This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft File: kIp-pxKAHkyP64Wz8HjQW6EBquE.mft (raw, json) Hash identifier: 5pASF7KWsMXdRZg3hGQeLv5Wa2yN+H/fnkb200Y1+w4= Subject key identifier: A2:74:AA:96:F3:6D:CB:E0:FC:F6:E9:14:4B:2D:F1:C8:89:BF:73:A2 Authority key identifier: 90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1 Certificate issuer: /CN=908a7ea712801e4c8feb85b3f078d05ba101aae1 Certificate serial: 019BF8E45700BCE0A33D32EB0CDAA1E0898F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft Manifest number: 17EA Signing time: Mon 26 Jan 2026 06:01:12 +0000 Manifest this update: Mon 26 Jan 2026 06:01:12 +0000 Manifest next update: Tue 27 Jan 2026 06:01:12 +0000 Files and hashes: 1: gmcTjO0RV1Up_jbIfk_CZHi4V2A.roa (hash: Gqp9iA7OYQl9mvBvIysw6E+42GR1MiVOzZC/chm6YUU=) 2: kIp-pxKAHkyP64Wz8HjQW6EBquE.crl (hash: D3I1/sMZNt7rjPuBnUxe3bSPTNpEXoKjI55Nf4wJpyU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:e4:57:00:bc:e0:a3:3d:32:eb:0c:da:a1:e0:89:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908a7ea712801e4c8feb85b3f078d05ba101aae1 Validity Not Before: Jan 26 06:01:12 2026 GMT Not After : Jan 27 06:01:12 2026 GMT Subject: CN=a274aa96f36dcbe0fcf6e9144b2df1c889bf73a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:62:e3:77:fd:76:12:70:69:8d:16:7f:d6:01: 67:80:5e:b9:fc:33:30:18:ba:71:80:34:2e:f9:4f: 02:44:34:e1:01:54:41:19:82:9a:c6:8e:4f:a8:04: 93:22:b5:a4:b9:c3:31:e7:13:9e:1b:75:c3:48:0d: 21:dd:aa:9d:49:0f:c7:d2:0f:19:97:90:0c:5a:95: ae:03:a7:7c:b5:e4:bd:dc:da:99:e7:32:02:51:d5: b1:a2:bc:cc:88:d9:30:c1:15:f7:be:72:2e:fd:a2: 43:3d:23:ee:b1:bf:e9:af:8b:b3:3b:cc:b2:0b:f7: 12:16:f9:28:76:94:4c:b0:40:fa:90:37:34:8f:09: 17:23:84:3d:78:b1:78:4d:24:2d:04:d8:17:44:26: c5:58:93:ed:93:7c:ba:da:6c:33:3b:6a:e7:d4:8a: ec:68:85:40:d0:27:0a:76:7f:67:1f:46:f7:ac:38: f3:91:a7:e2:15:95:b3:c4:81:10:75:50:d5:c1:e6: 30:8b:3c:50:d3:74:27:55:73:4f:a1:c8:44:41:8a: 79:18:1f:2a:ac:c2:c9:3f:7b:c4:a7:bd:ba:07:c4: 9f:41:89:91:2a:37:1d:c0:e9:1d:9a:dd:29:90:b2: fe:9d:29:25:5d:5c:d9:f7:b3:98:19:b7:18:83:44: 27:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:74:AA:96:F3:6D:CB:E0:FC:F6:E9:14:4B:2D:F1:C8:89:BF:73:A2 X509v3 Authority Key Identifier: keyid:90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:23:69:b4:b3:20:50:cd:46:49:82:d2:61:42:c9:ef:35:ca: 4c:a8:96:e5:b8:c7:05:af:af:f4:57:3d:2e:3c:c1:49:1d:21: bf:e7:82:a8:ec:e4:07:5a:9b:5a:47:34:f4:1d:1b:d8:cb:17: 72:47:26:3b:98:48:c0:8d:7a:64:96:11:cd:c3:e2:ae:ae:10: e8:4c:2b:9f:5b:88:a2:ca:80:4c:2e:f2:76:d3:bf:4d:35:a4: 1d:1f:d6:25:9b:21:b1:22:f9:2f:cb:b2:c4:49:a0:97:a1:9f: 58:ef:72:92:6b:a2:68:4c:d6:eb:6a:98:1c:ef:4a:5b:40:09: 82:15:87:b9:f7:6c:7a:e2:78:c9:af:ec:3c:36:d9:b0:8e:3b: ad:79:8f:02:55:2b:84:e9:49:fa:b7:b9:78:80:88:9a:f9:6c: e5:f1:ad:56:29:6c:88:2b:f4:77:d6:9a:95:4b:d8:92:e1:bc: ff:8d:2f:c4:3c:30:9d:c7:b7:5b:49:52:99:f3:29:b3:9f:3a: 2b:5e:a4:28:6a:23:f2:1a:4a:39:62:12:73:59:8f:d2:6e:2d: 07:67:27:7f:cf:e9:7d:b1:30:5f:51:60:7c:69:9e:7b:f4:60: 7d:4d:3c:89:59:e0:31:b1:65:05:09:5b:6c:9d:78:ee:3a:69: 31:a0:16:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv45FcAvOCjPTLrDNqh4ImPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwOGE3ZWE3MTI4MDFlNGM4ZmViODViM2YwNzhkMDViYTEw MWFhZTEwHhcNMjYwMTI2MDYwMTEyWhcNMjYwMTI3MDYwMTEyWjAzMTEwLwYDVQQD EyhhMjc0YWE5NmYzNmRjYmUwZmNmNmU5MTQ0YjJkZjFjODg5YmY3M2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2Ljd/12EnBpjRZ/1gFngF65/DMw GLpxgDQu+U8CRDThAVRBGYKaxo5PqASTIrWkucMx5xOeG3XDSA0h3aqdSQ/H0g8Z l5AMWpWuA6d8teS93NqZ5zICUdWxorzMiNkwwRX3vnIu/aJDPSPusb/pr4uzO8yy C/cSFvkodpRMsED6kDc0jwkXI4Q9eLF4TSQtBNgXRCbFWJPtk3y62mwzO2rn1Irs aIVA0CcKdn9nH0b3rDjzkafiFZWzxIEQdVDVweYwizxQ03QnVXNPochEQYp5GB8q rMLJP3vEp726B8SfQYmRKjcdwOkdmt0pkLL+nSklXVzZ97OYGbcYg0QnBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKJ0qpbzbcvg/PbpFEst8ciJv3OiMB8GA1UdIwQY MBaAFJCKfqcSgB5Mj+uFs/B40FuhAarhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0lwLXB4S0FIa3lQNjRXejhIalFXNkVCcXVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC84NjA1ZTYtZDlmNC00YzMyLWI0ZDEt MWExMmNjMGIwNDA2LzEva0lwLXB4S0FIa3lQNjRXejhIalFXNkVCcXVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC84NjA1ZTYtZDlmNC00YzMyLWI0ZDEtMWExMmNjMGIwNDA2 LzEva0lwLXB4S0FIa3lQNjRXejhIalFXNkVCcXVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACyNptLMg UM1GSYLSYULJ7zXKTKiW5bjHBa+v9Fc9LjzBSR0hv+eCqOzkB1qbWkc09B0b2MsX ckcmO5hIwI16ZJYRzcPirq4Q6Ewrn1uIosqATC7ydtO/TTWkHR/WJZshsSL5L8uy xEmgl6GfWO9ykmuiaEzW62qYHO9KW0AJghWHufdseuJ4ya/sPDbZsI47rXmPAlUr hOlJ+re5eICImvls5fGtVilsiCv0d9aalUvYkuG8/40vxDwwnce3W0lSmfMps586 K16kKGoj8hpKOWISc1mP0m4tB2cnf8/pfbEwX1FgfGmee/RgfU08iVngMbFlBQlb bJ147jppMaAWmA== -----END CERTIFICATE-----Generated at Mon Jan 26 12:30:44 2026 by rpki-client