This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft File: Kt1DinzjyzefKM-gUc9j1a2P48o.mft (raw, json) Hash identifier: EP7FK/6RwdpadD+VMpYI+2HVXf8g+qOFYAm9Fh2OAbA= Subject key identifier: 28:99:83:34:A1:4A:1B:F3:D1:79:5C:46:6C:A5:16:5B:9F:95:C1:EB Authority key identifier: 2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA Certificate issuer: /CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca Certificate serial: 019BF5E43CD9B89E12D5B08D28C4743A56E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft Manifest number: 1037 Signing time: Sun 25 Jan 2026 16:02:14 +0000 Manifest this update: Sun 25 Jan 2026 16:02:14 +0000 Manifest next update: Mon 26 Jan 2026 16:02:14 +0000 Files and hashes: 1: Kt1DinzjyzefKM-gUc9j1a2P48o.crl (hash: wicltuWhimR9wmLPlz0Rp2tcKe7hVop2JPZDBblU6os=) 2: TjdLfOccjgqI2XXM8B2ZZw7tFJ8.roa (hash: +hak+f8WGw7BDjiRr9H4bCjNHnC7kv3i+d77lMHG2zg=) 3: Z0ZfSm5v6vjqJ1EOy4v6M7YzE4g.roa (hash: QBWUjOIO2WUCsQtNPmImcsDTQ9b4oh/Op2GsR5eOGtY=) 4: dWJoADnfK4B-d746vzmjtMcAOjU.roa (hash: so9FsTl0/OXPXGPpcUQXEB72QKiIb3Xkte1Mq+cb85o=) 5: qXz1wwKxqiN0TXCABlpmdej_AF4.roa (hash: 80kAjI8jd2lcruWJ4j/gPqkVYCIlUhbIwX0K9xxTqBU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e4:3c:d9:b8:9e:12:d5:b0:8d:28:c4:74:3a:56:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca Validity Not Before: Jan 25 16:02:14 2026 GMT Not After : Jan 26 16:02:14 2026 GMT Subject: CN=28998334a14a1bf3d1795c466ca5165b9f95c1eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:85:31:1a:cc:1a:f0:51:cf:4b:cf:97:2e:3d: a5:f1:55:4b:1b:b4:54:80:09:78:bb:e1:54:05:91: a0:63:0d:84:d2:13:ec:c3:ef:77:fe:8c:b6:2d:4c: c5:89:89:98:1d:13:6b:be:78:65:f6:22:cf:68:b3: 26:fa:69:3a:a5:a2:02:03:6c:b9:ff:95:d3:78:de: d4:7d:6f:d4:24:d9:9f:61:b0:f1:d0:57:3e:e0:31: a7:56:b5:4c:db:91:19:bd:1a:45:23:76:c3:b6:b0: 17:b8:90:23:87:72:55:de:d8:a9:0e:80:58:8d:f7: 82:ee:44:18:97:8f:87:a4:2d:02:f0:36:e3:4f:bf: 83:63:a1:3d:fa:9f:61:82:b7:e1:63:ed:6a:e2:26: 57:0d:70:20:d6:a7:89:0d:f7:2a:af:f8:19:3c:1a: 77:3d:5e:2d:f6:45:20:40:0a:dd:5a:03:70:fc:bc: 8a:b7:b7:84:e8:fc:33:b2:bb:3f:a5:6e:75:4a:b6: 1c:01:67:f5:0b:1f:e3:5b:65:37:37:07:7e:18:ce: 0c:89:18:bf:75:b2:75:8e:86:0b:fb:0f:85:c2:31: 3e:7f:59:2a:1a:fa:8c:96:b5:d3:7f:d2:71:a8:0f: c9:28:cd:3a:54:3e:a8:a1:06:5f:52:fb:80:f5:9e: e2:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:99:83:34:A1:4A:1B:F3:D1:79:5C:46:6C:A5:16:5B:9F:95:C1:EB X509v3 Authority Key Identifier: keyid:2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:6d:e3:0d:04:33:7f:b8:3a:21:93:bb:06:c2:2f:7d:ad:e1: 79:d0:71:78:3e:b6:d7:25:f7:21:8c:1d:81:cc:87:70:bb:fa: c8:d3:e1:c3:06:50:a7:8d:99:b4:ba:f4:35:d4:23:3a:10:0a: 2b:f7:d3:ba:e1:71:73:ee:54:3a:06:29:19:b3:7d:e8:16:22: 8a:91:3f:c1:2a:2d:53:f1:20:a0:8f:53:77:1f:9e:e5:4a:39: cc:c1:44:db:43:97:ae:ed:8a:c3:50:47:04:13:a6:cd:c5:f3: 7b:e6:09:09:b7:a4:91:0d:f9:68:5b:47:85:73:62:14:f3:be: db:c0:e6:bd:71:2f:db:36:80:87:c7:a3:fe:44:b6:4c:93:fb: 93:85:73:b0:b1:d8:18:ca:df:25:d7:01:5b:1e:87:19:e1:14: 35:59:8d:20:c0:f0:6a:e5:ce:9f:7b:88:9b:e8:19:8e:2c:1d: ec:90:f2:66:11:94:67:61:59:62:4f:a6:f3:76:d1:bc:bb:1a: e1:77:38:6a:31:a1:e5:e4:7a:63:2e:c1:5f:dc:e4:1c:de:f2: 79:a8:fd:65:ff:6b:9f:30:58:4d:0c:d0:21:9a:3a:53:26:f1: 9b:39:cc:9a:7a:f0:93:cc:fc:b1:6a:56:c4:7c:16:ad:64:ef: 45:95:88:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv15DzZuJ4S1bCNKMR0OlboMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhZGQ0MzhhN2NlM2NiMzc5ZjI4Y2ZhMDUxY2Y2M2Q1YWQ4 ZmUzY2EwHhcNMjYwMTI1MTYwMjE0WhcNMjYwMTI2MTYwMjE0WjAzMTEwLwYDVQQD EygyODk5ODMzNGExNGExYmYzZDE3OTVjNDY2Y2E1MTY1YjlmOTVjMWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIUxGswa8FHPS8+XLj2l8VVLG7RU gAl4u+FUBZGgYw2E0hPsw+93/oy2LUzFiYmYHRNrvnhl9iLPaLMm+mk6paICA2y5 /5XTeN7UfW/UJNmfYbDx0Fc+4DGnVrVM25EZvRpFI3bDtrAXuJAjh3JV3tipDoBY jfeC7kQYl4+HpC0C8DbjT7+DY6E9+p9hgrfhY+1q4iZXDXAg1qeJDfcqr/gZPBp3 PV4t9kUgQArdWgNw/LyKt7eE6Pwzsrs/pW51SrYcAWf1Cx/jW2U3Nwd+GM4MiRi/ dbJ1joYL+w+FwjE+f1kqGvqMlrXTf9JxqA/JKM06VD6ooQZfUvuA9Z7i/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCiZgzShShvz0XlcRmylFluflcHrMB8GA1UdIwQY MBaAFCrdQ4p848s3nyjPoFHPY9Wtj+PKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3QxRGluemp5emVmS00tZ1VjOWoxYTJQNDhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8wYjYxY2YtODBiYS00ZThlLWEyZTUt MjBhMGQxMzBjNDU2LzEvS3QxRGluemp5emVmS00tZ1VjOWoxYTJQNDhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8wYjYxY2YtODBiYS00ZThlLWEyZTUtMjBhMGQxMzBjNDU2 LzEvS3QxRGluemp5emVmS00tZ1VjOWoxYTJQNDhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ23jDQQz f7g6IZO7BsIvfa3hedBxeD621yX3IYwdgcyHcLv6yNPhwwZQp42ZtLr0NdQjOhAK K/fTuuFxc+5UOgYpGbN96BYiipE/wSotU/EgoI9Tdx+e5Uo5zMFE20OXru2Kw1BH BBOmzcXze+YJCbekkQ35aFtHhXNiFPO+28DmvXEv2zaAh8ej/kS2TJP7k4VzsLHY GMrfJdcBWx6HGeEUNVmNIMDwauXOn3uIm+gZjiwd7JDyZhGUZ2FZYk+m83bRvLsa 4Xc4ajGh5eR6Yy7BX9zkHN7yeaj9Zf9rnzBYTQzQIZo6UybxmznMmnrwk8z8sWpW xHwWrWTvRZWIoQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:19:29 2026 by rpki-client