This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft File: kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft (raw, json) Hash identifier: zU9Ms2OmVKxyWwSQn3C0m5JmSCgDJnMxkXGIT2koNAc= Subject key identifier: 26:92:BA:EB:66:BD:2A:85:AA:BF:82:F1:04:16:D1:31:28:94:F7:BA Authority key identifier: 90:AE:53:8E:2A:91:34:6F:04:02:59:8B:0F:F2:FB:9A:95:C0:7C:39 Certificate issuer: /CN=90ae538e2a91346f0402598b0ff2fb9a95c07c39 Certificate serial: 019BF79AAD0DF167731BDB0C49310D0C85FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 00:01:07 +0000 Manifest this update: Mon 26 Jan 2026 00:01:07 +0000 Manifest next update: Tue 27 Jan 2026 00:01:07 +0000 Files and hashes: 1: ddmt2-uWwkD03hR8f-AnYnhHvEQ.roa (hash: NzfyOsp8qB/kzAypqWkHF3Ue4tcxIJ2yaDyTF4sPpVU=) 2: kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl (hash: kcbvMwX0e4V59V+yDncwlB2w9h3bajAzmJgMp3zHYL8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:ad:0d:f1:67:73:1b:db:0c:49:31:0d:0c:85:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90ae538e2a91346f0402598b0ff2fb9a95c07c39 Validity Not Before: Jan 26 00:01:07 2026 GMT Not After : Jan 27 00:01:07 2026 GMT Subject: CN=2692baeb66bd2a85aabf82f10416d1312894f7ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b8:4b:78:d0:1b:e9:ca:12:40:39:ce:d4:f9: cd:51:7e:2b:d0:f2:dd:f5:d4:97:fe:85:b5:41:e0: 4e:1f:21:ce:da:a3:8b:d9:5f:1d:fc:aa:36:73:23: f8:35:4e:cb:da:0b:77:d7:1b:f8:b4:03:47:a0:98: 43:9e:1d:ab:c9:de:b4:f5:f6:f2:bd:17:0f:08:7b: 86:51:6e:3d:37:a7:19:b4:a8:0e:af:6c:17:bd:ca: 8e:6d:56:de:50:26:8c:6f:cb:87:5e:3d:da:40:57: 07:57:d1:a7:73:4b:da:68:04:01:0b:dc:2b:9d:f9: 72:8b:a6:51:62:1f:dd:cb:e4:4e:b7:e1:3b:91:9c: e2:27:c8:d1:19:19:00:bf:34:2b:3a:a8:03:78:aa: e3:1a:53:1e:c0:09:c9:43:97:0d:e4:83:fd:16:7c: fc:5c:53:86:dd:c7:b4:64:03:54:2e:67:d2:b3:da: c9:0c:23:9f:4c:ae:08:66:f4:7a:07:19:3b:e0:a4: cb:df:a5:47:dc:66:04:99:38:2a:e7:6b:33:d2:92: 56:fb:bc:6c:ef:cb:2f:f2:6b:d7:62:ff:1c:b8:8c: 97:7b:96:aa:19:f0:c4:57:d7:3f:98:18:76:26:a0: 7c:f7:45:c1:ea:84:46:0e:8e:dc:f5:c4:9c:66:bb: 1c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:92:BA:EB:66:BD:2A:85:AA:BF:82:F1:04:16:D1:31:28:94:F7:BA X509v3 Authority Key Identifier: keyid:90:AE:53:8E:2A:91:34:6F:04:02:59:8B:0F:F2:FB:9A:95:C0:7C:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:30:00:19:1b:af:14:c1:a1:66:b9:a6:97:3c:d9:5c:4e:bb: 02:34:18:d5:63:df:5e:ee:85:e2:b0:61:7d:a5:b9:90:c2:e1: 79:88:c3:c0:d4:b7:ff:ce:63:66:ed:59:11:81:56:c9:76:06: 69:bf:7f:d0:0c:8f:80:f4:6e:f8:7f:73:c0:d2:74:8f:fc:b5: 08:f9:65:02:95:b4:8b:5a:e7:f2:52:c6:13:a9:03:bf:a5:0f: aa:a2:de:4a:38:bd:e8:7b:ae:3a:aa:0b:2b:21:de:f5:f5:07: 48:a6:d0:9b:b7:dc:63:ca:94:14:5c:a9:d6:a0:82:08:80:b2: 01:29:ae:20:06:87:ad:80:fd:90:31:4b:81:cc:bd:30:a4:9e: fd:75:33:a7:a1:da:b7:c8:59:f5:72:d7:1d:bc:bf:c0:49:7b: 87:81:80:f2:eb:0d:9f:c1:94:cf:b2:a2:8c:53:1a:58:5c:62: 5d:91:08:6e:74:e1:87:cd:5f:89:1d:9d:f9:81:b3:ec:ce:b5: a2:f3:ee:d1:15:c1:3d:32:6e:76:d1:39:7c:13:3a:6a:15:e1: 52:63:b5:f9:4a:ec:e6:53:75:f0:77:86:8f:a8:41:eb:c1:d5: 91:df:b3:b8:f8:a2:00:b8:b5:75:92:a3:4b:d8:10:5c:11:e9: f6:a0:10:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mq0N8WdzG9sMSTENDIX/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwYWU1MzhlMmE5MTM0NmYwNDAyNTk4YjBmZjJmYjlhOTVj MDdjMzkwHhcNMjYwMTI2MDAwMTA3WhcNMjYwMTI3MDAwMTA3WjAzMTEwLwYDVQQD EygyNjkyYmFlYjY2YmQyYTg1YWFiZjgyZjEwNDE2ZDEzMTI4OTRmN2JhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bhLeNAb6coSQDnO1PnNUX4r0PLd 9dSX/oW1QeBOHyHO2qOL2V8d/Ko2cyP4NU7L2gt31xv4tANHoJhDnh2ryd609fby vRcPCHuGUW49N6cZtKgOr2wXvcqObVbeUCaMb8uHXj3aQFcHV9Gnc0vaaAQBC9wr nflyi6ZRYh/dy+ROt+E7kZziJ8jRGRkAvzQrOqgDeKrjGlMewAnJQ5cN5IP9Fnz8 XFOG3ce0ZANULmfSs9rJDCOfTK4IZvR6Bxk74KTL36VH3GYEmTgq52sz0pJW+7xs 78sv8mvXYv8cuIyXe5aqGfDEV9c/mBh2JqB890XB6oRGDo7c9cScZrscwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCaSuutmvSqFqr+C8QQW0TEolPe6MB8GA1UdIwQY MBaAFJCuU44qkTRvBAJZiw/y+5qVwHw5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0s1VGppcVJORzhFQWxtTERfTDdtcFhBZkRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kNDc5MDktYTU2MC00MDljLWI4Mzkt YzVlNzgyMTU3OWYxLzEva0s1VGppcVJORzhFQWxtTERfTDdtcFhBZkRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9kNDc5MDktYTU2MC00MDljLWI4MzktYzVlNzgyMTU3OWYx LzEva0s1VGppcVJORzhFQWxtTERfTDdtcFhBZkRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgDAAGRuv FMGhZrmmlzzZXE67AjQY1WPfXu6F4rBhfaW5kMLheYjDwNS3/85jZu1ZEYFWyXYG ab9/0AyPgPRu+H9zwNJ0j/y1CPllApW0i1rn8lLGE6kDv6UPqqLeSji96HuuOqoL KyHe9fUHSKbQm7fcY8qUFFyp1qCCCICyASmuIAaHrYD9kDFLgcy9MKSe/XUzp6Ha t8hZ9XLXHby/wEl7h4GA8usNn8GUz7KijFMaWFxiXZEIbnThh81fiR2d+YGz7M61 ovPu0RXBPTJudtE5fBM6ahXhUmO1+Urs5lN18HeGj6hB68HVkd+zuPiiALi1dZKj S9gQXBHp9qAQjg== -----END CERTIFICATE-----Generated at Mon Jan 26 08:23:02 2026 by rpki-client