This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft File: KqGB-LCskT3cN34Z1WZLEbGXU3M.mft (raw, json) Hash identifier: FYdNG3t5Orh6ijWpZhJLlb/QWPH2jCRLNwAWAZ6Y4Xw= Subject key identifier: AE:8E:33:0A:78:92:E9:03:10:BE:19:1B:34:7E:6C:16:19:61:1E:B8 Authority key identifier: 2A:A1:81:F8:B0:AC:91:3D:DC:37:7E:19:D5:66:4B:11:B1:97:53:73 Certificate issuer: /CN=2aa181f8b0ac913ddc377e19d5664b11b1975373 Certificate serial: 019BFB09A324A20C2221E888EB5B5C2D83A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft Manifest number: 0D5E Signing time: Mon 26 Jan 2026 16:01:11 +0000 Manifest this update: Mon 26 Jan 2026 16:01:11 +0000 Manifest next update: Tue 27 Jan 2026 16:01:11 +0000 Files and hashes: 1: 6JMQmYaXJRiml5BYtsy3jnW-erA.roa (hash: kbV9Lg8RcdOaIR/u2kpU49sw8x1vZ57CjX7SJnkdSvg=) 2: KqGB-LCskT3cN34Z1WZLEbGXU3M.crl (hash: XiFs6iS9zCs0MoWzmc1Yu1/gPHJ5pH0COmrqnr5dr8A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:09:a3:24:a2:0c:22:21:e8:88:eb:5b:5c:2d:83:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa181f8b0ac913ddc377e19d5664b11b1975373 Validity Not Before: Jan 26 16:01:11 2026 GMT Not After : Jan 27 16:01:11 2026 GMT Subject: CN=ae8e330a7892e90310be191b347e6c1619611eb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fb:59:72:bf:2b:93:c9:7f:bc:13:55:b9:58: 50:f8:25:32:e8:1c:b9:9c:71:e8:f0:1a:88:10:c8: 46:13:b6:3f:c4:4c:b1:8f:1f:a5:48:5d:71:44:c7: 64:69:a2:4e:eb:22:f0:f5:ce:a2:86:91:b2:67:d0: 8d:f0:cf:8e:cf:e3:2a:85:3b:f8:e9:f5:1b:6a:e1: 71:2e:e6:14:82:29:6f:cb:f3:1e:47:a5:a3:d3:c0: 3b:c4:6f:6d:ce:cd:6a:89:b6:70:e1:40:b2:e9:43: e8:22:dd:52:73:b8:39:cb:09:08:02:49:d6:04:1c: aa:18:34:21:79:e9:c7:de:cf:fc:10:23:7f:98:ab: b9:8d:10:d0:07:55:5b:1b:9e:69:6d:d8:0b:7f:2f: 9c:37:6a:45:07:bc:fb:3f:a6:38:6c:95:42:91:99: 90:f4:4b:81:82:1c:4d:25:44:4d:de:bc:77:95:e8: d0:1f:8f:5d:bf:df:c9:7e:e7:88:cd:4c:57:9f:39: 5d:79:8c:4a:06:16:73:99:f0:0f:74:b9:fa:71:d4: 6d:9a:28:ff:67:a5:44:29:06:b8:f8:cc:c4:c6:73: 71:d5:5f:02:ac:b0:65:95:21:92:cd:3d:cd:50:3f: 1b:41:9d:7c:9e:75:fe:bb:a7:d2:39:2e:f6:ad:c1: 6f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:8E:33:0A:78:92:E9:03:10:BE:19:1B:34:7E:6C:16:19:61:1E:B8 X509v3 Authority Key Identifier: keyid:2A:A1:81:F8:B0:AC:91:3D:DC:37:7E:19:D5:66:4B:11:B1:97:53:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:82:a4:9f:f2:c0:f2:2e:14:56:d8:76:a7:5b:f0:31:b5:11: d7:14:b1:59:71:f7:3d:76:78:e2:a6:7c:34:15:7c:60:0b:41: 4e:03:1f:bf:94:af:41:a1:1d:86:19:8d:66:3f:3c:ca:cc:5e: d8:9a:b2:7e:6f:1e:d3:f5:ce:a1:27:e5:0a:ce:59:e5:fe:ec: 6b:ac:e6:d6:13:d4:86:11:dc:4e:9f:81:3a:5e:9f:5a:21:2b: d3:e9:72:70:13:bd:52:3f:6b:b6:5d:6a:ed:f8:e2:ea:e7:04: dd:e8:97:86:39:fa:31:dc:a8:19:d8:74:2c:5f:dd:26:e3:bd: ad:3b:ab:88:99:c2:ec:76:5d:a7:3f:a5:a0:f0:2c:7d:65:b0: c3:99:e5:b7:60:39:d2:34:bc:04:b9:f9:c5:93:3b:f3:98:90: 42:d9:bd:62:99:45:85:bd:93:ea:c2:d7:71:54:90:d1:79:3a: d6:37:b1:a5:aa:da:f4:e6:43:51:93:f3:f2:6a:b2:e0:82:e4: 70:86:c6:c3:de:b0:92:bf:22:3d:be:ce:d0:69:ef:9b:9a:60: e5:83:17:c7:11:ea:b4:10:23:26:d7:e0:38:f9:00:6c:42:20: e1:a8:2f:f3:e1:2a:42:3f:93:c1:ab:f8:a5:e6:31:94:c3:f2: e9:c1:5f:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7CaMkogwiIeiI61tcLYOkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYTE4MWY4YjBhYzkxM2RkYzM3N2UxOWQ1NjY0YjExYjE5 NzUzNzMwHhcNMjYwMTI2MTYwMTExWhcNMjYwMTI3MTYwMTExWjAzMTEwLwYDVQQD EyhhZThlMzMwYTc4OTJlOTAzMTBiZTE5MWIzNDdlNmMxNjE5NjExZWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/tZcr8rk8l/vBNVuVhQ+CUy6By5 nHHo8BqIEMhGE7Y/xEyxjx+lSF1xRMdkaaJO6yLw9c6ihpGyZ9CN8M+Oz+MqhTv4 6fUbauFxLuYUgilvy/MeR6Wj08A7xG9tzs1qibZw4UCy6UPoIt1Sc7g5ywkIAknW BByqGDQheenH3s/8ECN/mKu5jRDQB1VbG55pbdgLfy+cN2pFB7z7P6Y4bJVCkZmQ 9EuBghxNJURN3rx3lejQH49dv9/JfueIzUxXnzldeYxKBhZzmfAPdLn6cdRtmij/ Z6VEKQa4+MzExnNx1V8CrLBllSGSzT3NUD8bQZ18nnX+u6fSOS72rcFv4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK6OMwp4kukDEL4ZGzR+bBYZYR64MB8GA1UdIwQY MBaAFCqhgfiwrJE93Dd+GdVmSxGxl1NzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3FHQi1MQ3NrVDNjTjM0WjFXWkxFYkdYVTNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9iOTg3NTUtNjVjNC00ZDE5LWIwNjkt YTFhNTVlOGJlZTNmLzEvS3FHQi1MQ3NrVDNjTjM0WjFXWkxFYkdYVTNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9iOTg3NTUtNjVjNC00ZDE5LWIwNjktYTFhNTVlOGJlZTNm LzEvS3FHQi1MQ3NrVDNjTjM0WjFXWkxFYkdYVTNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk4Kkn/LA 8i4UVth2p1vwMbUR1xSxWXH3PXZ44qZ8NBV8YAtBTgMfv5SvQaEdhhmNZj88ysxe 2Jqyfm8e0/XOoSflCs5Z5f7sa6zm1hPUhhHcTp+BOl6fWiEr0+lycBO9Uj9rtl1q 7fji6ucE3eiXhjn6MdyoGdh0LF/dJuO9rTuriJnC7HZdpz+loPAsfWWww5nlt2A5 0jS8BLn5xZM785iQQtm9YplFhb2T6sLXcVSQ0Xk61jexpara9OZDUZPz8mqy4ILk cIbGw96wkr8iPb7O0Gnvm5pg5YMXxxHqtBAjJtfgOPkAbEIg4agv8+EqQj+Twav4 peYxlMPy6cFfHA== -----END CERTIFICATE-----Generated at Mon Jan 26 18:18:06 2026 by rpki-client