This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft File: KVqSt3jt36jc2RfLuHzeMboscy8.mft (raw, json) Hash identifier: VQvcRgS7Df3a1BFQY+AntHHqsBGKk9oa20r2LaMaP6I= Subject key identifier: 27:C1:9E:09:14:AB:C1:7B:29:D5:59:C5:A0:64:EC:5A:F9:8B:96:EE Authority key identifier: 29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F Certificate issuer: /CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f Certificate serial: 019BF951EEBF40E8F88B3311937E51C41ED7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 08:00:54 +0000 Manifest this update: Mon 26 Jan 2026 08:00:54 +0000 Manifest next update: Tue 27 Jan 2026 08:00:54 +0000 Files and hashes: 1: KVqSt3jt36jc2RfLuHzeMboscy8.crl (hash: wroAbt1PRUaCj9vZgvc6lwXCUYq9gg7OP98gs439a5k=) 2: du4Uc1Tw1A4vtFUr5_RZZE4mr9c.roa (hash: VHvvL6d/GOaFCBnvC8MIBYdWi2shlhJJCY1UWI68tyA=) 3: u3hZ4Wo-VF-Q5oSlFkaUlkQvEKA.roa (hash: U2nT3r9q5huh0VOndjllE1MWO9Yu+mYw1a5lsTdkP+k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:51:ee:bf:40:e8:f8:8b:33:11:93:7e:51:c4:1e:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f Validity Not Before: Jan 26 08:00:54 2026 GMT Not After : Jan 27 08:00:54 2026 GMT Subject: CN=27c19e0914abc17b29d559c5a064ec5af98b96ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d3:dc:44:41:74:7a:39:e6:0a:3a:9e:e9:e0: 4b:27:59:0e:53:ed:c6:96:38:3d:2f:92:d2:1e:47: d1:12:7c:bb:b4:f3:98:09:76:a6:2e:58:43:7c:27: 4e:02:a8:f5:87:18:e9:9b:bb:e3:c5:78:70:49:e1: 3d:79:96:7d:c6:7a:ae:1c:74:0e:5e:e9:7d:23:6d: 19:0e:50:98:1f:0a:7c:a8:8a:36:8c:25:bc:ea:f2: b9:e8:5f:dc:d9:a9:a7:50:08:0f:c0:d2:f2:85:98: d7:8a:21:be:3a:93:b4:41:11:2e:d5:ae:d4:03:99: ed:6f:98:47:19:84:c2:4e:c4:8c:57:a8:7d:d1:ec: b7:6f:cf:75:68:c3:e8:0e:16:30:e6:41:bb:73:53: 90:5b:85:8d:7e:ca:b4:6a:f9:6e:4c:6a:02:37:37: 8e:57:62:21:18:c1:30:10:aa:1f:e9:34:f3:8f:12: 51:5c:d8:d8:ee:41:e6:1f:a7:f1:d2:e9:8f:a9:83: 75:21:aa:c6:87:08:9f:c4:62:4d:91:b6:78:3c:a6: 74:52:5b:05:c3:e8:98:fe:7a:c3:ef:e1:09:d2:f3: f3:7f:83:dd:b2:eb:e5:93:63:9a:e5:45:07:c8:15: f6:c7:c0:92:6d:de:c2:49:bf:6e:90:bd:03:3b:65: 35:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:C1:9E:09:14:AB:C1:7B:29:D5:59:C5:A0:64:EC:5A:F9:8B:96:EE X509v3 Authority Key Identifier: keyid:29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:70:ae:d6:4a:e3:cf:81:31:bf:c6:2e:a2:59:39:72:ab:89: 74:60:9a:b7:8b:7d:ad:b0:76:2f:22:aa:24:a7:38:43:2e:d8: e4:19:76:a8:67:ec:f5:b3:79:91:0e:e2:fa:c6:99:12:2e:f1: c9:24:89:10:2a:d2:74:c4:68:b6:b1:ab:8f:b0:33:39:4a:a2: 62:d7:4b:b7:b6:a2:38:f3:78:99:f7:fc:7e:69:73:ef:4a:a4: be:70:40:0f:02:e0:44:b6:6e:9f:5c:97:51:ed:ab:e2:7f:0e: 69:8c:05:3c:78:da:ca:bd:e6:bf:4a:bc:d1:3a:9d:76:d1:b5: d8:7b:2c:b8:6b:3b:dc:e9:08:67:23:8a:98:48:4b:b0:c0:85: 89:f1:c1:e5:ff:6e:ca:9c:0a:49:af:26:5a:bf:0a:69:c6:dd: 1a:93:d2:3b:aa:9a:d6:0e:f1:dd:b1:f8:9b:7d:70:be:c9:92: 34:53:69:e8:c8:05:5a:f9:78:26:c2:a9:8b:47:25:1c:45:6d: ae:6f:b4:bc:cb:ef:7b:40:37:74:76:1d:99:47:09:14:66:b4: bc:57:fe:55:64:c3:9d:be:0d:8a:2b:78:05:a8:91:4b:c3:7a: 07:08:91:ef:37:04:3f:c1:67:ca:f3:26:bc:0b:95:83:32:d4: b2:14:8e:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5Ue6/QOj4izMRk35RxB7XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NWE5MmI3NzhlZGRmYThkY2Q5MTdjYmI4N2NkZTMxYmEy YzczMmYwHhcNMjYwMTI2MDgwMDU0WhcNMjYwMTI3MDgwMDU0WjAzMTEwLwYDVQQD EygyN2MxOWUwOTE0YWJjMTdiMjlkNTU5YzVhMDY0ZWM1YWY5OGI5NmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NPcREF0ejnmCjqe6eBLJ1kOU+3G ljg9L5LSHkfREny7tPOYCXamLlhDfCdOAqj1hxjpm7vjxXhwSeE9eZZ9xnquHHQO Xul9I20ZDlCYHwp8qIo2jCW86vK56F/c2amnUAgPwNLyhZjXiiG+OpO0QREu1a7U A5ntb5hHGYTCTsSMV6h90ey3b891aMPoDhYw5kG7c1OQW4WNfsq0avluTGoCNzeO V2IhGMEwEKof6TTzjxJRXNjY7kHmH6fx0umPqYN1IarGhwifxGJNkbZ4PKZ0UlsF w+iY/nrD7+EJ0vPzf4Pdsuvlk2Oa5UUHyBX2x8CSbd7CSb9ukL0DO2U1EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCfBngkUq8F7KdVZxaBk7Fr5i5buMB8GA1UdIwQY MBaAFClakrd47d+o3NkXy7h83jG6LHMvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1ZxU3QzanQzNmpjMlJmTHVIemVNYm9zY3k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83NTcwZTEtYWUzZC00OTAxLTljODUt ZGNkYzVjZWUyNzZmLzEvS1ZxU3QzanQzNmpjMlJmTHVIemVNYm9zY3k4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy83NTcwZTEtYWUzZC00OTAxLTljODUtZGNkYzVjZWUyNzZm LzEvS1ZxU3QzanQzNmpjMlJmTHVIemVNYm9zY3k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA3Cu1krj z4Exv8Yuolk5cquJdGCat4t9rbB2LyKqJKc4Qy7Y5Bl2qGfs9bN5kQ7i+saZEi7x ySSJECrSdMRotrGrj7AzOUqiYtdLt7aiOPN4mff8fmlz70qkvnBADwLgRLZun1yX Ue2r4n8OaYwFPHjayr3mv0q80TqddtG12HssuGs73OkIZyOKmEhLsMCFifHB5f9u ypwKSa8mWr8KacbdGpPSO6qa1g7x3bH4m31wvsmSNFNp6MgFWvl4JsKpi0clHEVt rm+0vMvve0A3dHYdmUcJFGa0vFf+VWTDnb4Niit4BaiRS8N6BwiR7zcEP8FnyvMm vAuVgzLUshSOgg== -----END CERTIFICATE-----Generated at Mon Jan 26 11:47:10 2026 by rpki-client