This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft File: kwpGPWfktC2GOazfDRVCT4LxmmA.mft (raw, json) Hash identifier: 6e8BkbMGAAqZ/adpkjmdnfE9+4K7nXje+GzjaYmWlus= Subject key identifier: 0C:3B:75:83:A7:95:0F:9D:72:80:C1:05:F3:21:2D:93:8B:F9:03:5F Authority key identifier: 93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60 Certificate issuer: /CN=930a463d67e4b42d8639acdf0d15424f82f19a60 Certificate serial: 019BFAD2146FF5689DF506B6D86DF1D16942 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft Manifest number: 177F Signing time: Mon 26 Jan 2026 15:00:30 +0000 Manifest this update: Mon 26 Jan 2026 15:00:30 +0000 Manifest next update: Tue 27 Jan 2026 15:00:30 +0000 Files and hashes: 1: izkOI9oY18uKSV4FRgb611Hp7mU.roa (hash: QUMFHyKky+C4/Hhg2gnIkNny4unJriThfo8M2jzgsDs=) 2: kwpGPWfktC2GOazfDRVCT4LxmmA.crl (hash: 28F9dhLI5SpNFYgHdVbltzG0Qi0rvPxDGO/EU8v2vms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:d2:14:6f:f5:68:9d:f5:06:b6:d8:6d:f1:d1:69:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=930a463d67e4b42d8639acdf0d15424f82f19a60 Validity Not Before: Jan 26 15:00:30 2026 GMT Not After : Jan 27 15:00:30 2026 GMT Subject: CN=0c3b7583a7950f9d7280c105f3212d938bf9035f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a3:73:81:8b:1e:cd:e2:82:26:0f:c7:89:50: 3e:7f:17:59:22:79:a7:ff:66:54:41:09:cf:1f:04: b1:c1:c0:38:97:0c:ee:79:56:30:f9:13:f9:8a:ae: 88:ab:1d:c4:bd:19:0f:af:19:3f:07:43:9f:bb:b6: 5d:70:01:07:6b:a1:59:5b:94:d1:de:76:55:1f:fa: d8:50:80:e6:10:6f:56:88:23:9e:c3:b6:70:76:7f: cb:19:c1:49:07:a2:3c:d9:a2:69:1f:34:7b:6e:01: 74:d3:18:43:89:e0:f0:4f:57:b5:0a:ab:97:cc:b3: d8:50:2e:99:06:a9:88:6b:b9:18:aa:f8:c9:9a:bb: 50:ce:68:a3:7e:e5:e1:22:5c:66:7d:77:d5:fc:e6: ee:53:d5:5f:55:da:12:5f:93:ff:3e:00:85:f5:cd: b4:5a:30:9e:2c:4f:b7:63:71:05:8f:54:27:8c:5b: 03:47:41:25:8e:5e:7f:12:55:c5:f3:ad:a1:a5:13: 3c:29:91:a8:46:f7:8c:d8:b5:4a:fd:32:6f:5d:be: d4:46:51:24:3c:6f:d5:e5:4e:aa:19:88:17:98:9a: 3c:24:86:7c:37:8c:25:a9:b9:48:39:09:bd:63:0e: fd:0e:91:b0:c3:0d:9a:51:33:ca:de:e2:94:58:2e: 75:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:3B:75:83:A7:95:0F:9D:72:80:C1:05:F3:21:2D:93:8B:F9:03:5F X509v3 Authority Key Identifier: keyid:93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:8f:62:7a:ff:ed:dc:e7:75:78:a0:ff:d5:d8:51:60:58:2a: 8a:1b:b2:8e:ad:46:6f:7c:1e:43:f7:17:57:09:19:17:49:e2: ab:b1:1b:c9:36:21:53:d0:89:77:3e:ce:a6:aa:f2:b5:55:15: b7:99:b4:12:fb:85:75:76:fe:c4:09:0c:32:12:e8:f2:29:ef: 30:82:38:f8:24:20:22:d7:fa:b3:34:f2:41:ec:63:5e:e3:ef: 02:13:9f:7d:8a:4f:58:52:73:5d:1c:ed:20:42:be:2d:f5:dd: 12:f8:2b:eb:69:85:ed:e3:a4:ea:fe:09:69:59:4a:fc:d2:d7: e4:ab:b3:4e:a2:9f:ed:71:30:fc:aa:7c:5d:75:49:d9:0b:a1: 69:78:5e:5d:b7:07:b0:89:58:38:3f:1e:7a:09:83:76:1d:0b: 5f:3a:b0:73:ae:08:08:f5:3f:d2:fe:0a:63:15:6e:55:15:00: 6f:a7:62:86:1f:38:b8:d2:38:58:53:2b:8f:49:27:af:ab:59: 7c:4a:b0:69:25:12:73:c6:21:30:3d:bd:32:d0:43:52:58:0e: c1:4e:fb:18:71:4e:6a:12:ff:21:ae:0c:c7:9a:81:b3:ed:19: 50:04:97:b8:c1:57:b5:04:ab:64:4d:0d:8f:ec:ee:53:41:b1: 92:db:0a:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv60hRv9Wid9Qa22G3x0WlCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMGE0NjNkNjdlNGI0MmQ4NjM5YWNkZjBkMTU0MjRmODJm MTlhNjAwHhcNMjYwMTI2MTUwMDMwWhcNMjYwMTI3MTUwMDMwWjAzMTEwLwYDVQQD EygwYzNiNzU4M2E3OTUwZjlkNzI4MGMxMDVmMzIxMmQ5MzhiZjkwMzVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qNzgYsezeKCJg/HiVA+fxdZInmn /2ZUQQnPHwSxwcA4lwzueVYw+RP5iq6Iqx3EvRkPrxk/B0Ofu7ZdcAEHa6FZW5TR 3nZVH/rYUIDmEG9WiCOew7Zwdn/LGcFJB6I82aJpHzR7bgF00xhDieDwT1e1CquX zLPYUC6ZBqmIa7kYqvjJmrtQzmijfuXhIlxmfXfV/ObuU9VfVdoSX5P/PgCF9c20 WjCeLE+3Y3EFj1QnjFsDR0Eljl5/ElXF862hpRM8KZGoRveM2LVK/TJvXb7URlEk PG/V5U6qGYgXmJo8JIZ8N4wlqblIOQm9Yw79DpGwww2aUTPK3uKUWC51GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAw7dYOnlQ+dcoDBBfMhLZOL+QNfMB8GA1UdIwQY MBaAFJMKRj1n5LQthjms3w0VQk+C8ZpgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3dwR1BXZmt0QzJHT2F6ZkRSVkNUNEx4bW1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zN2I2M2UtOWM4OC00MmRjLWIwNDMt ZGU4NDQ5NjRmNWVlLzEva3dwR1BXZmt0QzJHT2F6ZkRSVkNUNEx4bW1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8zN2I2M2UtOWM4OC00MmRjLWIwNDMtZGU4NDQ5NjRmNWVl LzEva3dwR1BXZmt0QzJHT2F6ZkRSVkNUNEx4bW1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACo9iev/t 3Od1eKD/1dhRYFgqihuyjq1Gb3weQ/cXVwkZF0niq7EbyTYhU9CJdz7OpqrytVUV t5m0EvuFdXb+xAkMMhLo8invMII4+CQgItf6szTyQexjXuPvAhOffYpPWFJzXRzt IEK+LfXdEvgr62mF7eOk6v4JaVlK/NLX5KuzTqKf7XEw/Kp8XXVJ2QuhaXheXbcH sIlYOD8eegmDdh0LXzqwc64ICPU/0v4KYxVuVRUAb6dihh84uNI4WFMrj0knr6tZ fEqwaSUSc8YhMD29MtBDUlgOwU77GHFOahL/Ia4Mx5qBs+0ZUASXuMFXtQSrZE0N j+zuU0GxktsKBw== -----END CERTIFICATE-----Generated at Mon Jan 26 18:22:18 2026 by rpki-client