This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft File: K5KAl9yfiaejqKKWp4pPnQy84X8.mft (raw, json) Hash identifier: 9PfLNdkZNf63QcS9DFZVG8VQjgPKHa2W5fmUygqd6sk= Subject key identifier: 36:FE:5F:47:8B:CB:B1:CF:98:31:D9:E1:6D:42:29:E0:62:A9:82:80 Authority key identifier: 2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F Certificate issuer: /CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f Certificate serial: 019BF42BC83634DA5D65E770BD3D0A0870B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft Manifest number: 17F2 Signing time: Sun 25 Jan 2026 08:01:08 +0000 Manifest this update: Sun 25 Jan 2026 08:01:08 +0000 Manifest next update: Mon 26 Jan 2026 08:01:08 +0000 Files and hashes: 1: 3jD0YcizeH8Q1qV2NEPg7xq78Tc.roa (hash: 52GkghurYXZlBw/P3re6oL3xnNmHYgWQ/XfBpyrLrd0=) 2: Ecy3CFSnUwOKhmhjKk6r9oZmrgU.roa (hash: XtcTVzHETxkCw8mwBAqZHbUKLVnvKh4s/PETyzl7Dqc=) 3: H8kw6Sg_EEFlV4WiqGHQYPzK8jI.roa (hash: vA9KgFsuau17xYabkQq0t4vvihSWAC35OyURHBxCae8=) 4: K5KAl9yfiaejqKKWp4pPnQy84X8.crl (hash: C/LmwlORQMiPjaX54XhLQnWYS3Z2VmaZmNQDga3FIQg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:2b:c8:36:34:da:5d:65:e7:70:bd:3d:0a:08:70:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f Validity Not Before: Jan 25 08:01:08 2026 GMT Not After : Jan 26 08:01:08 2026 GMT Subject: CN=36fe5f478bcbb1cf9831d9e16d4229e062a98280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9a:79:a1:df:d4:d9:b1:48:af:bc:8c:ff:a0: b5:2c:b2:77:21:46:c4:0c:ad:48:7b:bf:55:88:c2: 3b:f5:3e:bb:e9:44:9d:43:ba:fb:0e:a3:a4:00:c6: 09:03:37:c2:89:df:f1:81:9e:68:a0:a3:a2:9b:6a: af:d5:23:28:aa:87:55:5e:9f:49:d7:a9:f0:6b:55: 6d:53:bf:16:80:e9:a6:e1:1f:ec:f6:0c:54:a7:5f: 47:11:f5:54:41:07:d7:d5:3a:70:47:53:18:85:d6: ea:d7:f0:e7:43:44:f6:80:32:6c:2a:75:be:33:c0: b3:da:6f:58:cf:8d:fc:83:13:09:9b:1d:d9:fe:ea: c8:72:60:4f:c4:78:0e:f2:69:08:07:03:5c:b4:7f: a2:46:0b:dd:bc:89:2a:40:0b:18:0a:7d:b7:8c:f5: f7:ad:3c:95:fd:51:7e:df:e2:47:44:08:c0:93:52: 13:93:d4:ed:b0:c7:6e:22:80:16:ad:d5:64:39:b7: 3f:ce:8d:33:b9:7b:ba:6c:6b:5b:7c:e5:8f:37:26: 54:d6:0e:3e:18:cc:e6:37:b1:8c:03:3f:e6:5b:ea: 26:c0:ad:32:ff:f1:46:94:65:78:3b:77:8f:36:92: 4d:ce:63:fa:5f:fe:55:3a:66:40:17:7c:f9:4d:33: 94:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:FE:5F:47:8B:CB:B1:CF:98:31:D9:E1:6D:42:29:E0:62:A9:82:80 X509v3 Authority Key Identifier: keyid:2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:4a:cd:0d:23:26:c4:c3:71:00:80:c2:6e:7c:6e:34:c4:a9: 36:56:f4:df:25:30:d9:2b:3e:ff:74:00:3f:55:ef:86:77:95: 2c:fe:a0:b6:fc:08:7e:c7:65:c2:47:9c:55:84:b6:00:78:a0: 38:4f:9f:82:6a:31:34:e6:c4:0c:a2:27:be:bd:a3:40:cc:7b: f0:64:7b:2b:5b:35:55:a6:64:32:f0:8f:6c:c4:b6:b6:65:b4: f3:fc:d9:02:24:0d:81:ee:07:53:f2:d7:8c:a3:ec:ee:19:5b: 19:5c:ce:8d:8b:77:6d:d9:75:f8:cf:e3:ab:cd:6d:a3:01:49: e7:32:b1:1c:1f:dc:5c:b1:d4:19:f2:85:18:07:bc:ba:5b:3f: 48:38:8f:f0:44:bd:4b:f2:90:98:99:50:08:08:af:d2:7d:aa: 0d:a1:22:cb:39:e6:0f:74:b0:66:b9:d8:71:53:2e:56:8f:38: 6d:9b:ff:36:ac:6a:c2:43:7e:86:51:01:9b:f8:34:72:80:2d: 6d:3b:cc:6c:19:92:5c:5a:de:18:38:29:a3:07:38:b8:e9:8f: 6d:d0:2e:d7:4d:18:c8:2c:f7:22:2f:6f:2e:d3:38:0f:c5:25: a9:78:17:3c:14:3d:85:5d:d7:37:8c:e9:48:13:d1:2b:a3:42: 82:1e:e0:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0K8g2NNpdZedwvT0KCHC1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiOTI4MDk3ZGM5Zjg5YTdhM2E4YTI5NmE3OGE0ZjlkMGNi Y2UxN2YwHhcNMjYwMTI1MDgwMTA4WhcNMjYwMTI2MDgwMTA4WjAzMTEwLwYDVQQD EygzNmZlNWY0NzhiY2JiMWNmOTgzMWQ5ZTE2ZDQyMjllMDYyYTk4MjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZp5od/U2bFIr7yM/6C1LLJ3IUbE DK1Ie79ViMI79T676USdQ7r7DqOkAMYJAzfCid/xgZ5ooKOim2qv1SMoqodVXp9J 16nwa1VtU78WgOmm4R/s9gxUp19HEfVUQQfX1TpwR1MYhdbq1/DnQ0T2gDJsKnW+ M8Cz2m9Yz438gxMJmx3Z/urIcmBPxHgO8mkIBwNctH+iRgvdvIkqQAsYCn23jPX3 rTyV/VF+3+JHRAjAk1ITk9TtsMduIoAWrdVkObc/zo0zuXu6bGtbfOWPNyZU1g4+ GMzmN7GMAz/mW+omwK0y//FGlGV4O3ePNpJNzmP6X/5VOmZAF3z5TTOU7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDb+X0eLy7HPmDHZ4W1CKeBiqYKAMB8GA1UdIwQY MBaAFCuSgJfcn4mno6iilqeKT50MvOF/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzVLQWw5eWZpYWVqcUtLV3A0cFBuUXk4NFg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9hNzM0YTQtMTQzZC00NjFkLWJmZDYt NDVjYWE2ZWY2NzAwLzEvSzVLQWw5eWZpYWVqcUtLV3A0cFBuUXk4NFg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9hNzM0YTQtMTQzZC00NjFkLWJmZDYtNDVjYWE2ZWY2NzAw LzEvSzVLQWw5eWZpYWVqcUtLV3A0cFBuUXk4NFg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm0rNDSMm xMNxAIDCbnxuNMSpNlb03yUw2Ss+/3QAP1XvhneVLP6gtvwIfsdlwkecVYS2AHig OE+fgmoxNObEDKInvr2jQMx78GR7K1s1VaZkMvCPbMS2tmW08/zZAiQNge4HU/LX jKPs7hlbGVzOjYt3bdl1+M/jq81towFJ5zKxHB/cXLHUGfKFGAe8uls/SDiP8ES9 S/KQmJlQCAiv0n2qDaEiyznmD3SwZrnYcVMuVo84bZv/NqxqwkN+hlEBm/g0coAt bTvMbBmSXFreGDgpowc4uOmPbdAu100YyCz3Ii9vLtM4D8UlqXgXPBQ9hV3XN4zp SBPRK6NCgh7g5A== -----END CERTIFICATE-----Generated at Sun Jan 25 18:35:25 2026 by rpki-client