This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft File: KWJHhUnYzCZMLMV9znGQXRdvuIo.mft (raw, json) Hash identifier: brnavtCc2CJ40ZhALDfzxX50d1l6mp41s7L56U9Eqi8= Subject key identifier: F4:B7:EA:6F:D9:68:93:D3:60:5C:AE:57:EF:75:2F:C5:D5:43:3C:E5 Authority key identifier: 29:62:47:85:49:D8:CC:26:4C:2C:C5:7D:CE:71:90:5D:17:6F:B8:8A Certificate issuer: /CN=2962478549d8cc264c2cc57dce71905d176fb88a Certificate serial: 019BF951F498989DAE68A07EA4049CADB8A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft Manifest number: 177B Signing time: Mon 26 Jan 2026 08:00:56 +0000 Manifest this update: Mon 26 Jan 2026 08:00:56 +0000 Manifest next update: Tue 27 Jan 2026 08:00:56 +0000 Files and hashes: 1: DcG15XyhdtPXOoAizwXiwS-vgWk.roa (hash: 03f0uMllqGm3yVnRgDCB+1RlKyMTqkNgfPJ+f2YUXH4=) 2: KWJHhUnYzCZMLMV9znGQXRdvuIo.crl (hash: VPQ6yv7cHg3/K29/7+of8o/feTY0gZmIQHbD4dDxh2E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:51:f4:98:98:9d:ae:68:a0:7e:a4:04:9c:ad:b8:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2962478549d8cc264c2cc57dce71905d176fb88a Validity Not Before: Jan 26 08:00:56 2026 GMT Not After : Jan 27 08:00:56 2026 GMT Subject: CN=f4b7ea6fd96893d3605cae57ef752fc5d5433ce5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:7b:cc:90:74:83:8d:53:35:77:8d:48:17:36: aa:08:79:39:de:69:a3:a8:b4:ba:1a:f2:f4:b8:0a: b8:a3:54:60:63:85:5c:12:68:40:a6:28:41:f5:39: fa:5d:ce:aa:49:09:4e:88:11:3e:51:a3:d2:71:6e: 8a:f0:59:35:1b:0a:39:26:34:54:40:cd:0e:71:b4: aa:68:b7:e6:3d:3a:7c:23:e9:0b:a1:ce:20:72:cf: 9b:e9:6e:50:56:97:22:69:26:81:fc:a9:65:22:c8: c9:e4:4f:b9:83:c7:00:28:7a:fb:ed:fd:3e:dc:c0: e0:d7:60:31:27:9c:69:39:b8:88:3e:ce:65:54:9e: a2:74:f2:91:b5:f5:45:e9:1d:88:cd:26:bc:10:f5: 22:55:94:9f:19:7e:2a:1e:5f:58:40:00:21:04:33: 1f:92:2e:88:39:29:16:6f:38:2c:9c:60:0d:c3:2e: 55:82:9a:bd:91:90:84:a9:ae:01:17:fc:24:98:a4: fb:8c:a9:ec:47:ee:e6:b0:b9:64:10:68:f5:4f:c2: 03:03:bc:7c:da:31:d1:0b:7c:e9:b4:0d:cd:42:91: eb:5b:fa:96:81:63:35:86:a8:36:7a:f9:20:1d:2b: 7a:da:e3:95:5b:af:1d:7d:aa:a2:f3:14:02:a7:ce: 77:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:B7:EA:6F:D9:68:93:D3:60:5C:AE:57:EF:75:2F:C5:D5:43:3C:E5 X509v3 Authority Key Identifier: keyid:29:62:47:85:49:D8:CC:26:4C:2C:C5:7D:CE:71:90:5D:17:6F:B8:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:e8:2c:00:29:30:53:91:2f:a8:83:eb:47:7f:f2:21:b1:84: bf:a1:d7:7f:bb:98:2d:8e:9c:da:06:79:5a:0f:c1:63:6c:4c: 42:e2:41:a4:34:87:a3:37:ec:40:48:7b:dc:ca:a0:84:6d:19: 0e:fc:70:03:0c:1c:23:e2:5f:38:a6:eb:f5:29:01:bc:00:55: b4:ae:42:43:a4:a7:70:82:df:5b:d5:70:60:9c:07:99:64:13: a3:89:d9:03:29:45:e0:70:a2:90:aa:65:0c:e9:22:76:db:76: 0f:23:2a:e7:eb:12:ba:9a:f8:e0:66:0c:50:51:0d:46:ef:a9: 97:d6:b5:6f:45:6e:17:5d:75:bc:2b:b0:b5:da:74:b4:91:4d: 88:31:00:38:bf:79:3a:21:88:91:f9:d1:43:3d:b2:d2:71:95: 4a:82:98:a4:4f:37:a3:8e:9a:6d:a6:59:40:e6:0d:e8:e8:e5: 73:f9:c1:42:9d:92:ca:c0:6f:08:26:11:17:91:74:c8:6c:77: 0c:7b:35:8e:e1:0a:cc:2a:04:e5:19:3b:f1:36:89:fd:50:ce: 21:ab:7d:dd:fe:9c:67:a4:41:7f:7e:33:46:1a:54:b2:74:ab: 6e:7d:d9:9d:3b:8d:80:82:54:12:91:a6:34:93:3e:df:84:91: ca:5e:0e:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5UfSYmJ2uaKB+pAScrbijMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NjI0Nzg1NDlkOGNjMjY0YzJjYzU3ZGNlNzE5MDVkMTc2 ZmI4OGEwHhcNMjYwMTI2MDgwMDU2WhcNMjYwMTI3MDgwMDU2WjAzMTEwLwYDVQQD EyhmNGI3ZWE2ZmQ5Njg5M2QzNjA1Y2FlNTdlZjc1MmZjNWQ1NDMzY2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3vMkHSDjVM1d41IFzaqCHk53mmj qLS6GvL0uAq4o1RgY4VcEmhApihB9Tn6Xc6qSQlOiBE+UaPScW6K8Fk1Gwo5JjRU QM0OcbSqaLfmPTp8I+kLoc4gcs+b6W5QVpciaSaB/KllIsjJ5E+5g8cAKHr77f0+ 3MDg12AxJ5xpObiIPs5lVJ6idPKRtfVF6R2IzSa8EPUiVZSfGX4qHl9YQAAhBDMf ki6IOSkWbzgsnGANwy5Vgpq9kZCEqa4BF/wkmKT7jKnsR+7msLlkEGj1T8IDA7x8 2jHRC3zptA3NQpHrW/qWgWM1hqg2evkgHSt62uOVW68dfaqi8xQCp853mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPS36m/ZaJPTYFyuV+91L8XVQzzlMB8GA1UdIwQY MBaAFCliR4VJ2MwmTCzFfc5xkF0Xb7iKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1dKSGhVbll6Q1pNTE1WOXpuR1FYUmR2dUlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC81NDUyNTgtZjhhOS00Y2ViLWIwMWIt YzhkZjg0ZTdhZTI5LzEvS1dKSGhVbll6Q1pNTE1WOXpuR1FYUmR2dUlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC81NDUyNTgtZjhhOS00Y2ViLWIwMWItYzhkZjg0ZTdhZTI5 LzEvS1dKSGhVbll6Q1pNTE1WOXpuR1FYUmR2dUlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXegsACkw U5EvqIPrR3/yIbGEv6HXf7uYLY6c2gZ5Wg/BY2xMQuJBpDSHozfsQEh73MqghG0Z DvxwAwwcI+JfOKbr9SkBvABVtK5CQ6SncILfW9VwYJwHmWQTo4nZAylF4HCikKpl DOkidtt2DyMq5+sSupr44GYMUFENRu+pl9a1b0VuF111vCuwtdp0tJFNiDEAOL95 OiGIkfnRQz2y0nGVSoKYpE83o46abaZZQOYN6Ojlc/nBQp2SysBvCCYRF5F0yGx3 DHs1juEKzCoE5Rk78TaJ/VDOIat93f6cZ6RBf34zRhpUsnSrbn3ZnTuNgIJUEpGm NJM+34SRyl4OVw== -----END CERTIFICATE-----Generated at Mon Jan 26 14:09:42 2026 by rpki-client