This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft File: KrkePe2CDHC4rOia6v_6vua_pVM.mft (raw, json) Hash identifier: w+tAv9M7rlCYri4LBT/zjh1ND1fZxnc/A5B/I8ekIJo= Subject key identifier: 00:87:5D:26:ED:6F:57:DF:9C:02:7C:56:02:49:F7:75:29:E5:AF:B5 Authority key identifier: 2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53 Certificate issuer: /CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553 Certificate serial: 019BF687AC4D3E215C8614D4E1EFF23BCE25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft Manifest number: 08BF Signing time: Sun 25 Jan 2026 19:00:45 +0000 Manifest this update: Sun 25 Jan 2026 19:00:45 +0000 Manifest next update: Mon 26 Jan 2026 19:00:45 +0000 Files and hashes: 1: KrkePe2CDHC4rOia6v_6vua_pVM.crl (hash: 3hOCOLu+8f1x2KZ/186qwoBCxg3QtbKIFqlzSzE6Bx4=) 2: xZy9yG14ltJYyTdhV8EKh-Qv2Tw.roa (hash: WIYaIC5s3N8ZnXYMhEb9bDmMVDtOHXmvh+va633nXao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:ac:4d:3e:21:5c:86:14:d4:e1:ef:f2:3b:ce:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553 Validity Not Before: Jan 25 19:00:45 2026 GMT Not After : Jan 26 19:00:45 2026 GMT Subject: CN=00875d26ed6f57df9c027c560249f77529e5afb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:42:f7:e4:53:0d:f5:2c:75:ab:35:01:ce:7a: 12:03:5c:91:da:e8:a5:8b:6d:8b:87:9f:36:ca:a6: 52:5c:e8:87:2a:2f:b2:18:70:f9:5c:01:f0:95:a1: ea:66:f8:74:c5:69:2f:7f:7a:82:60:8f:98:5d:c4: 03:85:33:c6:12:f6:9b:7c:de:6e:dc:39:5b:2c:6a: e3:53:3c:06:04:98:fc:bf:46:39:4a:1a:12:d0:2e: c0:28:84:91:dc:4a:00:6d:51:f1:b7:c5:73:b0:d3: 7f:89:2f:6b:8e:af:99:fe:ad:55:74:60:99:0b:81: e7:cc:72:c8:9f:0a:6a:e9:68:40:f7:2b:d4:3e:ac: cf:49:46:1e:81:9e:eb:5f:f1:40:ab:7b:33:29:95: 51:78:e6:d6:94:cd:e8:cc:e4:a1:4e:6a:e5:cc:85: 15:92:b6:b8:e4:86:d6:4e:62:5a:48:2f:a0:e5:32: 36:a3:2b:4a:ae:9f:ca:f0:91:87:0c:8c:8b:02:c3: 60:d8:3d:75:9c:d3:02:ac:6e:5f:df:0b:92:fa:23: 31:09:68:ac:6d:a1:98:ac:1e:1c:28:5e:82:2b:8e: be:c8:d3:0c:d6:a9:fb:66:a8:6b:5c:7e:f5:e2:f5: 5a:f0:74:0a:f7:9f:d5:0e:27:94:d0:78:d4:1e:e0: 8e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:87:5D:26:ED:6F:57:DF:9C:02:7C:56:02:49:F7:75:29:E5:AF:B5 X509v3 Authority Key Identifier: keyid:2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:06:f9:da:23:5e:b3:d1:a6:9c:06:06:83:0c:d3:78:ad:69: 0d:f5:c6:92:83:6b:27:c3:46:e7:92:c8:db:65:98:6e:fe:21: d3:e2:c3:cd:d8:da:69:d0:7d:0d:eb:dc:b0:79:17:bd:03:22: 0a:7c:ba:00:63:d1:01:fa:6e:b7:2a:b6:0a:53:34:23:77:26: ea:ab:ab:5c:b9:05:46:70:c0:ad:08:1c:de:9c:8a:e0:aa:3c: e7:64:22:3b:09:c0:b6:e3:d2:e6:8a:15:c0:be:ce:2d:84:84: 48:2b:cf:b7:be:73:09:39:a1:51:24:c6:0d:3e:ce:32:d8:b7: b0:29:f0:dd:4f:74:9d:a0:36:d0:8b:77:75:0e:d9:77:79:d8: d9:9b:f3:f0:4c:3f:bd:83:3d:8d:90:71:fb:cc:f3:78:e8:30: 31:b8:1b:62:93:0f:9e:36:22:a2:53:aa:f1:33:2a:55:51:90: 4e:4a:34:1b:eb:0e:27:f1:8b:c2:1c:ce:85:b7:30:fb:83:21: e6:7b:2e:01:b7:eb:92:71:f0:4b:92:60:87:38:ef:fc:7a:4e: 71:67:a4:ea:a4:75:e1:24:96:e9:67:6c:ce:27:f4:be:42:c2: f4:e1:63:38:32:07:f7:e5:96:c9:d3:a7:09:93:2b:c5:cf:da: 18:46:e2:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h6xNPiFchhTU4e/yO84lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYjkxZTNkZWQ4MjBjNzBiOGFjZTg5YWVhZmZmYWJlZTZi ZmE1NTMwHhcNMjYwMTI1MTkwMDQ1WhcNMjYwMTI2MTkwMDQ1WjAzMTEwLwYDVQQD EygwMDg3NWQyNmVkNmY1N2RmOWMwMjdjNTYwMjQ5Zjc3NTI5ZTVhZmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUL35FMN9Sx1qzUBznoSA1yR2uil i22Lh582yqZSXOiHKi+yGHD5XAHwlaHqZvh0xWkvf3qCYI+YXcQDhTPGEvabfN5u 3DlbLGrjUzwGBJj8v0Y5ShoS0C7AKISR3EoAbVHxt8VzsNN/iS9rjq+Z/q1VdGCZ C4HnzHLInwpq6WhA9yvUPqzPSUYegZ7rX/FAq3szKZVReObWlM3ozOShTmrlzIUV kra45IbWTmJaSC+g5TI2oytKrp/K8JGHDIyLAsNg2D11nNMCrG5f3wuS+iMxCWis baGYrB4cKF6CK46+yNMM1qn7ZqhrXH714vVa8HQK95/VDieU0HjUHuCOwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFACHXSbtb1ffnAJ8VgJJ93Up5a+1MB8GA1UdIwQY MBaAFCq5Hj3tggxwuKzomur/+r7mv6VTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3JrZVBlMkNESEM0ck9pYTZ2XzZ2dWFfcFZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xNmQ4NGItMDk2MS00ZDFlLTg1Y2Mt NjFkZTIxZjUxNDM0LzEvS3JrZVBlMkNESEM0ck9pYTZ2XzZ2dWFfcFZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8xNmQ4NGItMDk2MS00ZDFlLTg1Y2MtNjFkZTIxZjUxNDM0 LzEvS3JrZVBlMkNESEM0ck9pYTZ2XzZ2dWFfcFZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYgb52iNe s9GmnAYGgwzTeK1pDfXGkoNrJ8NG55LI22WYbv4h0+LDzdjaadB9DevcsHkXvQMi Cny6AGPRAfputyq2ClM0I3cm6qurXLkFRnDArQgc3pyK4Ko852QiOwnAtuPS5ooV wL7OLYSESCvPt75zCTmhUSTGDT7OMti3sCnw3U90naA20It3dQ7Zd3nY2Zvz8Ew/ vYM9jZBx+8zzeOgwMbgbYpMPnjYiolOq8TMqVVGQTko0G+sOJ/GLwhzOhbcw+4Mh 5nsuAbfrknHwS5Jghzjv/HpOcWek6qR14SSW6Wdszif0vkLC9OFjODIH9+WWydOn CZMrxc/aGEbidA== -----END CERTIFICATE-----Generated at Mon Jan 26 00:27:02 2026 by rpki-client