This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft File: K_L644DF1MHigYEKNNuYg8nZ_y8.mft (raw, json) Hash identifier: ZCGHRrpnG4P7p4H+EGOlLwNtd32pF1c1ahxD3R/39oY= Subject key identifier: 41:04:7D:2A:1D:F6:8D:8C:3B:C3:4F:C8:F2:BF:B1:45:D3:62:8A:14 Authority key identifier: 2B:F2:FA:E3:80:C5:D4:C1:E2:81:81:0A:34:DB:98:83:C9:D9:FF:2F Certificate issuer: /CN=2bf2fae380c5d4c1e281810a34db9883c9d9ff2f Certificate serial: 019BF83FDE2549DFA8B84232B12A0C771780 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft Manifest number: 0772 Signing time: Mon 26 Jan 2026 03:01:33 +0000 Manifest this update: Mon 26 Jan 2026 03:01:33 +0000 Manifest next update: Tue 27 Jan 2026 03:01:33 +0000 Files and hashes: 1: K_L644DF1MHigYEKNNuYg8nZ_y8.crl (hash: vn9Jmn+K2PoiQeZ9ZQvW/BkYKg8wvhYQ5KkKPqwnW78=) 2: NrFG9a7lhgdagV21jW_Y5WHIDU4.roa (hash: VxqOc7Zmm8Sw61vVYrF1hQBCY2BqNer2KY9Km2/+dR4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:de:25:49:df:a8:b8:42:32:b1:2a:0c:77:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bf2fae380c5d4c1e281810a34db9883c9d9ff2f Validity Not Before: Jan 26 03:01:33 2026 GMT Not After : Jan 27 03:01:33 2026 GMT Subject: CN=41047d2a1df68d8c3bc34fc8f2bfb145d3628a14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:91:58:46:64:bd:a3:84:7d:f6:ed:56:47:82: 68:69:ce:ff:46:56:02:76:00:ab:1a:da:99:e1:f1: cc:d9:1e:20:f3:61:4e:b6:f5:9f:aa:6a:fb:bc:aa: 25:b4:79:07:fb:2a:90:e9:eb:c9:e4:49:74:36:14: 4d:ee:ad:7f:43:9a:b7:f6:7b:57:e9:a5:7f:0c:87: 8f:41:e3:35:41:5c:93:4d:85:9d:e5:5d:6d:2c:cd: c2:87:13:4c:1e:fe:f3:82:4e:78:2d:80:21:18:1c: 7e:57:96:fd:a6:c0:a5:32:29:7b:86:28:3b:dc:ad: 89:3e:d5:56:56:8d:8a:b1:27:dd:9a:e5:ae:fc:e5: 93:a7:00:55:62:98:90:ba:81:86:c1:a8:2c:d7:a7: f2:3f:02:8b:0e:18:bd:3b:01:5c:45:6b:ed:0c:09: af:bc:c2:e3:b3:67:63:e4:33:9e:c5:ac:ee:2a:b7: 79:c7:85:6f:38:9f:db:7a:ee:d8:36:54:c3:b7:9b: 50:3a:c8:7d:41:ec:a5:00:99:86:bc:64:11:1c:13: c0:d0:a8:88:3c:b7:56:30:52:04:2a:16:2d:17:72: d2:8b:fe:c2:28:43:3f:08:ae:24:e3:49:7c:af:2a: e4:40:93:1b:5b:5a:71:4f:90:4b:40:65:f8:a0:d1: 73:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:04:7D:2A:1D:F6:8D:8C:3B:C3:4F:C8:F2:BF:B1:45:D3:62:8A:14 X509v3 Authority Key Identifier: keyid:2B:F2:FA:E3:80:C5:D4:C1:E2:81:81:0A:34:DB:98:83:C9:D9:FF:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:5d:11:57:1c:7a:ef:33:66:ab:13:aa:b1:a9:ad:47:45:d1: 6d:33:b4:88:1d:ce:a2:23:3e:d1:9e:f4:9a:5a:1d:de:b5:d7: 32:f4:fb:06:eb:49:30:58:bf:b8:b7:64:6d:cb:92:d9:16:a2: ba:e1:70:35:05:79:61:c6:73:7b:8a:c3:81:71:8a:23:7d:06: 48:6a:99:db:78:e0:37:9b:e4:86:9a:52:11:09:1e:ae:be:2b: 45:ab:9e:6a:e6:56:6f:02:93:8f:11:cc:de:93:5e:02:98:18: 81:ca:4e:24:90:09:75:61:8d:3a:61:e9:30:a3:c1:d9:4f:49: 95:0e:50:28:bd:1c:ff:60:42:b1:32:72:e3:dc:e7:f9:aa:8c: 5e:1b:6f:89:3d:f8:20:dd:bc:68:c0:b3:b3:8b:8f:e5:af:f2: 24:e0:df:bc:7e:51:28:a9:b9:e0:27:9f:c0:0c:12:67:f5:11: 64:0b:08:f5:b9:f2:30:2f:56:03:08:52:7d:46:3c:28:62:e0: d5:07:eb:e6:e2:33:f9:63:e8:e3:2a:75:13:d9:5f:3c:6e:cc: f4:29:7e:17:ae:85:9f:d4:46:f5:5e:0e:08:a9:ae:48:8b:22: 6f:45:b1:3a:ab:85:22:ac:99:d6:c5:da:f2:e8:23:8c:77:23: 27:75:41:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P94lSd+ouEIysSoMdxeAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiZjJmYWUzODBjNWQ0YzFlMjgxODEwYTM0ZGI5ODgzYzlk OWZmMmYwHhcNMjYwMTI2MDMwMTMzWhcNMjYwMTI3MDMwMTMzWjAzMTEwLwYDVQQD Eyg0MTA0N2QyYTFkZjY4ZDhjM2JjMzRmYzhmMmJmYjE0NWQzNjI4YTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pFYRmS9o4R99u1WR4Joac7/RlYC dgCrGtqZ4fHM2R4g82FOtvWfqmr7vKoltHkH+yqQ6evJ5El0NhRN7q1/Q5q39ntX 6aV/DIePQeM1QVyTTYWd5V1tLM3ChxNMHv7zgk54LYAhGBx+V5b9psClMil7hig7 3K2JPtVWVo2KsSfdmuWu/OWTpwBVYpiQuoGGwags16fyPwKLDhi9OwFcRWvtDAmv vMLjs2dj5DOexazuKrd5x4VvOJ/beu7YNlTDt5tQOsh9QeylAJmGvGQRHBPA0KiI PLdWMFIEKhYtF3LSi/7CKEM/CK4k40l8ryrkQJMbW1pxT5BLQGX4oNFzdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEEEfSod9o2MO8NPyPK/sUXTYooUMB8GA1UdIwQY MBaAFCvy+uOAxdTB4oGBCjTbmIPJ2f8vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS19MNjQ0REYxTUhpZ1lFS05OdVlnOG5aX3k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xM2UxZmYtYTVkMy00NGNkLWIxYmUt ZmJmMGVkM2Y5MTU3LzEvS19MNjQ0REYxTUhpZ1lFS05OdVlnOG5aX3k4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8xM2UxZmYtYTVkMy00NGNkLWIxYmUtZmJmMGVkM2Y5MTU3 LzEvS19MNjQ0REYxTUhpZ1lFS05OdVlnOG5aX3k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACF0RVxx6 7zNmqxOqsamtR0XRbTO0iB3OoiM+0Z70mlod3rXXMvT7ButJMFi/uLdkbcuS2Rai uuFwNQV5YcZze4rDgXGKI30GSGqZ23jgN5vkhppSEQkerr4rRaueauZWbwKTjxHM 3pNeApgYgcpOJJAJdWGNOmHpMKPB2U9JlQ5QKL0c/2BCsTJy49zn+aqMXhtviT34 IN28aMCzs4uP5a/yJODfvH5RKKm54CefwAwSZ/URZAsI9bnyMC9WAwhSfUY8KGLg 1Qfr5uIz+WPo4yp1E9lfPG7M9Cl+F66Fn9RG9V4OCKmuSIsib0WxOquFIqyZ1sXa 8ugjjHcjJ3VB7g== -----END CERTIFICATE-----Generated at Mon Jan 26 05:37:05 2026 by rpki-client