LEKfaCFU6 iaML8M1wEbY37Yit+XDDJ26zOm1kywct9fffPtJ8y4JmKBiNLOqGvE1ZH0QGjqw7 Vd9IGr41RIEX6A== -----END CERTIFICATE-----Generated at Sun Jan 25 16:23:22 2026 by rpki-client