This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft File: koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft (raw, json) Hash identifier: X1ptPSaWpdaHqH3p5hzulhPJkFQhp+h4hU85n0KVpdc= Subject key identifier: CD:58:3E:74:11:17:EE:DB:CC:30:23:DF:5B:DC:F9:69:E6:48:2A:23 Authority key identifier: 92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9 Certificate issuer: /CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9 Certificate serial: 019BF763BDEDB139190E53296D31F51B7B7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 23:01:07 +0000 Manifest this update: Sun 25 Jan 2026 23:01:07 +0000 Manifest next update: Mon 26 Jan 2026 23:01:07 +0000 Files and hashes: 1: Qli-_KAiZO--cwXE6BiLVvkXnvE.roa (hash: XDHHjBldy51jEL7NRWc+r09QR8fWSiNl63GYDTe9i8c=) 2: dEbHBpx-Qlw4LJgcmplwQSKp84s.roa (hash: abREOFRAe+blSD0PVxwpI2VH/k4U+4z7iiH4ff/516k=) 3: koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl (hash: O1dR/R2IdxofErCw3z7yYO+TV2gJFLeLWCSHG3ZKAN0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 23:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:bd:ed:b1:39:19:0e:53:29:6d:31:f5:1b:7b:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9 Validity Not Before: Jan 25 23:01:07 2026 GMT Not After : Jan 26 23:01:07 2026 GMT Subject: CN=cd583e741117eedbcc3023df5bdcf969e6482a23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9b:31:5f:b1:ff:a7:b1:fc:dc:be:3c:69:07: 63:3c:32:0c:c6:c8:3a:c0:00:50:b4:09:34:e8:4a: c6:e1:1f:79:92:20:c8:67:11:76:de:fb:e8:43:59: b6:5f:a9:b7:94:f6:22:15:9b:6e:c1:b0:d0:4c:fe: 57:37:62:28:3a:c4:f1:a1:a4:7c:a8:e3:2b:48:9a: a2:a7:ab:74:b3:7d:32:30:9e:cc:0c:68:eb:30:a4: e8:6d:27:c0:25:ed:52:b1:52:b8:3d:b3:5a:c1:ff: 82:7f:73:e7:5e:5b:89:3b:5e:f2:67:b9:b6:79:cd: 81:cd:69:be:2c:d2:91:6c:0e:51:03:16:8b:e9:48: 81:0a:cb:89:35:f2:6b:9e:3b:9f:21:12:dc:06:9e: ad:92:95:ad:7e:62:ec:2b:04:44:b8:e2:bc:4d:b8: fc:1c:63:6f:cb:75:85:ab:7d:98:6d:50:83:fd:bb: ae:19:17:8e:29:08:12:c5:2e:e2:b2:4f:b0:b5:6f: 7d:d2:af:1f:bc:2c:14:2c:d4:92:f3:26:ae:78:7b: 84:17:7a:86:85:61:3e:66:07:65:44:c5:c0:94:79: f9:9b:28:71:25:1c:f3:b3:74:93:61:14:5e:a6:b5: c3:c7:4e:68:53:e8:67:09:99:66:17:ce:0c:87:8c: 50:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:58:3E:74:11:17:EE:DB:CC:30:23:DF:5B:DC:F9:69:E6:48:2A:23 X509v3 Authority Key Identifier: keyid:92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:40:8c:9a:42:ed:05:29:f9:96:92:ed:64:99:1c:8e:70:f0: b1:14:a5:38:e7:1c:e2:69:c9:96:18:b0:17:74:2b:89:b2:d4: 71:f9:76:1c:8a:8f:64:6b:24:b4:6a:4e:50:c5:67:ec:e1:45: 6d:d3:de:d3:7b:e2:f5:b1:eb:a9:c2:20:0b:35:cc:a5:80:f7: 9d:28:5a:3f:d5:7e:c5:01:91:79:66:28:4f:ad:e6:89:99:e3: 8a:bb:eb:49:a6:50:df:4d:61:0b:e3:0d:cf:d1:35:d4:31:d9: d5:28:56:b7:46:18:d9:1e:f1:58:39:1f:79:d1:be:19:5c:48: 53:57:4d:18:18:ab:c0:be:4e:3b:a7:f9:b2:ff:e0:36:20:cb: 02:76:2a:92:0e:61:61:3c:87:e2:c3:38:12:f2:35:5c:c6:a6: b8:61:0e:6d:e6:c7:e8:66:a3:0a:c5:c9:35:d9:e1:9b:92:d2: 26:ac:3b:50:74:21:2f:ec:93:6f:b6:66:36:a9:22:32:7e:14: e0:2d:93:95:42:01:94:c3:fc:0f:f9:55:62:94:e1:d3:f5:6d: a5:1f:0d:67:19:17:5d:04:b6:f7:c1:8f:5c:69:e9:a6:4a:f0: 42:0f:eb:1b:84:88:89:d6:e9:95:80:a9:8f:94:30:7d:00:30: 0b:a3:27:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y73tsTkZDlMpbTH1G3t+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyODBmZGM5ZTdhODY0MzBjOGUyOGY1ZTM0OWUzMTdmYmI4 YTFjYTkwHhcNMjYwMTI1MjMwMTA3WhcNMjYwMTI2MjMwMTA3WjAzMTEwLwYDVQQD EyhjZDU4M2U3NDExMTdlZWRiY2MzMDIzZGY1YmRjZjk2OWU2NDgyYTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5sxX7H/p7H83L48aQdjPDIMxsg6 wABQtAk06ErG4R95kiDIZxF23vvoQ1m2X6m3lPYiFZtuwbDQTP5XN2IoOsTxoaR8 qOMrSJqip6t0s30yMJ7MDGjrMKTobSfAJe1SsVK4PbNawf+Cf3PnXluJO17yZ7m2 ec2BzWm+LNKRbA5RAxaL6UiBCsuJNfJrnjufIRLcBp6tkpWtfmLsKwREuOK8Tbj8 HGNvy3WFq32YbVCD/buuGReOKQgSxS7isk+wtW990q8fvCwULNSS8yaueHuEF3qG hWE+ZgdlRMXAlHn5myhxJRzzs3STYRReprXDx05oU+hnCZlmF84Mh4xQiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM1YPnQRF+7bzDAj31vc+WnmSCojMB8GA1UdIwQY MBaAFJKA/cnnqGQwyOKPXjSeMX+7ihypMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva29EOXllZW9aRERJNG85ZU5KNHhmN3VLSEtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9jZjQ5NDYtZjVjMi00NWFhLTlhNDEt ZjQ0Mjk5ODY1YTI4LzEva29EOXllZW9aRERJNG85ZU5KNHhmN3VLSEtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9jZjQ5NDYtZjVjMi00NWFhLTlhNDEtZjQ0Mjk5ODY1YTI4 LzEva29EOXllZW9aRERJNG85ZU5KNHhmN3VLSEtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS0CMmkLt BSn5lpLtZJkcjnDwsRSlOOcc4mnJlhiwF3QribLUcfl2HIqPZGsktGpOUMVn7OFF bdPe03vi9bHrqcIgCzXMpYD3nShaP9V+xQGReWYoT63miZnjirvrSaZQ301hC+MN z9E11DHZ1ShWt0YY2R7xWDkfedG+GVxIU1dNGBirwL5OO6f5sv/gNiDLAnYqkg5h YTyH4sM4EvI1XMamuGEObebH6GajCsXJNdnhm5LSJqw7UHQhL+yTb7ZmNqkiMn4U 4C2TlUIBlMP8D/lVYpTh0/VtpR8NZxkXXQS298GPXGnppkrwQg/rG4SIidbplYCp j5QwfQAwC6MndQ== -----END CERTIFICATE-----Generated at Mon Jan 26 09:02:42 2026 by rpki-client