This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft File: R_KdK9FeAku5fnKyEkK1I9yRUYE.mft (raw, json) Hash identifier: wJmAJwGQpbpU5t+JEa6wpqNkA6kg5tWDneuoQuQ/6kE= Subject key identifier: 93:CA:A4:76:27:8A:D5:1A:A7:64:3B:C3:4A:AD:71:B7:AF:D0:C5:B9 Authority key identifier: 47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81 Certificate issuer: /CN=47f29d2bd15e024bb97e72b21242b523dc915181 Certificate serial: 019BF79AEA2CE3E45A6D9F699D522EE8D5D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft Manifest number: 17EA Signing time: Mon 26 Jan 2026 00:01:23 +0000 Manifest this update: Mon 26 Jan 2026 00:01:23 +0000 Manifest next update: Tue 27 Jan 2026 00:01:23 +0000 Files and hashes: 1: R_KdK9FeAku5fnKyEkK1I9yRUYE.crl (hash: XbVZYqT/uz5TJ2BIFMhxgOJeK5WKtEGA2bp2vRd7yh0=) 2: YF8tuWYG1Vw7dIaOMivXHZ0e1pU.roa (hash: oIHlw0teS6yzCF5/spwSi4mwOeeMJuzSTSKfdSl5QBY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:ea:2c:e3:e4:5a:6d:9f:69:9d:52:2e:e8:d5:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47f29d2bd15e024bb97e72b21242b523dc915181 Validity Not Before: Jan 26 00:01:23 2026 GMT Not After : Jan 27 00:01:23 2026 GMT Subject: CN=93caa476278ad51aa7643bc34aad71b7afd0c5b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:00:65:33:35:83:ff:28:67:55:0f:24:9b:37: e7:6d:cc:39:fe:54:ce:c6:08:2e:36:19:ef:89:40: be:8a:4e:37:2c:2d:c7:1c:9d:7e:7b:aa:76:b2:cf: 23:75:31:f6:21:41:23:33:58:a7:b3:fa:d8:78:84: 97:5a:ca:50:3d:92:58:fb:f6:a0:c5:18:2e:ad:8d: 12:b1:54:16:30:df:28:d7:0c:17:da:84:a5:da:4b: 53:fa:35:64:b2:a8:93:86:5e:fc:48:4d:05:e2:13: f8:af:a9:ef:9b:d7:2a:66:95:16:5e:3c:35:63:27: 5b:84:1e:81:2a:36:94:09:d9:01:53:5f:e2:8a:b3: ec:9c:80:ba:67:20:db:51:f4:35:6c:dd:b9:60:0f: 24:d6:8e:56:80:e5:60:4d:a7:48:ff:70:b0:35:e4: 89:b2:c8:1a:85:27:34:5d:bb:b8:9c:5e:f2:c0:4a: f5:cc:bb:a7:df:85:d1:ea:e1:91:55:8e:79:61:46: 74:56:2e:a7:b9:7f:3e:bb:85:26:fa:4c:66:c2:b2: c4:99:df:8e:2e:4d:72:86:a9:f0:0d:dd:dc:bd:14: 4a:1b:79:89:80:de:b5:18:4c:42:c0:f8:13:e3:f0: f3:3e:e7:e5:4d:2a:8b:3f:89:c5:69:1b:f6:35:02: ca:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:CA:A4:76:27:8A:D5:1A:A7:64:3B:C3:4A:AD:71:B7:AF:D0:C5:B9 X509v3 Authority Key Identifier: keyid:47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:9e:03:d8:4a:1b:03:f0:79:61:ee:c2:73:9f:36:c1:b7:8d: 6b:0a:a5:88:08:4f:87:e8:19:34:d7:ed:2b:8a:2d:6d:03:a9: b4:ed:9f:53:45:d6:59:df:e6:81:74:ba:65:be:5b:f2:3b:cc: bc:ec:f3:e7:f8:00:d9:c7:5e:ed:95:23:a2:8b:2b:14:d4:64: e1:f0:89:37:37:df:a9:2a:25:26:b9:85:3c:08:5d:b6:80:5e: 6f:04:a1:88:16:0f:9d:da:b4:20:15:ec:aa:f3:5f:ce:0e:a3: ad:05:77:79:42:96:bc:f9:82:88:74:26:e0:05:3d:3e:a9:38: 28:7b:60:d1:57:b7:f3:8e:6a:c5:41:d7:66:18:13:68:05:57: 6b:19:10:c6:cb:fb:ac:e1:7d:05:6e:22:1a:1a:08:ac:3c:f5: c7:71:98:43:21:5b:1e:57:4b:d2:49:57:d6:a2:7e:59:2b:1b: 51:54:cc:78:9c:7c:38:71:a6:20:3a:1b:1d:e3:31:e7:9c:64: 81:d4:70:a2:65:02:92:e8:fa:b9:69:52:04:48:07:db:e7:ea: 2e:7b:6b:b0:b3:a7:7d:2c:56:15:07:52:e2:80:ea:0f:e6:8b: a4:23:ba:c6:5b:98:f7:bf:4b:f5:eb:c3:ac:98:62:e6:09:56: e9:6a:24:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3muos4+RabZ9pnVIu6NXUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3ZjI5ZDJiZDE1ZTAyNGJiOTdlNzJiMjEyNDJiNTIzZGM5 MTUxODEwHhcNMjYwMTI2MDAwMTIzWhcNMjYwMTI3MDAwMTIzWjAzMTEwLwYDVQQD Eyg5M2NhYTQ3NjI3OGFkNTFhYTc2NDNiYzM0YWFkNzFiN2FmZDBjNWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkABlMzWD/yhnVQ8kmzfnbcw5/lTO xgguNhnviUC+ik43LC3HHJ1+e6p2ss8jdTH2IUEjM1ins/rYeISXWspQPZJY+/ag xRgurY0SsVQWMN8o1wwX2oSl2ktT+jVksqiThl78SE0F4hP4r6nvm9cqZpUWXjw1 YydbhB6BKjaUCdkBU1/iirPsnIC6ZyDbUfQ1bN25YA8k1o5WgOVgTadI/3CwNeSJ ssgahSc0Xbu4nF7ywEr1zLun34XR6uGRVY55YUZ0Vi6nuX8+u4Um+kxmwrLEmd+O Lk1yhqnwDd3cvRRKG3mJgN61GExCwPgT4/DzPuflTSqLP4nFaRv2NQLK7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJPKpHYnitUap2Q7w0qtcbev0MW5MB8GA1UdIwQY MBaAFEfynSvRXgJLuX5yshJCtSPckVGBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUl9LZEs5RmVBa3U1Zm5LeUVrSzFJOXlSVVlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9jMzI1OTgtMmE5NS00M2M0LTliNmEt MDE2NjUzMmRhYzU2LzEvUl9LZEs5RmVBa3U1Zm5LeUVrSzFJOXlSVVlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9jMzI1OTgtMmE5NS00M2M0LTliNmEtMDE2NjUzMmRhYzU2 LzEvUl9LZEs5RmVBa3U1Zm5LeUVrSzFJOXlSVVlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmZ4D2Eob A/B5Ye7Cc582wbeNawqliAhPh+gZNNftK4otbQOptO2fU0XWWd/mgXS6Zb5b8jvM vOzz5/gA2cde7ZUjoosrFNRk4fCJNzffqSolJrmFPAhdtoBebwShiBYPndq0IBXs qvNfzg6jrQV3eUKWvPmCiHQm4AU9Pqk4KHtg0Ve3845qxUHXZhgTaAVXaxkQxsv7 rOF9BW4iGhoIrDz1x3GYQyFbHldL0klX1qJ+WSsbUVTMeJx8OHGmIDobHeMx55xk gdRwomUCkuj6uWlSBEgH2+fqLntrsLOnfSxWFQdS4oDqD+aLpCO6xluY979L9evD rJhi5glW6Wok8A== -----END CERTIFICATE-----Generated at Mon Jan 26 03:11:56 2026 by rpki-client